8 Regulatory Compliance and Safety Practice

Identify applicable requirements

Requirements depend on the care setting and jurisdiction. OSHA rules protect workers, CDC guidance supports infection prevention, CMS requirements apply to specific participating healthcare facilities, and facility policies may add requirements. When a requirement is unclear, consult the organization’s current policies and its infection-prevention, occupational-health, or safety staff.

Understand standards and facility policies

The OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030) applies when employees have reasonably anticipated occupational exposure to blood or other potentially infectious materials (OPIM). Covered employers must maintain an accessible written Exposure Control Plan (ECP), use exposure controls and appropriate PPE, provide required training, make hepatitis B vaccination available to covered employees, and provide post-exposure evaluation and follow-up. The ECP must be reviewed at least annually and updated when relevant tasks or procedures change.

When a respirator is required for work, OSHA’s Respiratory Protection Standard generally requires a written, worksite-specific program; medical evaluation before required use; fit testing for tight-fitting respirators before use and at least annually; training; and program evaluation. A surgical mask is not a substitute for a required respirator.

CDC Standard Precautions apply to all patient care, regardless of known infection status. CDC recommendations are guidance and do not replace applicable OSHA rules or facility policy. Facilities set procedures for matters such as isolation signage, cleaning products and contact times, equipment reprocessing, incident reporting, and who to notify.

Hospitals participating in Medicare or Medicaid must meet CMS infection-prevention and control requirements, including documenting program activities and collaborating with the hospital’s quality assessment and performance improvement (QAPI) program. Do not assume a hospital-specific rule applies identically to every care setting.

Apply precautions during care

Before a task, assess likely exposure and, where feasible, address hazards in this order: eliminate the hazard, use engineering controls, follow safe work practices, and use PPE for remaining risk. For example, use an available safety-engineered needle, avoid passing an exposed sharp hand-to-hand, and promptly dispose of it in an accessible sharps container. Do not recap, bend, or break contaminated needles by hand.

Wear gloves when contact with blood, body fluids, nonintact skin, or contaminated items is anticipated. Add a gown and face or eye protection when splash or spray is reasonably expected. Remove PPE safely and perform hand hygiene at the appropriate moments.

Use the facility’s required isolation precautions. Check that equipment and the patient environment are cleaned or reprocessed appropriately between patients. If an instruction sign, order, or supply is missing or unclear, pause when safe to do so and ask the responsible clinician or infection-prevention staff rather than guessing.

Respond to an exposure

For a needlestick or cut, wash the area with soap and water. For a splash to the eyes, nose, mouth, or skin, flush promptly with water; irrigate eyes with clean water, saline, or sterile irrigant.

Report the exposure immediately according to facility procedure and seek prompt, confidential medical evaluation. Do not wait for symptoms or delay reporting while trying to identify the source. A qualified clinician determines testing, follow-up, and whether prophylaxis is indicated.

Document and report the facts promptly: when and where the event occurred; the task and device involved; the route of exposure; immediate first aid; whom you notified and when; and how follow-up was arranged. Follow privacy rules and use the organization’s designated occupational-exposure record rather than a patient chart as a substitute.

Document and protect records

OSHA requires covered employers to maintain employee medical records confidentially. When required, the sharps injury log records the device type and brand, work area, and how the incident occurred while protecting employee confidentiality. OSHA recordkeeping rules may also require eligible needlestick injuries to be entered on the injury-and-illness log as privacy cases.

Documentation should be timely, factual, and complete, and stored in the proper record system. Avoid speculation, blame, and unnecessary personal health information. Preserve required training, exposure, medical, and incident records according to applicable OSHA rules, other laws, and facility retention schedules. For example, OSHA’s Bloodborne Pathogens Standard generally requires covered employee medical records to be retained for the duration of employment plus 30 years; consult the standard and records policy for exact requirements.

Use audits to improve safety

Audits test whether written requirements are followed in real work. A practical review may sample hand-hygiene and PPE practices, sharps disposal, availability of exposure-control supplies, training completion, respirator-program records where applicable, incident follow-up, and corrective actions.

Record the audit date, scope, findings, responsible owner, corrective-action deadline, and recheck result. Use findings to improve systems, not just to assign blame. OSHA requires annual ECP review; facility audit frequency and other review duties depend on applicable rules and policy.

Apply the process to common scenarios

In a needlestick scenario, a used needle punctures a staff member’s glove. The worker washes the puncture, reports it immediately, and seeks prompt occupational-health evaluation. The event is documented through the facility’s exposure process; the sharps log and OSHA injury log are completed when applicable. The safety team reviews how the device was used and whether a safer device or workflow change could reduce recurrence.

When a patient with symptoms requiring additional precautions arrives without clear instructions, staff follow Standard Precautions, alert the responsible clinician, and use the facility’s triage and isolation process. If care requires a tight-fitting respirator, only personnel meeting applicable respirator-program requirements use it. The team documents the operational issue and corrects any signage, supply, or communication gap.

If an audit finds repeated missed hand hygiene during a particular transition in care, the supervisor verifies the observation, looks for workflow or supply barriers, provides focused coaching, assigns a corrective action, and repeats the audit to assess whether practice improved. A hospital also routes relevant infection-control findings through its QAPI process as required.

• Transmission-Based Precautions