OSHA 300 Recordkeeping Rules & Requirements February 1 to April 30, 2025

Original posting date: December 23, 2024

Under OSHA’s recordkeeping regulation, certain covered employers are required to prepare and maintain records of serious occupational injuries and illnesses using the OSHA 300 Log. This information is important for employers, workers and OSHA in evaluating the safety of a workplace, understanding industry hazards, and implementing worker protections to reduce and eliminate hazards.

The Summary must be physically posted, in a place where employees are used to finding notices, from February 1 to April 30. During that time, you must make sure that the Summary is not removed, altered, or defaced.

Did You Know?

Employers must electronically submit 2024 injury and illness data from OSHA Form 300A by March 2 if they have:

  • 250 or more employees and are currently required to keep OSHA injury and illness records.
  • 20-249 employees classified in specific industries with historically high rates of occupational injuries and illnesses.

Visit OSHA’s Injury Tracking Application webpage for more information and to submit data online.

When electronically submitting OSHA Form 300A, you must provide your Employer Identification Number.

Is your organization required to prepare and maintain records under current rules?

To find out if you are required to prepare and maintain records under the updated rule, first determine your NAICS code by:

  1. Using the search feature at the U.S. Census Bureau NAICS main webpage.  In the search box for the most recent NAICS, enter a keyword that describes your business. Choose the primary business activity that most closely corresponds to you, or refine your search to get more choices.
  2. Viewing the most recent complete NAICS tables on the U.S. Census Bureau NAICS main webpage. Select the two-digit sector code and choose a six-digit industry code to read its definition.
  3. Using an old SIC code to find your NAICS code using the detailed conversion tables on the U.S. Census Bureau Concordances page.
  4. Contacting your nearest OSHA office or State agency for help.

Once you have found your NAICS code, you can use the following table to determine if your industry is exempt from the recordkeeping rule.

NOTE: Establishments in companies with 10 or fewer employees at all times in the previous year continue to be exempt from keeping OSHA records, regardless of their industry classification.  The partial exemption for size is based on the number of employees in the entire company.

Forms Needed for Completion:

The OSHA injury and illness recordkeeping forms are:

  • the Log of Work-Related Injuries and Illnesses (OSHA Form 300),
  • the Summary of Work-Related Injuries and Illnesses (OSHA Form 300A), and
  • the Injury and Illness Incident Report (OSHA Form 301).

Employers must fill out the Log and the Incident Report only if a recordable work-related injury or illness has occurred. Employers must fill out and post the Summary annually, even if no recordable work-related injuries or illnesses occurred during the year.

In place of the OSHA forms, employers may also use equivalent forms (forms that have the same information, are as readable and understandable, and are completed using the same instructions as the OSHA forms they replace). Many employers use an insurance form instead of the Incident Report, or supplement an insurance form by adding information required by OSHA.

Additional Information:

OSHA Fact Sheet

OSHA Exempt Industries FAQ Sheet

OSHA Recordkeeping Forms

OSHA 300 & 300A PDF Forms

How does OSHA define a recordable injury or illness?

  • Any work-related fatality.
  • Any work-related injury or illness that results in loss of consciousness, days away from work, restricted work, or transfer to another job.
  • Any work-related injury or illness requiring medical treatment beyond first aid.
  • Any work-related diagnosed case of cancer, chronic irreversible diseases, fractured or cracked bones or teeth, and punctured eardrums.
  • There are also special recording criteria for work-related cases involving: needlesticks and sharps injuriesmedical removalhearing loss; and tuberculosis.

How does OSHA define first aid?

  • Using a non-prescription medication at nonprescription strength (for medications available in both prescription and non-prescription form, a recommendation by a physician or other licensed health care professional to use a non-prescription medication at prescription strength is considered medical treatment for recordkeeping purposes);
  • Administering tetanus immunizations (other immunizations, such as Hepatitis B vaccine or rabies vaccine, are considered medical treatment); Cleaning, flushing or soaking wounds on the surface of the skin
  • Using wound coverings such as bandages, Band-Aids™, gauze pads, etc.; or using butterfly bandages or Steri-Strips™ (other wound closing devices such as sutures, staples, etc., are considered medical treatment);
  • Using hot or cold therapy;
  • Using any non-rigid means of support, such as elastic bandages, wraps, non-rigid back belts, etc. (devices with rigid stays or other systems designed to immobilize parts of the body are considered medical treatment for recordkeeping purposes);
  • Using temporary immobilization devices while transporting an accident victim (e.g., splints, slings, neck collars, back boards, etc.). Drilling of a fingernail or toenail to relieve pressure, or draining fluid from a blister;
  • Using eye patches;
  • Removing foreign bodies from the eye using only irrigation or a cotton swab;
  • Removing splinters or foreign material from areas other than the eye by irrigation, tweezers, cotton swabs or other simple means;
  • Using finger guards;
  • Using massages (physical therapy or chiropractic treatment are considered medical treatment for recordkeeping purposes); or
  • Drinking fluids for relief of heat stress.

