Can an Exposure Control Plan be e-signed?

Yes. Electronic signatures are legally valid for most workplace plans under ESIGN (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and retention requirements are met.

Is notarization required?

No. Exposure Control Plans typically do not require notarization. Focus on documented signatures, audit trails, and retention unless a specific state or contractual requirement mandates notarization.

How long must records be kept?

Keep exposure records per OSHA and related rules; medical and exposure records may be retained for up to 30 years (29 CFR 1910.1020); HIPAA-covered record retention is generally six years (45 CFR §164.530(j)).

Who should sign the plan?

An authorized employer representative such as the safety manager or company executive should sign to accept responsibility; local policies may require additional acknowledgments from supervisors.

How do I update the plan?

Document revisions with an effective date, distribute updated copies to affected employees, and retrain when controls or tasks change to ensure continued compliance.

What if an exposure occurs?

Follow the documented post-exposure procedures immediately: isolate source if safe, report the incident, provide medical evaluation, and document the event for both medical and OSHA recordkeeping purposes.

Electronic Signature
Templates
Miscellaneous
Exposure Control Plan Template

Exposure Control Plan Template

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

EXPOSURE CONTROL PLAN AGREEMENT

This Exposure Control Plan Agreement (the Agreement) is made as of Effective Date: by and between Employer Name: with principal address at (Employer), and Service Provider Name: with principal address at (Service Provider). Employer and Service Provider may be referred to individually as a Party and collectively as the Parties.

WHEREAS

WHEREAS, Employer conducts operations that involve possible occupational exposure to blood, bodily fluids, or other potentially infectious materials and requires a formal Exposure Control Plan to reduce risk and ensure regulatory compliance; and

WHEREAS, Service Provider possesses expertise to develop, implement, and deliver training and related services necessary to establish and maintain an effective Exposure Control Plan for Employer's workforce; and

WHEREAS, the Parties wish to set forth their respective obligations, payment terms, confidentiality protections, and the procedures for implementation, monitoring and termination of the Exposure Control Plan.

SCOPE OF WORK

Scope of Work (Exposure Control Plan and Services)

The Scope of Work shall include, at a minimum: hazard assessment and exposure determination; specification of engineering controls and work practice controls; personal protective equipment requirements; training curriculum and schedule; vaccination and medical evaluation protocols; post-exposure evaluation and follow-up procedures; and recordkeeping and audit processes. Hazard assessment completed on:

EXPOSURE CONTROL POLICIES

Employer agrees to adopt and maintain written policies consistent with the Exposure Control Plan prepared by Service Provider. These policies shall require implementation of engineering controls (including but not limited to sharps disposal, safety needles where required) and documented work practice controls to minimize occupational exposures.

Service Provider shall assist in development of written procedures for housekeeping, waste disposal, and decontamination of equipment and work surfaces and shall advise Employer on selection of appropriate engineering controls and supplies.

PERSONAL PROTECTIVE EQUIPMENT (PPE)

Required PPE (select all that apply)

Gloves Gowns Face shield/Mask Eye protection

Employer shall supply required PPE and ensure training in appropriate use, maintenance, and disposal. Service Provider shall include PPE requirements in written procedures and training materials as part of the Scope of Work.

TRAINING & VACCINATION

Training Frequency and Content

Employer will offer vaccination and medical evaluation to covered employees when indicated by exposure risk. Vaccination offered: Employee declination will be documented in employee medical records consistent with the Plan.

POST-EXPOSURE EVALUATION & FOLLOW-UP

Reporting Contact for Post-Exposure Evaluation

The Plan shall include prompt reporting procedures, immediate medical evaluation, documentation of exposure incidents, and procedures for follow-up testing. Service Provider shall provide template forms and recommended timelines for such actions.

RECORDKEEPING

Record Retention Period

Employer shall maintain required training, medical, and incident records for the period specified above and make records available to Service Provider for audit and plan revision as set forth in this Agreement.

PAYMENT TERMS

Total Payment Amount Payment Schedule Late Fee

Invoices shall be delivered in writing. Unless otherwise agreed in writing, undisputed invoices are payable within thirty (30) days of receipt. Late payments shall accrue the Late Fee specified above.

TERM AND TERMINATION

This Agreement shall commence on Start Date: and shall continue until End Date: unless earlier terminated in accordance with this Section.

Termination Notice Period

Either Party may terminate this Agreement for cause upon material breach by the other Party if the breaching Party fails to cure the breach within the notice period specified above. Termination for convenience may be effected by either Party upon prior written notice as specified above; Employer shall pay Service Provider for all services performed and expenses incurred through the effective date of termination.

