Safety and Compliance on the NHA CPT: OSHA's Bloodborne Pathogens Standard, Needlesticks, PPE and HIPAA

Safety and Compliance has 26 of the 100 scored items on the NHA CPT, but its 14 tasks are mostly rules rather than techniques, and NHA's test plan names the laws and bodies behind them: OSHA, NIOSH, The Joint Commission, CLSI, CDC and HIPAA. Questions in this domain usually describe a situation and ask for the required action, so knowing the exact rule beats knowing the general idea.

OSHA's bloodborne pathogens standard in NHA CPT questions

The standard is 29 CFR 1910.1030, and task 1G and knowledge statement k31 name it directly. Its definitions come up in questions too:

• Occupational exposure: reasonably anticipated skin, eye, mucous membrane or parenteral contact with blood or other potentially infectious materials in the course of the job
• Exposure incident: a specific eye, mouth, other mucous membrane, non-intact skin or parenteral contact with blood or other potentially infectious materials from the job
• Universal precautions: treating all human blood and certain body fluids as if known to be infectious for HIV, HBV and other bloodborne pathogens
• Engineering controls: controls that isolate or remove the hazard, such as sharps containers, self-sheathing needles and safer medical devices

The requirements phlebotomy questions turn on:

WHO's guidelines on drawing blood add the practice behind the sharps rules: discard the needle and tube holder together as a single unit, immediately, into a sharps container that is clearly visible and within arm's reach. When an exam question offers a choice between a fast shortcut and the rule, these tables are the tiebreaker, and planned explanations cite rules such as OSHA's sharps standard for NHA CPT safety questions.

The Needlestick Safety and Prevention Act (k12)

Core Knowledge statement k12 names this 2000 law, Public Law 106-430, which told OSHA to revise the bloodborne pathogens standard. It made four changes:

1. Safer devices count as engineering controls. It added "sharps with engineered sharps injury protections" (a needle or non-needle sharp with a built-in safety feature that effectively reduces exposure risk) and "needleless systems" to the standard's definitions.
2. Exposure control plans must keep up with technology. The annual review must reflect changes in technology and document consideration and implementation of appropriate, commercially available safer medical devices.
3. A sharps injury log. Employers who must keep OSHA injury logs also keep a confidential log of each percutaneous injury from a contaminated sharp, recording at least the type and brand of device, the department or work area, and how it happened.
4. Frontline input. Employers must ask non-managerial employees who do direct patient care for input on choosing engineering and work practice controls, and document that they asked.

After a needlestick or splash: exposure steps (task 1H)

CDC's NIOSH page on bloodborne infectious disease risks gives the immediate steps:

CDC names HIV, hepatitis B and hepatitis C as three of the most common bloodborne pathogens. After a report, OSHA requires the employer to make a confidential medical evaluation and follow-up available immediately, at no cost, including documentation of the route and circumstances of the exposure, identification of the source individual unless that's infeasible or prohibited by law, and testing of the source's blood when consent is obtained or isn't legally required. Knowledge statement k33 adds the exposure protocols a facility keeps ready: eye washing, hand washing, showers, notification, and needlestick reporting.

Hand hygiene and PPE (tasks 1J and 1K)

CDC's hand hygiene page for healthcare workers sets the rules:

• Which product. Alcohol-based hand sanitizer is preferred in most clinical situations unless hands are visibly soiled. Use soap and water when hands are visibly soiled, before eating, after using the restroom, and during C. difficile or norovirus outbreaks when caring for infected patients.
• When. Immediately before touching a patient; before aseptic tasks; when moving from a soiled body site to a clean one; after touching a patient or their surroundings; after contact with blood, body fluids or contaminated surfaces; and immediately after removing gloves.
• How. Sanitizer with at least 60% alcohol, rubbed over all surfaces until dry, about 20 seconds; soap and water rubbed vigorously for at least 15 seconds (CDC says 20 seconds is also acceptable).

PPE choices follow the task: OSHA requires gloves for vascular access procedures and whenever hand contact with blood is anticipated, and masks with eye protection or face shields whenever splashes or droplets are likely. WHO's phlebotomy steps put hand hygiene before gloves and again after removing them.

Transmission-based precautions (task 1I)

CDC's transmission-based precautions are used in addition to standard precautions:

For tubes and supplies that move from room to room, the contact-precautions rule on dedicated or disinfected equipment is the one to remember. For quick recall of tables like these, the 117 Safety and Compliance flashcards planned for NHA CPT prep cover this domain at launch.

Blood spills and biohazard waste (task 1G and k32)

OSHA defines regulated waste as liquid or semi-liquid blood or other potentially infectious materials, items that would release them if compressed, items caked with dried blood that could release it, contaminated sharps, and certain pathological and microbiological wastes. WHO's guidance on the phlebotomy area:

• Waste sorting. Items that wouldn't release a drop of blood if squeezed, such as used gloves, may go in general waste unless local rules say otherwise; sharps and broken glass go in the sharps container, and items that can drip blood go in infectious waste.
• Spill cleanup. Put on gloves (and a gown or apron for a large spill), soak up liquid with paper towels into infectious waste, remove as much blood as possible with wet cloths, then disinfect. For surfaces that tolerate it, WHO's preferred solution for large spills is a 1:10 dilution of 5.25% bleach, left wet for 10 minutes; a weaker 1:100 dilution with longer contact suits surfaces that bleach would damage. Mix the solution fresh daily.

