OSHA Bloodborne Pathogens Tattoo Studio Guide

What to take away

Why the rule reaches a tattoo studio at all

Tattooing breaks skin. Every session produces blood, used needles, soiled gauze and contaminated tubes. That is occupational exposure, and it puts the studio inside the federal bloodborne pathogens standard.

The rule comes from OSHA. CDC does not issue an enforceable bloodborne pathogens standard for tattoo studios; it publishes guidance. CDC's Guideline for Isolation Precautions: Preventing Transmission of Infectious Agents in Healthcare Settings describes Standard Precautions, which incorporate Universal Precautions. That is healthcare guidance, not a tattoo-studio regulation. The Bloodborne Pathogens overview carries the scope and the definitions.

Coverage turns on whether employees have occupational exposure. It does not turn on headcount, revenue or whether the shop is a sole proprietorship. A one-chair studio with one employee is covered.

Guest artists complicate the picture. If a studio treats them as self-employed, the studio still controls the premises, the sharps containers and the cleanup. It should be able to show the controls it applies to everyone in the building.

Your tattoo studio compliance checklist should mark which duties fall on the studio and which fall on the contract artist.

State and county rules stack on top. Texas DSHS and the Washington Department of Health license tattoo establishments, and county health departments including LA County and Maricopa County issue body-art permits with their own inspection schedules. Federal compliance does not replace those permits.

What the exposure control plan has to contain

The plan is written, site specific and reachable during a shift. A copy in an owner's home office does not count.

The full text sits in 29 CFR 1910.1030. Read the plan requirements and the training requirements together, because the plan is what training is measured against.

At minimum the plan names the tasks and procedures where exposure can occur, the person responsible, the methods of compliance, the hepatitis B vaccination program and the post-exposure procedure.

It also states how the plan itself gets reviewed. OSHA expects review and update at least annually, and whenever tasks, procedures or job classifications change. A second station or a new procedure triggers an update.

As part of the annual review, document consideration and implementation of appropriate, commercially available, effective safer medical devices where applicable. OSHA also requires engineering controls, including sharps containers, to eliminate or minimize exposure.

Write it in the studio's own words. A downloaded template carrying another shop's job titles, layout and waste hauler is evidence the plan does not describe this workplace.

What belongs in the plan

After an exposure, arrange an immediate, confidential medical evaluation and follow-up. Document the route and circumstances, identify and test the source individual's blood when feasible and legally permitted, and make the exposed employee's testing, post-exposure prophylaxis as medically indicated, counseling and follow-up available under the standard.

Maintain a sharps injury log for percutaneous injuries from contaminated sharps. Record the device type and brand, work area, and how the incident occurred, while protecting employee confidentiality.

Sharps handling and container rules

Sharps rules are short and shops still fail them. Needles are never recapped, sheared, bent or broken by hand. A used needle goes into the container at the point of use.

Containers must be closable, puncture resistant, leakproof on the sides and bottom, and labeled or color coded. They stay upright, within reach of the work area, and are replaced before they are full.

For regulated-waste labels, OSHA specifies fluorescent orange or orange-red with contrasting lettering or symbols. Red bags or containers may be used instead of labels.

Do not overfill to save money. A container packed past the fill line is a needlestick waiting to happen, and an inspector can see it from the doorway.

Gauze, gloves and other soft waste go in the regular trash unless state or county rules are stricter. Some states classify tattoo waste as regulated medical waste, so check the hauler's requirements alongside the federal rule.

Disposal runs through a licensed medical waste contractor, with manifests you keep. When a county inspector asks who takes your sharps, you should be able to name the company and produce the last pickup record.

Your tattoo studio equipment checklist should list sharps containers, secondary spill kits and waste pickup supplies next to machines and power units. Those are operating supplies, not extras.

Training records and hepatitis B vaccination

Training happens at initial assignment and at least annually after that. It covers transmission, the exposure control plan, PPE, sharps handling and what to do after an exposure.

Records are the part shops miss. Keep a training log with the date, the trainer's name and qualifications, and a summary of the content. Keep it three years from the training date.

Medical records are separate and longer. They stay confidential, run for the duration of employment plus 30 years, and do not belong in the same folder as the appointment book.

Hepatitis B vaccination is offered within 10 working days of initial assignment, at no cost, to every employee with occupational exposure. Anyone who declines signs a declination form and can still request the series later.

