OSHA Compliance

Cal/OSHA ATD Inspection Checklist: Standard §5199 Preparation

What Cal/OSHA inspectors examine under the Aerosol Transmissible Diseases standard (Title 8 §5199) , exposure control plans, fit testing, training, and the post-COVID enforcement wave.

LP

Lisa Puckett

CEO & Chief Compliance Officer · CSP · SWANA Vice Director

April 9, 2026

If you operate a healthcare facility, dental practice, clinical lab, correctional facility, or homeless shelter in California, there is a standard that applies to you and does not exist anywhere else in the country. It is 8 CCR §5199, the Cal/OSHA Aerosol Transmissible Diseases standard, and Cal/OSHA has been enforcing it with new energy since the COVID-19 pandemic exposed how few employers actually followed it.

The ATD standard has teeth. A serious violation carries a maximum penalty of $25,000. A willful violation tops out at $162,851. Unlike the federal Bloodborne Pathogens Standard , which most California healthcare employers know cold , the ATD standard reaches far beyond hospitals. It applies to outpatient clinics, skilled nursing facilities, dental offices performing aerosol-generating procedures, medical transport services, public health departments, coroners' offices, and any "referring employer" that might send a patient with a suspected ATD to another facility for care.

The gap between who must comply and who knows they must comply is enormous. This checklist closes it.

What the ATD Standard Covers

Title 8 §5199 was adopted in 2009 following the resurgence of multi-drug-resistant tuberculosis. It regulates occupational exposure to two categories of pathogens:

Aerosol transmissible pathogens (ATPs) spread through the air by droplet nuclei small enough to remain suspended and be inhaled far beyond the immediate vicinity of the source. The standard enumerates tuberculosis, measles, varicella, monkeypox, SARS, smallpox, and any pathogen the California Department of Public Health designates as novel or airborne.

Aerosol transmissible pathogens requiring droplet precautions (ATPs-D) spread by larger respiratory droplets at shorter distances , pertussis, diphtheria, mumps, pandemic influenza, invasive meningococcal disease, plague, and rubella among them.

When CDPH designates a "novel or unknown ATP" , as it did in January 2020 for SARS-CoV-2 , every covered employer must immediately apply the standard's protections while public health authorities determine transmission characteristics. The regulatory definition captures pathogens most employers never think about: a pediatric dental office performing ultrasonic scaling on a child with undiagnosed measles is handling an ATP under §5199 whether anyone in the office realized it or not.

Who Must Comply: Full vs. Referring Employers

§5199(a) divides covered employers into two categories.

Full ATD employers are those whose employees have reasonably anticipated occupational exposure. The standard names hospitals, skilled nursing facilities, clinics, medical offices, home health, hospices, medical transport and EMS, medical examiners, coroners, law enforcement services, public health services, and biological laboratories. If your employees provide direct patient care, transport sick individuals, or handle biological specimens, you are almost certainly a full ATD employer.

Referring employers do not provide direct care for ATD cases but whose employees may encounter such individuals. The classic example is a community health center that screens patients for tuberculosis symptoms and sends positive screens to a referral hospital. Referring employers have lighter obligations , screening, source control, and a written referral procedure , but they are covered.

The most common compliance failure we see is employers who assumed §5199 was a "hospital rule" and discovered during an inspection that they qualified as a full or referring employer. Dental practices performing ultrasonic instrumentation, outpatient surgery centers, urgent care clinics, and even some veterinary clinics routinely fall within the standard's scope.

When to Expect a Cal/OSHA ATD Inspection

Cal/OSHA §5199 inspections are triggered by several predictable events:

  1. 30-day exposure incident reports. §5199(h) requires covered employers to report unprotected employee exposure to confirmed airborne ATD cases within 30 days. Those reports are themselves inspection triggers.
  2. Employee complaints alleging ATD exposure without proper protection.
  3. Tuberculosis case reports. When a healthcare worker is diagnosed with active TB and the local health department reports it, Cal/OSHA routinely opens an inspection.
  4. Programmed inspections targeting hospitals, skilled nursing facilities, correctional facilities, and homeless shelters.
  5. Post-outbreak investigations alongside CDPH.

Since 2021, Cal/OSHA has aggressively opened §5199 inspections parallel to COVID-19 investigations. The COVID-19 ETS expired in February 2025, but §5199 remains in force , and the enforcement momentum from the pandemic has not slowed.

The 15-Point ATD Inspection Checklist

This is the documentation and program structure every covered California employer should be able to produce the moment a Cal/OSHA inspector knocks.

1. Written ATD Exposure Control Plan (Site-Specific, Updated Annually)

§5199(c) requires a written exposure control plan reviewed and updated at least annually, specific to your workplace , not a generic template from a vendor website. Inspectors read for site-specific language. Generic plans get cited on the spot.

2. Exposure Determination (Job Titles and Exposure Categories)

The plan must identify every job classification with occupational exposure and categorize each (routine, reasonably anticipated, or incidental). This drives fit testing, training, and medical surveillance, so it must be accurate and current.

