OSHA Bloodborne Pathogens Medical Office Guide

A night-shift cleaner lifts the liner out of the exam room 3 wastebasket and feels a sharp jab through the bag. Someone dropped a used lancet into general trash instead of the sharps container. It happens in Jacksonville medical offices more often than practice managers want to believe, and what happens in the next hour decides whether it is a bad night or a documented exposure incident with a paper trail that runs for 30 years.

That paper trail starts with 29 CFR 1910.1030, OSHA's Bloodborne Pathogens Standard. Most administrators know it exists. Fewer have read it start to finish, and fewer still have sorted out which of its requirements sit with the practice and which sit with the janitorial contractor. This guide goes through the standard paragraph by paragraph, adds the Florida rules that pick up where OSHA stops, and ends with a handoff matrix you can put in front of your cleaning vendor on Monday morning.

What the Standard Covers, and Why It Reaches Your Cleaning Vendor

Paragraph (a)(1) applies to all occupational exposure to blood or other potentially infectious materials. "Occupational exposure" means reasonably anticipated contact with blood or OPIM while doing the job. That phrase is where cleaning contracts get into trouble. A janitor who empties exam room trash, mops a procedure room, and cleans a specimen restroom has a reasonably anticipated exposure whether or not anyone has ever been stuck. Florida has no state OSHA plan, so federal OSHA enforces the standard on private employers here. Read the full text at osha.gov once; it is shorter than most lease addenda.

Your cleaning company employs its crew, and the standard puts the duty to protect those workers on that employer. But OSHA's multi-employer citation policy, CPL 02-00-124, lets the agency cite more than one employer at a worksite: the one that created a hazard, the one whose employees are exposed, the one responsible for correcting it, and the one that controls the site. The practice that leaves a sharps container overfull in a hallway has created a hazard. The cleaner who gets stuck belongs to the vendor. Both can land on a citation. What most facility managers get wrong about this is the assumption that outsourcing the cleaning outsources the liability.

Four terms the standard defines, in plain language

Other potentially infectious materials (OPIM). Body fluids such as semen, vaginal secretions, cerebrospinal, synovial, pleural, pericardial, peritoneal, and amniotic fluid, saliva in dental procedures, and any body fluid visibly contaminated with blood. Also unfixed human tissue or organs and certain HIV or HBV cultures. 1910.1030(b).

Regulated waste. Liquid or semi-liquid blood or OPIM; items that would release blood or OPIM in a liquid or semi-liquid state if compressed; items caked with dried blood or OPIM that can flake off during handling; contaminated sharps; and pathological or microbiological waste containing blood or OPIM.

Decontamination. Using physical or chemical means to remove, inactivate, or destroy bloodborne pathogens on a surface or item until it can no longer transmit infectious particles and is safe to handle, use, or dispose of. Cleaning alone does not meet this definition.

Exposure incident. A specific eye, mouth, other mucous membrane, non-intact skin, or parenteral contact with blood or OPIM that results from performing an employee's duties.

The same definitions govern anything your vendor does inside a clinical space. If you want the broader liability picture, including the HIPAA question that most administrators get backwards, our healthcare cleaning compliance guide covers it. This post stays on the bloodborne standard.

Where Inspectors Actually Find Violations

OSHA publishes a most-cited list for the standard, covering citations from October 2013 through August 2025. It reads like a table of contents for paperwork. In order of frequency: the written exposure control plan, (c)(1)(i); employee training, (g)(2)(i); hepatitis B vaccination and post-exposure follow-up being available, (f)(1)(i); the annual plan review, (c)(1)(iv); the hepatitis B vaccine offered within 10 working days of assignment, (f)(2)(i); engineering and work practice controls, (d)(2)(i); and the signed declination form, (f)(2)(iv). See the list on the OSHA enforcement page.

