A needlestick or sharps injury is one of the few lab safety events where what happens in the first hour genuinely changes the medical outcome. HIV post-exposure prophylaxis (PEP) is most effective the sooner it starts, and both the wound-care steps and the reporting sequence are simple enough to post on a wall — but only if they’re accurate and someone actually follows them under stress. This guide covers what current CDC and OSHA guidance recommends for the first hour after a percutaneous or mucous-membrane exposure to blood or other potentially infectious materials (OPIM) in a lab setting, what OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030) requires from the employer side, and what a postable first-hour protocol should actually contain.
This is general guidance, not a substitute for your institution’s written Exposure Control Plan or the direction of your occupational health service. Every covered employer is required to have an institution-specific plan; follow that plan and the treating clinician’s direction over any generic guide, including this one.
What Counts as a Needlestick or Sharps Injury
OSHA’s Bloodborne Pathogens Standard governs any occupational exposure to blood or OPIM, which covers two distinct injury types that call for the same urgent response:
- Percutaneous injury — a needle, scalpel, broken glass, capillary tube, or other sharp object contaminated with blood or OPIM breaks the skin.
- Mucous-membrane or non-intact-skin exposure — a splash or spray of blood or OPIM contacts the eyes, nose, mouth, or broken/damaged skin, with no puncture involved.
OPIM includes human blood, blood products, and a defined list of other body fluids and unfixed human tissue — and, in a research lab, culture media or reagents containing HIV or HBV. A clean needle that never touched a person or infectious material is a sharps-safety issue, not a bloodborne-pathogen exposure — the response below is specifically for contaminated-sharp and blood/OPIM splash exposures.
The First-Hour Protocol, Step by Step
- Stop and make the area safe. Set down what you’re holding, move away from the immediate hazard, and don’t let anyone else pick up the sharp.
- Provide immediate first aid appropriate to the exposure site — see the section below. Do this before anything else.
- Report the exposure immediately to your supervisor, PI, or lab manager. Don’t wait until the end of the day or the end of an experiment — the reporting clock and the PEP-eligibility clock are both already running.
- Go to occupational health or an emergency department for medical evaluation without delay. If HIV PEP may be indicated, current guidance treats this as time-critical: PEP is most effective when started as soon as possible, ideally within about 2 hours, and is not generally recommended after 72 hours have passed. Do not wait to see if symptoms develop — there typically aren’t any in the window that matters.
- Note what you can about the source material — whose blood/specimen it was (if a human source is involved) or which agent/cell line was in use (if a lab source), and when the exposure happened. The evaluating clinician uses this to assess risk and, where a human source patient is involved and consent can be obtained, to arrange source testing.
- Complete your institution’s exposure/incident report and cooperate with any OSHA-required recordkeeping (see below). This is a compliance obligation, not paperwork you can defer — but it comes after, not before, steps 1–4.
Immediate Wound Care by Exposure Site
First-aid guidance differs by exposure site, and a couple of older habits are now specifically discouraged:
- Skin puncture or cut: Wash the area with soap and water for at least 15 minutes. Let it bleed briefly if it’s already bleeding, but don’t force it by squeezing or scrubbing the wound — that doesn’t reduce infection risk and can cause additional tissue damage. Current guidance does not recommend applying bleach, alcohol, or other antiseptics directly to a puncture wound.
- Eyes: Remove contact lenses if present, then flush at an eyewash station (or with clean water/saline if none is available) for at least 15 minutes, holding the eyes open and rotating them to rinse thoroughly.
- Mouth: Rinse thoroughly with water several times; do not swallow the rinse water.
- Non-intact skin (not a puncture): Wash the exposed area with soap and water.
Every one of these steps should already be part of your lab’s posted procedure, and the nearest eyewash station and sink should be reachable in seconds, not a walk down the hall — if they aren’t, that’s a facilities gap worth flagging separately from this protocol.
Why the First Two Hours Matter: PEP and Testing Timelines
The urgency in the protocol above exists because post-exposure medical management is genuinely time-sensitive, particularly for HIV:
- HIV PEP is a short course of antiretroviral medication, generally continued for 28 days if started. It works by suppressing viral replication before the virus can establish a persistent infection, which is why timing matters so much — effectiveness is understood to decline the longer PEP initiation is delayed, and it is generally not recommended more than 72 hours after exposure. The evaluating clinician decides whether PEP is indicated based on the type of exposure, the source’s status or risk profile, and current clinical guidelines — not every needlestick warrants it, but the decision has to be made fast enough to matter.
- Hepatitis B (HBV) has no equivalent post-exposure antiviral regimen in the same sense, but a worker’s vaccination and immune status determines whether hepatitis B immune globulin (HBIG) and/or a vaccine dose or booster is indicated — occupational health assesses this at the same visit. This is also the reason OSHA requires employers to offer the hepatitis B vaccine series free of charge to employees with reasonably anticipated occupational exposure, before an exposure ever happens.
- Hepatitis C (HCV) has no approved post-exposure prophylaxis. Management is baseline testing plus scheduled follow-up testing to detect seroconversion early, when treatment is most effective if it becomes necessary.
- Source testing, where a human source individual is identifiable and consent can be obtained, materially changes the risk assessment and is pursued as part of the same evaluation — but the exposed worker’s own evaluation and first-dose decisions should not be delayed while source testing is arranged.
What OSHA Requires From the Employer (29 CFR 1910.1030)
The first-hour response above is what an exposed worker does. The Bloodborne Pathogens Standard separately obligates the employer to have the infrastructure in place before an exposure happens and to follow through after one:
- A written Exposure Control Plan identifying jobs and tasks with occupational exposure risk, the engineering and work-practice controls in use (sharps disposal containers, safer needle devices where feasible, etc.), and the post-exposure procedure itself — reviewed and updated at least annually.
