BBP certification is a credential showing you’ve completed training on bloodborne pathogens, the infectious microorganisms found in human blood that can transmit diseases like HIV, hepatitis B, and hepatitis C. It’s required for any worker who could reasonably be exposed to blood or other potentially infectious materials on the job. While the term “certification” is widely used in the industry, it’s worth knowing that OSHA doesn’t actually issue or mandate a formal certificate. What OSHA does mandate, under standard 1910.1030, is that employers provide bloodborne pathogen training to every employee with occupational exposure, at no cost and during working hours.
What the Training Covers
BBP training follows a curriculum outlined by OSHA with 14 minimum required elements. At its core, the training teaches you how bloodborne diseases spread, how to recognize tasks that put you at risk, and what to do if exposure happens. You’ll learn about the proper use, removal, and disposal of personal protective equipment like gloves, gowns, and face shields. The training also covers engineering controls (things like sharps containers and self-sheathing needles) and safe work practices designed to minimize contact with blood.
Beyond prevention, the training walks through what happens after an exposure incident: who to contact, how to report it, and what medical follow-up your employer is required to provide. You’ll also receive information about the hepatitis B vaccine, including its safety, effectiveness, and the fact that your employer must offer it to you free of charge. The course covers the color-coded labels and biohazard signs used to mark contaminated materials, and it must include an opportunity for you to ask questions of the instructor in real time.
Who Needs It
The requirement applies to anyone whose job involves a reasonable chance of contact with blood or other potentially infectious materials. Healthcare workers are the most obvious group: nurses, physicians, phlebotomists, dental hygienists, EMTs, and lab technicians. But the requirement extends well beyond hospitals. Tattoo artists, body piercers, janitorial staff who clean up blood spills, firefighters, correctional officers, school nurses, and certain childcare workers all fall under the standard. If your job description includes any task where you could encounter human blood, your employer is legally obligated to provide this training.
How Long It Takes and Where to Get It
Most BBP training courses take between one and two hours to complete. They’re available through in-person classes and online platforms. Organizations like the American Red Cross offer self-paced online courses that let you work through the material on your own schedule. Many employers run their own in-house training programs tailored to the specific hazards of their workplace, which OSHA actually encourages since the training is supposed to be relevant to each worker’s actual job duties.
The format matters less than the content. Whether the course is online or in person, it must cover all 14 required elements and include an interactive question-and-answer component. A purely passive video with no opportunity to ask questions doesn’t meet the standard.
Renewal Is Required Every Year
BBP certification expires after 12 months. OSHA requires initial training when you’re first assigned to a role with potential exposure, then annual refresher training every year after that. If your job duties change in a way that creates new exposure risks, your employer must provide additional training at that point, even if your annual renewal isn’t due yet. This annual cycle ensures workers stay current on updated procedures, new safety equipment, and any changes to workplace protocols.
Employer Responsibilities Beyond Training
Training is only one piece of what OSHA requires. Employers must also maintain a written Exposure Control Plan, a document that identifies which job classifications involve exposure risk, details the specific precautions in place, and lays out the procedure for handling exposure incidents. This plan has to be reviewed and updated at least annually.
Employers are also responsible for keeping records. Training records, which include the dates of training sessions, the content covered, the trainer’s name, and the names of attendees, must be maintained for three years. Medical records related to occupational exposure are kept confidential and retained for the duration of employment plus 30 years. If an exposure incident occurs, the employer must document the circumstances, the route of exposure, and a plan to prevent similar incidents in the future.
Penalties for Noncompliance
Failing to provide BBP training or maintain proper documentation carries real financial consequences. As of January 2025, OSHA can assess fines of up to $16,550 per serious violation. If the violation is willful or repeated, that number jumps to $165,514 per violation. A failure-to-abate penalty runs $16,550 per day beyond the deadline for correction. These penalties apply per violation, meaning an employer who fails to train multiple employees could face stacked fines that add up quickly.
For employees, the practical takeaway is straightforward: your employer is required to provide and pay for your BBP training. If you’re working in a role with exposure risk and haven’t received it, that’s a compliance gap on your employer’s end, not yours.