OSHA Recordkeeping Requirements Under 29 CFR 1904
The Occupational Safety and Health Administration's recordkeeping regulation — 29 CFR 1904 — requires US employers to maintain accurate records of work-related injuries and illnesses. These records serve three purposes: they help employers identify injury patterns and improve safety programs; they inform OSHA enforcement and inspection targeting; and they provide workers and their representatives with transparency about workplace hazard exposure.
The regulation applies to employers with 11 or more employees, unless the establishment's primary activity is classified in a partially exempt industry (generally low-hazard service sectors). Even exempt employers must report fatalities, hospitalisations, amputations, and eye losses — the so-called "severe injury reporting" requirements of 29 CFR 1904.39.
For covered employers, maintaining compliance with 29 CFR 1904 manually is time-consuming and error-prone. OSHA compliance software like HSETrack automates the most labour-intensive elements — recordability evaluation, log maintenance, and annual summary generation — while ensuring the data quality and audit trail that OSHA inspectors expect.
The Three Required OSHA Recordkeeping Forms
OSHA 29 CFR 1904 requires three specific forms for each establishment. HSETrack generates or populates all three from data captured during the standard incident reporting workflow — no separate data re-entry required.
OSHA Form 300 — Log of Work-Related Injuries and Illnesses
The Form 300 is a running log of each recordable work-related injury and illness. It must be maintained for each establishment throughout the calendar year. Each case must be recorded within 7 calendar days of learning of the recordable event. HSETrack automatically populates the Form 300 log as incidents are reported and classified — including case number, employee information, description, body part affected, and classification (days away, restricted work, other recordable, etc.).
OSHA Form 300A — Annual Summary
Form 300A is an annual summary of the preceding year's injury and illness data. It must be posted at each establishment from February 1 through April 30 of the year following the year it covers. It must be certified by a company executive. Establishments subject to electronic submission requirements (generally 20+ employees in certain industries) must also submit Form 300A data to OSHA's Injury Tracking Application (ITA) by March 2. HSETrack generates the Form 300A summary automatically from incident data, including all required totals and rates.
OSHA Form 301 — Injury and Illness Incident Report
Form 301 is a detailed report for each individual recordable case, capturing the nature of the injury, the body part affected, the task being performed, the object or substance involved, and how the event occurred. It must be completed within 7 calendar days of learning of the recordable case. HSETrack's incident report form captures all Form 301 data fields during the standard reporting workflow — the incident record effectively serves as the Form 301 equivalent. Employers may substitute a workers' compensation first report of injury form for the 301 if it contains equivalent information.
OSHA Recordability: What Must Be Recorded?
Determining whether a work-related injury or illness is OSHA recordable is one of the most common areas of confusion — and one of the most frequently cited violations. The basic rule (29 CFR 1904.7) is that a work-related injury or illness is recordable if it results in any of the following:
- Death (always recordable — also triggers the 8-hour severe injury report)
- Days away from work (including zero-day cases where the injury is diagnosed as requiring future restricted duty)
- Restricted work or job transfer
- Medical treatment beyond first aid (see the specific 15-item first aid definition in 29 CFR 1904.7(a))
- Loss of consciousness
- Diagnosis of a significant injury or illness by a healthcare professional, even if none of the above apply
The distinction between first aid (not recordable) and medical treatment beyond first aid (recordable) is technically precise. OSHA's first aid definition includes 15 specific treatment types — items like non-prescription medication at non-prescription strength, tetanus immunisations, and wound closure with butterfly bandages. Any treatment not enumerated in 29 CFR 1904.7(a) — including prescription medication, physical therapy, or any surgical procedure — makes the case recordable.
HSETrack's incident form includes a guided recordability evaluation workflow. As incident data is entered, the platform evaluates the treatment received against the OSHA first aid definition and flags cases that meet recordability criteria — reducing the risk of missed recording due to misclassification.
