OSHA Record Retention Requirements: What to Keep and For How Long

Keeping OSHA records organized is more than a paperwork task. The Occupational Safety and Health Administration (OSHA) administers federal workplace safety requirements under the Occupational Safety and Health Act. Good recordkeeping helps employers document compliance, respond to inspections, and preserve critical information long after an incident or exposure occurs.

The challenge is that OSHA record retention requirements are not the same for every document. Injury and illness records, exposure records, medical records, and training documentation can all follow different retention rules. If you manage safety, HR, or operations, understanding those differences can help prevent important records from being destroyed too early.

What OSHA Record Retention Rules Cover

OSHA recordkeeping and retention requirements apply to several different categories of workplace documentation. Depending on the employer and applicable standards, these can include injury and illness records, occupational exposure monitoring, medical surveillance records, and specific training documentation.

These records often connect directly to the rest of an employer’s written safety program. During an inspection, documentation may be used to establish what happened, what employees were exposed to, what training occurred, and what the employer did in response.

Federal OSHA establishes baseline requirements, but employers should also consider applicable state-plan requirements, standard-specific rules, contractual obligations, and legal holds before destroying records. For general industry employers, some long-term exposure and medical-record requirements are found in 29 CFR 1910.1020, while injury and illness recordkeeping requirements are addressed separately in 29 CFR Part 1904.

How Long Do OSHA Records Need to Be Kept?

The required retention period depends on the type of record and the OSHA standard that applies. The table below provides a quick reference for several common categories.

*The long-term exposure and medical-record requirements summarized above are based on 29 CFR 1910.1020 and apply to covered records involving employees exposed to toxic substances or harmful physical agents. Specified exceptions apply.

This table is a general reference, not a substitute for reviewing the OSHA standard that applies to a specific record, hazard, or workplace.

OSHA 300 Log, 300A Summary, and 301 Reports

OSHA’s injury and illness recordkeeping system centers on the OSHA 300 Log, OSHA 300A Annual Summary, and OSHA 301 Incident Report. Employers covered by OSHA’s recordkeeping requirements use these forms to document qualifying work-related injuries and illnesses.

How Long Should You Keep OSHA 300 Logs?

Employers required to keep these records generally must retain the OSHA 300 Log, OSHA 300A Annual Summary, OSHA 301 Incident Reports, and privacy case list for five years following the end of the calendar year the records cover.

During that five-year retention period, employers must update stored OSHA 300 Logs to include newly discovered recordable injuries or illnesses and to reflect changes that occur in the classification or outcome of previously recorded cases. OSHA does not require the same updates to previously completed 300A summaries or 301 incident reports.

If you're unsure what documentation may be reviewed during an inspection, see What OSHA Inspectors Ask for First.

Employee Exposure Records

OSHA’s access-to-records standard addresses covered employee exposure records involving toxic substances or harmful physical agents. Depending on the circumstances, these records can include environmental monitoring, biological monitoring, material safety information, or other records that reveal the identity and level of an occupational exposure.

Under OSHA’s access-to-records standard, covered exposure records generally must be preserved and maintained for at least 30 years, subject to specified exceptions.

Exposure Monitoring Documentation

In general industry, depending on the applicable standard and monitoring program, exposure documentation may include sampling results, dates, locations, employee or job identifiers, tasks being performed, testing methods, and other information needed to understand the exposure.

Long-term retention matters because some occupational illnesses can develop years after the original exposure. Preserving the historical record can help establish what workplace conditions existed at the time.

What About Safety Data Sheets?

Safety Data Sheets require a little more nuance, particularly when hazardous chemicals are used in the workplace. Under OSHA’s exposure-record requirements, an SDS does not necessarily have to be retained for 30 years if the employer preserves another record identifying the substance or agent, where it was used, and when it was used for at least 30 years.

Employers should therefore avoid simply discarding historical chemical information when a product is discontinued. The recordkeeping system should preserve the chemical identity and workplace-use information required to reconstruct relevant exposure history.

Employee Medical Records

Medical records covered by OSHA’s access-to-records standard can include medical histories, examination results, medical opinions and diagnoses, laboratory findings, treatment information, and other health-related records concerning employees exposed to toxic substances or harmful physical agents.