OSHA Record Retention Requirements

  • Hazardous Energy: Certification requirements for 1 year
  • Noise Exposure: Two Years
  • PPE: Duration of Employment
  • Hazard Communication: Duration of Employment Plus 30 Years
  • Confined Space Permits: One Year
  • Respiratory Protection: Duration of Employment Plus 30 Years
  • Electric Safety: Safety records for the duration of employment
  • Medical Exposure Records: Duration plus 30 Years
  • OSHA 300 Log: 5 Years, following the end of the calendar year
  • Other’s Training, Discipline, General Duties Clause

Know the state regulations on record keeping as well.

https://www.shrm.org/resourcesandtools/hr-topics/risk-management/pages/osha-document-retention-requirements.aspx

Categories of Documents

  • The following list sets out the typical OSHA standards and the General Duty Clause that may require an employer to create, retain and produce certain documents during the course of an inspection, if requested by the OSHA compliance officer. Obviously, whether the employer is required to have certain of these programs or others will be dependent upon the nature of the work activities at the site. This list is focused on the standards that are applicable to employers in general industry and not construction, although some general industry standards are substantially similar and also applicable to the construction industry. There are many hazards that are common to each industry but the regulatory obligations frequently differ. For those employers in the construction industries, it will be necessary to reference the existing regulations addressing hazards in that industry when responding to an OSHA document request.
  • During the inspection, the employer should request the compliance officer to make the document request in writing (it can be handwritten) so that there is no confusion over what documents are being requested and so that the employer is not cited for failure to produce a document it did not believe was requested by the compliance officer. The employer’s onsite representative should review this request with management and decide which documents will be produced to the compliance officer. It is important to remember that the employer has no duty to produce certain documents (e.g., post-accident investigations, insurance audits, consultant reports, employee personnel information) because no regulation requires such production. It is important to note that any documents produced can be utilized to issue citations, thus, the employer should not produce any documents unless required by law.

Control of Hazardous Energy – Lockout/Tagout (LOTO)

  • The regulation requires the employer to develop procedures to protect employees who service or maintain its machines against unexpected energization or startup of equipment or release of stored energy. The employer must train its “authorized” employees how to perform LOTO with these procedures, as well as “affected” employees who may be exposed to the equipment. The rule requires the onsite employer and outside employer to inform each other of their respective lockout or tagout procedures.

Document retention: The LOTO standard requires employers to certify that periodic inspections have been performed at least annually. Accordingly, employers should retain certifications for one year, or until a new certification is created. It is also advisable that employers retain employee LOTO training records for the duration of employment.

Occupational Noise Exposure

  • The standard requires the employer to provide a hearing conservation program (education, annual audiograms, hearing protection) for employees who are exposed to noise levels equal to or exceeding an 8-hour time-weighted average of 85 decibels on the A scale. The employer must conduct a noise survey to determine those jobs which may require employees to be included in the program. Employees who suffer hearing loss at certain frequencies must be included on the OSHA 300 Log. The employer must develop a written program and administer it.

Document retention: Employers must retain noise exposure measurement records for two years. Employers must also retain audiometric test records for the duration of the affected employee’s employment.

Personal Protective Equipment (PPE)

  • The employer must conduct an initial certified hazard assessment of the workplace to determine if hazards are present which require personal protective equipment for eyes, face, head and extremities to protect against injury. The employer must provide each employee with the necessary PPE, train the employee in the use of PPE and enforce its use. The employer must pay for the PPE with limited exceptions.
  • A second certification is required to confirm that the PPE was provided, the employee received training in how to utilize it and that the employee “understood” the training.

Document retention: Employers should retain the written certifications of a hazard assessment and employee training for the duration of employment for all employees exposed to identified hazards. It is also advisable for employers to retain employee PPE training records for the duration of employment.

