Original posting date: December 23, 2024

Under OSHA’s recordkeeping regulation, certain covered employers are required to prepare and maintain records of serious occupational injuries and illnesses using the OSHA 300 Log. This information is important for employers, workers and OSHA in evaluating the safety of a workplace, understanding industry hazards, and implementing worker protections to reduce and eliminate hazards.

The Summary must be physically posted, in a place where employees are used to finding notices, from February 1 to April 30. During that time, you must make sure that the Summary is not removed, altered, or defaced.

Did You Know?

Employers must electronically submit 2024 injury and illness data from OSHA Form 300A by March 2 if they have:

• 250 or more employees and are currently required to keep OSHA injury and illness records.
• 20-249 employees classified in specific industries with historically high rates of occupational injuries and illnesses.

Visit OSHA’s Injury Tracking Application webpage for more information and to submit data online.

When electronically submitting OSHA Form 300A, you must provide your Employer Identification Number.

Is your organization required to prepare and maintain records under current rules?

To find out if you are required to prepare and maintain records under the updated rule, first determine your NAICS code by:

1. Using the search feature at the U.S. Census Bureau NAICS main webpage.  In the search box for the most recent NAICS, enter a keyword that describes your business. Choose the primary business activity that most closely corresponds to you, or refine your search to get more choices.
2. Viewing the most recent complete NAICS tables on the U.S. Census Bureau NAICS main webpage. Select the two-digit sector code and choose a six-digit industry code to read its definition.
3. Using an old SIC code to find your NAICS code using the detailed conversion tables on the U.S. Census Bureau Concordances page.
4. Contacting your nearest OSHA office or State agency for help.

Once you have found your NAICS code, you can use the following table to determine if your industry is exempt from the recordkeeping rule.

• New list of industries exempt from OSHA recordkeeping requirements

NOTE: Establishments in companies with 10 or fewer employees at all times in the previous year continue to be exempt from keeping OSHA records, regardless of their industry classification.  The partial exemption for size is based on the number of employees in the entire company.

Forms Needed for Completion:

The OSHA injury and illness recordkeeping forms are:

• the Log of Work-Related Injuries and Illnesses (OSHA Form 300),
• the Summary of Work-Related Injuries and Illnesses (OSHA Form 300A), and
• the Injury and Illness Incident Report (OSHA Form 301).

Employers must fill out the Log and the Incident Report only if a recordable work-related injury or illness has occurred. Employers must fill out and post the Summary annually, even if no recordable work-related injuries or illnesses occurred during the year.

In place of the OSHA forms, employers may also use equivalent forms (forms that have the same information, are as readable and understandable, and are completed using the same instructions as the OSHA forms they replace). Many employers use an insurance form instead of the Incident Report, or supplement an insurance form by adding information required by OSHA.

Additional Information:

OSHA Fact Sheet

OSHA Exempt Industries FAQ Sheet

OSHA Recordkeeping Forms

OSHA 300 & 300A PDF Forms

How does OSHA define a recordable injury or illness?

• Any work-related fatality.
• Any work-related injury or illness that results in loss of consciousness, days away from work, restricted work, or transfer to another job.
• Any work-related injury or illness requiring medical treatment beyond first aid.
• Any work-related diagnosed case of cancer, chronic irreversible diseases, fractured or cracked bones or teeth, and punctured eardrums.
• There are also special recording criteria for work-related cases involving: needlesticks and sharps injuries; medical removal; hearing loss; and tuberculosis.

How does OSHA define first aid?

• Using a non-prescription medication at nonprescription strength (for medications available in both prescription and non-prescription form, a recommendation by a physician or other licensed health care professional to use a non-prescription medication at prescription strength is considered medical treatment for recordkeeping purposes);
• Administering tetanus immunizations (other immunizations, such as Hepatitis B vaccine or rabies vaccine, are considered medical treatment); Cleaning, flushing or soaking wounds on the surface of the skin
• Using wound coverings such as bandages, Band-Aids™, gauze pads, etc.; or using butterfly bandages or Steri-Strips™ (other wound closing devices such as sutures, staples, etc., are considered medical treatment);
• Using hot or cold therapy;
• Using any non-rigid means of support, such as elastic bandages, wraps, non-rigid back belts, etc. (devices with rigid stays or other systems designed to immobilize parts of the body are considered medical treatment for recordkeeping purposes);
• Using temporary immobilization devices while transporting an accident victim (e.g., splints, slings, neck collars, back boards, etc.). Drilling of a fingernail or toenail to relieve pressure, or draining fluid from a blister;
• Using eye patches;
• Removing foreign bodies from the eye using only irrigation or a cotton swab;
• Removing splinters or foreign material from areas other than the eye by irrigation, tweezers, cotton swabs or other simple means;
• Using finger guards;
• Using massages (physical therapy or chiropractic treatment are considered medical treatment for recordkeeping purposes); or
• Drinking fluids for relief of heat stress.

