Lesson 5: Exposure Incidents, Training and the Records

It is 4:40 on a Friday. The last patient left twenty minutes ago, an assistant is breaking down operatory two, and a needle that should have gone into the sharps container an hour earlier is sitting under a piece of gauze on the tray. She feels it before she sees it. Here is what happens next in a great many dental offices: she says a word she would not say in front of a patient, runs her thumb under the tap, decides it probably did not break the skin, and finishes the room. Nobody else in the building ever hears about it.

That is the failure this lesson exists to prevent, and almost none of the fix is medical. It is procedural. Somebody has to know what to do, there has to be a real place to go, the paperwork has to already exist, and the practice has to have made it obvious that reporting is expected rather than embarrassing. This lesson covers the first twenty minutes, the employer's side of the evaluation process, the sharps injury log, how training gets documented, and which records get requested first when someone official comes asking.

The First Twenty Minutes

Write this sequence on one page, post it where it can be read without unlocking anything, and walk your team through it once a year.

1. Stop working. The procedure is over for that person. Someone else finishes the room.
2. Immediate first aid as your plan specifies. Your exposure control plan, written with clinical input, states what the first steps are for a percutaneous injury and for a splash to eyes, nose or mouth. Follow your plan rather than improvising, and make sure the plan itself was written by someone qualified.
3. Tell someone now. Not once the day is over, not on Monday. This step fails most often, and it fails for social reasons rather than practical ones. An employee who believes reporting will cause a scene or earn a lecture about technique will not report. That is a management problem with a compliance consequence.
4. Write down the facts while they are fresh. Time, room, task, the device involved including brand and type if known, how it happened, what protective equipment was in use, the route of exposure, and who witnessed it. Five minutes now saves a reconstruction later.
5. The source patient conversation belongs to the dentist, not the injured employee and not the front desk. What may be asked, what may be tested and what consent is required are governed by state law and vary considerably. Get that script written in advance by your attorney, not improvised in a hallway.
6. Get the employee to the designated evaluating professional. Now, not tomorrow. Someone drives them or makes the call. The employer pays.
7. Document that the offer was made and accepted or declined, and keep that documentation confidentially.

Notice what is not on that list: any decision about what happens medically. That is the point. The office's job is speed, accuracy and confidentiality. Everything else belongs to the professional doing the evaluation.

Why the Plan Has to Name a Real Place

The most common defect in a dental exposure control plan is a post exposure procedure that describes a process in general terms and names nobody. A plan that says "the employee will be referred to a qualified healthcare professional" is useless at 4:40 on a Friday.

What a working procedure contains:

• A named provider or clinic that has agreed in advance to take your exposure evaluations. Occupational health clinics are the usual answer. Confirm they will do it before you write them down.
• The address and the phone number, written out, not stored in someone's contacts.
• Hours, and the after hours answer. Most exposures happen late in the day, and a plan that only works from nine to five works less than half the time.
• How billing is handled. The employee pays nothing. Settle in advance that the provider bills you directly, and tell the team, so nobody is standing at a counter with a copay question during the worst twenty minutes of their month.
• Who in the practice makes the call, and who does it when that person is out.

The Evaluation, and What the Employer Owes

The employer's obligations here are procedural and they are specific. In outline, a post exposure evaluation and follow up must be made available immediately, be confidential, and cost the employee nothing.

The practice also has to give the evaluating healthcare professional the information they need to do the evaluation. In shape, that package includes a copy of the standard itself, a description of the exposed employee's duties as they relate to the incident, documentation of the route and circumstances of the exposure, source individual test results where available and where law permits sharing them, and any relevant employee medical records the employer holds, including vaccination status. Assemble that package as part of your plan rather than scrambling for it on the day.

What comes back to the employer is narrow by design: a written opinion limited to whether vaccination is indicated and whether the employee received it, plus confirmation that the employee was informed of the evaluation results and of any condition requiring further evaluation or treatment. Everything else stays between the employee and the professional. That limit is deliberate and it protects the employee, so treat it as a boundary rather than an inconvenience.

Say this plainly to your team, because it removes a real barrier to reporting: the practice does not learn the employee's test results. An owner who casually asks is stepping over a line, and an employee who fears that question may not report at all.

The Sharps Injury Log and the Reporting Question

A sharps injury log is a simple instrument with a specific purpose. In shape it records, for each contaminated sharps injury, the type and brand of device involved, the department or work area where the incident occurred, and an explanation of how it happened. It is kept in a way that protects the injured employee's confidentiality, which in a four person office takes some thought.

Now the nuance that catches dental practices. The obligation to maintain a sharps injury log is tied to the broader injury and illness recordkeeping rules, and those rules carve out partial exemptions by industry classification and employer size. Whether your practice is required to keep those records, and therefore the log, depends on your classification, your headcount and your state, and a state plan can require more than the federal baseline. Do not assume in either direction and do not take a vendor's word for it. Confirm it, starting from our state resource pages.

Two things are worth saying regardless of how that question comes out.

