Can this plan be signed electronically?

Yes. Electronic signatures are legally enforceable under the federal ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted; ensure consent, attribution, intent, and retention requirements are met for the specific transaction.

How does HIPAA affect plan content?

HIPAA influences handling of protected health information in exposure records and medical follow-up; if the plan contains PHI, implement safeguards, access controls, and a Business Associate Agreement when using third-party eSignature or hosting services.

Who must sign and authorize the plan?

Typically the clinic or facility director, an infection preventionist or occupational health lead, and any delegated supervisors sign and date the plan to indicate approval and responsibility for implementation and enforcement.

Are notarization or witness signatures required?

Not usually for internal exposure-control policies. Some states or specific legal instruments may require notarization or witness signatures; consult state law for statutes affecting executory documents or if the plan is incorporated into contractual instruments.

How long must records be retained?

Retention depends on the record type and regulator: follow OSHA and HIPAA minimums; HIPAA requires six years (45 CFR §164.530(j)), while OSHA illness records and training logs follow applicable OSHA retention schedules.

How to update or revoke the plan?

Yes. Establish version control, approval signatures, and a documented amendment process; retain prior versions per retention rules and notify staff of revisions. Significant changes should be reauthorized and re‑trained to ensure compliance.

Electronic Signature
Templates
Healthcare
Healthcare Exposure Control Plan

Healthcare Exposure Control Plan

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE EXPOSURE CONTROL PLAN

Facility Information

Facility Name Facility Address

Primary Contact / Safety Officer

Contact Phone

Plan Effective Date: . Departments and service lines covered:

Purpose and Scope

This Exposure Control Plan establishes procedures and work practices to minimize employee risk of occupational exposure to bloodborne pathogens and other potentially infectious materials in facility operations. The plan applies to all personnel with potential occupational exposure as identified in the Exposure Determination section and conforms to applicable occupational safety and public health regulations.

Responsibilities

Administrator: Ensure resources, policy enforcement, and periodic review. Administrator representative: .

Infection Control Officer: Oversee implementation, training, and post-exposure coordination. Infection Control Officer: .

Supervisors: Enforce controls, provide PPE, maintain records, and report incidents immediately to the Infection Control Officer.

Employees: Comply with plan procedures, participate in training, report exposures, and seek medical evaluation after an exposure incident.

Exposure Determination

The following job classifications or groups are considered at risk for occupational exposure. Provide specific duties or tasks that result in exposure.

Job Classification 1 Job Classification 2 Additional Classifications

Methods of Implementation

Engineering Controls and Work Practices

The facility will utilize engineering controls that isolate or remove the bloodborne pathogen hazard from the workplace. Examples required where appropriate: sharps disposal containers, needleless systems, self-sheathing needles, and other approved safer medical devices. Describe devices and locations:

Work practice controls including no recapping of needles, safe handling of sharps, and proper decontamination procedures are mandatory and enforced by supervisors.

Personal Protective Equipment (PPE)

The facility shall provide appropriate PPE at no cost. Required PPE for potential exposure tasks:

Gloves
Gowns / Protective Clothing
Eye Protection / Face Shield
Surgical Masks / Respiratory Protection as required

Housekeeping and Laundry

Hepatitis B Vaccination and Post-Exposure Management

The facility offers the Hepatitis B vaccination series at no cost to employees with occupational exposure. Vaccination will be made available within a reasonable time after initial assignment unless the employee has previously received the series, antibody testing shows immunity, or the vaccine is contraindicated.

Vaccination Offer Made Yes No

If declined, employee reason

Post-exposure evaluation and follow-up shall be provided by a licensed healthcare professional designated by the facility and include immediate first aid, confidential medical evaluation, and follow-up testing and prophylaxis as appropriate.

