Occupational blood/body-fluid exposure — from first aid at the point of injury through follow-up and systems-level prevention
An occupational exposure to blood or other potentially infectious material (OPIM) — a needlestick, sharps injury, mucous-membrane splash, or non-intact skin contact — starts a race against a narrow clinical window. First aid at the exposure site comes first: wash punctures and cuts with soap and water, flush splashed mucous membranes (eyes, nose, mouth) with copious water or saline. There is no evidence that using caustic agents or squeezing the wound to bleed it further improves outcomes, and both can cause harm. The moment first aid is underway, the worker must report the exposure to a supervisor and to occupational health (or the emergency department after hours) — not at the end of the shift, not the next morning.
The immediate physical response is simple and should be reflexive:
• Percutaneous injury (needlestick, sharps cut): wash the area promptly with soap and running water. Do not squeeze or "milk" the wound — there is no evidence this reduces transmission risk and it can traumatize tissue further. • Mucous membrane splash (eyes, nose, mouth): irrigate for several minutes with water, saline, or sterile irrigant. Eyewash stations should be used when available. • Non-intact skin contact: wash thoroughly with soap and water. • Do not apply bleach, antiseptics, or other caustic agents to the wound — these are not shown to reduce infection risk and can damage tissue, potentially increasing local absorption.
First aid is necessary but not sufficient — it does not substitute for clinical evaluation and does not by itself constitute reporting.
Reporting immediately — to a direct supervisor and to occupational health or the treating clinician — matters for several converging reasons:
• Prophylaxis timing: when post-exposure prophylaxis (PEP) is indicated (for example, HIV PEP), effectiveness is time-sensitive. Guidelines describe PEP as most effective when started within hours and generally not recommended after 72 hours. Every hour of delay narrows the clinical option set. • Source patient availability: the source patient (and their consent for testing) is easiest to locate and approach immediately after the event — not after a shift change or discharge. • Contemporaneous facts: details of how the exposure occurred (device type, body site, depth, visible blood) are most accurately captured right away, which matters for both clinical risk assessment and later documentation. • Legal and workers' compensation timelines: many jurisdictions and employer policies set short windows for reporting an injury to preserve workers' compensation eligibility.
Delayed reporting does not just complicate paperwork — it can materially change what clinical options remain available to the exposed worker.
A commonly cited clinical rule of thumb: initiate indicated PEP within 2 hours if possible, and no later than 72 hours after exposure. The reporting step is what starts that clock — every stage downstream (evaluation, prophylaxis, testing) depends on the worker reporting without delay.
Underreporting of occupational exposures is a persistent, well-documented problem. Commonly cited barriers include:
• Perceived low risk ("the patient looked healthy," "it was just a scratch") • Time pressure — reporting mid-shift feels disruptive to patient care • Fear of blame, stigma, or perceived career consequences • Uncertainty about the reporting process itself — who to call, which form, which department • Prior negative experiences with slow or dismissive occupational health response
Institutions address this by making the first reporting step as frictionless as possible: a single known phone number or hotline staffed around the clock, clear signage at the point of care, and a culture that treats prompt reporting as a safety behavior to be reinforced — not a lapse to be judged.
Once reported, the exposure is triaged by occupational health or an emergency clinician. The evaluation has one central purpose: characterize the exposure precisely enough to make a risk-based decision about prophylaxis, testing, and follow-up — without over-treating low-risk contacts or under-treating higher-risk ones.