- Free hepatitis B vaccination offered to employees with reasonably anticipated exposure, made available within 10 working days of initial assignment, unless the employee has already been vaccinated, is immune, or declines (with a signed declination on file).
- A confidential post-exposure medical evaluation and follow-up, provided at no cost to the employee, performed by or under the supervision of a licensed healthcare professional, including exposure documentation, source-individual testing where legally permissible and identifiable, the exposed employee’s own testing, and PEP counseling and treatment when indicated.
- A written opinion from the evaluating healthcare professional to the employer, limited to whether HBV vaccination was recommended and whether the employee was informed of the evaluation results — not the employee’s confidential medical findings.
- A sharps injury log documenting each contaminated-sharps injury, including the type and brand of device, the department or work area, and an explanation of how the incident occurred, maintained in a way that protects the injured employee’s confidentiality.
Labs specifically culturing, producing, or concentrating HIV or HBV (as opposed to labs that occasionally handle clinical specimens of unknown status) are also subject to additional, narrower containment-level requirements under the same standard — a distinction worth knowing if your work involves propagating either virus rather than just handling patient or animal specimens.
Building a Postable First-Hour Protocol for Your Lab
A protocol only works if it’s usable in the moment someone is bleeding and adrenalized, not just compliant on paper. A postable version should fit on a single page and cover, at minimum:
- The immediate first-aid steps for each exposure type (puncture, eye, mouth, skin) in the exact wording your occupational health service endorses — don’t improvise language here, since some of the older folk guidance (squeezing the wound, applying bleach) is specifically wrong.
- Who to call first — a real name or role, a real phone number, posted where it’s visible from the bench, not buried in a binder.
- Where the nearest eyewash station and emergency shower actually are, with a floor-plan reference if the lab is large.
- Where to go for medical evaluation — your institution’s occupational health office during business hours, and the after-hours/weekend alternative (usually a specific emergency department), since exposures don’t only happen 9-to-5 and the 2-hour PEP window doesn’t pause for a closed office.
- What information to try to capture about the source material or specimen before it’s lost or discarded.
- A clear statement that reporting is required and not disciplinary — a documented, unpunished culture of immediate reporting is what actually gets people through the door in time; a culture where people worry about looking careless is what produces the “I’ll deal with it later” delay that defeats the whole point of a first-hour protocol.
Common Mistakes That Undermine the First Hour
- Squeezing or “milking” the wound to force out blood, on the theory that it flushes out contamination. Current guidance doesn’t support this and it can worsen local tissue trauma.
- Applying bleach, alcohol, or other antiseptics directly to a puncture wound. Soap and water is the recommended agent; harsher chemicals aren’t shown to add protection and can damage tissue.
- Finishing the experiment or the shift first. Every hour of delay narrows the PEP window and makes source testing harder to arrange.
- Treating a minor-looking puncture as not worth reporting. Risk isn’t reliably assessed by how the wound looks; it depends on the source material, device type, and depth of injury, which is exactly why a clinician — not the injured person’s own judgment in the moment — makes the PEP call.
- Not knowing where the eyewash station is until the moment it’s needed. This should be part of lab orientation, not something learned during an actual splash exposure.
Frequently Asked Questions
How fast do I really need to get to occupational health after a needlestick?
As fast as reasonably possible. Guidance treats HIV PEP as most effective when started as soon as possible, ideally within about 2 hours of exposure, and it’s generally not recommended more than 72 hours out. Even if PEP ultimately isn’t indicated for your specific exposure, getting evaluated quickly is what allows that determination to be made in time to matter.
Should I squeeze the wound to get the blood out?
No. Current guidance recommends washing with soap and water rather than squeezing or scrubbing the wound. Let it bleed briefly on its own if it’s already doing so, but don’t force it.
What if the needle or sharp wasn’t contaminated with anything?
A puncture from a sharp that never contacted blood, OPIM, or an infectious agent is a physical injury and a sharps-handling issue, but it doesn’t trigger the bloodborne-pathogen post-exposure evaluation described here. When in doubt about whether something was contaminated, report it and let occupational health make that determination — don’t self-triage.
Do I have to know who the source patient is for the evaluation to proceed?
No. Your own evaluation, first aid, and any indicated PEP should proceed regardless of whether a source individual can be identified or tested. Source information helps refine the risk assessment when it’s available, but its absence isn’t a reason to delay your own care.
Is reporting a needlestick going to get me in trouble?
It shouldn’t, and a lab culture where it does is a safety problem in its own right. OSHA’s standard is built around prompt reporting and confidential medical evaluation, not discipline. If your institution’s actual culture discourages reporting, that’s worth raising with EHS or your safety officer directly — a policy that exists on paper but isn’t followed in practice doesn’t protect anyone.
Does this protocol apply outside a lab setting?
The core first-aid and reporting steps are the same wherever a contaminated-sharps or blood/OPIM exposure happens — healthcare, veterinary, and research settings all operate under some version of the same OSHA framework. This guide is written for the research-lab context, but the underlying CDC first-aid guidance and OSHA post-exposure evaluation requirements aren’t lab-specific.
See also: Biosafety Level 2 (BSL-2), Biosafety Level (BSL), Laboratory Safety (OSHA Chemical Hygiene Plan), Institutional Biosafety Committee (IBC), and Biosafety Officer (BSO): Role and Responsibilities.







