If you operate a healthcare facility in California and you don't know what 8 CCR 5199 is, stop everything you're doing and read this article. Right now. Before you see another patient.
Because California's Aerosol Transmissible Diseases standard is the most comprehensive, most demanding, and most aggressively enforced workplace health regulation in the country for healthcare employers. It goes far beyond what federal OSHA requires. It is unique to California. And it will absolutely destroy you if you're not compliant.
I'm not being dramatic. I'm being accurate.
After COVID-19 tore through healthcare facilities across the state, Cal/OSHA enforcement of the ATD standard shifted from "occasional" to "relentless." Complaint-driven inspections, programmed inspections, follow-up inspections — if you're in healthcare in California, it's not a question of whether you'll face ATD scrutiny. It's when.
What Makes This Standard Different
Federal OSHA has a tuberculosis enforcement guideline and some general respiratory protection requirements. That's about it. There is no comprehensive federal standard for aerosol transmissible diseases.
California created one. Section 5199 of Title 8, California Code of Regulations. It covers not just TB, but a comprehensive list of diseases transmitted through the air — the AirID list — including tuberculosis, measles, chickenpox, COVID-19, influenza (novel strains), SARS, MERS, pertussis, and dozens more.
The standard applies to:
- Hospitals and acute care facilities
- Skilled nursing facilities and long-term care
- Clinics and outpatient care centers
- Home health agencies
- Medical transport (ambulance services)
- Correctional facility healthcare
- Public health departments
- Laboratories handling specimens that may contain ATD pathogens
- Any employer whose employees are reasonably anticipated to have exposure to an aerosol transmissible disease
Note what's NOT on that list: general industry employers without healthcare operations. But the moment you have employees providing first aid, medical screening, or health services — you may be in scope. And the definition of "reasonably anticipated" is broader than most employers realize.
The Written ATD Plan
Like the Bloodborne Pathogens standard, 5199 requires a written plan. Unlike BBP, the ATD plan is significantly more complex and must address a wider range of hazards and controls.
Your written ATD plan must include:
**Identification of job classifications and tasks with exposure risk.** Which employees, performing which tasks, face potential exposure to aerosol transmissible diseases? This isn't limited to direct patient care. It includes anyone who enters areas where ATD patients are or have been — cleaning staff, maintenance workers, dietary workers delivering meals to isolation rooms.
**Exposure categories.** The standard defines two categories of exposure that drive the level of protection required:
**Category I — High Risk:** Employees who perform high-hazard procedures or provide direct care to patients with suspected or confirmed ATD. These include aerosol-generating procedures (intubation, bronchoscopy, sputum induction, CPR, BiPAP/CPAP), direct care in airborne infection isolation rooms (AIIRs), and transport of ATD patients.
**Category II — Moderate Risk:** Employees who enter areas where ATD patients are present but do not perform high-hazard procedures. This includes nurses providing routine care to isolated patients, environmental services staff cleaning isolation rooms, and dietary staff delivering meals.
The category determines everything — what engineering controls are needed, what respiratory protection is required, what training must be provided. Getting the categorization wrong means getting the protections wrong.
**Procedures for each element of the standard.** Source control, engineering controls, respiratory protection, medical surveillance, training, communication, surge capacity. All written. All specific to your facility.
The plan must be reviewed and updated annually and whenever there is a change in conditions — new diseases added to the AirID list, new procedures adopted, facility modifications, or changes in patient population.
Source Control: Stop It at the Patient
Source control is the first layer of defense. The goal is to contain respiratory secretions from the potentially infectious patient before they become airborne hazards for your staff.
Source control measures include:
- **Respiratory hygiene/cough etiquette** signage and supplies at all entry points
- **Surgical masks on patients** with suspected or confirmed ATD during transport and whenever outside an isolation room
- **Early identification and isolation** of patients with ATD symptoms — triage protocols that screen for respiratory symptoms, travel history, and exposure history
- **Prompt placement in an airborne infection isolation room** for patients meeting criteria
Speed matters here. The longer a patient with active TB or measles sits in your waiting room coughing, the more employees and other patients are exposed. Your triage process must be designed to identify and isolate these patients within minutes, not hours.
Engineering Controls: The Air Itself
This is where 5199 gets serious. The standard requires specific engineering controls that go far beyond "open a window."
**Airborne Infection Isolation Rooms (AIIRs):** These are negative-pressure rooms designed to contain airborne pathogens. The key specifications:
- Negative pressure relative to surrounding areas (minimum 0.01 inches of water gauge)
- Minimum 12 air changes per hour (ACH) for new construction, 6 ACH for existing rooms
- Air exhausted directly outside or through HEPA filtration before recirculation
- Self-closing doors
- Visual monitoring of negative pressure (manometers or smoke tubes)
- Regular testing and documentation of negative pressure function
If you're a hospital, you must have AIIRs. Period. The number required depends on your patient population and risk assessment, but having zero is indefensible.
**HEPA filtration:** High-Efficiency Particulate Air filters that capture 99.97% of particles 0.3 microns or larger. Used in air handling systems, portable units for temporary isolation, and recirculation systems.
**Ultraviolet Germicidal Irradiation (UVGI):** Upper-room UV systems that kill or inactivate airborne pathogens. Used as a supplement to ventilation in high-risk areas — waiting rooms, TB clinics, emergency departments. UVGI is not a replacement for proper ventilation and isolation, but it's an effective additional layer.
**Portable HEPA units:** For situations where a patient needs isolation but no AIIR is available — temporary isolation in an exam room, for example. These units create a localized clean air environment while you arrange transfer or prepare a proper isolation room.