Nobody tops that list for a dirty floor. They get cited for the plan, the training, and the vaccine offer. A September 2025 analysis from J.J. Keller found the standard cited almost 3,000 times across fiscal years 2023 and 2024, with paragraphs (c), (g)(2), and (f) at the top. The current federal maximum for a single serious violation is above $16,000, and inspectors write them per item.

In our experience running medical accounts across Jacksonville since 2017, the pattern in the Riverside and San Marco specialty clusters matches the data. The clinical side is usually fine. Providers know the sharps routine. The gap is on paper, for the people who are in the building when the providers are not. If your vendor cannot hand you a dated exposure control plan, a training roster from the last twelve months, and a hepatitis B offer or signed declination for every person on your account, that vendor fails the first three items on OSHA's list before an inspector opens a supply closet.

The Bloodborne Pathogens Handoff Matrix

We built this table because nobody had written it down. Each major paragraph of 1910.1030 is split by who normally owns it in a medical office that outsources cleaning. "The practice" means the clinical employer. "The vendor" means the janitorial contractor, for its own employees. Where a line is shared, the last column says how to handle it.

Paragraph of 1910.1030	The practice owns	The cleaning vendor owns	Where it is shared
(c) Exposure control plan	A written plan for clinical staff, reviewed at least annually, with documented consideration of safer medical devices (c)(1)(iv)(B)	Its own written plan covering the crew's job classifications, reviewed at least annually	The practice hands over site specifics: sharps station locations, waste staging room, after-hours contact. The vendor attaches them to its plan.
(d)(2) Engineering and work practice controls	Sharps containers, safer devices, and replacing containers before they overfill (d)(4)(iii)(A)(2)	Work practices: no hand compression of trash, no reaching into containers, tongs or brush for broken glass	An overfull sharps container is the practice's hazard. The crew reports it the same night, in writing.
(d)(3) Personal protective equipment	Clinical PPE for clinical staff	Gloves, eye protection, and aprons for its own crew, at no cost to the employee (d)(3)(i)	The contract says who stocks nitrile gloves in the closet, so nobody finds out at 11 PM.
(d)(4) Housekeeping	The written cleaning and decontamination schedule for the site (d)(4)(i); surface decontamination after patient procedures	End-of-day cleaning and disinfection performed to that schedule, at label contact time	Both sign the schedule. It states which spills the crew handles and which belong to clinical staff.
(d)(4)(iii) Regulated waste	Segregating, labeling, closing, and staging red-bag waste; the contract with a permitted transporter	Emptying general waste only; reporting anything mis-sorted	The staging location is marked and the contract says the crew does not open, move, or empty it.
(f) Hepatitis B vaccination and post-exposure follow-up	For its own staff; helps identify the source patient after an incident, within what law allows	Vaccine offer within 10 working days of assignment, signed declination if refused, and a post-exposure evaluation for its crew	The contract names the after-hours contact at the practice and the occupational health clinic the vendor will use.
(g) Training and labeling	Annual training for its own staff; biohazard labels and signs in the practice	Annual training for every crew member on the account, at no cost, during paid hours (g)(2)(i)	The practice walks the crew lead through the waste room and sharps stations at onboarding.
(h) Recordkeeping	Its own medical and training records; sharps injury log where required	Its own records: training for 3 years, medical records for employment plus 30 years	Each keeps its own. The vendor sends a current training roster every year.

Print it, mark it up with your vendor, and file the signed copy with your exposure control plan. When an AAAHC or Joint Commission surveyor asks who handles what at night, this answers the question in one page.

Want a second read on your cleaning vendor's bloodborne pathogens paperwork?

System4 of North Florida is a locally owned, Service-Disabled Veteran-Owned Small Business headquartered in Saint Augustine, running medical office cleaning programs across Jacksonville, Mandarin, Ponte Vedra, and the Beaches. Send us your current vendor's exposure control plan and training roster and we will mark the gaps against the handoff matrix above. No charge, and no obligation to switch.