The clinician systematically documents the variables that drive the risk assessment:
• Route: percutaneous (needlestick/sharps), mucous membrane splash, or contact with non-intact skin • Device and depth: solid vs. hollow-bore needle, visible blood on the device, depth of injury — hollow-bore needles used in a source vein or artery carry higher risk than a solid suture needle • Volume: a visible large-volume exposure (e.g., blood splash to the eye) is treated differently than a superficial scratch • Fluid type: blood and visibly bloody fluids carry known risk; some body fluids (urine, saliva, sweat, tears) are generally considered low- or non-risk for bloodborne pathogens unless visibly bloody • Worker's baseline status: prior hepatitis B vaccination and known immune response, baseline HIV/HCV status if known, pregnancy status where relevant to drug selection
Based on exposure characterization and available source information, the evaluating clinician follows a structured pathway (institutional protocols typically mirror CDC-aligned guidance):
• HIV: risk-stratified decision on starting a PEP regimen (typically a multi-drug antiretroviral course) as soon as possible when source status is unknown-but-high-risk or known-positive; regimen may be stopped early if source testing later returns negative. • Hepatitis B: managed by the worker's vaccination and known immune (anti-HBs) status — a fully vaccinated, documented responder generally needs no further intervention; others may need hepatitis B immune globulin (HBIG) and/or vaccine series initiation or booster. • Hepatitis C: no approved post-exposure prophylaxis exists; management is baseline and follow-up testing to detect and treat early infection if it occurs, since modern direct-acting antivirals are highly effective once diagnosed.
This evaluation is what distinguishes a precision response from a reflexive one — most reported exposures, once evaluated, do not warrant the most intensive intervention, and the evaluation step is what prevents both under- and over-treatment.
The evaluation pathway exists to be started fast and adjusted later: PEP can be initiated pending source testing results and safely discontinued if the source is subsequently confirmed negative — the clinical default favors not losing time while the fuller picture is assembled.
Alongside the risk assessment, baseline laboratory testing of the exposed worker is typically obtained (with consent) to establish a pre-exposure reference point: baseline HIV, hepatitis B, and hepatitis C status. This baseline is essential context for interpreting any later follow-up test result — without it, a positive result at follow-up cannot be confidently attributed to this specific exposure versus a pre-existing, previously undiagnosed infection.
When the source of the exposure is a known, identifiable patient, that patient's testing status is often the single most decision-relevant piece of information available — it can allow PEP to be safely stopped, or confirm it should continue. Obtaining it requires navigating consent and privacy requirements carefully, even under time pressure.
The source patient (if identifiable and available) is approached — typically by a clinician not directly involved in providing the source patient's own care, to avoid conflicts — and asked to consent to bloodborne pathogen testing specifically for the purpose of informing the exposed worker's management. Most jurisdictions and institutional policies require this to be a distinct, documented consent process; testing without appropriate consent (except where law specifically permits emergency testing) is not appropriate even in urgent circumstances.
Where the source patient cannot consent (e.g., incapacitated, deceased) or cannot be identified (e.g., a needle found in shared waste, a community-acquired exposure), institutional and jurisdictional policy governs what alternative pathways — if any — exist, and the exposed worker's management proceeds on a risk-based assumption using available epidemiological information.
Source patient test results are protected health information and are shared only as narrowly as needed to guide the exposed worker's clinical management — typically communicated to the treating occupational health clinician, not directly to the exposed worker's broader care team or personal file, and not to the exposed worker's employer in identifiable form. The exposed worker is informed of the clinically relevant result (e.g., "source tested negative for HIV") without unnecessary disclosure of the source patient's identity or unrelated health information.
This privacy boundary is not a bureaucratic obstacle — it is what allows source patients to be tested rapidly and cooperatively in the first place, and it is legally and ethically required independent of how urgent the exposed worker's situation feels.
Rapid point-of-care HIV testing can return a result in roughly 20–30 minutes, which is often fast enough to directly influence whether PEP is continued at the very first evaluation visit — but only if consent and testing are coordinated immediately, in parallel with the worker's own evaluation, not sequentially after it.
A meaningful fraction of exposures involve a source that is unknown, unavailable, or unable to consent. In these cases, management defaults to treating the exposure according to the highest clinically plausible risk consistent with the exposure circumstances and local epidemiology, since the absence of source information cannot be resolved by waiting — and the reporting and evaluation steps already completed remain fully valid regardless of whether source testing is ultimately obtainable.
Every occupational exposure generates a formal, written incident record — distinct from the clinical chart. This documentation step is not paperwork for its own sake: it is the legal and administrative record that supports the worker's workers' compensation claim, satisfies regulatory recordkeeping obligations, and supplies the raw data that later becomes aggregate prevention analysis.
