River
Y CombinatorBacked by Y Combinator
FREE TEMPLATE

OSHA Workplace Safety Checklist Template

Three documents and four sheets that run two separate exposure determinations on your roster, since bloodborne-pathogen and hazard-communication training don't share one due date.

Free download  ·  No account needed

Requirement Register by Role

Two exposure lists, one roster

Illustrative preview. A role's answer on one determination says nothing about the other.

RoleHeadcountBBP ExposureHazCom ExposureTraining Frequency
     
     

Physicians sit on one list, not both

Bloodborne pathogens exposure is about anticipated blood contact. Hazard communication exposure is about handling hazardous chemicals. A role can answer yes to one and no to the other.

Remaining columns: HBV Vaccine Offer, HazCom Training Trigger, Citation, Notes.

Every OSHA checklist for a medical office lists the same three items: exposure control plan, hazard communication program, sharps injury log. Treated as one bundle, when they are governed by two different standards that ask two different questions about the same roster. 1910.1030(b) asks who has reasonably anticipated contact with blood. 1910.1200(h) asks, separately, who handles hazardous chemicals in their own work area. A physician can be on the first list and off the second.

The frequencies do not match either. Bloodborne pathogens training runs on a fixed annual clock. Hazard communication training runs on initial assignment and on a new hazard arriving -- there is no annual date in the federal standard at all. A checklist that assigns one due date to "safety training" is wrong for whichever program it didn't write the rule for. Neither determination is touched by Part 1904's separate recordkeeping exemption, which most physician and dental offices already qualify for regardless of size.

Foothill Family Medicine, a fictional single-location practice with 14 employees, ran both determinations on its roster. Eight employees, its two physicians, five clinical staff and one janitorial role, have bloodborne pathogens exposure. Six, its clinical staff and janitorial role, but not its physicians, have hazard communication exposure. Its NAICS code sits on the Part 1904 exemption list, so it owes neither the OSHA 300 log nor the sharps injury log tied to it, absent a written request. All eight still get the full bloodborne pathogens program regardless.

One roster, two determinations, different answers

The full requirement register, a sample of the training log, and the incident register behind it.

Requirement Register by Role

Illustrative roster for a fictional practice, Foothill Family Medicine, 14 employees, NAICS 621111.

RoleHeadcountBBP ExposureHazCom ExposureFrequency
Physician2YesNoBBP annual
Clinical (RN/MA)5YesYesBBP annual + HazCom on hire/new hazard
Janitorial1YesYesBBP annual + HazCom on hire/new hazard
Front Desk3NoNoNeither
Billing2NoNoNeither
Practice Manager1NoNoNeither
Total148 exposed6 exposed6 on neither list

Only 6 of 14 employees are on both lists (clinical and janitorial). Physicians are BBP-only; front desk, billing and the practice manager are on neither.

Training Log

Sample rows. Bloodborne pathogens entries carry a next-due date; hazard communication entries carry a trigger instead.

EmployeeProgramDateTriggerNext Due
S. MercerBloodborne Pathogens2026-01-12Annual2027-01-12
S. MercerHazard Communication2025-06-03Initial assignmentNone – retrain only on new hazard
T. NkemeluHazard Communication2025-11-20New hazard: disinfectant changeNone – retrain only on new hazard

Hazard communication rows never get a "next due" date manufactured for them. The federal standard sets a trigger, not a calendar.

Incident Register

Every incident logged regardless of whether the formal sharps log applies to this practice.

DateEmployeeTypePost-Exposure Eval OfferedFormal Sharps Log Entry Required
2026-03-02D. WhitfieldSharpsYes – acceptedNo – NAICS 621111 exempt
2026-05-18T. NkemeluSplashYes – declined in writingNo – same basis
2026-08-09S. MercerChemicalN/A – HazCom incident, not BBPN/A

The formal sharps log column reflects this specific practice's 1904 status. A practice asked in writing to keep records, or outside the Appendix A list, would answer every row differently.

What's in the pack

01

Requirement Register by Role

One row per role, both exposure determinations run separately, headcount, training frequency and citation. Foothill's physicians appear on the bloodborne pathogens column and not the hazard communication column. A different compliance track from the HIPAA policy register for the same practice.