CONFIDENTIALITY

Each Party shall maintain in strict confidence all confidential information furnished by the other Party in connection with this Agreement and shall not disclose such information except to those employees, agents, or subcontractors with a need to know and who are bound by confidentiality obligations at least as protective as those set forth herein. Confidential information does not include information that is or becomes generally available to the public through no wrongful act of the receiving Party, or information independently developed by the receiving Party without use of the disclosing Party's confidential information.

Confidentiality Exceptions or Special Instructions

INDEMNIFICATION & INSURANCE

Each Party shall indemnify and hold the other harmless from claims, liabilities, losses and expenses arising out of its negligence or willful misconduct in performing under this Agreement. Service Provider shall maintain professional liability and general liability insurance in amounts reasonable for the scope of services and provide proof of insurance upon request.

GOVERNING LAW

Governing Law Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of the jurisdiction specified above, without regard to conflict of law principles.

ENTIRE AGREEMENT

This Agreement, including the Scope of Work and any attachments expressly incorporated in writing, constitutes the entire agreement between the Parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals and communications, whether oral or written. Any amendment or modification must be in writing and signed by authorized representatives of both Parties.

Employer Printed Name:

By:

Date:

Service Provider Printed Name:

By:

Date:

What the Exposure Control Plan Template Covers

An Exposure Control Plan Template is a written workplace program that specifies procedures, engineering controls, personal protective equipment, training, and medical follow-up to prevent or respond to employee exposure to bloodborne pathogens and other hazardous biological agents. The template helps employers document hazard assessments, exposure prevention measures, assigned responsibilities, and procedures for post-exposure evaluation and incident reporting, aligning with OSHA expectations and industry best practices.

Why a Formal Exposure Control Plan Matters

A documented plan clarifies employer and employee responsibilities, reduces exposure risk, and provides a record useful in inspections or claims. It supports regulatory compliance and consistent workplace practices while enabling timely medical follow-up after incidents.

Who typically prepares and relies on this template

The template is also used by contractors and vendors when their personnel perform work that could create exposure risk at a host facility.

Safety officers and EHS managers who draft and maintain the plan for the employer
Supervisors and HR for training, recordkeeping, and incident response coordination
Occupational health clinicians who manage post-exposure evaluation and treatment

Core sections to include in a professional plan

A complete Exposure Control Plan Template organizes the employer's approach into clear sections so users can find responsibilities, controls, and procedures quickly.

Scope

Defines work areas, tasks, and employee groups covered by the plan.

Hazard Assessment

Documents identified exposure risks, frequency, and task-level controls.

Engineering Controls

Lists equipment and workplace modifications used to reduce exposures.

Administrative Controls

Includes training schedules, work practices, and assignment of responsibilities.

Personal Protective Equipment

Specifies required PPE, inspection, replacement, and disposal procedures.

Post-Exposure Procedures

Describes incident reporting, medical evaluation, and recordkeeping protocols.

Step-by-step: completing the Exposure Control Plan

Follow these sequential steps to produce a compliant, actionable plan that supervisors and employees can use.

01

Gather Records: Collect job descriptions, incident logs, and prior assessments.
02

Perform Assessment: Identify tasks with exposure risk and rank them by frequency.
03

Select Controls: Assign engineering, administrative, and PPE controls for each task.
04

Document Procedures: Write reporting, medical follow-up, and training steps clearly.

Where the completed plan should go and who receives it

Define the routing so copies are available for operations, health personnel, and regulators when needed.

Employer Records: Store master plan with EHS and HR for access and audits.
Worksite Copies: Place accessible copies in relevant departments and break rooms.
Occupational Health: Provide copy to occupational clinicians for incident response alignment.
Regulatory Response: Be ready to produce plan during OSHA or state inspection.

Configuring an online version for consistent completion

Set up a digital workflow to collect information reliably and keep plan versions tracked.

Field	Configuration
Employer Name Field	Required, single-line text
Effective Date Field	Date picker, MM/DD/YYYY format
Responsible Person Field	Name, title, phone, required
Attachments	Allow PDF upload for assessments and training records

Digital signing and sharing: platform considerations

Choose a platform that supports secure storage (AES-256), retains versions, and can produce compliance-ready activity reports.