Designated Medical Provider / Clinic Provider Phone

Exposure Incident Reporting Procedure

Immediately report all exposure incidents to a supervisor and the Infection Control Officer. The facility shall provide a confidential medical evaluation, document the route of exposure and circumstances, identify the source individual when feasible, and perform baseline and follow-up testing as required by clinical judgment and applicable guidance.

Training

Initial and annual training on bloodborne pathogens, engineering controls, work practices, PPE, and incident reporting will be provided to all employees with occupational exposure. Training records will be maintained as described in Recordkeeping.

Training Location / Record Custodian

Recordkeeping

The facility shall maintain training records, medical records including vaccination status, post-exposure evaluations, and a sharps injury log where required. Records shall be retained for the periods required by applicable regulations and facility policy.

Medical Record Location Record Retention Period

Sharps Injury Log

Maintain a confidential sharps injury log to record details of each incident without identifying the injured employee. The following sample entry fields are provided.

Incident Date Description of Device and Circumstances Action Taken

Plan Evaluation and Revision

This plan will be reviewed at least annually and revised whenever necessary to reflect changes in technology, procedures, or regulatory requirements.

Last Review Date Next Scheduled Review Reviewer Name Summary of Changes

Confidentiality and Employee Rights

Medical records and post-exposure evaluations are confidential and maintained in secure locations. Employees have the right to access their medical records as permitted by law and facility policy. Retaliation against an employee for reporting an exposure or exercising rights under this plan is prohibited.

Definitions

Bloodborne pathogens: pathogenic microorganisms present in human blood that can cause disease in humans, including but not limited to Hepatitis B virus (HBV) and human immunodeficiency virus (HIV). Exposure incident: a specific eye, mouth, other mucous membrane, nonintact skin, or parenteral contact with blood or OPIM that results from the performance of an employee's duties.

Certification

By signing below, the undersigned certifies that this Healthcare Exposure Control Plan accurately describes the facility's policies and procedures for minimizing occupational exposure to bloodborne pathogens, that the facility will provide necessary resources to implement the plan, and that records specified in this plan will be maintained in accordance with applicable law and facility policy.

Facility Representative:

Title:

Signature:

Date:

What the Healthcare Exposure Control Plan Is

The Healthcare Exposure Control Plan is a formal written program used by healthcare organizations to identify occupational exposure risks to bloodborne pathogens and other infectious agents, describe engineering and work-practice controls, and set procedures for employee training, personal protective equipment, exposure incident response, medical evaluation, and recordkeeping. It typically aligns with OSHA’s Bloodborne Pathogens Standard and related public health guidance. The plan assigns responsibilities, documents infection-control protocols, and establishes monitoring, reporting, and annual review processes to reduce workplace transmission and ensure regulatory compliance.

Why a Formal Exposure Control Plan Matters

A Healthcare Exposure Control Plan clarifies employer obligations, lowers employee infection risk, and documents compliance for regulators and insurers. It standardizes responses to exposures, supports timely medical evaluation, and reduces legal and financial liabilities arising from workplace transmission.

Who Typically Prepares and Uses This Plan

Common users include occupational health teams, infection preventionists, clinic managers, and safety officers responsible for workplace health.

Hospital infection control departments managing exposure protocols and staff training.
Ambulatory clinics and dental offices tracking exposures, immunizations, and PPE use.
Nursing homes and long-term care facilities monitoring resident and staff infection risks.

Smaller practices and contractors should adapt the plan’s scale and detail to match their patient volume and state regulatory obligations.

Roles That Sign and Oversee the Plan

Infection Preventionist

Typically a licensed clinician or certified professional who develops, implements, and audits the exposure control plan; coordinates training, incident investigations, and immunization tracking; serves as the primary liaison with public health and occupational medicine providers to manage exposure follow-up.

Clinic Director

Operational leader who approves the plan, allocates resources for PPE and training, enforces compliance, and ensures timely reporting to regulators and insurers; responsible for integrating exposure-control procedures into daily workflows and staff performance evaluations.

Required Information to Include in the Plan

Plan Title: Official document name used internally.