OSHA Record Retention Requirements

• Hazardous Energy: Certification requirements for 1 year
• Noise Exposure: Two Years
• PPE: Duration of Employment
• Hazard Communication: Duration of Employment Plus 30 Years
• Confined Space Permits: One Year
• Respiratory Protection: Duration of Employment Plus 30 Years
• Electric Safety: Safety records for the duration of employment
• Medical Exposure Records: Duration plus 30 Years
• OSHA 300 Log: 5 Years, following the end of the calendar year
• Other’s Training, Discipline, General Duties Clause

Know the state regulations on record keeping as well.

https://www.shrm.org/resourcesandtools/hr-topics/risk-management/pages/osha-document-retention-requirements.aspx

Categories of Documents

• The following list sets out the typical OSHA standards and the General Duty Clause that may require an employer to create, retain and produce certain documents during the course of an inspection, if requested by the OSHA compliance officer. Obviously, whether the employer is required to have certain of these programs or others will be dependent upon the nature of the work activities at the site. This list is focused on the standards that are applicable to employers in general industry and not construction, although some general industry standards are substantially similar and also applicable to the construction industry. There are many hazards that are common to each industry but the regulatory obligations frequently differ. For those employers in the construction industries, it will be necessary to reference the existing regulations addressing hazards in that industry when responding to an OSHA document request.
• During the inspection, the employer should request the compliance officer to make the document request in writing (it can be handwritten) so that there is no confusion over what documents are being requested and so that the employer is not cited for failure to produce a document it did not believe was requested by the compliance officer. The employer’s onsite representative should review this request with management and decide which documents will be produced to the compliance officer. It is important to remember that the employer has no duty to produce certain documents (e.g., post-accident investigations, insurance audits, consultant reports, employee personnel information) because no regulation requires such production. It is important to note that any documents produced can be utilized to issue citations, thus, the employer should not produce any documents unless required by law.

Control of Hazardous Energy – Lockout/Tagout (LOTO)

• The regulation requires the employer to develop procedures to protect employees who service or maintain its machines against unexpected energization or startup of equipment or release of stored energy. The employer must train its “authorized” employees how to perform LOTO with these procedures, as well as “affected” employees who may be exposed to the equipment. The rule requires the onsite employer and outside employer to inform each other of their respective lockout or tagout procedures.

Document retention: The LOTO standard requires employers to certify that periodic inspections have been performed at least annually. Accordingly, employers should retain certifications for one year, or until a new certification is created. It is also advisable that employers retain employee LOTO training records for the duration of employment.

Occupational Noise Exposure

• The standard requires the employer to provide a hearing conservation program (education, annual audiograms, hearing protection) for employees who are exposed to noise levels equal to or exceeding an 8-hour time-weighted average of 85 decibels on the A scale. The employer must conduct a noise survey to determine those jobs which may require employees to be included in the program. Employees who suffer hearing loss at certain frequencies must be included on the OSHA 300 Log. The employer must develop a written program and administer it.

Document retention: Employers must retain noise exposure measurement records for two years. Employers must also retain audiometric test records for the duration of the affected employee’s employment.

Personal Protective Equipment (PPE)

• The employer must conduct an initial certified hazard assessment of the workplace to determine if hazards are present which require personal protective equipment for eyes, face, head and extremities to protect against injury. The employer must provide each employee with the necessary PPE, train the employee in the use of PPE and enforce its use. The employer must pay for the PPE with limited exceptions.
• A second certification is required to confirm that the PPE was provided, the employee received training in how to utilize it and that the employee “understood” the training.

Document retention: Employers should retain the written certifications of a hazard assessment and employee training for the duration of employment for all employees exposed to identified hazards. It is also advisable for employers to retain employee PPE training records for the duration of employment.

