OSHA

TB Exposure in a Medical Office: OSHA Response Requirements and Employee Rights

By GuardWell Compliance Team·June 16, 2026·10 min read

You just learned that a patient who was in your office last week has been diagnosed with active pulmonary tuberculosis. Or one of your employees just tested positive. Either way, your waiting room, exam rooms, and hallways may have been exposure zones, your staff may have been breathing aerosolized TB bacteria without protection, and you need to act immediately. Tuberculosis is an airborne pathogen, and OSHA takes workplace TB exposure seriously. Here is how to respond correctly, protect your employees, and meet your legal obligations.

Why TB Exposure in a Medical Office Is Different

Tuberculosis is transmitted through airborne droplet nuclei — particles so small they can remain suspended in the air for hours after an infectious person coughs, sneezes, speaks, or even breathes in an enclosed space. Unlike bloodborne pathogens, which require direct contact with infected blood or body fluids, TB can spread simply by sharing air with an infectious individual in an inadequately ventilated room. In a medical office with small exam rooms, limited air exchange, and patients sitting in a shared waiting area, the exposure risk can be significant.

OSHA does not have a specific tuberculosis standard, but it enforces TB-related protections under the General Duty Clause (Section 5(a)(1) of the OSH Act), which requires employers to provide a workplace free from recognized hazards. Additionally, OSHA’s Respiratory Protection Standard (29 CFR 1910.134) applies when respiratory protection is required for TB exposure, and CDC guidelines for preventing TB transmission in healthcare settings serve as the recognized standard of care that OSHA references during enforcement.

Immediate Steps After a Known TB Exposure

The moment you learn of a potential TB exposure in your office, take the following steps:

  1. Identify the exposure period and affected areas. Determine exactly when the infectious individual was in your office, which rooms they occupied, how long they were present, and which staff members had direct or prolonged contact. TB transmission risk increases with duration of exposure, proximity to the infectious person, and poor ventilation.
  2. Notify your local health department. Active TB cases are reportable in every state. Your local or state health department will guide contact investigation efforts and may send a public health nurse to assist with employee screening. Cooperate fully — health departments have the expertise and authority to manage TB contact investigations, and they can help determine the scope of screening needed.
  3. Notify affected employees. Inform employees who may have been exposed. Under OSHA’s General Duty Clause and the employee’s right to know about workplace hazards, you must inform workers of potential TB exposure. Do not disclose the identity of the source patient — HIPAA protects patient information, and the health department will handle source-patient communication.
  4. Offer baseline TB screening to all exposed employees. This means a tuberculin skin test (TST) or interferon-gamma release assay (IGRA) blood test. Employees with a prior positive TB test should receive a symptom screen and chest X-ray. Screening should occur as soon as possible after notification to establish a baseline, with follow-up testing 8–10 weeks after the last date of exposure.

Respiratory Protection Requirements

If your practice performs procedures that may generate aerosols on patients with known or suspected TB (sputum induction, bronchoscopy, airway suctioning), employees involved in those procedures must be provided with NIOSH-approved N95 or higher respirators under 29 CFR 1910.134. This standard requires a written respiratory protection program, medical clearance for respirator use, annual fit testing to ensure proper seal, and training on proper donning, doffing, and limitations of the respirator.

For most outpatient medical offices, routine patient encounters do not require N95 respirators unless the patient is known or suspected to have active TB. However, once you know a patient has active TB, any employee who enters the room must be wearing a properly fitted N95 respirator. Surgical masks do not provide adequate protection against airborne TB transmission — they are designed to block large droplets, not the small droplet nuclei that transmit TB.

Engineering Controls and Ventilation

OSHA and CDC guidelines emphasize engineering controls as the primary defense against airborne TB transmission in healthcare settings:

  • Airborne infection isolation rooms (AIIRs): These are negative-pressure rooms that prevent contaminated air from flowing into adjacent areas. Most outpatient medical offices do not have AIIRs, which means patients with known or suspected active TB should be masked with a surgical mask (the patient wears the surgical mask to contain their respiratory secretions) and moved to a private room with the door closed while arrangements are made for transfer to a facility with appropriate isolation capacity.
  • Ventilation assessment: After a known exposure, evaluate your HVAC system. How many air changes per hour do your exam rooms and waiting areas receive? CDC recommends a minimum of 6 air changes per hour for areas where TB patients may be present, with 12 or more preferred. If your ventilation is inadequate, portable HEPA air filtration units can supplement room air cleaning.
  • Ultraviolet germicidal irradiation (UVGI): Upper-room UVGI fixtures can reduce airborne TB bacteria in areas where ventilation cannot be adequately upgraded. These are a supplemental control, not a replacement for ventilation and respiratory protection.