A complete occupational exposure incident report typically documents:
• Date, time, and location of the exposure • Job title/role and task being performed at the time • Device or material involved (type, brand if a device malfunction is suspected) • Body site and depth/severity of the injury • Personal protective equipment (PPE) in use at the time, and whether it was appropriately used • Circumstances — what was happening immediately before the exposure occurred • Whether a safety-engineered device (e.g., a needle with a passive safety mechanism) was available and whether it was activated • Source patient information (as permitted), and outcomes of the clinical evaluation • Actions taken: first aid, reporting time, evaluation, prophylaxis if any
This is deliberately more granular than a bare clinical note, because it is designed to answer both "was this worker cared for appropriately" and "could this specific incident have been prevented."
For the exposed worker, the incident report is frequently the foundational evidence for a workers' compensation claim — establishing that an injury occurred in the course of employment, when, and under what circumstances. Gaps or delays in documentation can complicate a legitimate claim later, particularly if a health consequence (such as a seroconversion) is identified only after follow-up testing, months after the original event. Complete, contemporaneous documentation protects the worker's access to compensation and benefits regardless of whether any adverse outcome ultimately occurs.
Regulatory frameworks in many countries require employers to maintain a sharps injury log or equivalent recordkeeping — capturing device type and circumstances for every percutaneous injury — specifically so that patterns (a particular device, unit, or task generating repeated injuries) can be identified and addressed, not just so that individual incidents are filed away.
Each completed incident report is entered into an institutional log or database. Individually, it closes out one worker's case administratively. Collectively, across many incidents over time, these records become the dataset that feeds the final stage of the workflow — systems-level review. Incomplete or inconsistent documentation at this stage directly degrades the quality of that downstream prevention analysis, which is one more reason documentation completeness is tracked as its own compliance metric rather than treated as automatically satisfied once a worker has been clinically evaluated.
The workflow does not end when the incident report is filed. Two parallel tracks continue: individualized clinical follow-up for the exposed worker over the following weeks to months, and a separate, aggregate review of incident data across the institution to find systemic opportunities to prevent the next exposure before it happens.
The exposed worker is scheduled for follow-up bloodwork at defined intervals (protocol-dependent, commonly at baseline, 6 weeks, 3 months, and up to 6 months for certain exposures) to detect seroconversion should it occur, along with counseling on interim precautions, medication side-effect monitoring for anyone on a PEP course, and psychological support — an occupational exposure, even a low-risk one, is frequently a significant source of anxiety for the worker, and follow-up visits are also the venue for addressing that.
Early detection matters clinically: for hepatitis C in particular, where no prophylaxis exists, early identification of infection through follow-up testing is what enables prompt treatment with highly effective direct-acting antivirals, often before chronic liver disease can develop.
Separately from any individual worker's care, institutions periodically review the accumulated incident documentation (Stage 4's output) in aggregate — typically through a safety or infection-control committee — to answer questions no single incident report can answer alone:
• Are exposures clustering around a particular device, unit, procedure, or shift? • Are safety-engineered devices being consistently used where available, and where are they not? • Are certain roles or training cohorts overrepresented? • Did a change in staffing, workload, or a new device introduction correlate with a change in incident rate?
This analysis is what allows an institution to move from reactive case-by-case response to proactive prevention.
The Needlestick Safety and Prevention Act (US, 2000) mandated the use of safety-engineered sharps devices and involvement of frontline workers in device selection — a direct legislative response to aggregate injury data showing that a large share of sharps injuries were preventable with better device design. Institutions report substantial reductions in percutaneous injury rates following consistent adoption of such devices, illustrating exactly why every individual incident report is also a contribution to the next round of systems-level prevention.
Findings from aggregate review are meant to travel back to the point of care: updated device standards, revised protocols, targeted retraining, or engineering controls. A workflow that stops at documentation, without feeding forward into prevention, only ever manages the consequences of exposures — the systems-improvement step is what allows the same institution to reduce how often Stage 1 has to happen at all.