Keep a log anyway. It is the only way you will ever notice that the same device, the same procedure or the same room is producing injuries. That pattern is invisible in memory and obvious on one page. It also feeds directly into the safer device evaluation from Lesson 2.

Serious events get reported regardless of any recordkeeping exemption. Work related fatalities, inpatient hospitalizations, amputations and loss of an eye carry reporting obligations with short deadlines set by regulation. Find out the current categories, the current timeframes and the current reporting channel for your jurisdiction now, and write them on the same page as your post exposure procedure, because that information is useless if you have to research it during the event.

One more thing belongs here. Retaliating against an employee for reporting an injury is prohibited, and the prohibition reaches further than most owners expect. Policies that discipline people for reporting, or incentives that reward a team for going without reported injuries, can have the effect of discouraging reporting, and that effect is the problem. If your practice has a bonus tied to an injury free record, look at it again and reward the behavior you actually want: fast reporting and closed out corrections.

Training: Content, Frequency, and Proof

Training is where practices most often do the work and fail to get credit for it, because the session happened and the record did not.

The requirements, in shape. Bloodborne pathogens training happens at initial assignment to tasks with occupational exposure, before the employee is exposed, and then on a recurring cycle set by the standard. Additional training is required when new tasks or procedures change exposure. Hazard communication training is separate, and it is required at initial assignment and whenever a new chemical hazard is introduced. Confirm the actual intervals in the regulation for your jurisdiction rather than relying on a remembered number.

Three quality requirements matter more than the calendar:

• It has to be interactive, with an opportunity for employees to ask questions and get answers. A video played in a break room with nobody available to answer anything does not meet that on its own.
• It has to be delivered by someone knowledgeable in the subject matter as it applies to your workplace.
• It has to cover your practice specifically: your exposure control plan and how to get a copy, your controls, your devices, your post exposure procedure, your chemicals. Generic content plus a practice specific supplement is a reasonable structure. Generic content alone is not.

The content, broadly: the standard and where to read it, the diseases and how they are transmitted, your exposure control plan, the controls and protective equipment in use, hepatitis B vaccination, what to do if an exposure happens, the post exposure procedure, and the meaning of labels and signs.

What a training record has to show

A record that will actually hold up shows the date, a summary of the contents, the name and qualifications of the person who delivered it, and the names and job titles of everyone who attended. A sign in sheet with a date and nothing else is the most common version and the weakest one. Build a one page form that captures all four and use it every time.

Two practical traps. New hires arriving mid year need training at assignment, not at the next annual session, and that is exactly the case most likely to slip. Put it on the onboarding checklist alongside the vaccination offer, using something like our staff onboarding plan. And temporary or agency staff need a settled answer about whose training applies before they start, not on their first morning.

The Records, and What Gets Asked For First

The records fall into two families that must be handled differently.

Employee medical records include vaccination status, declinations, exposure incident documentation and the healthcare professional's written opinions. They are confidential, they are kept separate from the personnel file where performance and pay live, they are not disclosed without the employee's written consent except as the standard allows, and they are retained for a long period set by regulation. Look that period up rather than guessing, because it is longer than most people expect and it survives the employee's departure.

Program records include the exposure control plan with its dated reviews, the safer device evaluation and documented employee input, training records, the hazard communication program and chemical inventory, safety data sheets, the PPE hazard assessment, and the sharps injury log where applicable. These are the operational proof that the program exists.

Employees have rights of access to their own records and to the exposure control plan, and those requests should be easy to honor rather than treated as unusual. Practices sometimes conflate this with patient privacy. They are different regimes: employee medical information is governed by employment law and the OSHA standards, not by your patient privacy program, though both demand confidentiality. Our HIPAA breaches and training lesson covers the patient side, and the compliance chapter shows how the pieces fit.

Two situations catch people. Records have to go somewhere when a practice closes or is sold, and the obligation does not evaporate with the entity. Put it on the transition checklist alongside everything in our records retention article. And when a request arrives from an agency or an attorney, decide in advance that the answer is "let me get you that" while you call your own counsel, rather than handing over a file in the moment.

As for what gets asked for first, the pattern is consistent: the exposure control plan and its last review date, training records, the hepatitis B offer and declination file, the post exposure procedure, the chemical inventory and safety data sheets, and the sharps injury log where it applies. Keep those six things current and the rest of an inspection is conversation, which is exactly where Lesson 6 picks up.

THE CHAIRSIDE TAKE

The whole program comes down to the twenty minutes after a stick, and two things decide it: whether somebody knows where to go, and whether the injured person feels safe saying it out loud. Post the one page sheet with a real clinic, a real number and a real after hours answer, then call that number once a year to confirm it is still true. Keep every clinical decision with the evaluating professional and stay out of it, including the results, because an employee who fears the question will not report at all. Then fix your training record form so the work you already do actually counts. The intervals and retention periods here are set by regulation and by your state, so look them up rather than trusting any summary.

Lesson 5 of 6 in OSHA and Workplace Safety for Dental Practices

This guide is educational content and does not constitute legal, financial, tax, or clinical advice. Laws and regulations vary by state and change over time. Consult your own dental-specific attorney, CPA, and state dental board before acting.