3. Source Control Procedures (Masking, Separation, Ventilation)

§5199(c)(2) requires surgical masks for symptomatic individuals, physical separation of suspected ATD cases, and ventilation strategies that minimize aerosol accumulation. Frequently overlooked during inspections.

4. Engineering Controls (AIIRs for Hospitals, HEPA Filtration)

Hospitals and clinics caring for confirmed or suspected ATD cases must have Airborne Infection Isolation Rooms meeting the ventilation requirements of §5199(e)(2). Other covered employers must have HEPA-filtered areas or equivalent engineering controls. Inspectors ask for ventilation verification records.

5. Administrative Controls (Patient Screening, Visitor Protocols)

Triage screening, visitor restrictions during outbreaks, signage instructing symptomatic individuals to mask, and protocols for isolating or transferring suspected cases. These must be written, taught, and demonstrably followed.

6. PPE Program (Respirators, Gowns, Face Shields)

Employees with reasonably anticipated exposure must receive appropriate PPE at no cost. For airborne ATPs, that means N95 minimum; for aerosol-generating procedures on confirmed cases, PAPRs or elastomeric respirators.

7. Respiratory Protection Written Program

§5199 incorporates 29 CFR 1910.134 by reference. That means a full written respiratory protection program covering selection, medical evaluation, fit testing, training, maintenance, and program evaluation. A box of N95s in the supply closet is not a respiratory protection program.

8. Fit Testing Records (Annual, Qualitative or Quantitative)

Every employee required to wear a tight-fitting respirator must be fit tested before first use and annually. Records must include the employee name, test method, respirator make/model/size, date, and tester identity. Missing fit test records are the single most cited element of §5199 inspections.

9. Medical Evaluations Before Respirator Use

Under 29 CFR 1910.134(e), employees cannot be required to wear a respirator without a medical evaluation clearing them. Missing medical clearances is an automatic citation.

10. Training Program (Initial Plus Annual)

§5199(g) requires training at initial assignment and at least annually, in a language employees understand. Content must cover ATD signs and symptoms, transmission modes, the exposure control plan, employee rights, PPE use, and exposure incident reporting. Records must name every attendee.

11. Vaccination Offers and TB Screening

Covered employers must offer, at no cost, vaccinations appropriate to the ATDs in the workplace , typically influenza plus MMR, varicella, pertussis, and hepatitis B where applicable. Tuberculosis screening (IGRA or TST) is required at hire and at intervals based on exposure category.

12. Exposure Incident Reports and 30-Day Cal/OSHA Reporting

When an unprotected exposure to a confirmed ATD occurs, the employer must document the incident, conduct a post-exposure evaluation, and report to Cal/OSHA within 30 days under §5199(h). The exposure incident log must be maintained and produced on request.

13. Follow-Up Medical Services Plan

Post-exposure medical evaluation, appropriate prophylaxis, symptom monitoring, and outcome documentation must all be arranged in advance through a contracted provider. Inspectors ask who your provider is and want to see the agreement.

14. Referable Case Log (for Referring Employers)

Referring employers must log patients referred out for suspected or confirmed ATDs, including date, pathogen, receiving facility, and employees who had contact. Routinely missing during inspections.

15. TB Surveillance Program

§5199(h) requires tuberculosis surveillance at hire and at intervals set by CDC and CDPH for each exposure category. Records must be retained and accessible. TB surveillance gaps are among the top citations against skilled nursing facilities.

The Respiratory Protection Program Deep Dive

§5199 and 29 CFR 1910.134 operate together. Where §5199 identifies the hazard, 1910.134 dictates the specifics of the program that protects employees from it.

For airborne ATDs, N95 filtering facepiece respirators are the minimum. For aerosol-generating procedures , intubation, bronchoscopy, open suctioning, BiPAP initiation, ultrasonic dental instrumentation on known cases , Cal/OSHA expects PAPRs or elastomeric respirators. Surgical masks are not respirators and do not satisfy §5199 for airborne pathogens, a point that remains widely misunderstood inside covered facilities.

Voluntary N95 use still triggers a written program. An employee who wears an N95 for reassurance cannot simply be handed one , the employer must provide the Appendix D information required by 1910.134 and maintain a record that it was provided.

The Fit Testing Reality

Fit testing is where most ATD programs fail. Every tight-fitting respirator user must pass a fit test before first use and annually thereafter. The test can be qualitative (taste test with saccharin, Bitrex, or irritant smoke) or quantitative (instrument measurement of aerosol concentrations inside and outside the facepiece). Re-testing is required whenever an employee gains or loses significant weight, undergoes facial surgery or dental work, or develops scarring.

What goes wrong in practice: facilities skip annual fit testing and cannot prove otherwise, maintain records without employee names or respirator model numbers, or fit test on one model and issue a different model when the first runs out of supply. Each generates a separate citation.

The 30-Day Reporting Requirement

§5199(h) imposes one of the most unusual reporting requirements in California occupational safety law. When an unprotected employee is exposed to a confirmed airborne ATD case, the employer must report to Cal/OSHA within 30 days , separate from the general 8-hour serious injury reporting requirement, and regardless of whether the employee developed symptoms.