Your facility's approved disinfectant and spill kit take precedence; the exam tests the sequence (protect yourself, contain and remove, then disinfect).

HIPAA and protected health information (task 1C)

HIPAA's definitions are in 45 CFR 160.103. Protected health information is individually identifiable health information that is transmitted or maintained in any form or medium, electronic or not, with a few exclusions such as employment records a covered entity holds as an employer. The rule most questions test is the minimum necessary standard in 45 CFR 164.502(b): when using or disclosing PHI, or requesting it, a covered entity must make reasonable efforts to limit it to the minimum necessary for the purpose. The standard doesn't apply to disclosures to a health care provider for treatment or to the patient themselves.

In phlebotomy terms, that means looking at only the parts of the record your task needs, and not sharing a patient's information with a coworker who has no role in that patient's care. Task 2E also asks you to identify patients "while following HIPAA guidelines," which the NHA CPT patient preparation guide covers.

Quality control and CLIA-waived tests (tasks 1E and 1F)

Task 1E covers equipment logs, troubleshooting and refrigerator and freezer temperature monitoring; task 1F covers calibration, controls and storage controls for point-of-care and CLIA-waived tests. The federal anchor is 42 CFR 493.15: a laboratory with a certificate of waiver must follow the manufacturer's instructions for performing each test. Knowledge statement k27 adds manufacturer recommendations for routine maintenance and calibration, and k28 covers logs, reference ranges and troubleshooting. WHO's infection-control point applies here too: shared devices such as glucometers must be visibly clean before use on each patient. What happens when a point-of-care result is critical is in the NHA CPT specimen processing guide.

Ethics, scope of practice and emergencies (tasks 1D, 1L, 1M, 1N)

Knowledge statement k26 names the NHA code of ethics. NHA's Candidate Handbook lists the duties of an NHA-certified professional, among them upholding professionalism and honesty, continuing to learn, acting in the best interests of the public, and protecting and respecting "the dignity, privacy and safety of all patients."

Scope of practice depends on where you work. WHO, for instance, limits arterial blood sampling to health workers whose legal scope of practice includes it and who have shown proficiency after formal training, and several states set their own phlebotomy credential, as the overview of the NHA CPT explains. Emergencies (1L) and first aid (1M) cover CPR, codes, wound care and excessive bleeding, and k37 adds falls, fainting and hypo- or hyperglycemia; fainting during a draw is covered in the venipuncture guide. For CPR technique, follow your current CPR course. Task 1N closes the domain: document and report patient-related incidents, as the sharps injury log does for needlesticks.

Three Passy examples on safety and compliance

These are original Passy practice items, not NHA questions.

Example 1: a splash to the eye

While a phlebotomist uncaps a tube, blood splashes into her eye. She wasn't wearing eye protection. What should she do first?

• A. Irrigate the eye with clean water, saline or sterile irrigant
• B. Finish labeling the tubes, then report the splash to a supervisor
• C. Wipe the eye with an alcohol pad to disinfect the surface
• D. Wait to see whether redness develops before reporting it

Answer: A. CDC's first step for an eye splash is irrigation with clean water, saline or sterile irrigants, followed by reporting and immediate medical care. B and D delay both, and C has no place in CDC's steps.

Example 2: a crowded sharps container

At the start of a shift, the sharps container in a draw station is filled to the point that devices sit at the opening. What is the correct action?

• A. Close it and replace it with an empty container before drawing
• B. Press the contents down with a gloved hand to make more room
• C. Keep using it but drop devices in slowly so nothing sticks out
• D. Lay used needles on the tray until the container is emptied

Answer: A. OSHA requires sharps containers to be replaced routinely, not allowed to overfill, and closed before they're moved. B puts a hand into contaminated sharps, C overfills the container, and D leaves sharps outside a container when OSHA says to discard them immediately.

Example 3: a curious coworker

A coworker from another unit asks a phlebotomist what tests were ordered for a patient both of them know. The coworker isn't involved in the patient's care. What should she do?

• A. Decline, because the coworker has no role in the patient's care
• B. Share the tests but not the results, since orders aren't private
• C. Share the information if the coworker promises to keep it quiet
• D. Show the requisition so the coworker can read it for themselves

Answer: A. Test orders tied to a named patient are protected health information, and HIPAA's minimum necessary standard limits uses and disclosures to what a purpose requires; this one has no treatment purpose. B, C and D each disclose PHI anyway.

To see whether these rules hold up under time pressure, planned NHA CPT Progress tracking shows your Safety and Compliance accuracy beside the other four domains.

Your next step for NHA CPT safety questions

Learn the OSHA table first; it covers more scored items than anything else in this guide. Then walk through one needlestick and one eye splash in order, out loud, and finish with the three isolation types. The 20 free NHA phlebotomy practice questions include safety items, and the NHA CPT test plan guide lists every task in this domain.