Employee Screening and Follow-Up Protocol

The screening protocol for employees exposed to TB in a medical office follows CDC guidelines and typically proceeds as follows:

  1. Baseline screening: TST or IGRA within days of notification. If the employee had a negative test within the prior 12 months, that may serve as the baseline, but consult your occupational health provider.
  2. Follow-up screening: Repeat TST or IGRA 8–10 weeks after the last date of potential exposure. This window accounts for the incubation period — a test performed too soon after exposure may be falsely negative.
  3. Conversion evaluation: If an employee converts from negative to positive, they need a chest X-ray and medical evaluation to determine whether they have latent TB infection (LTBI) or active TB disease. LTBI is not contagious but should be treated to prevent progression to active disease.
  4. Treatment for LTBI: Employees with newly identified LTBI should be offered treatment. Common regimens include 4 months of rifampin or 3 months of isoniazid plus rifapentine. Treatment is provided at the employer’s expense if the infection is work-related.

All screening and follow-up must be provided at no cost to the employee. Document every step: notification dates, screening dates, results, referrals, and any treatment offered or declined.

OSHA Recordkeeping for TB Exposure

If an employee develops active TB disease that is determined to be work-related, it is a recordable illness on the OSHA 300 Log. Latent TB infection resulting from workplace exposure is generally not recordable on the OSHA 300 Log (it does not meet the criteria of an illness resulting in medical treatment beyond first aid, days away from work, or restricted duty), but you should still document it internally as part of your occupational health records. If the active TB case results in hospitalization, report to OSHA within 24 hours.

Building a TB Infection Control Program

If your practice has not previously had a written TB infection control plan, this exposure is the wake-up call to create one. CDC’s Guidelines for Preventing the Transmission of Mycobacterium tuberculosis in Health-Care Settings (2005, still current) outline a three-level hierarchy of controls: administrative controls (risk assessment, screening protocols, triage procedures), engineering controls (ventilation, HEPA filtration, UVGI), and personal respiratory protection. Your plan should be proportionate to your practice’s risk level, which depends on your patient population, geographic area TB prevalence, and the types of procedures you perform.

Integrate TB exposure response into your broader OSHA compliance program and your incident management workflow so that when the next exposure happens — and in healthcare, it will — your staff knows exactly what to do without scrambling.

Does OSHA require annual TB testing for medical office employees?

OSHA does not have a specific standard mandating annual TB testing. However, CDC guidelines recommend baseline and periodic TB screening for healthcare workers based on the facility’s risk classification. Most medical offices are classified as low risk and may screen at baseline only, with additional testing after known exposures. State and local health departments may have more specific requirements. Regardless of the frequency, all TB screening for healthcare workers must be provided at the employer’s expense.

Can I require an employee with latent TB to stay home from work?

Latent TB infection is not contagious. An employee with LTBI (positive test, no symptoms, negative chest X-ray) does not pose a transmission risk to coworkers or patients and should not be excluded from work. Excluding an employee with LTBI from work could constitute discrimination and would violate OSHA’s anti-retaliation protections if the employee perceives it as punishment for a positive test result. Only employees with active, symptomatic TB disease should be excluded until cleared by a physician.

What if a patient with active TB refuses to wear a mask in our waiting room?

Your obligation to protect your employees under the General Duty Clause does not depend on patient cooperation. If a known or suspected active TB patient refuses to mask, move them to a private room immediately, provide N95 respirators to any staff who must interact with them, and contact the local health department. Facilities have the right to require infection control measures as a condition of receiving non-emergency care. In an emergency, treat the patient with appropriate respiratory precautions in place for your staff.

Are we required to notify patients who were in the waiting room during the exposure?

Patient notification is typically managed by the local or state health department as part of the contact investigation, not by the medical practice directly. The health department will determine the scope of the contact investigation based on the infectious period, the layout of your facility, and the duration of exposure. Cooperate with the health department by providing information about patient visit times and waiting room layout, but let them manage patient notifications to ensure HIPAA compliance and consistent public health messaging.

TB exposuretuberculosis OSHArespiratory protectionemployee screeninginfection control

Part of our guide to

OSHA Compliance

See how GuardWell helps medical practices manage osha compliance end to end — checklists, policies, training, and audit-ready documentation in one platform.

Ready to simplify compliance?

GuardWell brings HIPAA, OSHA, OIG, and 7 more compliance modules into one affordable platform built for medical practices.

Start Free Trial

Start your compliance journey today

Join practices using GuardWell Compliance to stay ahead of HIPAA audits, OCR enforcement, and state regulatory inspections — $199/month with annual billing. Try free for 7 days.

No setup fees · No contracts · Cancel anytime

GuardWell

Healthcare Compliance Assistant

Hi! I'm GuardWell's sales assistant.

I can answer questions about our healthcare compliance platform, pricing, and features. How can I help?

Powered by GuardWell AI