"Unprotected exposure" means close proximity to a confirmed case without appropriate respiratory protection. The 30-day count starts when the case is confirmed, which can complicate the window when diagnostic delays push confirmation weeks after the original contact. Reports must include the number of employees exposed, the pathogen, the circumstances, and the follow-up medical evaluation being provided, while complying with HIPAA and employee medical privacy protections.

Top 5 Cal/OSHA ATD Violations

Based on Cal/OSHA citation data and our pre-inspection audit experience, the five most common §5199 findings are:

  1. No written ATD exposure control plan, or a plan that is generic and not site-specific. Cited as a serious violation at up to $25,000.
  2. Incomplete or missing fit testing documentation.
  3. Failure to provide required respirators, or wrong level of protection (surgical masks for aerosol-generating procedures).
  4. No documentation of 30-day exposure incident reports or no post-exposure evaluation procedure.
  5. Missing TB surveillance for at-risk employees, particularly in skilled nursing facilities.

Willful violations carry a $162,851 maximum, and Cal/OSHA has not been shy about classifying post-COVID ATD citations as willful when employers knew the standard applied and chose not to comply.

Your 48-Hour Pre-Inspection Walk

If an ATD inspection looks imminent , an employee complaint filed, a TB case reported, a COVID outbreak noticed by public health , use the next 48 hours:

  • Pull the written ATD exposure control plan. Verify it is dated within 12 months.
  • Pull every employee fit test record. Confirm each is within 12 months and names the specific respirator model issued.
  • Pull the exposure incident log. Confirm any reportable incidents were reported within 30 days.
  • Verify N95s, face shields, gowns, and gloves are available in the sizes employees need.
  • Pull training records for the past 24 months. Confirm every covered employee has completed initial and annual training.
  • Confirm your contracted post-exposure medical provider is active and the agreement is on file.
  • For referring employers, confirm the referable case log is current.

Anything you correct in 48 hours cannot be cited if the inspector does not see it.

What to Say During a Cal/OSHA Visit

The opening conference sets the tone. Ask what triggered the inspection, what the scope is, and what §5199 elements are under review. Request the complaint in writing if there is one (names will be redacted). Identify a single point of contact from your side and route all document requests through that person.

Employee interviews are private. Cal/OSHA has the statutory right to interview employees without management present. Do not attempt to sit in, coach beforehand, or imply that speaking with Cal/OSHA is disloyal , both become separate citations for interference.

Produce explicitly requested documents. Do not volunteer internal audit reports, mock inspection findings, or attorney-client analyses.

After the Citation: 15-Day Appeal Window

Citations arrive by certified mail. You have 15 working days from receipt to file a Notice of Contest with the California OSHA Appeals Board, or the citation becomes final and unappealable. There is no discretionary extension.

  1. Request an informal conference with the Cal/OSHA district office within the 15-day window. Typically produces 25% to 50% penalty reductions and occasional reclassifications.
  2. File a Notice of Contest if the informal conference does not resolve the matter.
  3. Appeals Board hearing before an administrative law judge, typically 9 to 15 months later.
  4. Appeals Board decision and, if necessary, judicial review.

Most cases settle informally. The ones that go to hearing usually involve willful classifications, repeat violations, or disputes about whether §5199 applies at all.

How BayArea Compliance Helps

The ATD standard is the most California-specific compliance obligation our healthcare clients face, and it is one of the few areas where federal-compliance knowledge from out-of-state vendors is worse than useless , it lulls employers into a false sense of security. We build and maintain §5199 programs for hospitals, dental practices, urgent care clinics, surgery centers, and skilled nursing facilities across California as part of the COMPLIANCE|360 bundle.

That includes a site-specific ATD exposure control plan updated annually, a full respiratory protection program aligned with §5199 and 29 CFR 1910.134, coordinated annual fit testing, annual ATD training in Spanish and English, TB surveillance scheduling, post-exposure medical provider setup, and 30-day exposure incident reporting when required.

For healthcare facilities, §5199 compliance is one reason COMPLIANCE|360 consolidates so much value at $360 per month , the same programs sourced separately would cost two to three times as much.

If you have received a Cal/OSHA inspection notice, a complaint letter, or a §5199 citation, call us at 833-247-OSHA. The first consultation is free, and we respond within four business hours.

Take this guide with you

Get the printable version of this guide, formatted as a clean PDF handout for your compliance binder or break room.

No spam. We send occasional compliance updates, unsubscribe anytime.

Get more compliance content like this

New inspection checklists, regulation updates, and cost-saving tips delivered monthly. No spam, unsubscribe anytime.

Led by Lisa Puckett, CSP · SWANA Vice Director · 2025 NRC Recycler of the Year

Ready to Simplify Your Compliance?

One vendor for waste disposal, training, and regulatory compliance across the Bay Area, led by the 2025 NRC Recycler of the Year. Get a free assessment today.

833-247-OSHAGet My Quote