See Medical Office Cleaning in Jacksonville Call (904) 906-6400

Housekeeping Under (d)(4): What a Night Crew Does and Does Not Do

Paragraph (d)(4)(i) requires the employer to keep the site clean and sanitary and to implement a written schedule for cleaning and decontamination based on location in the facility, type of surface, type of soil, and tasks performed in the area. That schedule is the document that usually does not exist. Most practices have a cleaning checklist taped inside a closet. A checklist is not a decontamination schedule broken out by room, surface, soil, and procedure.

Paragraph (d)(4)(ii)(A) calls for "an appropriate disinfectant." OSHA's compliance directive, CPL 02-02-069, accepts EPA-registered tuberculocidal disinfectants, products registered as effective against HIV and HBV, and properly diluted household bleach. Check two things on the label: the EPA registration number and the wet contact time, which runs from one minute to ten depending on the product. A wipe-and-go in thirty seconds does not meet a ten-minute label. This is the same dwell-time discipline we cover in our hospital-grade disinfection work, and the EPA disinfectant lists are the place to verify a product.

The work practices are specific, and they are what a trained crew does differently from a general janitorial crew. Broken contaminated glass is never picked up by hand; paragraph (d)(4)(ii)(D) calls for a brush and dustpan, tongs, or forceps. Nobody reaches into a trash receptacle. Nobody compresses a bag by hand or with a knee, because compression is how a lancet gets through a liner and into a forearm. The crew pulls a liner by the knot, holds it away from the body, and carries it out. Gloves are replaced when contaminated, hands are washed after gloves come off, and utility gloves that crack get thrown away.

Here is the tradeoff we walk clients through. The tighter you write the boundary, the safer both parties are, and the more it costs in coordination. We do not touch, move, or empty a sharps container. We do not open red bags. We do not clean up a procedural spill while a room is in active use; clinical staff clear it and we handle the follow-up decontamination of the surface. And we do not turn over rooms between patients. That is clinical work, and a janitorial crew that does it creates liability for the practice. If you need someone to do between-patient turnover, you need a clinical assistant, and we are the wrong service for that.

A composite scenario shows how this plays out, built from patterns we see repeatedly in multi-provider offices in Mandarin and Baymeadows. Friday procedure clinic runs late. By 6 PM the sharps container in the procedure room is at the fill line, and the last lancets and a suture kit sit on top of the lid. The night crew lead sees it, touches nothing, writes the room and the time on the nightly log, and texts the office manager. Monday morning the container is swapped and the practice has a dated record that the hazard was reported. The crew member who never reached for it never became an exposure incident. That is the entire system working as designed.

Regulated Waste in Florida: Where OSHA Stops and 64E-16 Starts

OSHA tells you how regulated waste must be contained: closable, leakproof, and labeled or color-coded, with sharps in puncture-resistant containers that sit near the point of use and get replaced before they overfill. Florida decides what happens after that. Biomedical waste is governed by Chapter 64E-16 of the Florida Administrative Code under section 381.0098, Florida Statutes, and the Florida Department of Health biomedical waste program runs it through county health departments. In Jacksonville that is the Department of Health in Duval County.

Three points matter to a practice manager. A generator producing 25 pounds or more of biomedical waste in any 30-day period needs a permit; smaller generators can claim an exemption by documenting 12 months of weights under that line. Waste may stay on site for no more than 30 days, counted from the first non-sharps item placed in a red bag or from the day a sharps-only container is sealed. And the permitted transporter is a contract the practice holds.

None of that belongs to a cleaning vendor. Nothing in 1910.1030 forbids trained employees from handling regulated waste, but the permit, the packaging, the storage clock, and the transporter all belong to the generator, which is you. The one sentence we recommend in every medical cleaning contract is short: "Contractor shall not handle, relocate, or open containers of regulated waste." It also lets the night crew do something useful. If the staging door is propped open or a red-bag box is sitting in the hallway by the break room, the crew reports it. The 30-day clock is easy to lose track of. A second set of eyes at night is cheap insurance.

