OSHA Records Retention in Healthcare: What to Keep and How Long

OSHA Records Retention Overview

OSHA records retention in healthcare ensures you can prove compliance, protect employees, and respond quickly to inspections or incident reviews. Strong healthcare employer recordkeeping supports safer facilities and smoother operations, especially during an OSHA compliance audit.

At a glance, most work-related injury logs are kept for five years, while employee medical records and toxic substance exposure documentation are typically preserved much longer—often for the duration of employment plus 30 years. Training documentation compliance depends on the specific standard, so you should align retention with the applicable injury and illness reporting standards and program rules.

Hospitals, clinics, long‑term care, home health, ambulatory surgery centers, and medical laboratories all benefit from a structured retention plan that clearly assigns responsibilities, storage locations, and time frames.

Types of OSHA Records in Healthcare

Core record categories

• Injury and illness records: OSHA 300 Log, 300A Summary, and 301 Incident Reports that capture work-related cases and trends.
• Sharps injury log: A case list of needlestick and other sharps-related injuries applicable to many healthcare settings.
• Employee medical records: Health histories, exam results, vaccination status (for example, hepatitis B), post-exposure evaluations, and healthcare professional opinions.
• Exposure records: Monitoring and sampling data for chemicals, anesthetic gases, hazardous drugs, disinfectants, noise, or other harmful agents; safety data sheets (SDS) or equivalent chemical identity records.
• Training documentation: Proof of initial and refresher training for programs like bloodborne pathogens, hazard communication, respiratory protection, and emergency response.

Together, these files demonstrate healthcare employer recordkeeping discipline and readiness under injury and illness reporting standards.

Retention Period for Injury and Illness Logs

Keep the OSHA 300 Log, 300A Summary, and 301 Incident Reports for five years following the end of the calendar year they cover. During this period, update the 300 Log if case status changes (for example, restricted duty becomes days away) so your data remains accurate.

• OSHA 300 Log: Retain for five years; update as new information becomes available.
• OSHA 301 Incident Reports: Retain for five years for each recordable case.
• OSHA 300A Annual Summary: Retain the signed summary for five years.
• Sharps injury log: Maintain for the same five‑year period used for injury and illness records.

Accurate work-related injury logs help you spot trends, verify corrective actions, and substantiate decisions during an OSHA compliance audit.

Retention Period for Medical Records

Maintain employee medical records for the duration of employment plus 30 years. This extended period supports long‑term health tracking, especially where latent effects may occur. Safeguard confidentiality by limiting access to authorized individuals and storing records securely.

What counts as a medical record

• Medical and occupational histories, physical exam results, lab findings, and diagnostic interpretations relevant to work.
• Vaccination and immunization status (for example, hepatitis B), post‑exposure evaluations, and healthcare provider written opinions.
• First-aid entries incorporated into the medical record.

Key exceptions and practical notes

• For employees who worked less than one year, you may transfer their medical records to them at termination instead of retaining for 30 years.
• Minor, one‑time first‑aid records that are not made part of the medical record may be excluded from the 30‑year requirement; however, keep any related injury and illness entries for five years.
• Store medical information separately from HR files and maintain a clear release process for employee access requests.

Retention Period for Exposure Records

Maintain exposure records for at least 30 years. These files document the presence, level, and duration of workplace exposure to toxic substances or harmful physical agents and are essential for long‑term health evaluations and regulatory reviews.

What counts as an exposure record

• Air and surface sampling results for chemicals, anesthetic gases, hazardous drugs, sterilants, and disinfectants.
• Biological monitoring results that assess absorption or uptake from work activities.
• Noise dosimetry, radiation dose reports, or other physical agent measurements used to evaluate risk.
• Safety Data Sheets (SDS) or, when not retained, a chemical identity list with the substance name, where it was used, and the dates of use kept for 30 years.

Robust toxic substance exposure documentation lets you correlate health outcomes with past conditions and respond credibly to employee inquiries and inspections.

Retention of Training Records

Training documentation compliance varies by program. Keep records organized by standard, capture dates, topics, and trainer qualifications, and maintain them long enough to demonstrate continuous compliance.

Typical retention expectations in healthcare

• Bloodborne pathogens: Keep training records for at least three years from the training date; maintain related medical and vaccination records for the duration of employment plus 30 years.
• Respiratory protection: Retain fit test records until the next fit test (typically annually). Keep medical evaluations as part of the employee’s medical record for the duration of employment plus 30 years; maintain training documentation to demonstrate annual training.
• Hazard communication: While no fixed OSHA retention period is specified for training, retain proof of training for the duration of employment and as long as relevant hazards are present; many healthcare employers keep these records for several years to support audits.
• Emergency response/HAZWOPER (where applicable): Maintain certificates and refresher proof for the duration of employment to show qualifications are current.

When a specific standard does not state a period, a defensible practice is to keep training records for the duration of employment plus several years to cover audits and incident look‑backs.

Importance of Accurate Recordkeeping

Accurate records help you prevent injuries and illnesses, demonstrate due diligence, and maintain trust with staff. They also streamline responses to incident reviews, claims, and accreditation surveys while sustaining compliance during any OSHA compliance audit.

• Risk reduction: Trend analysis of logs and exposure data helps you target controls before problems escalate.
• Regulatory defense: Clear, consistent files show that injury and illness reporting standards and program rules were followed.
• Continuity and quality: Organized files speed onboarding, refreshers, and program updates across departments and shifts.
• Employee confidence: Transparent access to exposure and medical information reinforces a strong safety culture.

Conclusion

Keep injury and illness logs for five years, preserve exposure and employee medical records for the duration of employment plus 30 years, and retain training documentation according to the governing standard—longer when no period is specified. This disciplined approach to healthcare employer recordkeeping aligns day‑to‑day operations with OSHA’s expectations and protects your workforce over the long term.

FAQs

What OSHA records must healthcare employers retain?

You must retain work‑related injury logs (OSHA 300/300A/301), any sharps injury log, employee medical records related to occupational health, and exposure records such as sampling data and SDS or chemical identity lists. Keep training documentation for programs like bloodborne pathogens, hazard communication, and respiratory protection to demonstrate ongoing compliance.

How long should injury and illness logs be kept?

Retain the OSHA 300 Log, 300A Summary, and 301 Incident Reports for five years following the end of the calendar year they cover. Update the 300 Log during that period if case classifications or outcomes change.

What is the retention period for employee medical records?

Keep employee medical records for the duration of employment plus 30 years. This includes exam results, vaccination status, post‑exposure evaluations, and provider opinions. Limited exceptions apply to brief employment where records are transferred to the employee and to minor, one‑time first‑aid records not incorporated into the medical record.

How are exposure records maintained under OSHA?

Maintain exposure records—such as air monitoring, biological monitoring, noise or radiation measurements—for at least 30 years. Retain SDS for chemicals or, if not kept, maintain a 30‑year chemical identity list showing the substance, where it was used, and when.