Every engineering control must be maintained and tested on a schedule documented in your ATD plan. A negative-pressure room that hasn't been tested in six months is a room you can't trust.
Respiratory Protection: Beyond the Surgical Mask
This is where employers get the most citations, because they confuse surgical masks with respiratory protection. They are not the same thing.
A surgical mask protects the patient from the wearer's respiratory secretions. It is source control — worn by the patient or by a healthcare worker during sterile procedures.
A respirator — specifically, a NIOSH-certified N95 or higher — protects the wearer from inhaling airborne pathogens. It is employee protection.
Under 5199, employees with Category I or Category II exposure must be included in a respiratory protection program compliant with 8 CCR 5144. This means:
**Medical evaluation:** Before an employee can wear a respirator, a physician or licensed healthcare professional must evaluate whether they're medically able to do so. This is a questionnaire-based evaluation, with follow-up examination if indicated.
**Fit testing:** Every employee who wears a tight-fitting respirator must be fit-tested initially and at least annually thereafter. Fit testing ensures the specific make, model, and size of respirator achieves a proper seal on that individual's face. Qualitative (saccharin or BitrexTM) or quantitative methods may be used.
**Training:** Employees must be trained on proper donning, doffing, seal checking, limitations, and maintenance of their assigned respirators.
**PAPRs for high-risk procedures:** For Category I employees performing aerosol-generating procedures, Cal/OSHA strongly encourages — and in some interpretations requires — Powered Air-Purifying Respirators (PAPRs), which provide a higher level of protection than N95s. PAPRs use a battery-powered blower to pull air through HEPA filters, providing positive pressure inside the facepiece.
You must maintain a sufficient stockpile of respirators. Running out during a surge is not an acceptable excuse. Your ATD plan must address surge capacity, including alternative respiratory protection strategies when primary supplies are constrained.
Medical Surveillance: Monitoring Your Workforce
Medical surveillance under 5199 has two primary components:
**TB screening:** All employees with occupational exposure to aerosol transmissible diseases must receive TB screening — either a tuberculin skin test (TST) or an interferon-gamma release assay (IGRA) blood test — at baseline and periodically thereafter, based on risk assessment.
Employees who convert from negative to positive must be evaluated for active TB and, if negative for active disease, offered treatment for latent TB infection. This is not optional for the employer — you must offer the evaluation and treatment at no cost.
**Vaccinations:** For vaccine-preventable ATDs — measles, mumps, rubella, varicella, pertussis, influenza — employers must offer vaccination to exposed employees at no cost, consistent with ACIP recommendations. Employees may decline, but the offer must be made and documented.
Medical surveillance records must be maintained confidentially and in accordance with employee medical record retention requirements.
Training Requirements
Training must be provided at initial assignment and at least annually for all employees with exposure risk. The training must be specific to the employee's exposure category and job duties.
Training content must include:
- The ATD standard itself and how to access it
- The employer's written ATD plan
- The AirID list and modes of transmission for covered diseases
- Recognition of signs and symptoms of ATDs
- The employer's procedures for identification and isolation of ATD cases
- Engineering controls and their proper function
- Respiratory protection — selection, use, fit checking, limitations
- Source control measures
- Hand hygiene
- PPE donning and doffing procedures
- Medical surveillance program and employee rights
- Post-exposure procedures and reporting
The training must be interactive — not a video-only module. Employees must have the opportunity to ask questions. And the training must be provided in a language and at a literacy level the employee understands.
What Happens When Cal/OSHA Shows Up
Cal/OSHA's Healthcare Unit conducts both complaint-driven and programmed inspections. When they arrive, here's what they're looking for:
- **The written ATD plan.** Is it current? Is it specific to this facility? Has it been updated in the last 12 months?
- **Exposure categorization.** Have you identified all exposed job classifications and correctly categorized them?
- **AIIR functionality.** Are your negative-pressure rooms actually negative? When was the last test? Show us the log.
- **Respiratory protection program.** Fit test records. Medical evaluations. Training documentation. Respirator supply inventory.
- **Medical surveillance records.** TB screening at baseline. Annual screening. Vaccination offers and declinations.
- **Training records.** Who was trained, when, on what, by whom.
- **Exposure incident records.** Any reported exposures? What was the follow-up?
They will interview employees. They will ask your nurses if they've been fit-tested. They will ask your housekeepers if they know what to do when they're assigned to clean an isolation room. They will check your sharps containers and your HEPA filters and your pressure monitors.
And if your program is paper-only — a plan in a binder but no evidence of implementation — you'll get cited for every element that exists on paper but not in practice.
The California Difference
Let me be blunt about why this matters more in California than anywhere else.
Most states operate under federal OSHA, which has no comprehensive ATD standard. California is a state-plan state with its own OSHA program, and 8 CCR 5199 is one of the most stringent occupational health standards in the nation. It was originally adopted for TB. It was expanded for SARS. It was stress-tested by COVID-19. And it emerged from the pandemic with even sharper teeth.
If you're a healthcare employer operating in California, this standard is not a guideline. It's not a recommendation. It's a regulation with the force of law, enforced by inspectors who know exactly what to look for and exactly what citations to write.
Build the plan. Implement the controls. Train your people. Test your rooms. Stock your respirators. Screen your employees. Document everything.
The standard is demanding. The enforcement is aggressive. And the diseases it's designed to protect against don't care whether you've read the regulation or not. They just care whether your employees are protected.
Make sure they are.