Effective Date: Use MM/DD/YYYY date format

Responsible Parties: Names and job titles

Exposure Controls: Engineering and work-practice controls

Training Records: Dates, attendees, curriculum summary

Incident Log: Detail exposure events and follow-up

Consequences of an Incomplete or Incorrect Plan

OSHA Citations: Fines and corrective orders

HIPAA Exposure: Breach notifications, penalties

Worker Illness: Lost workdays and claims

Civil Liability: Negligence suits possible

Administrative Action: License or certification risk

Data Integrity: Incomplete records weaken defense

Common Preparation Mistakes to Avoid

Failing to list all exposure tasks and locations can leave workers unprotected and undermine regulatory compliance during inspections and audits.
Using ambiguous control descriptions such as 'adequate PPE' without specifics on type, level, and replacement schedule creates enforcement gaps.
Omitting post-exposure medical evaluation procedures or failing to identify a provider delays treatment and can increase employer liability.
Keeping training logs offsite or inaccessible to auditors during an inspection causes record-keeping violations and possible enforcement actions.

Step-by-Step: Create and Implement the Plan

Follow these steps to complete and implement your Healthcare Exposure Control Plan accurately and consistently.

01

Gather Data: Identify tasks, agents, personnel, and exposure points.
02

Assess Risk: Evaluate frequency, likelihood, and severity.
03

Document Controls: Specify engineering, administrative, and PPE measures.
04

Train Staff: Deliver initial and annual training; log attendance.

Typical Workflow for Plan Approval and Distribution

Typical routing for the Healthcare Exposure Control Plan involves documentation, review, staff notification, and retention steps to support compliance and response.

Prepare: Assemble incident data and control inventory.
Review: Clinical and safety leads verify measures.
Authorize: Clinic director signs and dates plan.
Distribute: Share to staff, post copies, and archive.

Online Workflow Settings for eSubmission and Tracking

Configure an online workflow to collect signatures, track training, and maintain an auditable exposure log for the Healthcare Exposure Control Plan.

Field mapping and configuration guide	Field \| Setting \| Requirement
Signature Field	Signature \| Required \| Typed or drawn allowed
Authentication	Authentication \| Email link \| Optional SMS code
Training Acknowledgment	Checkbox \| Required \| Date-stamped acknowledgment recorded
Exposure Log Upload	File upload \| Optional \| PDF or CSV formats

Platform Capabilities to Support the Plan

Ensure the platform supports secure e-signatures, audit trails, and HIPAA-compliant workflows for collecting and storing plan documentation.

File Formats: PDF, DOCX, and CSV supported
Integrations: Works with EHR and HR systems
Security: AES-256 at rest, TLS in transit

Key Timelines and Regulatory Expectations

Key timelines under the Healthcare Exposure Control Plan align with OSHA training, medical follow-up, and periodic review requirements to ensure ongoing compliance and effective response.

Initial Implementation Deadline:

Adopt plan before work with exposure risks begins; document approval date and notification.

Training Frequency Requirement:

Provide initial training at assignment and at least annual refreshers per OSHA standard.

Post-Exposure Follow-Up:

Offer medical evaluation and documented follow-up per OSHA Bloodborne Pathogens requirements.

Plan Review Cycle:

Review and update annually or sooner after an exposure incident.

Record Retention Reference:

Keep training and incident records per OSHA and HIPAA retention rules.

Core Elements of a Professional Exposure Control Plan

A complete Healthcare Exposure Control Plan combines hazard assessment, exposure control methods, medical protocols, training programs, documentation, and continuous review to protect staff and patients.

Hazard Assessment

Document procedures and locations where staff may encounter bloodborne pathogens or infectious agents, quantify exposure frequency, and identify tasks that require specific controls to reduce employee risk in clinical and nonclinical settings.

Engineering Controls

Specify devices and facility modifications such as sharps disposal containers, needleless systems, and ventilation changes designed to isolate or remove hazardous exposures before worker contact.