02

Exposure Control Plan

Built from the register's bloodborne pathogens column: the job classifications with occupational exposure, the engineering and PPE controls, the vaccine offer, and the employee-input record 1910.1030(c)(1)(v) requires and most plans omit.

03

Hazard Communication Program

Built from the register's separate hazard communication column: the chemical inventory, safety data sheets on file, labeling, and training logged by trigger event rather than by a manufactured annual date.

04

Training Materials

The required elements for each of the two sessions, in the order the standards list them, so a training log entry can cite exactly which elements were covered rather than a vague "safety training."

05

Training Log

One row per employee per program, dated, with the trigger recorded, so a bloodborne pathogens entry aging past 12 months and a hazard communication entry with no new trigger read as two different kinds of finding, not one. The staff training and competency pack carries the same two rows forward into the fuller roster of every credential a practice tracks.

06

Inspection Schedule

The Exposure Control Plan's annual review date, the practice's own chosen interval for engineering-control checks, and the 1904 recordkeeping status recheck, each with the citation or the practice's own policy behind it.

07

Incident Register

Every exposure incident logged with whether a post-exposure evaluation was offered and whether a formal sharps log entry is required, kept regardless of whether that formal log applies. Same discipline the breach response pack's affected individual register applies to a HIPAA incident instead of a workplace one.

08

BBP/HazCom Training Clock Watch

A weekly read for bloodborne pathogens retraining aging past 12 months, new hires inside or past the 10-working-day vaccine-offer window, and hazard communication gaps against the chemical inventory, reported as three separate lists.

How to use it

  1. 1

    Open in River, or download it

    Open the pack in River and let the agent run both exposure determinations against your real roster, or download the blank Word and CSV files instantly and work through them yourself.

  2. 2

    Send your roles, not your departments

    What each role actually does, not its job title. A billing coordinator and a phlebotomist can share a department and belong on opposite ends of both determinations.

  3. 3

    Run both determinations separately

    Bloodborne pathogens exposure, then hazard communication exposure, as two independent passes. Watch where the two rosters actually diverge before drafting anything.

  4. 4

    Draft the plans, then check the 1904 status

    The Exposure Control Plan and Hazard Communication Program from the roster that applies to each, then check whether your NAICS code owes a sharps injury log at all.

Frequently asked questions

Is this template free?

Yes. Download the three documents and four sheets as Word and CSV files with no signup and no card. "Edit with AI" is a separate, optional path for practices that want the agent to run both exposure determinations on a real roster. The rest of the library is at the template library.

Do the same employees need both trainings?

Sometimes, not always. Bloodborne pathogens exposure is about anticipated contact with blood; hazard communication exposure is about handling hazardous chemicals. A physician who draws blood but never mixes the disinfectant concentrate can need the first and not the second. Run both determinations separately rather than assuming one implies the other.

Do we need a sharps injury log?

Only if you're required to keep the OSHA 300 log under Part 1904, per 1910.1030(h)(5)(ii). Offices of physicians, dentists, other health practitioners, outpatient centers and medical labs are on Appendix A's exemption list regardless of size, unless OSHA, BLS or a state agency has asked you in writing to keep records.

Does the 1904 recordkeeping exemption reduce our other OSHA duties?

No. The exemption is specific to the 300 log and the sharps log tied to it. The Exposure Control Plan, annual bloodborne pathogens training, the Hepatitis B vaccine offer, PPE and the hazard communication program all apply regardless of NAICS code or headcount, with no exemption at all.

How often does hazard communication training repeat?

The federal standard sets no annual date. Training is required at initial assignment and again only when a new chemical hazard not previously covered enters that employee's work area. Scheduling it as a yearly refresher, the way bloodborne pathogens training works, isn't what 1910.1200(h)(1) actually requires.

Does this pack decide whether an incident was clinically significant?

No. It logs the incident, whether a post-exposure evaluation was offered, and whether a formal sharps log entry is required given your 1904 status. Whether an exposure warrants prophylaxis or further treatment is a clinical decision for the practitioner, never this pack.

What format are the downloaded files?

Word documents for the Exposure Control Plan, the Hazard Communication Program and the training materials, plus CSV for the four sheets, zipped into one download. They open in Word, Pages, Google Docs, Excel, Numbers and Sheets without a conversion step.

Find out which of your roles actually need which training

Send your roles and what each one does. Both exposure determinations come back separately, and neither one is assumed from the other.

Edit with AI