OSHA

Needlestick Injury in Your Practice: OSHA Reporting and Post-Exposure Protocol

By GuardWell Compliance Team·June 13, 2026·10 min read

A medical assistant just walked into your office and told you she stuck herself with a used needle while recapping a syringe after a blood draw. She is shaken, the patient is still in the exam room, and your staff is looking at you for direction. Needlestick and sharps injuries are among the most common occupational hazards in medical practices, and OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030) dictates exactly how you must respond. Here is what to do, step by step, starting right now.

Immediate Response: The First 15 Minutes

The moment a needlestick or sharps injury occurs, the injured employee’s health takes priority over paperwork, patient flow, and everything else happening in your practice:

  1. Wound care first. The employee should immediately wash the wound thoroughly with soap and running water. If the exposure involved mucous membranes (eyes, nose, mouth), flush with clean water or saline for at least 15 minutes. Do not squeeze the wound to force bleeding — this has not been shown to reduce infection risk and may increase tissue damage.
  2. Identify the source patient. Determine whose blood or body fluid was on the sharp device. The source patient’s infectious disease status is critical to determining the exposed employee’s post-exposure prophylaxis needs. Do not let the source patient leave before you have this conversation (with their consent).
  3. Begin the post-exposure evaluation process. Contact your designated post-exposure evaluation healthcare provider immediately. If your practice does not have one designated, this is a compliance gap you need to fix today — but for now, send the employee to an occupational health clinic or emergency department. Time-sensitive decisions about HIV post-exposure prophylaxis (PEP) depend on rapid evaluation.

Post-Exposure Evaluation: What 29 CFR 1910.1030 Requires

OSHA’s Bloodborne Pathogens Standard requires employers to make a confidential post-exposure evaluation and follow-up available to the exposed employee at no cost. This is not optional and must be provided regardless of whether the employee “thinks it is fine” or does not want to “make a big deal.” The evaluation must include:

  • Documentation of the route and circumstances of exposure. Record how the injury occurred, what device was involved, what body fluid was present, and whether the device was a safety-engineered sharp.
  • Source patient testing (with consent). If the source patient’s HIV, Hepatitis B, and Hepatitis C status is not already known, request consent for testing. If the source patient refuses, document the refusal. If the source is unknown (e.g., a sharp found in a disposal area), document that the source could not be identified.
  • Exposed employee testing. Offer baseline blood testing to the employee with appropriate counseling. The employee has the right to decline testing but should be informed of the option to have their baseline blood sample stored for 90 days in case they decide to be tested later.
  • Post-exposure prophylaxis. The evaluating healthcare provider will determine whether PEP for HIV or Hepatitis B immunoglobulin is indicated based on the source’s status and the nature of the exposure. For HIV, PEP is most effective when started within 2 hours of exposure — this is why speed matters.
  • Follow-up testing. The employee must be offered follow-up blood testing at appropriate intervals (typically 6 weeks, 12 weeks, and 6 months post-exposure for HIV; additional intervals for Hepatitis B and C as clinically indicated).

OSHA Recordkeeping Requirements

A needlestick injury triggers multiple OSHA recordkeeping obligations:

OSHA 300 Log

If the needlestick results in medical treatment beyond first aid (which post-exposure prophylaxis constitutes), the injury must be recorded on the OSHA Form 300 (Log of Work-Related Injuries and Illnesses). Record the injury within 7 calendar days of learning about it. The employee’s name is entered in the log, but practices with 10 or fewer employees are exempt from routine recordkeeping (though not from reporting).

Sharps Injury Log

Separate from the OSHA 300 Log, every employer covered by the Bloodborne Pathogens Standard must maintain a Sharps Injury Log. This log must include the type and brand of device involved, the department or work area where the injury occurred, and a description of how the incident happened. The Sharps Injury Log is maintained in a way that protects the confidentiality of the injured employee and is used for your annual review of safer sharp devices.

OSHA Form 301

The individual incident report (OSHA Form 301 or equivalent) must be completed for each recordable needlestick injury with detailed information about the employee, the circumstances of the injury, and the medical treatment provided.

Your Exposure Control Plan: Was It Current?

