Biological Hazards in the Workplace: Identification and Controls

Biological hazards — also called biohazards — represent a distinct category of occupational exposure risk governed by a cross-agency regulatory framework in the United States. This page covers the classification of biological agents encountered in workplace settings, the control hierarchy applicable to biohazard exposure, the industries and job functions most frequently implicated, and the regulatory thresholds that determine which standards apply. Understanding the boundaries between biohazard categories is foundational to the broader discipline of hazard identification and assessment that underpins any compliant safety program.

Definition and Scope

Biological hazards in the workplace are living organisms or the products of living organisms — including bacteria, viruses, fungi, parasites, prions, and biological toxins — capable of causing adverse health effects in exposed workers. The occupational health risk is distinct from chemical or physical hazards because biological agents can self-replicate, spread between individuals, and evolve resistance to control measures over time.

The regulatory context for workplace safety for biological hazards is distributed across three primary federal agencies:

• OSHA — enforces the Bloodborne Pathogens Standard (29 CFR 1910.1030) and the General Duty Clause (29 U.S.C. § 654(a)(1)) for biological hazards not covered by a specific standard.
• CDC/NIOSH — publishes biosafety guidance, including the Biosafety in Microbiological and Biomedical Laboratories (BMBL) manual, the authoritative reference for laboratory biosafety level classifications.
• USDA APHIS — regulates select agents and toxins under 7 CFR Part 331 and 9 CFR Part 121, which govern possession and use of agents with significant bioterrorism potential.

OSHA's Bloodborne Pathogens Standard applies specifically to occupational exposure to human blood and other potentially infectious materials (OPIM). Outside that standard, employers rely on the General Duty Clause to address biohazards for which no specific OSHA rule exists — a regulatory gap that makes voluntary CDC and NIOSH guidance operationally significant.

How It Works

Biosafety Level Classification

The CDC and NIH classify biological agents into four Biosafety Levels (BSLs), each requiring progressively more stringent containment practices, safety equipment, and facility design (CDC BMBL, 6th Edition):

1. BSL-1 — Agents not known to consistently cause disease in healthy adults (e.g., Bacillus subtilis). Standard microbiological practices, no specialized containment required.
2. BSL-2 — Moderate-risk agents associated with human disease (e.g., Salmonella spp., hepatitis B virus). Requires limited-access laboratories, biosafety cabinets for aerosol-generating procedures, and decontamination protocols.
3. BSL-3 — Indigenous or exotic agents with potential for serious or lethal disease via respiratory transmission (e.g., Mycobacterium tuberculosis, SARS-CoV-2 variants under some protocols). Requires controlled-access facilities, respiratory protection, and negative-pressure rooms.
4. BSL-4 — Dangerous and exotic agents posing high risk of life-threatening disease with no available vaccine or therapy (e.g., Ebola virus, Marburg virus). Full-pressure suits or Class III biological safety cabinets required.

The Exposure Control Framework

For workplaces covered by OSHA's Bloodborne Pathogens Standard, compliance follows a structured sequence:

1. Exposure determination — Identify all job classifications in which occupational exposure occurs without regard to personal protective equipment use.
2. Exposure Control Plan — Develop a written plan, reviewed and updated at least annually, incorporating engineering controls, work practice controls, and PPE.
3. Engineering controls — Implement sharps with engineered injury protection and needleless systems where feasible.
4. Work practice controls — Prohibit recapping needles by two hands, mandate handwashing after glove removal, and regulate specimen handling.
5. PPE — Provide gloves, gowns, face shields, and respiratory protection appropriate to the anticipated exposure route.
6. Hepatitis B vaccination — Offer at no cost to employees with occupational exposure within 10 working days of initial assignment (29 CFR 1910.1030(f)).
7. Post-exposure evaluation and follow-up — Establish procedures triggered by needlestick or mucous membrane exposure events.
8. Recordkeeping — Maintain sharps injury logs and medical records per OSHA recordkeeping requirements.

This framework aligns with the broader hierarchy of hazard controls, prioritizing elimination and engineering solutions over administrative measures and PPE.

Common Scenarios

Biological hazard exposure is not limited to laboratory or clinical settings. The following industries carry documented elevated risk:

Healthcare and emergency response — Workers face bloodborne pathogen exposure through needlestick injuries, contact with OPIM, and airborne transmission of respiratory pathogens. The healthcare workplace safety environment accounts for a disproportionate share of OSHA bloodborne pathogen enforcement activity. The Bureau of Labor Statistics has documented needlestick and sharps injuries as a persistent occupational injury category in this sector.

Agriculture and animal handling — Workers in livestock operations, veterinary facilities, and meat processing face zoonotic agents — pathogens transmissible from animals to humans — including Brucella spp., Coxiella burnetii (Q fever), and Cryptosporidium. USDA and CDC both publish guidance specific to agricultural zoonosis control.

Wastewater and solid waste management — Occupational contact with sewage, biosolids, and municipal solid waste creates exposure pathways for enteric pathogens, hepatitis A virus, and Leptospira spp. NIOSH has documented this sector in occupational exposure literature.

Research laboratories — BSL-2 through BSL-4 work environments require institution-level biosafety committees, select agent registration where applicable, and personnel training aligned to CDC BMBL protocols.

Building and HVAC maintenance — Cooling tower work and building water system maintenance create Legionella pneumophila exposure risk; the CDC's Water Management Program toolkit and ASHRAE Standard 188-2018 provide the primary control guidance.

Decision Boundaries

Determining which regulatory framework governs a specific biological hazard requires distinguishing between three conditions:

Condition 1: OSHA-specific standard applies. If the hazard involves occupational exposure to blood or OPIM as defined in 29 CFR 1910.1030, the Bloodborne Pathogens Standard governs. This standard applies to employers with at least 1 employee with occupational exposure — there is no minimum employee count threshold that eliminates applicability.

Condition 2: Select agent designation applies. If the biological agent appears on the HHS or USDA Select Agent Program list (42 CFR Part 73), registration with CDC or USDA APHIS is legally required before possession, use, or transfer. This layer of regulation operates independently of OSHA and applies to both research and clinical diagnostic laboratories.

Condition 3: No specific standard applies — General Duty Clause. For biological hazards outside the bloodborne pathogens definition and not addressed by another OSHA standard — such as occupational Legionella exposure or agricultural zoonosis — OSHA relies on Section 5(a)(1) of the OSH Act, which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. In these cases, CDC, NIOSH, and ACGIH guidance documents become the practical standard of care against which OSHA measures employer performance.

A comparison useful in practice: BSL-2 agents (e.g., hepatitis B, HIV) require biosafety cabinets and limited-access controls, but workers may re-enter the facility after decontamination procedures. BSL-3 agents (e.g., M. tuberculosis) require respiratory protection programs meeting 29 CFR 1910.134, directional airflow verified by pressure monitoring, and entry/exit decontamination — a materially different operational requirement. For employers developing or auditing these programs, the personal protective equipment guide and respiratory protection program pages address the PPE layers that intersect with biohazard control.

The full scope of the workplace safety authority framework situates biological hazard control within the broader occupational health compliance structure, alongside chemical, physical, and ergonomic hazard management.