Hazard Communication (Employee Right to Know)

• The regulation requires the employer to develop a written hazard communication program to protect employees against any hazardous chemical which presents a physical or health hazard. The employer is required to conduct an assessment to determine which hazardous chemicals may be present, to inform employees of the presence of the hazardous chemicals, and train employees on how to read a safety data sheet (SDS) for each hazardous chemical.
• Employees are entitled to access to the SDSs and to obtain copies.

Document retention: Employers must retain SDSs for the duration of employment plus 30 years for all employees exposed to the chemical in question, unless there is some other record of the identity of the substance or chemical, where it was used and when it was used. The employer must also be sure it has a copy of all SDSs for all chemicals that are currently in use. It is also advisable for employers to retain employee hazard communication training records for the duration of employment.

Process Safety Management (PSM)

• This standard requires employers who utilize certain toxic, reactive, flammable or explosive chemicals in certain quantities, to develop a written fourteen (14) part PSM program. The PSM program addresses all aspects of work around the covered “process” that utilizes the chemicals.
• The regulations requires training of contractor employees who perform certain work around the covered process concerning the hazards and elements of the PSM program.

Document retention: Employers must retain process hazard analyses (PHAs) for the life of the covered process. In addition, the employer must prepare a written record that each employee who is involved in the operation of the process was trained and understood the training. These verification records should be retained for the length of the employee’s employment. We recommend that employers also retain all process safety information (PSI) used for developing, maintaining, auditing, and otherwise managing all processes for the life of the processes. Any incident investigations conducted under the PSM standard must be retained for five years. Additionally, employers must retain the two most recent compliance audit reports conducted under the PSM standard.

Emergency Action Plans (EAPs)

• The rule requires the employer to develop an emergency action plan to protect employees against the hazards of fires or other emergencies. The EAP must include provisions for reporting a fire or other emergency, evacuation procedures and the alarm system. The employer must train each employee.

Document retention: There are no specific document retention requirements, aside from the requirement that employers develop and maintain a written EAP. If the employer has ten or fewer employees, the plan does not have to be in writing.

Fire Extinguishers

• Employers required to provide fire extinguishers must mount, locate and identify them so that they are readily accessible to employees.
• If employees are expected to use the fire extinguishers, the employer must provide training upon initial employment and at least annually thereafter. The employer must develop an educational program if it expects the employees to use the fire extinguishers. Many employers specifically prohibit employees from using the fire extinguishers to avoid this training obligation. If the employer permits the employees to use the fire extinguishers, the educational program and training should be in writing and maintained for the length of employment.

Permit-Required Confined Spaces

• Employers are required to identify all confined spaces within the workplace that employees or outside contractors may be required to enter and contain a hazardous atmosphere, engulfment hazard, an internal configuration that could trap or asphyxiate an entrant or other serious safety or health hazard. The employer must develop a written program and procedures for employees who enter the confined spaces. Only trained and authorized employees can enter the space.
• The standard requires the host-employer to provide certain information to other contractors who will have their employees enter the space.

Document retention: Employers must retain each canceled entry permit for at least one year and review them within one year after each entry. It is also advisable to retain employee confined space training records for the duration of employment.

Bloodborne Pathogens

• This regulation requires an employer to develop a written program to protect employees at the workplace who are reasonably expected to have occupational exposure to bloodborne pathogens, i.e., bloodborne diseases. The employer is required to assess all jobs to determine if there is such exposure and if so, to train employees in the hazards, provide PPE and to develop procedures for medical evaluation and treatment if an employee has actual exposure.

Document retention: Employers must retain employee exposure records for the duration of employment plus 30 years. Training records must be retained for three years from the date on which the training occurred, although it is advisable to retain training records for the duration of employment.

Respiratory Protection

• The standard requires the employer to conduct an assessment of the workplace to determine if there are harmful dusts, fumes, mists, sprays or vapors which may create a respiratory health hazard. If there are such hazards, the employer is required to develop a written respiratory protection program, to evaluate employees to determine if they are physically capable of wearing a respirator, to provide such respiratory protection at the employer’s cost, and train employees how to wear and maintain respiratory protection. The employer must enforce use of the respiratory protection.

Document retention: Employers must retain records of employee medical evaluations for the duration of employment plus 30 years. Employers must also retain fit-test records for respirator users until the next fit test is administered.

Electrical Safety (Safety-Related Work Practices)

• The rules require an employer who will permit its employees to perform work on or in the vicinity of exposed energized parts (which cannot be locked out and tagged out) to provide extensive training in the hazards of working or in the vicinity of live electrical equipment, protective clothing and insulated tools and devices. The employer must designate employees as “authorized” in order to perform such work or “unqualified” in which case such employees cannot perform such work. The employer may be required to conduct an electrical exposure hazard survey of electrical equipment under NFPA 70E in order to determine what PPE should be used, what training is necessary, and to otherwise be in compliance with OSHA safety requirements.

