Managing Workplace Safety Healthcare

Checkpoint A — Safety Program Assessment

Intake Questions

1. Does the organization have a dedicated safety officer or occupational health department?
2. What is the organization's OSHA 300 log recordable injury rate, and how does it compare to industry benchmarks (BLS data for NAICS code)?
3. Has the organization been subject to OSHA inspections, citations, or the Severe Violator Enforcement Program (SVEP)?
4. Does the organization have a written Exposure Control Plan for bloodborne pathogens?
5. What engineering controls are in place for sharps injury prevention (safety-engineered devices)?
6. Does the organization have a TB exposure control program, and what risk classification applies (low, medium, ongoing potential for exposure)?
7. Does the organization have a workplace violence prevention program, and is it operating in a state with mandatory healthcare violence prevention requirements?
8. Does the organization handle hazardous drugs, and if so, is there a USP 800 compliance program?
9. What is the organization's patient handling/safe lifting program status?
10. Does the organization have an active safety committee, and how frequently does it meet?

Required Documents

• Exposure Control Plan (Bloodborne Pathogens)
• TB Exposure Control Plan (if applicable)
• Workplace Violence Prevention Plan
• OSHA 300/300A/301 logs (past 5 years)
• Sharps injury log
• Safety data sheets (SDS) inventory
• Hazardous drug handling policies (USP 800 compliance)
• Safe patient handling program documentation
• Safety committee charter and meeting minutes
• OSHA inspection reports and citations (if any)
• Workers' compensation claims data (past 3 years)
• Respiratory protection program (if applicable)
• Emergency action plan and fire prevention plan

Step 1 — Bloodborne Pathogen Standard Compliance (29 CFR § 1910.1030)

Evaluate the organization's BBP program:

• Exposure Control Plan (ECP): Verify a written ECP exists, is accessible to employees, and is reviewed and updated at least annually. The ECP must include: exposure determination (job classifications and tasks with occupational exposure), schedule and method of implementation for each regulatory provision, and procedure for evaluating exposure incidents.
• Engineering and Work Practice Controls: Verify use of safety-engineered sharps devices (self-sheathing needles, retractable lancets, needleless systems) as the primary control. Review the annual evaluation of engineering controls involving front-line employees per the Needlestick Safety and Prevention Act.
• Sharps Injury Log: Confirm a sharps injury log is maintained with: type and brand of device involved, department/work area, and description of the incident. Logs must be maintained for 5 years.
• Personal Protective Equipment (PPE): Verify the employer provides appropriate PPE (gloves, gowns, masks, eye protection) at no cost, and employees are trained on proper use, removal, and disposal.
• Hepatitis B Vaccination: Verify the employer offers hepatitis B vaccination at no cost to all employees with occupational exposure within 10 working days of initial assignment. Document vaccination status or signed declination.
• Post-Exposure Evaluation: Verify a protocol exists for post-exposure evaluation including: documentation of exposure route and circumstances, identification of source individual (if feasible), testing of source individual (with consent), and testing and follow-up for exposed employee per current USPHS guidelines.
• Training: Verify annual BBP training for all employees with occupational exposure. Training must include: epidemiology of bloodborne diseases, modes of transmission, ECP contents, engineering controls, PPE use, hepatitis B vaccination, and post-exposure procedures.

Step 2 — Tuberculosis Exposure Control

• Risk Assessment: Verify the organization conducts a TB risk assessment to determine the risk classification (low risk, medium risk, potential for ongoing transmission). Risk classification determines screening and testing frequency.
• TB Screening: Verify baseline TB screening for all healthcare workers at hire and periodic screening based on risk classification. Follow current CDC/NTCA guidelines for TB screening (IGRA or TST).
• Infection Control Measures: For medium or higher risk facilities, verify: administrative controls (triage, isolation protocols, TB surveillance), environmental controls (negative pressure rooms, HEPA filtration, UV germicidal irradiation), and respiratory protection (N95 respirators with fit testing).
• Respiratory Protection Program: If N95 respirators are used, verify compliance with the OSHA Respiratory Protection Standard (29 CFR § 1910.134)—written program, medical evaluation, fit testing (initial and annual), and training.

Step 3 — Workplace Violence Prevention

Evaluate the organization's workplace violence prevention program:

• Written Program: Verify a written workplace violence prevention program exists. While OSHA does not have a healthcare-specific violence prevention standard (as of 2024), it enforces under the General Duty Clause and has published enforcement guidance specific to healthcare.
• State Requirements: Identify whether the organization operates in a state with mandatory healthcare violence prevention legislation (California SB 1299, Washington, Illinois, New York, New Jersey, Oregon, and others have enacted specific requirements).
• Risk Assessment: Verify the organization has conducted a workplace violence risk assessment identifying: high-risk areas (ED, behavioral health, waiting rooms), high-risk situations (involuntary commitment, restraint, discharge disputes), and existing controls.
• Engineering Controls: Assess physical security measures—panic buttons/alarms, surveillance cameras, controlled access, safe rooms, security staffing, metal detectors (for high-risk facilities), and environmental design (escape routes, barrier-free workstations).
• Administrative Controls: Verify: staffing levels adequate for patient acuity, de-escalation training for all staff, violence reporting system (non-punitive), post-incident response including medical care and psychological support, and patient flagging for violence history.
• Incident Tracking: Verify workplace violence incidents are tracked, trended, and reported. Assess whether the organization uses a standardized taxonomy (Type I through Type IV) and whether data drives program improvements.
• Training: Verify all staff receive workplace violence prevention training appropriate to their role and risk level—recognition of escalating behavior, de-escalation techniques, personal safety practices, and reporting procedures.

