Safety and Compliance

26% of the CPT · blueprint NHA CPT Test Plan, based on a job analysis completed in 2024

Short answer

The second largest domain at 26 of the 100 scored items. It covers the regulators and standards bodies a phlebotomist works under, HIPAA and protected health information, scope of practice and ethics, quality control for equipment and for CLIA-waived and point-of-care testing, sharps and biohazard disposal, the bloodborne pathogens standard, exposure control, transmission-based and standard precautions, hand hygiene, PPE, and emergency response.

Why it matters on this exam

Twenty-six items, and almost none of it is technique. This is the domain that rewards knowing which body publishes what, and the exact sequence of actions after an exposure.

Key concepts

Who is who (tasks 1A, 1B; knowledge k24, k25). OSHA and NIOSH for workplace safety regulation. The Joint Commission, CLSI, the CDC and the College of American Pathologists for operational standards. Mixing these up is the single most reliable way to lose marks here.
HIPAA and PHI (1C, k13). Protected health information, patient privacy guidelines and protocols, and the Patient Bill of Rights from Core Knowledge.
Scope of practice and ethics (1D, k26), including the NHA code of ethics by name.
Quality control (1E, 1F). Machine calibration, test controls and storage controls; maintaining logs for equipment inspection; reporting and troubleshooting equipment issues; and refrigerator and freezer temperature monitoring. Separately, QC for point-of-care and CLIA-waived tests (k29).
Sharps and biohazards (1G, k30, k31, k32). Disposal requirements under the bloodborne pathogens standard, and the cleaning, disinfection and disposal of blood and body fluids.
Exposure control (1H, k33). The exposure control plan covers eye washing, hand washing, showers, notification requirements, needle stick protocols and reporting — and it applies to needle sticks, blood spills and eye contamination alike.
Precautions (1I, 1J, k34). Standard precautions apply to every patient. Transmission-based precautions are the additional layer: airborne, droplet and contact.
Hand hygiene (1K, k35) and PPE (1J, k36), including the donning and doffing sequence, gloves, gowns, masks, respirators and eye protection.
Emergencies (1L, 1M, k37, k38). Recognising and responding to emergencies including CPR and responding to codes; first aid for phlebotomy-related issues specifically — excessive bleeding, falls, fainting and syncope, hypoglycemia and hyperglycemia.
Documentation and reporting (1N, k39) for patient-related incidents, against charting guidelines.

Common mistakes

Treating standard precautions as something you apply to known-infectious patients. They apply to everyone; transmission-based precautions are what you add.
Answering an exposure question with "wash it" and stopping. The exposure control plan includes notification and reporting, and the exam tests the whole sequence.

Worked example

A phlebotomist sustains a needle stick while recapping a used needle. The immediate first aid is only the beginning of the correct answer. The exposure control plan under the bloodborne pathogens standard requires washing, then notification and reporting per the facility's needle stick protocol, and the incident is documented. The exam is checking whether you know that an exposure is a reportable event with a defined procedure, not simply an injury — and, implicitly, that the Needlestick Safety and Prevention Act in Core Knowledge is why safety devices exist in the first place.

Original practice questions

Safety and ComplianceDifficulty 3/5

To which patients do standard precautions apply?

APatients placed in isolation by the facility's infection control team
BPatients whose requisition indicates a test for an infectious disease
CEvery patient, regardless of their known or suspected infection status
DPatients with a confirmed bloodborne infection documented in the record

Show answer and rationale

Correct: C. Standard precautions are the baseline applied to everyone, because infection status is often unknown. Transmission-based precautions are the additional layer added for airborne, droplet and contact situations.

D — Restricting precautions to documented infections leaves undiagnosed patients unprotected.
A — Isolation triggers transmission-based precautions in addition to, not instead of, standard ones.
B — What is being tested for does not determine the baseline precautions a phlebotomist takes.

Safety and ComplianceDifficulty 3/5

Beyond immediate first aid, what does the exposure control plan require after a needlestick?

AImmediate disposal of every specimen collected earlier in that shift
BWritten consent from the patient before any further action is taken
CCompletion of the draw before the exposure is addressed or recorded
DNotification and reporting according to the facility's needlestick protocol

Show answer and rationale

Correct: D. Knowledge statement k33 lists notification requirements, needlestick protocols and reporting as part of the exposure control plan. An exposure is a reportable event with a defined procedure, not simply an injury.

A — Specimens already collected are unaffected by an exposure to the phlebotomist.
B — Patient consent is not a precondition for the phlebotomist reporting their own exposure.
C — Completing the draw first delays both treatment and the time-sensitive reporting steps.

Safety and ComplianceDifficulty 2/5

Which body does the NHA test plan list as a source of operational standards rather than workplace safety regulation?

AThe Joint Commission, alongside CLSI and the College of American Pathologists
BThe Occupational Safety and Health Administration, alongside NIOSH and the CDC
CThe National Institute for Occupational Safety and Health, alongside OSHA
DThe Food and Drug Administration, alongside OSHA and the CDC

Show answer and rationale

Correct: A. The test plan separates these deliberately: knowledge statement k24 covers workplace safety regulators and k25 covers operational standards, naming The Joint Commission, CLSI and CAP.

B — OSHA and NIOSH appear under workplace safety regulation at k24, not operational standards.
C — NIOSH is a workplace safety body and is listed with OSHA under k24.
D — The FDA is not among the bodies the CPT test plan names in either statement.

All 4 Safety and Compliance questions →

5 flashcards for Safety and Compliance

Practice this topic

Blueprint-mapped questions with full rationales for every choice.

Start practice

Primary references

NHA Certified Phlebotomy Technician (CPT) — Test Plan for the CPT Exam — National Healthcareer Association (NHA) · primary · retrieved 2026-09-22, verified 2026-09-22

Last reviewed: 2026-09-22Next review by: 2026-11-06Draft — pending editorial reviewHow we verify facts