Apprentices and part-time front desk staff who clean stations usually count as exposed. If someone touches contaminated instruments or surfaces, offer the vaccine and log the offer.

Build the training side of your tattoo studio quality control around those records, so the roster, the content summary and the vaccination offers live in one place.

A worked example: the annual training file

Inspection triggers and enforcement context

Most tattoo studio inspections are not random. OSHA opens them after a complaint, a referral from another agency, a fatality or catastrophe report, or a programmed inspection of a targeted industry.

A complaint from a former employee is the most common route into a small shop. The complaint does not have to be correct to trigger a visit, and the inspector can widen the scope once on site.

A citation can require the studio to correct hazards and document its response. Keep the plan, records and work practices current so you can show how the shop controls exposure.

State plan states run their own programs. California, Washington and Oregon enforce their own bloodborne pathogens rules, which can be stricter than the federal version. A shop in Portland or Los Angeles answers to a state agency, not only to federal OSHA.

Inspectors ask for the exposure control plan, training records, vaccination offers, sharps container condition and the waste manifest. Those five should be retrievable in under five minutes.

FDA ink and pigment guidance

OSHA covers the worker. FDA covers the product. Tattoo inks and pigments are regulated as cosmetics, and the agency has warned about contaminated inks, unsterile practices and pigments not cleared for cosmetic injection.

FDA has recalled specific ink products linked to infection, and advises artists to check labels, avoid inks labeled for other uses, and report reactions through its problem reporting system.

Labels matter for the studio's own file. Log ink brands, lot numbers and suppliers so a recall notice can be matched to product in the drawer the same day.

Once a bottle is open, contamination comes from the environment and from reuse. Do not top up bottles, do not share ink between artists, and do not pour leftover ink back.

FDA does not license individual artists and does not approve studios. Licensing runs through state health departments and county permits, which is why tattoo studio licensing requirements belong in the same binder as the federal material.

Hazard communication and PPE

Bloodborne pathogens is one hazard. Chemicals are another. Gloves, green soap, disinfectants, stencil products and pigments all bring labeling and safety data sheet duties under the hazard communication standard.

The Hazard Communication overview sets out the requirement: a written program, a chemical inventory, labels that stay legible, and safety data sheets available to workers on every shift.

Safety data sheets arrive by email and vanish into inboxes. Print them or keep them in a binder at the front desk, and update them when products change.

PPE is practical. Gloves for every procedure, eye protection where splatter is possible, and a mask or face shield when the task calls for it. The Personal Protective Equipment overview covers the employer's duty to provide it at no cost.

Gloves are single use. Change them between clients, after touching a phone or door handle, and immediately when torn. Hand hygiene happens at a sink before gloving and after removal, not with a squirt of sanitizer.

Write the day's sequence into your tattoo studio sop checklist so setup, service and teardown each name the PPE and the cleaning step that follows.

Building a binder that survives an inspection

A binder is not the law. It is the fastest way to prove you meet it. Organize it by the document an inspector names, not by the year you created it.

Start with the exposure control plan, current version, signed and dated. Then training records, vaccination offers and declinations, then waste manifests, then safety data sheets, then equipment and permit paperwork.

Keep a one-page index at the front. An inspector who finds the plan in thirty seconds spends less time looking for other things.

Review the binder quarterly. Update it when you hire, when products change, when a station moves, and when a state or county rule changes.

Store medical records separately and confidentially. Training logs can sit in the open binder. Vaccination and exposure records cannot.

Quarterly self-audit steps

Common questions

Does OSHA apply to a tattoo studio with no employees?

If the owner is the only worker and no employee has occupational exposure, the employee-facing duties do not attach. The moment you hire anyone who can be exposed, the standard applies to that person.

How long do we keep bloodborne pathogens training records?

Three years from the date of training. Medical records, including vaccination status and post-exposure documentation, run for the duration of employment plus 30 years.

Can we use a generic exposure control plan template?

You can start from one, but it has to be edited to match your layout, job classifications, tasks and waste contractor. An unedited template is easy to spot and hard to defend.

Do we need to offer hepatitis B vaccination to guest artists?

Offer it to anyone the studio treats as an employee with occupational exposure. For genuine independent contractors, document who carries the duty and keep the studio's own controls in place. Confirm the classification question with the IRS and a licensed attorney or CPA, and confirm vaccination and post-exposure procedure with the artist's physician and your local health authority.