29 CFR 1910.1020: OSHA Access to Employee Exposure and Medical Records

Regulatory citation: 29 CFR 1910.1020, Access to employee exposure and medical records (applied to construction by 29 CFR 1926.33)

What Is the Access to Employee Exposure and Medical Records Standard?

Section 1910.1020 gives workers, their designated representatives and OSHA the right to see records about workplace exposure to toxic substances and harmful physical agents. It also sets how long employers must keep those records. It applies whether or not another OSHA standard required the records to be created, and it covers records kept in-house or by contractors such as clinics and labs.

Why Records Access Matters

Many occupational diseases appear years or decades after exposure. Long-term records let workers and doctors link illness to past conditions.

Core Obligations

1. Know Which Records Are Covered (1910.1020(c))

Exposure records include air and biological monitoring results, and safety data sheets or other information identifying the substances used. Medical records include exams, test results, medical opinions and employee medical complaints. Analyses are compilations of exposure or medical data, such as studies of a workforce.

2. Keep Records for the Required Period (1910.1020(d))

Medical records must be kept for the duration of employment plus 30 years. Exposure records and analyses must be kept for at least 30 years. Background data such as lab worksheets need only be kept one year, as long as sampling results, methods and a summary are kept for 30 years. Some items are exempt, including separately kept health insurance claims, certain first aid records and records of employees who worked less than one year if given to them when they leave.

3. Provide Access Promptly (1910.1020(e)(1))

Access must be given in a reasonable time, place and manner. If the employer cannot provide it within 15 working days, it must tell the requester why and give the earliest date the record will be available.

4. Provide Copies Without Charge (1910.1020(e)(1)(iii))

The first copy must be free, either as a copy, use of copying equipment or a loan of the record. Reasonable search and copying costs may be charged for later copies of the same record.

5. Protect Medical Privacy (1910.1020(e)(2))

Employees may see their own medical records. A designated representative needs the employee's specific written consent. Where a physician believes direct access to a terminal illness or psychiatric diagnosis could harm the employee, that information may be released to a designated representative instead.

6. Share Analyses and Give OSHA Access (1910.1020(e)(2)(iii) and (e)(3))

Employees and their representatives can access analyses about their workplace, with personal identifiers removed. Employers must give OSHA prompt access to exposure records, medical records and analyses on request.

7. Inform Employees Every Year (1910.1020(g))

When employees first start work, and at least annually after that, employers must tell them that these records exist, where they are kept, who is responsible for them and how to access them. A copy of the standard must be readily available.

Common Compliance Approaches

Set Up a Records Retention Schedule

Employers list each type of covered record, where it is stored and its retention period. Contracts with occupational health clinics and labs should state who holds records and for how long.

Use a Standard Request Process

A simple request form and a named records contact help meet the 15 working day window and keep a log of what was released.

Plan for Business Changes

If a business closes or is sold, records must pass to the successor employer. Where there is no successor, current employees must be notified of their access rights at least three months before the business closes.

Example: Records Access in Practice

A retired machinist asks his former employer for his noise monitoring data and hearing test results from 15 years ago. The safety manager finds the exposure data in the archive and asks the contract clinic for the audiograms. Because the clinic needs extra time, the manager writes to the retiree within 15 working days explaining the delay and the expected date. Both records are sent free of charge.

Related regulations: OSHA injury and illness recordkeeping, OSHA occupational noise exposure, OSHA lead in construction.

Note: 29 CFR 1926.33 states that the construction requirements are identical to those in 1910.1020, so the same rules apply on construction sites.

Frequently Asked Questions

Do former employees have access rights?

Yes. The standard covers current and former employees, and the records must be kept long after employment ends.

Can an employer refuse access to protect trade secrets?

Employers may withhold certain trade secret details, but not information needed to know where and when exposure happened. In a medical emergency, chemical identities must be disclosed to the treating health professional right away.

Are OSHA 300 logs covered by this standard?

No. Injury and illness logs are covered by OSHA's separate recordkeeping rules in 29 CFR Part 1904.