A job hazard analysis (JHA) is a structured process used to identify, evaluate, and control the health and safety risks associated with specific job tasks before work begins. It breaks a job down step by step, examines what could go wrong at each stage, and establishes what protective measures reduce that risk to an acceptable level. In environments where workers are regularly exposed to biological hazards—clinical labs, emergency services, waste management, and healthcare settings—a JHA is not a procedural formality. It is the primary mechanism for preventing exposure that could result in serious illness or death.
A job hazard analysis—also referred to as a Job Safety Analysis (JSA) or Task Hazard Analysis (THA)—is a structured workplace safety tool that examines a specific task step by step, identifies the hazards at each stage, and defines the controls required to protect workers from harm. According to OSHA's Job Hazard Analysis publication (OSHA 3071), the process is one of the most effective tools available to reduce workplace injuries and illnesses.
It is not a risk assessment of a workplace in general. It is a task-level document—specific to a role, a procedure, and the conditions under which that procedure is performed. A job hazard analysis for a phlebotomist drawing blood in a clinical bay is a different document from one written for a waste handler transporting sharps containers, even though both involve bloodborne pathogen exposure risks.
The process is governed by OSHA's standards under 29 CFR 1910.132, which requires employers to certify hazard assessments in writing and determine the PPE necessary for each task. It is not a one-time filing — it must be reviewed after incidents, after task changes, and at defined intervals to remain valid and enforceable.
A job hazard analysis is built around three core elements for every task step: what the worker does, what could go wrong, and what controls prevent it. Without all three, the document is incomplete.
Most job hazard analyses include a task description broken into sequential steps, a hazard identification column for each step, existing controls already in place, recommended additional controls where gaps exist, and the PPE required to perform the task safely. For workplaces with bloodborne pathogen risks—clinical labs, emergency response, and waste handling—the analysis must also identify specific exposure routes: needlestick, splash, aerosol, or skin contact.
A well-structured job hazard analysis also records who reviewed and approved it, the date of last revision, and the trigger conditions for re-review. OSHA's guidance under 29 CFR 1910.132 requires that hazard assessments be documented and certified in writing. An undated, unsigned document carries no regulatory weight—and does not protect an incident investigation.
The difference between a thorough analysis and a generic one shows up under pressure. When a worker follows a task that was properly analyzed, they are following a procedure built on verified risk data, not assumptions. That distinction matters every time the task is performed.
Skipping or poorly executing a JHA creates measurable, documented harm. According to the U.S. Bureau of Labor Statistics, healthcare and social assistance consistently rank among the industries with the highest nonfatal occupational injury and illness rates—with exposure to harmful substances and environments accounting for a significant share of those incidents.
Annual enforcement and recordkeeping trends highlight that a significant portion of exposure-related illnesses in clinical and laboratory settings stem from predictable, unaddressed systemic hazards.
According to industry-wide inspection summaries, a failure to establish task-specific operational controls is a recurring root cause during post-incident investigations.
When a JHA is absent or generic, workers rely on assumptions. Assumptions in biohazard-risk environments lead directly to exposure events.
OSHA does not mandate a single universal JHA format, but 29 CFR 1910.132 requires employers to conduct hazard assessments to determine necessary personal protective equipment (PPE).
For bloodborne pathogen exposure, the specific governing standard is 29 CFR 1910.1030—OSHA's Bloodborne Pathogens Standard—which requires a written exposure control plan, task-by-task identification of exposure potential, and documented training for all affected employees.
OSHA can and does cite employers under both standards simultaneously when a workplace incident reveals that hazard identification was inadequate. For serious violations, maximum civil penalties sit at $16,550 per instance. If a violation is deemed willful or repeated, statutory maximum penalties escalate up to $165,514 per violation, making robust hazard documentation a critical financial shield for organizations.
The Centers for Disease Control and Prevention supports OSHA's framework through its Biosafety in Microbiological and Biomedical Laboratories (BMBL) guidance, which classifies biological agents into four Biosafety Levels and defines the containment practices each level requires. A job hazard analysis for laboratory or clinical work should reflect those classifications—not just general chemical or physical hazard categories.
2026 Compliance Note: With OSHA implementing stricter enforcement tracking and updated Hazard Communication rules across 2026, written certifications for hazard assessments are facing higher scrutiny during routine inspections. Simply having a generic safety manual is no longer enough; employers must prove task-level execution.
Understanding what a job hazard analysis requires is useful. Knowing how to conduct one under real workplace conditions—with multiple task variables, rotating staff, and competing operational priorities—is different.
Our Bloodborne Pathogens Safety Training gives workers and supervisors the practical framework to connect JHA findings to exposure control decisions—not just in theory, but in the specific task environments they actually work in.
Creating a job hazard analysis starts before anyone touches a form. The process requires direct observation of the work being done, input from the workers who actually perform the task, and reference to any prior incident or near-miss data tied to that role.
Step 1 — Select the job or task to analyze. Prioritise tasks with a history of incidents, near-misses, or high-frequency exposure potential. New tasks or roles that have changed should be reviewed before the next cycle, not after.
Step 2 — Break the task into discrete steps Each step should describe a single action — "collect blood sample," "dispose of sharps," "decontaminate surface." If a step can be broken down further, it should be. Vague steps produce vague hazard identification.
Step 3 — Identify the hazard at each step. For bloodborne pathogen risks, ask specifically: could this step result in contact with blood, OPIM (other potentially infectious material), or contaminated surfaces? Consider needle-stick risk, splash risk, and aerosol-generating procedures as distinct categories.
Step 4 — Determine existing controls and their adequacy. Document what is already in place — PPE requirements, engineering controls such as safety-engineered sharps, and administrative procedures such as two-person handling rules. Then assess whether those controls are sufficient given the actual task conditions.
Step 5 — Assign corrective action with a responsible person and deadline An analysis that produces findings with no assigned follow-through is not a safety process — it is a documentation exercise. Every identified gap requires an owner and a timeline.
Step 6 — Review after any incident or task change. A JHA is not a one-time document. OSHA expects it to be a living record. Any exposure event, near-miss, or significant change in how a task is performed is a trigger for immediate review.
Step 7 — Verify that training reflects the current JHA If your biohazard exposure control training does not reflect the findings of your most recent job hazard analysis, the two documents are operating in silos. Workers need training that matches the actual risk profile of their specific tasks.
A well-executed JHA for biohazard-risk environments does more than identify hazards — it connects each finding to a specific control hierarchy. The hierarchy runs in this order: elimination, substitution, engineering controls, administrative controls, and PPE.
PPE is listed last because it is the least reliable control. A worker wearing gloves who has not received adequate task-specific training is not protected by that PPE—they are operating with an incomplete safeguard.
Organizations that treat the JHA as a compliance document to be filed rather than a working tool will, over time, see the gap between written procedures and actual practice widen. That gap is where biological hazard exposure events happen. Regulators reviewing an incident report look at that gap directly — and it does not close itself.
Supervisors and safety officers responsible for biological hazard identification and control should also ensure that their exposure control plans are updated to reflect the findings of every completed JHA cycle, not just at annual review intervals.
If you are responsible for biohazard risk management in your organization, a completed JHA creates the framework—but staff still need training that translates those findings into consistent daily behavior. Our Bloodborne Pathogens Safety Training walks staff through real exposure scenarios and the correct responses, covering task-specific risks, proper PPE use, exposure reporting, and post-exposure procedures—in a format built for professionals with demanding schedules.
News
News
News