Step 4 — Hazardous Drug Handling (USP 800)

If the organization handles hazardous drugs:

• Assessment of Handling: Identify all areas where hazardous drugs are received, stored, prepared, administered, or disposed of. USP 800 applies to all healthcare settings handling hazardous drugs on the NIOSH list.
• Hierarchy of Controls: Verify implementation of engineering controls (containment primary engineering controls—C-PECs—for preparation; containment secondary engineering controls—C-SECs—negative pressure rooms for HD preparation), administrative controls (policies, procedures, competency assessment), and PPE (chemotherapy-tested gloves, gowns, eye/face protection, respiratory protection as indicated).
• Closed-System Transfer Devices (CSTDs): Assess use of CSTDs for administration of hazardous drugs where appropriate.
• Medical Surveillance: Verify a medical surveillance program exists for workers who handle hazardous drugs, including baseline and periodic assessment.
• Spill Management: Verify spill kits are available in all HD handling areas and staff are trained in spill management procedures.

Step 5 — Recordkeeping and Program Monitoring

• OSHA Logs: Verify OSHA 300 Log (Log of Work-Related Injuries and Illnesses), 300A Summary, and 301 Incident Report forms are maintained accurately. The 300A Summary must be posted annually (February 1–April 30). Electronic submission may be required depending on establishment size.
• Sharps Injury Log: Maintained separately with required data elements per the Needlestick Safety and Prevention Act.
• Exposure Records: Medical records for employees with occupational exposure must be maintained for duration of employment plus 30 years per 29 CFR § 1910.1020.
• Training Records: Maintain training records for 3 years from training date, including dates, content, trainer identity, and attendee names/job titles.
• Safety Committee: Verify the safety committee meets at least quarterly (or as required by state law), reviews incident data, conducts walk-throughs, and makes documented recommendations to management.
• Performance Metrics: Track: OSHA recordable injury rate, sharps injury rate, workplace violence incident rate, workers' compensation frequency and severity, and near-miss reporting volume.

Checkpoint B — Program Validation

1. Confirm the Exposure Control Plan is current (reviewed within 12 months) and includes all required elements.
2. Verify safety-engineered sharps devices are used and evaluated annually with front-line employee input.
3. Confirm hepatitis B vaccination is offered to all employees with occupational exposure within 10 days of initial assignment.
4. Verify TB risk assessment is current and screening protocols match the facility's risk classification.
5. Confirm workplace violence prevention program addresses state-specific requirements where applicable.
6. Verify hazardous drug handling meets USP 800 requirements (if applicable).
7. Confirm OSHA logs are accurate and the 300A Summary is posted during the required period.
8. Verify safety committee is active with documented meetings and management response to recommendations.

Quality Audit

• Exposure Control Plan current and reviewed within 12 months
• Safety-engineered sharps devices evaluated annually with front-line employee input
• Sharps injury log maintained with all required data elements
• Hepatitis B vaccination offered to all employees with occupational exposure
• Post-exposure evaluation protocol meets current USPHS guidelines
• Annual BBP training documented for all employees with occupational exposure
• TB risk assessment current with screening protocols matching risk classification
• Respiratory protection program compliant (fit testing, medical evaluation) if N95s used
• Workplace violence prevention program addresses state-specific mandates
• Workplace violence incidents tracked and trended with data-driven improvements
• Hazardous drug handling meets USP 800 requirements where applicable
• OSHA 300/300A/301 forms accurate and 300A posted during required period
• Safety committee active with at least quarterly meetings and documented recommendations

Guidelines

• The Bloodborne Pathogen Standard is one of OSHA's most enforced standards in healthcare. The most common citations involve: failure to update the Exposure Control Plan annually, failure to evaluate safety-engineered devices, and failure to offer hepatitis B vaccination within the required timeframe.
• Workplace violence prevention is an active OSHA enforcement area under the General Duty Clause. OSHA does not need a specific standard to cite employers—the General Duty Clause requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. Healthcare workplace violence is a recognized hazard.
• USP 800 compliance requires significant investment in engineering controls, particularly C-PECs and C-SECs. State boards of pharmacy enforce USP 800, and CMS has incorporated hazardous drug handling into survey expectations.
• OSHA recordkeeping accuracy is critical. Under-recording injuries on the OSHA 300 Log is itself a citable violation, and OSHA has increased enforcement of accurate recordkeeping.
• The Respiratory Protection Standard requires annual fit testing for N95 respirators. Medical evaluation must precede fit testing, and employees who cannot be fit-tested must be provided alternative protection (PAPRs).
• Healthcare worker safety directly impacts patient safety—fatigued, injured, or traumatized workers are more likely to make clinical errors. Invest in worker safety as a patient safety strategy.
• This skill produces workplace safety compliance assessment output, not legal advice. OSHA compliance decisions, citation responses, and settlement negotiations should involve qualified occupational safety and health counsel.