Hazard Communication (Employee Right to Know)

  • The regulation requires the employer to develop a written hazard communication program to protect employees against any hazardous chemical which presents a physical or health hazard. The employer is required to conduct an assessment to determine which hazardous chemicals may be present, to inform employees of the presence of the hazardous chemicals, and train employees on how to read a safety data sheet (SDS) for each hazardous chemical.
  • Employees are entitled to access to the SDSs and to obtain copies.

Document retention: Employers must retain SDSs for the duration of employment plus 30 years for all employees exposed to the chemical in question, unless there is some other record of the identity of the substance or chemical, where it was used and when it was used. The employer must also be sure it has a copy of all SDSs for all chemicals that are currently in use. It is also advisable for employers to retain employee hazard communication training records for the duration of employment.

Process Safety Management (PSM)

  • This standard requires employers who utilize certain toxic, reactive, flammable or explosive chemicals in certain quantities, to develop a written fourteen (14) part PSM program. The PSM program addresses all aspects of work around the covered “process” that utilizes the chemicals.
  • The regulations requires training of contractor employees who perform certain work around the covered process concerning the hazards and elements of the PSM program.

Document retention: Employers must retain process hazard analyses (PHAs) for the life of the covered process. In addition, the employer must prepare a written record that each employee who is involved in the operation of the process was trained and understood the training. These verification records should be retained for the length of the employee’s employment. We recommend that employers also retain all process safety information (PSI) used for developing, maintaining, auditing, and otherwise managing all processes for the life of the processes. Any incident investigations conducted under the PSM standard must be retained for five years. Additionally, employers must retain the two most recent compliance audit reports conducted under the PSM standard.

Emergency Action Plans (EAPs)

  • The rule requires the employer to develop an emergency action plan to protect employees against the hazards of fires or other emergencies. The EAP must include provisions for reporting a fire or other emergency, evacuation procedures and the alarm system. The employer must train each employee.

Document retention: There are no specific document retention requirements, aside from the requirement that employers develop and maintain a written EAP. If the employer has ten or fewer employees, the plan does not have to be in writing.

Fire Extinguishers

  • Employers required to provide fire extinguishers must mount, locate and identify them so that they are readily accessible to employees.
  • If employees are expected to use the fire extinguishers, the employer must provide training upon initial employment and at least annually thereafter. The employer must develop an educational program if it expects the employees to use the fire extinguishers. Many employers specifically prohibit employees from using the fire extinguishers to avoid this training obligation. If the employer permits the employees to use the fire extinguishers, the educational program and training should be in writing and maintained for the length of employment.

Permit-Required Confined Spaces

  • Employers are required to identify all confined spaces within the workplace that employees or outside contractors may be required to enter and contain a hazardous atmosphere, engulfment hazard, an internal configuration that could trap or asphyxiate an entrant or other serious safety or health hazard. The employer must develop a written program and procedures for employees who enter the confined spaces. Only trained and authorized employees can enter the space.
  • The standard requires the host-employer to provide certain information to other contractors who will have their employees enter the space.

Document retention: Employers must retain each canceled entry permit for at least one year and review them within one year after each entry. It is also advisable to retain employee confined space training records for the duration of employment.

Bloodborne Pathogens

  • This regulation requires an employer to develop a written program to protect employees at the workplace who are reasonably expected to have occupational exposure to bloodborne pathogens, i.e., bloodborne diseases. The employer is required to assess all jobs to determine if there is such exposure and if so, to train employees in the hazards, provide PPE and to develop procedures for medical evaluation and treatment if an employee has actual exposure.

Document retention: Employers must retain employee exposure records for the duration of employment plus 30 years. Training records must be retained for three years from the date on which the training occurred, although it is advisable to retain training records for the duration of employment.

Respiratory Protection

  • The standard requires the employer to conduct an assessment of the workplace to determine if there are harmful dusts, fumes, mists, sprays or vapors which may create a respiratory health hazard. If there are such hazards, the employer is required to develop a written respiratory protection program, to evaluate employees to determine if they are physically capable of wearing a respirator, to provide such respiratory protection at the employer’s cost, and train employees how to wear and maintain respiratory protection. The employer must enforce use of the respiratory protection.

Document retention: Employers must retain records of employee medical evaluations for the duration of employment plus 30 years. Employers must also retain fit-test records for respirator users until the next fit test is administered.