Common OSHA Recordkeeping Citations and How Software Prevents Them
OSHA recordkeeping violations are among the most commonly issued citations. Penalties range from $16,550 per violation (serious) to $165,514 for willful or repeat violations. These are the six most frequently cited recordkeeping failures — and how HSETrack addresses each one:
Failure to Record Recordable Cases
Missing cases that meet OSHA recordability criteria — typically because the employer misclassified treatment as first aid or failed to determine work-relatedness correctly.
Failure to Post Form 300A
Failure to post the annual Form 300A summary at each establishment from February 1 through April 30. Many employers post it once and remove it early.
Failure to Provide Access to Records
Employers must provide current and former employees, their representatives, and OSHA with access to OSHA records by the end of the next business day.
Late Reporting of Severe Injuries
Failure to report work-related fatalities within 8 hours or in-patient hospitalisations, amputations, or eye losses within 24 hours — one of the most penalised violations.
Failure to Retain Records for 5 Years
Disposing of OSHA records before the 5-year retention period expires — or failing to update records when case classifications change during the retention period.
Failure to Submit Electronic Records to ITA
Establishments meeting the electronic submission thresholds failing to submit Form 300A data to OSHA's Injury Tracking Application by the March 2 annual deadline.
How HSETrack Automates OSHA Compliance
HSETrack is built to meet the data requirements of 29 CFR 1904 as a byproduct of standard incident reporting — not as a separate compliance task. These are the specific OSHA compliance capabilities the platform provides:
Recordability Evaluation Workflow
HSETrack's incident form includes a guided recordability assessment. The platform evaluates treatment type, work-relatedness, and case classification against OSHA criteria and flags whether the case should be entered on the Form 300 log — reducing the risk of missed recording due to misclassification or lack of OSHA knowledge.
Automated OSHA 300 Log Maintenance
As recordable cases are confirmed, they are automatically added to the Form 300 log with all required fields populated from the incident record. The log can be reviewed, exported, and printed at any time. If a case classification changes during the 5-year retention period, the log update is recorded with an audit trail.
Form 300A Annual Summary Generation
At year end, HSETrack generates the Form 300A annual summary automatically — including total recordable cases, days away from work, restricted work days, DART rate, TRIR, and all required rate calculations. The summary is formatted for posting and for electronic submission to OSHA's Injury Tracking Application (ITA).
Severe Injury Reporting Alerts
When an incident is classified as a fatality, in-patient hospitalisation, amputation, or eye loss, HSETrack automatically triggers a high-priority alert to designated safety managers. The alert includes the applicable OSHA reporting deadline — 8 hours for fatalities, 24 hours for other severe injuries — and records the notification timestamp for audit evidence.
Training Record Management
OSHA compliance extends beyond recordkeeping to training requirements across dozens of specific standards. HSETrack's training record module tracks completed training by employee, course, and date — with automated reminders when certifications approach expiry. An OSHA inspector can request evidence of training compliance for specific standards at any time; HSETrack provides instant access to a complete training history for every employee.
5-Year Retention and Audit Trail
All incident records, Form 300 logs, and Form 300A summaries are retained in HSETrack for the full 5-year period required by 29 CFR 1904.33. Every record includes an immutable audit trail showing who created it, who modified it, and when. If an OSHA inspector requests records for a prior year, they can be retrieved immediately — no filing cabinet search required.
For the complete picture of how HSETrack manages the broader safety compliance lifecycle, see our guide to HSE compliance software — covering compliance frameworks beyond US OSHA.
OSHA Standards HSETrack Helps You Comply With
OSHA compliance extends well beyond recordkeeping. HSETrack's inspection, training, and workflow modules support compliance across a broad range of substantive safety standards in addition to the 1904 recordkeeping framework.
Form 300 log maintenance, Form 300A annual summary generation, Form 301 incident reports, ITA electronic submission export, severe injury 8/24-hour reporting alerts, and 5-year audit trail. The core OSHA compliance capability in HSETrack.