Every needlestick injury is also an opportunity — and an obligation — to evaluate whether your Exposure Control Plan (ECP) is current and effective. Under 29 CFR 1910.1030(c)(1)(iv), the ECP must be reviewed and updated at least annually and whenever new tasks or procedures affect occupational exposure. Specifically, you must evaluate whether you are using the safest available sharp devices. If the injury involved a conventional (non-safety) needle and a safety-engineered alternative exists, you need to document why the safer device was not in use or switch to it.

The annual review of your ECP must also include input from non-managerial employees who are responsible for direct patient care and are potentially exposed to injuries from contaminated sharps. This is a requirement, not a suggestion. If OSHA investigates a needlestick injury and finds that your most recent ECP review did not include frontline employee input on safer sharp devices, that is a separate citable violation.

When to Report to OSHA Directly

Most needlestick injuries do not require direct reporting to OSHA beyond internal recordkeeping. However, if the injury results in an in-patient hospitalization, you must report it to OSHA within 24 hours. If the injury results in a fatality (extremely rare but possible in cases of severe anaphylaxis to PEP medications or other complications), you must report within 8 hours. Report by calling your local OSHA area office or using OSHA’s online reporting portal.

What the Employee Needs to Know

The injured employee has rights under both OSHA regulations and your OSHA compliance program. They are entitled to a confidential post-exposure evaluation at no cost, copies of the evaluating healthcare provider’s written opinion, time off for follow-up medical appointments without penalty, and protection from retaliation for reporting the injury. Under Section 11(c) of the OSH Act, any adverse action against an employee for reporting a workplace injury is unlawful. Make this clear to the employee and document that you did so.

Preventing the Next Needlestick

After the immediate response and recordkeeping are complete, the final step is prevention. OSHA expects practices to investigate every sharps injury to identify root causes and implement corrections:

  • Was a safety-engineered device available and not used? If so, retrain staff and evaluate whether the safety device is being reliably stocked.
  • Was the injury caused by recapping a needle? One-handed recapping techniques or needle-free systems may be required. Two-handed recapping is prohibited under the BBP standard except in specific circumstances.
  • Was the sharps container full or inaccessible? Evaluate sharps container placement and replacement schedules.
  • Does your practice need additional training on safe injection practices and sharps handling?

Document the investigation, your findings, and the corrective actions taken. This documentation becomes part of your ECP record and demonstrates to OSHA that your practice takes sharps safety seriously.

What if the injured employee does not want to report the needlestick?

You must record the injury regardless of the employee’s preference. OSHA recordkeeping requirements are the employer’s obligation, not the employee’s choice. The employee can decline post-exposure testing (though you must still offer it and document the declination), but the Sharps Injury Log entry and OSHA 300 Log entry (if applicable) are mandatory. Explain to the employee that reporting protects them and document the conversation.

Who pays for the post-exposure evaluation and follow-up testing?

The employer pays. Under 29 CFR 1910.1030(f)(3), the post-exposure evaluation, follow-up testing, prophylaxis, and counseling must be provided at no cost to the employee. This includes HIV PEP medications, which can be expensive. The employee should not receive a bill for any aspect of the post-exposure evaluation or follow-up. This cost is typically covered through workers’ compensation, but the employee should not be required to navigate the claims process to receive timely care.

How long must we keep needlestick injury records?

OSHA requires that exposure incident records be maintained for the duration of employment plus 30 years (29 CFR 1910.1020). The Sharps Injury Log must be maintained for at least 5 years following the year the injuries occurred. OSHA 300 Logs must be kept for 5 years following the year they cover. Given these overlapping requirements, the safest approach is to maintain all needlestick-related records for the duration of the employee’s tenure plus 30 years.

needlestick injurysharps injuryOSHA reportingbloodborne pathogenpost-exposure protocol

Part of our guide to

OSHA Compliance

See how GuardWell helps medical practices manage osha compliance end to end — checklists, policies, training, and audit-ready documentation in one platform.

Ready to simplify compliance?

GuardWell brings HIPAA, OSHA, OIG, and 7 more compliance modules into one affordable platform built for medical practices.

Start Free Trial

Start your compliance journey today

Join practices using GuardWell Compliance to stay ahead of HIPAA audits, OCR enforcement, and state regulatory inspections — $199/month with annual billing. Try free for 7 days.

No setup fees · No contracts · Cancel anytime

GuardWell

Healthcare Compliance Assistant

Hi! I'm GuardWell's sales assistant.

I can answer questions about our healthcare compliance platform, pricing, and features. How can I help?

Powered by GuardWell AI