Electrical Safety (Safety-Related Work Practices)

  • The rules require an employer who will permit its employees to perform work on or in the vicinity of exposed energized parts (which cannot be locked out and tagged out) to provide extensive training in the hazards of working or in the vicinity of live electrical equipment, protective clothing and insulated tools and devices. The employer must designate employees as “authorized” in order to perform such work or “unqualified” in which case such employees cannot perform such work. The employer may be required to conduct an electrical exposure hazard survey of electrical equipment under NFPA 70E in order to determine what PPE should be used, what training is necessary, and to otherwise be in compliance with OSHA safety requirements.

Document retention: OSHA’s electrical safety standards do not have any specific record retention requirements, however it is advisable to retain employee training records under these standards for the duration of employment. If an employer conducts an electrical exposure hazard survey, the employer should retain it for as long as the hazard exists.

Access to Employee Exposure and Medical Records

  • Employers are required to inform employees of their right to have access to all records maintained by the employer that reflect an employee’s exposure to any toxic substance or harmful physical agent (e.g., chemicals, dusts, vapors, noise, mold, etc.) or any medical records which the employer maintains on an employee, except for certain exceptions. Employees are entitled to have access and to obtain a copy at the employer’s expense.

Document retention: Employers must retain employee exposure records for the duration of employment plus 30 years. If the employer maintains certain employee medical records, the employer must retain them for the duration of employment plus 30 years.

Powered Industrial Trucks

  • The regulation requires an employer to develop a written program to train all employees who will be required and authorized to operate powered industrial trucks (including forklifts, manlifts, etc.) as to the hazards of such equipment and to certify their training after they receive classroom-type training and are actually observed operating the equipment under the physical conditions at the workplace, such as aisles, ramps, etc. The employee must be retrained and recertified every three years, at minimum, or after an accident or “near miss” which resulted from an unsafe act.

Document retention: The powered industrial truck standard does not specify how long training certifications must be retained after the initial certification or the certification required every three years or after a near miss. It is advisable that employers retain the training certifications for the duration of employment for each employee.

OSHA 300 Log of Work-Related Fatalities, Injuries and Illnesses

  • The OSHA 300 Log must be maintained by employers unless there is an exemption, based on the NAICS code or the size of the employer. The employer is required to record on the log, within seven calendar days, each fatality, injury or illness that is recordable under OSHA definitions. The host employer is required to enter into its log the injuries or illnesses of outside employees at the worksite under certain conditions, for example, temporary employees who are under the direction and control of the host employer.
  • The OSHA 300 Log must be maintained and certified by the employer on an annual basis. For each entry on the log, there must be an OSHA 301 Incident Report form, or its equivalent, which can be the employer’s First Report of Injury or Illness form required by the state worker’s compensation law. An annual summary must be prepared and posted using the 300A annual summary form or an equivalent. In order to comply with OSHA’s recordkeeping requirements, it is critical that employees are trained from their initial employment that they must immediately report any occupational injury or illness to determine if it is recordable.

Document retention: The OSHA 300 Log, the annual summary, and the OSHA Incident Report forms must be retained by employers for five years following the end of the calendar year that these records cover. The OSHA 300 Log must be maintained on an “establishment basis” based on NAICS codes. It is possible that employers may have some “establishments” where a log must be maintained, and others where maintaining a log is not necessary.

General Duty Clause

  • Section 5(a)(1) of the Occupational Safety and Health Act requires an employer to identify “recognized hazards likely to cause serious injury or death” to an employee, which hazards may not be regulated by a specific OSHA regulation, and to take “feasible” actions to abate or correct such hazards. This duty can be based upon the “recognition” of the hazard in the employer’s own, existing programs, or within the employer’s industry. Some examples of this legal obligation may cover ergonomics, heat illness, workplace violence and combustible dust.

Document retention: While there are no specific standards for “recognized hazards” covered under the General Duty Clause, and thus no specific record retention requirements, it is advisable for employers to retain any training records it has developed addressing any “recognized hazards” for the duration of employment, including the written policy, training records and documents that evidence discipline for violation of the policy. Remember that certain documents related to General Duty Clause obligations may also fall under exposure/medical recordkeeping requirements.

Disciplinary Records

  • There is no regulation that requires an employer to maintain written records of employee discipline for violations of the employer’s safety and health policies. If, however, the employer wants to credibly assert the “unavoidable employee misconduct” defense to avoid liability for OSHA citations, the employer is highly recommended to maintain written records of discipline indicating the nature of the violation, the date, the name of the employee who committed the violation and the name of the supervisor who imposed the discipline.
  • This same documentation can be useful in the event that the employer has to defend an employment discrimination or wrongful termination action by being able to prove that the action was based on a legitimate nondiscriminatory reason such as violation of safety and health policies. (SHRM)

2025 New York State Retailer Worker Safety Act

Additional Information by State

New York Governor Kathy Hochul signed a bill on September 4, 2024 that requires retail employers to develop and implement workplace violence prevention training and policies, among other measures. The law becomes effective 180 days after her signature, or March 3, 2025.