For facilities handling threshold quantities of highly hazardous chemicals: HSETrack supports PSM through permit-to-work (hot work, confined space), incident investigation documentation, management of change tracking, and pre-startup safety review records. PSM requires structured incident investigation for every process incident — HSETrack provides the RCA workflow and corrective action tracking PSM auditors expect.
Construction operations under 29 CFR 1926 require injury and illness recordkeeping under the same 1904 rules that apply to general industry. In addition, OSHA 1926 citations frequently arise from failure to document safety training, toolbox talk attendance, and permit-to-work records — all of which HSETrack captures and stores with date-stamped audit trails.
LOTO is among the ten most frequently cited OSHA standards annually. Compliance requires written energy control procedures for every piece of equipment, annual audits of those procedures, and documented training for authorised employees. HSETrack manages LOTO procedure documentation, schedules annual audits, and records training completion with expiry reminders.
Requires employers to certify that a PPE hazard assessment has been conducted for each work area and that appropriate PPE has been selected. HSETrack inspection checklists include PPE compliance as a standing item; training records document PPE training completion by employee.
State-Plan OSHA: Stricter Requirements in 26 States
Twenty-six states and territories operate their own OSHA-approved State Plan programmes, which must be at least as effective as federal OSHA but may impose additional or more stringent requirements. If your facilities are located in a State Plan state, you may face compliance obligations that exceed federal OSHA standards.
California (Cal/OSHA)
Cal/OSHA is widely regarded as the most stringent state OSHA programme in the US. Notable additions include: Injury and Illness Prevention Program (IIPP) — required for all California employers, not just those with 11+ employees; Heat Illness Prevention regulations (outdoor and indoor — the indoor standard has no federal equivalent); and stricter requirements for several specific hazards including silica and asbestos. Cal/OSHA also has higher penalty minimums for serious violations.
Washington (L&I)
Washington's Division of Occupational Safety and Health (DOSH), administered by the Department of Labor & Industries, has additional requirements including accident prevention programs for all employers, stricter confined space entry requirements, and detailed emergency response planning obligations. Washington also uses a different workers' compensation system (state-run, not private insurance) — making accurate recordkeeping more administratively complex.
Other State Plans
Michigan, Minnesota, Nevada, New Mexico, North Carolina, Oregon, South Carolina, Tennessee, Utah, Vermont, Virginia, and Wyoming also operate state plans with varying requirements. Kentucky and Indiana operate state plans for the private sector only. Multi-state employers must identify the applicable state plan requirements for each facility and ensure their compliance programme addresses state-specific obligations.
HSETrack's HSE compliance software module allows organisations to configure compliance obligations by site location — tracking both federal OSHA requirements and applicable state-plan additions in a single compliance register.
Annual OSHA Compliance Calendar
OSHA compliance has a recurring annual cycle. Missing key dates — particularly the Form 300A posting window and the ITA electronic submission deadline — is a common source of citation. Use this calendar to ensure every deadline is met:
New OSHA 300 log begins for the new calendar year
A new Form 300 log must be maintained for each establishment starting January 1. Cases from the prior year continue to be updated until their 5-year retention period expires.
Post OSHA Form 300A Annual Summary at each establishment
The Form 300A must be posted in a conspicuous location accessible to all workers from February 1 through April 30. The summary must be certified by a company executive. Failure to post is a frequently cited violation — employers often post once and remove it early.
Electronic submission of 2025 Form 300A data to OSHA ITA
Establishments with 20+ employees in high-hazard industries (and all establishments with 100+ employees in designated industries) must submit their Form 300A data to OSHA's Injury Tracking Application by March 2. Establishments with 100+ employees in designated industries must also submit Form 300 and 301 data.
Record each new recordable case on Form 300 and complete Form 301
Each recordable injury or illness must be entered on the Form 300 log and a Form 301 completed within 7 calendar days of learning that a recordable case has occurred. This is a rolling obligation throughout the year — not an annual task.
Report work-related fatalities to OSHA
Work-related fatalities must be reported to OSHA within 8 hours by calling 1-800-321-OSHA or by reporting online. Failure to report on time is one of the most heavily penalised recordkeeping violations.