Document retention: OSHA’s electrical safety standards do not have any specific record retention requirements, however it is advisable to retain employee training records under these standards for the duration of employment. If an employer conducts an electrical exposure hazard survey, the employer should retain it for as long as the hazard exists.

Access to Employee Exposure and Medical Records

• Employers are required to inform employees of their right to have access to all records maintained by the employer that reflect an employee’s exposure to any toxic substance or harmful physical agent (e.g., chemicals, dusts, vapors, noise, mold, etc.) or any medical records which the employer maintains on an employee, except for certain exceptions. Employees are entitled to have access and to obtain a copy at the employer’s expense.

Document retention: Employers must retain employee exposure records for the duration of employment plus 30 years. If the employer maintains certain employee medical records, the employer must retain them for the duration of employment plus 30 years.

Powered Industrial Trucks

• The regulation requires an employer to develop a written program to train all employees who will be required and authorized to operate powered industrial trucks (including forklifts, manlifts, etc.) as to the hazards of such equipment and to certify their training after they receive classroom-type training and are actually observed operating the equipment under the physical conditions at the workplace, such as aisles, ramps, etc. The employee must be retrained and recertified every three years, at minimum, or after an accident or “near miss” which resulted from an unsafe act.

Document retention: The powered industrial truck standard does not specify how long training certifications must be retained after the initial certification or the certification required every three years or after a near miss. It is advisable that employers retain the training certifications for the duration of employment for each employee.

OSHA 300 Log of Work-Related Fatalities, Injuries and Illnesses

• The OSHA 300 Log must be maintained by employers unless there is an exemption, based on the NAICS code or the size of the employer. The employer is required to record on the log, within seven calendar days, each fatality, injury or illness that is recordable under OSHA definitions. The host employer is required to enter into its log the injuries or illnesses of outside employees at the worksite under certain conditions, for example, temporary employees who are under the direction and control of the host employer.
• The OSHA 300 Log must be maintained and certified by the employer on an annual basis. For each entry on the log, there must be an OSHA 301 Incident Report form, or its equivalent, which can be the employer’s First Report of Injury or Illness form required by the state worker’s compensation law. An annual summary must be prepared and posted using the 300A annual summary form or an equivalent. In order to comply with OSHA’s recordkeeping requirements, it is critical that employees are trained from their initial employment that they must immediately report any occupational injury or illness to determine if it is recordable.

Document retention: The OSHA 300 Log, the annual summary, and the OSHA Incident Report forms must be retained by employers for five years following the end of the calendar year that these records cover. The OSHA 300 Log must be maintained on an “establishment basis” based on NAICS codes. It is possible that employers may have some “establishments” where a log must be maintained, and others where maintaining a log is not necessary.

General Duty Clause

• Section 5(a)(1) of the Occupational Safety and Health Act requires an employer to identify “recognized hazards likely to cause serious injury or death” to an employee, which hazards may not be regulated by a specific OSHA regulation, and to take “feasible” actions to abate or correct such hazards. This duty can be based upon the “recognition” of the hazard in the employer’s own, existing programs, or within the employer’s industry. Some examples of this legal obligation may cover ergonomics, heat illness, workplace violence and combustible dust.

Document retention: While there are no specific standards for “recognized hazards” covered under the General Duty Clause, and thus no specific record retention requirements, it is advisable for employers to retain any training records it has developed addressing any “recognized hazards” for the duration of employment, including the written policy, training records and documents that evidence discipline for violation of the policy. Remember that certain documents related to General Duty Clause obligations may also fall under exposure/medical recordkeeping requirements.

Disciplinary Records

• There is no regulation that requires an employer to maintain written records of employee discipline for violations of the employer’s safety and health policies. If, however, the employer wants to credibly assert the “unavoidable employee misconduct” defense to avoid liability for OSHA citations, the employer is highly recommended to maintain written records of discipline indicating the nature of the violation, the date, the name of the employee who committed the violation and the name of the supervisor who imposed the discipline.
• This same documentation can be useful in the event that the employer has to defend an employment discrimination or wrongful termination action by being able to prove that the action was based on a legitimate nondiscriminatory reason such as violation of safety and health policies. (SHRM)