The “Retail Worker Safety Act,” (the “Act”) applies to any person, entity, business, or company that has at least 10 employees working at a retail store. A “retail store” is defined as a store that sells consumer commodities at retail and is not primarily engaged in the sale of food for consumption on the premises. It requires covered employers to adopt a workplace violence prevention policy to be provided to all employees upon hire and annually thereafter.

The Act further requires covered employers to implement a workplace violence prevention training program and present it to their employees upon hire and annually thereafter.

Additionally, this law requires covered employers to provide panic buttons to their retail workers to be used in case of an emergency (more on this requirement below). (Littler)

Retailers With 10+ Employees

The act covers all employers with at least 10 retail employees who work at a retail store, which is defined broadly as “a store that sells consumer commodities at retail and which is not primarily engaged in the sale of food for consumption on the premises.”

Written Workplace Violence Prevention Policies – the act requires employers to assess potential workplace violence hazards and adopt written workplace violence prevention policies that address risk factors and prevention methods. Notably, the act requires the Department of Labor (“DOL”) to create and publish a model retail workplace violence prevention guidance document and retail workplace violence prevention policy. The model policy will:

  1. Outline a list of factors or situations in the workplace that might place retail employees at risk of workplace violence, including, but not limited to:
    1. Working late-night or early-morning hours;
    1. Exchanging money with the public;
    1. Working alone or in small numbers; and
    1. Uncontrolled access to the workplace.
  2. Outline methods that employers may use to prevent incidents of workplace violence, including, but not limited to, establishing and implementing reporting systems for incidents of workplace violence.
  3. Include information concerning the federal and state statutory provisions concerning violence against retail workers and remedies available to victims of violence in the workplace and statement that applicable local laws may exist.
  4. Clearly state that retaliation against individuals who complain of workplace violence or the presence of factors or situations in the workplace that might place retail employees at risk of workplace violence, or who testify or assist in any proceeding under the law, is unlawful.

Employers subject to the act are required to adopt the model policy or to implement their own policy that equals or exceeds the minimum standards set forth in the statute and the model policy. Accordingly, in the event an employer enacts a workplace violence prevention policy before the DOL issues its model policy, it is important that the policy satisfy these statutory elements.

Moreover, the workplace violence prevention policy must be provided to all employees in writing upon hire and annually thereafter.

Workplace Violence Prevention Training – the act mandates that employers conduct interactive workplace violence prevention training, a model of which will be published by the DOL. Employers subject to the act must utilize the model training or establish training that equals or exceeds the minimum standards provided by the model. Importantly, the training must be interactive and include, but not be limited to:

  1. Information regarding the requirements of the act;
  2. Examples of measures retail employees can use to protect themselves when faced with workplace violence from customers;
  3. De-escalation tactics;
  4. Active-shooter drills;
  5. Emergency procedures;
  6. Instructions on the use of security alarms, panic buttons, and other related emergency devices;
  7. Supervisor conduct and additional responsibilities for supervisors to address workplace-specific emergency procedures; and
  8. Identification of a site-specific list of emergency exits and meeting places in case of emergency.

The workplace violence prevention training must be provided upon hire and on an annual basis thereafter.

Written Notice – the act mandates that employers provide retail employees upon hire and at each annual training a written notice in English and in the language identified by each employee as their primary language (so long as the DOL has issued a model in that language). If the DOL has not issued a model in an employee’s primary language, the employer may provide an English-language notice.

These requirements are effective March 3, 2025.

Retailers With 500+ Employees

Effectively January 1, 2027, employers with 500 or more employees nationwide will be required to install panic buttons in their New York locations. Under the act, employers must either install buttons throughout their stores or provide wearable or mobile phone-based panic buttons to employees. If the employer chooses to utilize wearable or mobile phone-based panic buttons, the employer must provide such panic buttons to all retail employees. When activated, the button would alert the local 9-1-1 public safety answering point, relay the employee’s location, and dispatch local law enforcement to the site. (Lexicology)

Additional Recommendations

Employers take a close look at the DOL’s model policy and training and ensure that any training and policies adopted are complaint with this new law. One additional item to be aware of: the policy must be provided in the employee’s primary language