The bloodborne pathogens standard at 29 CFR 1910.1030 is older than most of the tracking software that purports to satisfy it. Funeral home owners often inherit the requirement informally: a previous owner kept Hep B records on a paper card in a folder, and the new owner continues the practice without checking what the standard actually requires. The standard is more specific than a folder of cards, and the consequences of getting it wrong arrive years after the employee has left.
This post walks through the Hepatitis B vaccination workflow under 1910.1030(f), in the context of a small funeral home with embalmers, apprentices, and visitation staff.
Who is covered
The Hep B vaccination requirement applies to every employee with occupational exposure, defined as reasonably anticipated skin, eye, mucous membrane, or parenteral contact with blood or other potentially infectious materials. In a funeral home, that includes:
- Embalmers and apprentices who participate in arterial injection, cavity treatment, aspiration, or any handling of unembalmed remains.
- Removal staff who handle remains before embalming.
- Anyone designated as a first-aid responder for the home, even if their primary role does not involve preparation room work.
It does not include the part-time greeter or the office staff who never enter the preparation room and have no first-aid duties. The exposure determination, conducted as part of the Exposure Control Plan, identifies which positions are covered.
What the standard requires
Three things, in this order:
- Make Hep B vaccination available to every covered employee within ten working days of initial assignment, after the employee has received required training.
- Provide the vaccination at no cost to the employee, at a reasonable time and place, and through a licensed healthcare professional.
- Obtain a signed declination form if the employee declines, and offer the vaccination again if the employee later changes their mind while still in a position with occupational exposure.
The standard does not require the employee to accept vaccination. It requires the employer to offer it, document the offer, and either administer or document the declination.
The declination form
The declination form is not optional and not informal. The exact text is set out in Appendix A of the standard. It includes the acknowledgment that the employee understands the risk of acquiring Hep B from occupational exposure, declines the vaccination at this time, and may receive the vaccination later at no cost if they remain in a position with occupational exposure.
The signed form has to be retained as part of the employee's medical record. A scanned copy is acceptable. A note in the personnel file that says "declined Hep B" is not.
Records you have to keep
For each employee with occupational exposure, the medical record contains:
- Name and identifier.
- Hepatitis B vaccination status, including the dates of all vaccinations.
- Records of all examinations, medical testing, and follow-up procedures.
- Healthcare professional's written opinion (limited to whether vaccination is indicated and whether the employee has received vaccination).
- A copy of the information provided to the healthcare professional.
- Signed declination form if applicable.
These records must be confidential, kept separate from the personnel file, and not disclosed without the employee's written consent except as required by law.
The retention period is the duration of employment plus 30 years, per the access standard at 1910.1020. A funeral home that hires an apprentice in 2026 and parts ways with them in 2029 must retain the medical record until 2059.
The retentionUntil computation, in plain words
The practical implementation in any tracking system, software or paper:
- Each medical record carries a retentionUntil date.
- For an active employee, retentionUntil is open. The record is alive and updated as new vaccinations, titers, or exposure incidents occur.
- On termination, retentionUntil is set to the termination date plus 30 years.
- Until that date, the record is archive-only. No deletes, no overwrites, no purges, regardless of whether the employee left on good or bad terms.
This is why a paper card in a folder is fragile. Folders get reorganized when the office is repainted. Cards get pulled and not refiled. Thirty years is longer than most funeral homes hold any other class of record. The system has to be deliberately built to outlive the operator who created it.
Three places funeral homes get this wrong
In our experience walking through Exposure Control Plans, three patterns recur:
- Vaccination was offered verbally and accepted verbally, but no record was generated. Years later, the employee files a workers' comp claim alleging a needlestick exposure, and there is no documentation of the original Hep B status. The standard treats absence of a record as failure to comply.
- The declination form is the wrong form. Some funeral homes use a generic "I decline benefits" form rather than the specific Appendix A language. The employee did decline, but the documentation does not satisfy the standard.
- The medical record was deleted when the employee left. Sometimes by accident in a database cleanup, sometimes deliberately. Both are violations.
What the workflow should look like
For each new hire with occupational exposure, the system should:
- Trigger the Hep B offer within ten working days of initial assignment.
- Schedule the appointment at no cost to the employee, with a licensed healthcare provider.
- Accept either of two outcomes: vaccination administered (record dates, lot numbers, and provider) or declination signed (use Appendix A wording).
- Allow the employee to revisit the decision later. If a previously declined employee accepts, repeat the offer workflow.
- On termination, lock the record and set retentionUntil to termination date plus 30 years.
The substance of compliance is a record that survives 30 years and can answer a specific question: did we offer Hep B vaccination to this employee, and what was their response. Everything else is plumbing for that one answer.
PrepRoom's medical records subsystem stores these records in encrypted, isolated storage with retention enforced at the database level. Owner-directors see physician opinions, never the underlying medical questionnaire content. The 30-year retention is not a setting that can be changed.