Under OSHA’s access-to-records rule, these covered medical records generally must be preserved for the duration of employment plus 30 years, subject to specified exceptions and other standard-specific requirements.

OSHA’s rule contains exceptions, so employers should not assume every workplace health-related document automatically falls under the duration-of-employment-plus-30-years requirement. The applicable standard and the type of record should be reviewed before assigning a retention period.

Because these records contain sensitive medical information, employers should maintain appropriate confidentiality and access controls while still ensuring covered records can be produced when access is required by law.

How Long Should You Keep OSHA Training Records?

Unlike the OSHA 300-series records, there is no single OSHA retention period that applies to every training record. Training documentation requirements depend on the specific OSHA standard involved.

That distinction is important. Employers should identify which standards apply to their workforce and determine what documentation each standard requires, what information must be recorded, and whether a specific retention period applies.

For example, OSHA’s Bloodborne Pathogens standard requires training records to include the dates of training sessions, the contents or a summary of the sessions, the names and qualifications of trainers, and the names and job titles of attendees. Those training records must be maintained for three years from the date the training occurred.

A centralized training system can make it easier to document completed training, identify gaps, and retrieve records when they are needed. Learn more about the GotSafety LMS and safety management software.

Medical Surveillance and Standard-Specific Records

Some OSHA standards create additional documentation requirements for medical surveillance, exposure monitoring, testing, fit testing, certifications, or other program-specific records.

These records should not automatically be assigned a generic five-year or 30-year retention period. Employers should identify the standard that created the record and follow its specific documentation and retention requirements.

How to Build an OSHA Record Retention System

A practical retention system starts by separating records according to the rule that controls their retention. Instead of placing every safety-related document into one personnel file, create categories with clearly defined retention triggers.

Common OSHA Record Retention Mistakes

One of the most common mistakes is assuming every OSHA-related document follows the same retention period. An employer may preserve its 300-series records correctly while accidentally destroying covered exposure records, medical records, or standard-specific training documentation too soon.

Another common problem is fragmented storage. Records may be spread across supervisors, HR departments, individual facilities, paper files, and disconnected digital systems. If documentation cannot be located when needed, retrieval can become unnecessarily difficult during an inspection or records request.

Employers should also avoid assuming workers’ compensation files are substitutes for OSHA records. Although some information may overlap, the systems serve different purposes and can have different documentation requirements.

Frequently Asked Questions About OSHA Record Retention

How long must OSHA records be retained?

It depends on the record. OSHA 300-series injury and illness records generally must be retained for five years following the end of the calendar year covered. Covered exposure records involving toxic substances or harmful physical agents are generally retained for at least 30 years, while covered medical records are generally retained for the duration of employment plus 30 years. Other records, including training documentation, can have standard-specific requirements.

How long should employers keep OSHA training records?

OSHA does not impose one universal retention period for every type of training record. Employers should review the standard requiring the training. Some standards establish specific documentation and retention requirements.

How long should OSHA 300 Logs be kept?

Employers required to maintain OSHA 300-series records generally must keep the 300 Log and related required records for five years following the end of the calendar year the records cover.

What employee records may need to be kept for 30 years?

Covered exposure records involving toxic substances or harmful physical agents generally must be retained for at least 30 years under OSHA’s access-to-records standard. Covered medical records generally must be retained for the duration of employment plus 30 years, subject to specified exceptions.

Do Safety Data Sheets need to be kept for 30 years?

Not necessarily. Under OSHA’s exposure-record requirements, an SDS may be discarded if the employer preserves another record identifying the substance or agent, where it was used, and when it was used for at least 30 years. Employers should review the applicable OSHA requirements before disposing of historical chemical information.

Build Your Retention System Before OSHA Asks for the Records

OSHA record retention is easier to manage before an inspection, employee request, or incident exposes gaps in the system. A written retention schedule, clearly assigned ownership, organized storage, and routine documentation reviews can make compliance much more manageable.

Just as importantly, employers should verify the requirement that applies to each record instead of relying on a single company-wide OSHA retention period.

Compliance note: This article provides general educational information and does not replace review of the OSHA standard applicable to your workplace, state-plan requirements, or legal advice. Recordkeeping and retention requirements can vary by industry, hazard, record type, and applicable standard.