Audit Trail: Capture timestamps, IP, and signer email
Authentication: Use multi-factor for sensitive roles
Integrations: Connect with HR, EHS, and cloud storage

Essential fields and short-reference checklist

Employer Name: Exact legal name

Facility Location: Physical address

Assessment Date: MM/DD/YYYY

Designated Officer: Name and contact

PPE List: Required items by task

Training Dates: Initial and annual dates

Consequences of an incomplete or missing plan

OSHA Citations: Civil penalties and corrective orders

Increased Liability: Workers' comp and tort exposure

Medical Costs: Employer-funded evaluations and treatments

Operational Disruption: Work stoppages and investigations

Recordkeeping Violations: OSHA record fines

Reputational Harm: Public trust and contracting impacts

Common preparation mistakes to avoid

Using generic language that fails to identify specific tasks or job roles, which makes the plan hard to enforce and less useful during inspections.
Omitting training dates or delivery method; without documented training, employers cannot demonstrate employees received required instruction.
Failing to update controls and procedures after process changes or incidents, leaving workers exposed under outdated guidance.
Storing only a single, inaccessible copy instead of multiple site and digital copies, delaying response during an exposure event or inspection.

Real organization examples using signed safety programs

Practical examples show how organizations document and distribute exposure controls using digital workflows.

Optica Ventures LLC

Optica centralized health and safety forms with a digital workflow to reduce turnaround.

The interface simplified staff completion across sites.
The result was consistent documentation, easier version control, and faster access for compliance reviews.

Fertility Centers of Illinois

A healthcare provider used a digital signature process for clinical and safety forms to maintain compliance.

Their team cited responsiveness and reliable recordkeeping.
Having accessible, auditable signed plans helped align clinical protocols with occupational health follow-up.

Practical tips for accurate and efficient completion

Follow these best practices to make the plan usable, auditable, and enforceable.

Use task-level detail

Describe specific tasks and locations rather than broad categories; this makes controls and training directly applicable to daily work.

Assign clear responsibility

Name a responsible person and alternates for plan maintenance, training delivery, incident logging, and periodic reviews.

Schedule regular reviews

Review the plan after incidents, process changes, or at least annually to ensure controls remain effective and documented.

Keep auditable records

Retain signed plans, training rosters, and incident reports in searchable, secure storage for the required retention period.

Who can sign and authorize the plan

Safety Manager

The employer's safety or EHS manager typically prepares and signs the plan as the operational owner, confirming that hazard assessments and controls are in place and training is scheduled.

Company Executive

An authorized company officer or designee (HR director or operations VP) signs to accept corporate responsibility, allocate resources, and confirm regulatory compliance obligations are met.

Key timelines and review milestones

Track these recurring and event-driven deadlines to maintain an effective program.

Initial Implementation:

Complete the written plan before task start or as soon as exposure risks are introduced.

Employee Training:

Provide training at assignment and annually, per OSHA 29 CFR 1910.1030(g)(2)(vii).

Post-Exposure Action:

Initiate medical evaluation and documentation immediately after an exposure incident.

Annual Review:

Review the plan annually and after any significant process change or incident.

Record Retention:

Keep exposure-related medical records and policy versions per regulatory retention timelines.

eSignature vendors: pricing and feature overview for plan workflows

Common eSignature features relevant to Exposure Control Plan workflows include audit trails, HIPAA support, bulk distribution, and envelope limits. Compare core pricing and capabilities below.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Plan	7-day free trial	Paid plans only	Paid plans only	Paid plans only	Paid plans only
Bulk Send	Yes (Premium)	Varies by plan	Varies by plan	Yes	Varies by plan
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about the Exposure Control Plan Template

Answers to common questions about legal validity, signing, recordkeeping, and updates for the plan.

Need help? Contact support

Can an Exposure Control Plan be e-signed?
Yes. Electronic signatures are legally valid for most workplace plans under ESIGN (15 U.S.C. ch. 96) and UETA where adopted, provided intent, consent, attribution, and retention requirements are met.
Is notarization required?
No. Exposure Control Plans typically do not require notarization. Focus on documented signatures, audit trails, and retention unless a specific state or contractual requirement mandates notarization.
How long must records be kept?
Keep exposure records per OSHA and related rules; medical and exposure records may be retained for up to 30 years (29 CFR 1910.1020); HIPAA-covered record retention is generally six years (45 CFR §164.530(j)).
Who should sign the plan?
An authorized employer representative such as the safety manager or company executive should sign to accept responsibility; local policies may require additional acknowledgments from supervisors.
How do I update the plan?
Document revisions with an effective date, distribute updated copies to affected employees, and retrain when controls or tasks change to ensure continued compliance.
What if an exposure occurs?
Follow the documented post-exposure procedures immediately: isolate source if safe, report the incident, provide medical evaluation, and document the event for both medical and OSHA recordkeeping purposes.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now