Training, Vaccination, and the Records That Outlast the Contract

Training under paragraph (g)(2) happens at initial assignment and at least annually after that, within one year of the previous session, at no cost to the employee and during working hours. It has to cover the standard itself, the exposure control plan, how to recognize tasks that involve exposure, PPE, and what to do after an incident, and it has to include a chance to ask questions of someone knowledgeable. A video by itself does not meet that last requirement. Someone has to be reachable to answer.

Hepatitis B vaccination must be offered at no cost within 10 working days of initial assignment, after training, to every employee with occupational exposure. An employee can decline, but only by signing the statement in Appendix A, and can change their mind later while still covered ((f)(2)(iii)). The risk behind the rule is concrete. CDC guidance says hepatitis B virus can survive on surfaces for at least seven days, which is why dried blood on the edge of a counter counts. Per-exposure transmission figures commonly cited by CDC and NIOSH after a needlestick from an infected source run from 6 to 30 percent for hepatitis B in an unvaccinated worker, about 1.8 percent for hepatitis C, and about 0.3 percent for HIV. Vaccination takes the first number close to zero. See the CDC hepatitis B resources for current vaccine guidance.

When an exposure incident does happen at 11 PM, the first steps are not complicated. Wash a puncture or cut with soap and water, or flush eyes and mucous membranes with water, then report to the supervisor immediately. Paragraph (f)(3) requires the employer to make a confidential medical evaluation available immediately and at no cost, to document the route of exposure and the circumstances, and to identify the source individual where feasible. The healthcare professional's written opinion goes to the employer within 15 days under (f)(5). HIV post-exposure prophylaxis is time-critical; CDC guidance is to start it as soon as possible, ideally within hours and no later than 72 hours. A cleaner who is stuck at 11 PM cannot wait for Monday's office manager. That is why the contract should name an after-hours contact at the practice and the occupational health clinic the vendor will use.

Records close the loop. Medical records for an exposed employee must be kept for the duration of employment plus 30 years under (h)(1)(iv), and training records for 3 years from the training date under (h)(2)(ii), including dates, a summary of contents, the trainer's name and qualifications, and the names and job titles of attendees. Ask your vendor for a current training roster once a year and keep it with the exposure control plan. If the vendor changes, the new one starts the clock over.

What Compliant Medical Cleaning Costs in Jacksonville

Pricing in this market varies more by facility type than by square footage alone. These are working ranges from current Jacksonville-area accounts, consistent with the figures in our compliance guide. They assume a bloodborne-pathogens-compliant scope: trained crew, documented plan, hospital-grade disinfectant at label contact time, and supervisor inspection.

Facility type	Per sq ft, per visit	Typical monthly, 5 nights
General practice / primary care	$0.12 – $0.18	$1,400 – $2,400
Multi-specialty / imaging	$0.15 – $0.22	$2,000 – $3,200
Ambulatory surgery center	$0.20 – $0.30	$3,000 – $5,500
Quarterly deep clean (one-time)	n/a	$700 – $2,000 per event

A bid well below the low end of these ranges is buying something back somewhere. In the bids we see, the first things to disappear are paid training hours and the supervisor visit, because neither shows up on a floor at 7 AM. The compliance cost sits in four lines: training time paid at crew rates, the vaccine series and clinic arrangement, PPE, and the supervisor hours that verify the work. We don't have a clean per-employee number we would publish for the vaccine and clinic piece, because it depends on the vendor's occupational health arrangement. Ask for it itemized.

If your office is already on a program and you want a second read, our medical office cleaning in Jacksonville page lays out the standard scope, the OSHA-compliant cleaning page covers the training and documentation we keep, and the Jacksonville service area page shows how we route crews from Saint Augustine across Southside, Mandarin, and the Beaches. Dental practices have their own aerosol and sterilization-room wrinkles, covered in our dental office cleaning guide.