Work-Practice Controls

Outline consistent procedures including hand hygiene, safe handling of sharps, waste management, and cleaning protocols that reduce exposure through staff behavior and process design and scheduling to minimize risk.

PPE Requirements

Define required personal protective equipment for specific tasks, sizing and replacement schedules, storage, and training so staff know when and how to use protective gear properly.

Medical Management

Detail policies for exposure reporting, timely medical evaluation, vaccination offers, laboratory testing, and confidential recordkeeping consistent with OSHA and public health guidance, including follow-up timelines.

Training & Evaluation

Provide initial and recurring training on exposure risks, plan procedures, incident response, and competency checks; include documentation templates and metrics for program effectiveness monitoring and corrective action.

Practical Tips for Accurate and Efficient Completion

Adopt concise, evidence-based language, maintain version control, and ensure staff can access and acknowledge the plan to improve compliance and incident response.

Use clear task-based exposure descriptions

Describe exposures by job task rather than only by location; include frequency, typical materials involved, and any procedural variants. This level of detail enables targeted controls, accurate training content, and defensible auditing during regulatory reviews.

Keep version history and signoffs

Record document versions, approval signatures, and distribution dates. Retain an accessible audit trail so reviewers can verify when changes occurred, who approved them, and that staff received the most current procedures.

Integrate with occupational health systems

Connect the plan with immunization records, exposure incident workflows, and occupational health providers to automate notifications and clinical referrals. Integration reduces manual steps and improves timeliness of medical evaluations and reporting.

Train using scenarios and competency checks

Use case-based exercises and observed skill checks for procedures like safe sharps handling and post-exposure response. Document assessments and remediate gaps immediately to maintain staff competence and program integrity over time.

Milestones from Assessment to Annual Review

Milestones for creating and maintaining the Healthcare Exposure Control Plan guide project progress from assessment through evaluation and records retention.

01

Assessment Complete

Hazard inventory and exposure map finalized.

02

Control Implementation

Engineering and administrative measures deployed.

03

Staff Training Completed

All targeted staff receive and document training.

04

Annual Review

Plan reviewed, updated, and reapproved.

Pricing and Feature Snapshot for eSignature Platforms

Compare baseline pricing and feature availability for common eSignature vendors to inform platform selection for electronic Healthcare Exposure Control Plan workflows.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Bulk Send	Yes (Business Premium)	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Frequently Asked Questions About the Healthcare Exposure Control Plan

Answers to common questions about developing, signing, and enforcing the Healthcare Exposure Control Plan in U.S. healthcare settings.

Need help? Contact support

Can this plan be signed electronically?
Yes. Electronic signatures are legally enforceable under the federal ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted; ensure consent, attribution, intent, and retention requirements are met for the specific transaction.
How does HIPAA affect plan content?
HIPAA influences handling of protected health information in exposure records and medical follow-up; if the plan contains PHI, implement safeguards, access controls, and a Business Associate Agreement when using third-party eSignature or hosting services.
Who must sign and authorize the plan?
Typically the clinic or facility director, an infection preventionist or occupational health lead, and any delegated supervisors sign and date the plan to indicate approval and responsibility for implementation and enforcement.
Are notarization or witness signatures required?
Not usually for internal exposure-control policies. Some states or specific legal instruments may require notarization or witness signatures; consult state law for statutes affecting executory documents or if the plan is incorporated into contractual instruments.
How long must records be retained?
Retention depends on the record type and regulator: follow OSHA and HIPAA minimums; HIPAA requires six years (45 CFR §164.530(j)), while OSHA illness records and training logs follow applicable OSHA retention schedules.
How to update or revoke the plan?
Yes. Establish version control, approval signatures, and a documented amendment process; retain prior versions per retention rules and notify staff of revisions. Significant changes should be reauthorized and re‑trained to ensure compliance.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now