Report in-patient hospitalisations, amputations, and eye losses to OSHA
Work-related in-patient hospitalisations, amputations, and losses of an eye must be reported within 24 hours. Note that only in-patient hospitalisations trigger the reporting requirement — emergency room treatment without admission does not.
Annual training refreshers for specific OSHA standards
Multiple OSHA standards require annual training renewals: forklift operator evaluation (1910.178), hearing conservation programme training (1910.95), emergency action plan review (1910.38), and LOTO annual procedure audits (1910.147). Track these renewals in HSETrack's training record module with automated expiry reminders.
Finalise prior-year Form 300 log
Review and finalise the Form 300 log for the closing calendar year before preparing the Form 300A annual summary. Update any cases where classification changed during the year. Retain records for 5 years from the end of the calendar year they cover.
HSETrack automates the recurring OSHA compliance calendar — reminding designated users of upcoming deadlines, generating the Form 300A when the posting window opens, and triggering severe injury reporting alerts the moment a qualifying case is entered. For broader compliance calendar management across HSE obligations beyond OSHA, see our HSE compliance software guide.
Automate OSHA Recordkeeping and Stay Inspection-Ready
HSETrack replaces manual OSHA log maintenance with an automated system that evaluates recordability, generates all three required forms, alerts on severe injury reporting deadlines, and maintains a 5-year audit trail — ready for an OSHA inspector the moment they arrive.
- Guided recordability evaluation — automatically flags cases that meet 29 CFR 1904 criteria
- Automated OSHA 300 log maintenance — updated in real time as incidents are reported
- Form 300A annual summary generation with ITA electronic submission export
- Severe injury reporting alerts with 8-hour and 24-hour deadline tracking
- Training record management with expiry reminders and compliance reporting
- 5-year incident record retention with complete, immutable audit trail
- Supports multi-establishment reporting for organisations with multiple sites
Frequently Asked Questions
Which employers are required to keep OSHA records?
Employers with 11 or more employees at any time during the previous calendar year must maintain OSHA records — unless their establishment is classified in a partially exempt industry. Employers with 10 or fewer employees are exempt from routine recordkeeping but must still report fatalities and severe injuries. Establishments with 20+ employees in certain industries must also submit Form 300A data electronically to OSHA's ITA annually.
What are the three required OSHA recordkeeping forms?
OSHA requires: Form 300 (Log of Work-Related Injuries and Illnesses) — a running log of each recordable case; Form 300A (Annual Summary) — posted from February 1 through April 30; and Form 301 (Injury and Illness Incident Report) — a detailed report for each recordable case completed within 7 calendar days.
What makes a workplace injury OSHA recordable?
A work-related injury is recordable if it results in: days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, or diagnosis of a significant injury by a healthcare professional. The distinction between first aid (not recordable) and medical treatment beyond first aid (recordable) follows the specific 15-item first aid definition in 29 CFR 1904.7(a).
What are the most common OSHA recordkeeping citations?
Most common violations include: failure to record recordable cases (1904.7); failure to post Form 300A from February 1–April 30 (1904.32); failure to provide employee access to records (1904.35); late reporting of severe injuries within 8 or 24 hours (1904.39); and failure to retain records for 5 years (1904.33). Penalties range from $16,550 to $165,514 per violation.
Does HSETrack support electronic submission to OSHA ITA?
HSETrack exports incident data in the format required for submission to OSHA's Injury Tracking Application. Establishments subject to electronic submission requirements can use HSETrack's export to prepare their annual ITA submission without manually re-entering data.
How long must OSHA records be retained?
Under 29 CFR 1904.33, employers must save OSHA 300 logs, 300A summaries, and 301 incident reports for 5 years following the end of the calendar year the records cover. HSETrack retains all incident records for the full required retention period with export capability.
Never Miss an OSHA Recordkeeping Deadline Again
HSETrack automates the most error-prone parts of OSHA compliance — from recordability evaluation to Form 300 log maintenance and ITA submission. Get started free — no credit card required.