About the Author

Weston "Wes" Henderson, Owner and Founder, System4 of North Florida (KLH Management Group LLC)

United States Navy veteran. Founded the company in 2017 and has run commercial cleaning accounts across Baymeadows, Mandarin, San Marco, Riverside, Southside, and the Beaches since. System4 of North Florida is a Service-Disabled Veteran-Owned Small Business (SDVOSB), a Veteran-Owned Business, a Minority-Owned Business, and a self-certified Small Disadvantaged Business, with an active SAM.gov registration under NAICS 561720 and a listing on the FEMA Disaster Response Registry. Google rating: 4.9 stars. Read more on our veteran-owned cleaning page.

701 Market Street, Ste 111, Saint Augustine, FL 32095 | (904) 906-6400 | Contact form | LinkedIn

Frequently Asked Questions

Does OSHA's bloodborne pathogens standard apply to my janitorial contractor? +

Yes, if the contractor's employees have reasonably anticipated contact with blood or other potentially infectious materials while cleaning your medical office. That describes anyone who empties exam room trash, mops procedure rooms, or cleans specimen restrooms. The contractor, as the employer, owes its crew a written exposure control plan, annual training, a hepatitis B vaccine offer, and PPE under 29 CFR 1910.1030. Under OSHA's multi-employer citation policy, the practice can also be cited if it created or controls a hazard that exposes the contractor's workers.

Who is responsible for the exposure control plan, the practice or the cleaning company? +

Both, each for its own employees. The practice writes and reviews a plan for its clinical staff. The cleaning company writes and reviews its own plan for its crew. The plans connect at the site level: the practice supplies sharps station locations, the waste staging area, and an after-hours contact, and the vendor attaches that information to its plan. A signed handoff document that splits the paragraphs of 1910.1030 between the two employers is the cleanest way to show a surveyor who owns what.

Does a janitor need the hepatitis B vaccine? +

The employer must offer it at no cost within 10 working days of initial assignment to any employee with occupational exposure, after training. The employee can decline, but only by signing the declination statement in Appendix A of the standard, and can still change their mind later. The offer and the signed declination are both documents an inspector asks for first, and missing vaccine offers appear near the top of OSHA's most-cited list for the standard.

Can a cleaning crew handle red-bag medical waste in Florida? +

Nothing in 1910.1030 prohibits trained employees from handling regulated waste. But Florida's Chapter 64E-16 puts the permit, packaging, 30-day storage limit, and transporter contract on the generator, which is the medical practice. Our recommendation is that clinical staff seal and stage red-bag waste, that the cleaning contract state the crew does not open, move, or empty it, and that the crew report anything mis-sorted or left out of the staging area.

How long do bloodborne pathogens training and medical records have to be kept? +

Training records must be kept for 3 years from the date of training under 1910.1030(h)(2)(ii) and must include the dates, a summary of the contents, the trainer's name and qualifications, and the names and job titles of attendees. Medical records for employees with occupational exposure must be kept for the duration of employment plus 30 years under (h)(1)(iv). The practice and the vendor each keep their own records for their own employees.

How much does bloodborne-pathogens-compliant medical office cleaning cost in Jacksonville? +

Working ranges are about $0.12 to $0.18 per square foot per visit for a general practice, $0.15 to $0.22 for multi-specialty or imaging, and $0.20 to $0.30 for an ambulatory surgery center. That is roughly $1,400 to $2,400 per month for a general practice cleaned five nights a week. Quarterly deep cleans run $700 to $2,000 per event. A bid far below these ranges usually cuts paid training hours or supervision. Call (904) 906-6400 for a walkthrough and a written quote.

Sources & Further Reading

Statute and rule text accessed November 2, 2026. OSHA enforcement data reflects citations through August 2025, the most recent period published on the OSHA page at the time of writing.

Related Services for Medical Offices in Jacksonville

Cleaning and compliance support for medical practices across Northeast Florida:

OSHA Bloodborne Pathogens in Jacksonville Medical Offices: What 29 CFR 1910.1030 Actually Requires