Skip to content

Approaching: Nov 20, 2026 — HCS 2024 Deadline. Get ready →

Compliance

30-Year Record Retention: OSHA 1910.1020 for Construction (Full Guide)

Verified vs OSHA sources · October 5, 2026

By HazComFastPublished February 25, 2026Updated October 5, 202611 min read
30-Year Record Retention: OSHA 1910.1020 for Construction (Full Guide)
HazComFastLast reviewed October 5, 2026Verified vs OSHA sources · October 5, 2026

OSHA 29 CFR 1910.1020 requires employers to keep employee EXPOSURE records for at least 30 years, and employee MEDICAL records for the duration of employment plus 30 years. For a worker hired at 25 and separated at 65, that medical file must survive until they are 95. The rule is media-neutral — paper, microfiche, or electronic all qualify — but paper has to survive three decades of office moves, floods, fires, and personnel turnover, which is why durable digital storage makes sense.

This guide covers exactly which records are in scope, the precise retention period for each, the statutory exceptions most people miss, a worked retain-until example, and the access rights that come attached.

The Core Rule in One Table

The retention period depends entirely on the type of record. The two big buckets are exposure and medical, each with its own clock and citation.

Record typeHow longClock startsCitation
Employee medical recordDuration of employment + 30 yearsAt separation29 CFR 1910.1020(d)(1)(i)
Employee exposure record (air/biological monitoring)30 yearsAt record creation29 CFR 1910.1020(d)(1)(ii)
SDS kept as an exposure record30 years (or keep a substitute record)At record creation29 CFR 1910.1020(d)(1)(ii)(B)
Analysis using exposure/medical data30 yearsAt record creation29 CFR 1910.1020(d)(1)(iii)
First-aid record (minor, one-time on-site)No specified period, if made on-site by a non-physician and kept separately; otherwise employment + 30 yearsConditional29 CFR 1910.1020(d)(1)(i)(B)
OSHA 300 / 300A / 301 injury logs5 yearsAfter the covered calendar year29 CFR 1904.33

Two different clocks — the mistake that destroys records too early

Exposure record30 yrs from record creation
Sample taken
+30 yrs → destroy
Medical recordemployment + 30 yrs
Hired
Separation
+30 yrs → destroy

Exposure clock runs from creation; the medical clock only starts at separation. OSHA 300 logs are a separate 5-year rule (1904.33).

A critical and commonly-missed distinction: medical records run from separation; exposure records run from creation. Air-monitoring data taken in 2026 must be kept until 2056 even if the sampled worker is still on payroll. The medical clock, by contrast, only starts ticking when the worker leaves.

What Counts as an "Exposure Record"

Under 1910.1020(c)(5), an employee exposure record is any record of employee exposure (or potential exposure) to toxic substances or harmful physical agents. In construction, that typically includes:

  • Air monitoring / sampling results — personal and area samples (e.g., silica under 1926.1153, lead under 1926.62, hexavalent chromium under 1926.1126).
  • Biological monitoring results — blood lead levels, zinc protoporphyrin, urinalysis.
  • Safety Data Sheets kept to document which hazardous chemicals were present (or the substitute identity/where/when record).
  • Chemical inventory records identifying what was used at a jobsite and when.

The key word is potential. You do not need a positive over-the-limit result for a monitoring record to be an exposure record — the act of measuring creates the 30-year obligation.

What Counts as a "Medical Record"

Under 1910.1020(c)(6), an employee medical record is a record concerning the health status of an employee, made or maintained by a physician, nurse, or other health-care professional or technician. In construction that includes:

  • Respirator medical evaluations (the questionnaire and the clearance) — retained per 1910.1020 (duration of employment + 30 years).
  • Audiometric test results for noise-exposed workers.
  • Medical clearances for confined space entry, respiratory protection, etc.
  • Biological monitoring results that document health status (lead, etc.).

Note that respirator fit-test records follow a different, shorter rule: keep the most recent fit-test record only until the next fit test is administered (29 CFR 1910.134(m)). Do not confuse the fit-test record with the medical evaluation — the evaluation is a 1910.1020 medical record; the fit test is not.

The Exceptions Most People Miss

The "30 years, no matter what" mental model is wrong. Four real exceptions in the rule text cut the obligation:

  1. First-aid exception — 1910.1020(d)(1)(i)(B). A record of one-time treatment and observation of minor scratches, cuts, burns, splinters, and the like need not be retained for any specified period, but only when it was made on-site by a non-physician and is kept separately from the employer's medical program and its records. Miss either condition and it is a medical record, kept for employment plus 30 years.

  2. Short-tenure medical exception — 1910.1020(d)(1)(i)(C). The medical records of employees who have worked for less than one year need not be retained beyond the term of employment if the employer provides those records to the employee upon separation. If you do not hand them over, the full duration-plus-30 rule applies.

  3. SDS substitute record — 1910.1020(d)(1)(ii)(B). You are not forced to warehouse every SDS for 30 years. If you keep some record of the chemical's identity, where it was used, and when, for 30 years, you may discard the SDS itself. This is how you legally retire SDSs for chemicals you no longer use.

  4. Background sampling data — 1910.1020(d)(1)(ii)(A). Environmental (background) sampling data need only be kept one year — provided the actual sampling results, the sampling plan / collection methodology, and the analytical methods used are retained for the full 30 years. You keep the meaningful exposure data for three decades but may discard the raw background readings after a year.

Worked Example: When Exactly Can a Record Be Destroyed?

Take a real scenario and compute the retain-until dates.

A welder, Maria, is hired 2026-03-15 and separates 2031-09-30 (about 5.5 years of service). During her employment you have: (a) a respirator medical clearance, (b) a personal silica air-sampling result from 2027-06-01, and (c) an SDS for a coating she used.

RecordRule appliedClock startsEarliest destruction
Respirator medical clearanceEmployment + 30 yrs — (d)(1)(i)Separation 2031-09-302061-09-30
Silica air-sampling result30 yrs from creation — (d)(1)(ii)Created 2027-06-012057-06-01
SDS (kept as exposure record)30 yrs from creation — (d)(1)(ii)(B)Entered service 2027~2057 (or earlier if you keep a substitute identity record)

Notice the medical record outlives Maria's exposure record by four years even though the exposure happened during her employment — because the medical clock starts at separation, not creation. Run any record through the free Record Retention Calculator to get the exact date, or build a full multi-record plan with the Records Retention Schedule generator.

Employee and Former-Employee Access Rights

The 30-year duty exists so that records are available when an occupational illness surfaces — sometimes decades later. So the rule attaches a strong access right under 29 CFR 1910.1020(e):

  • Current employees, former employees, and their designated representatives may request their exposure and medical records.
  • Access must be provided in a reasonable time, place, and manner. Under 1910.1020(e)(1)(i), if you cannot reasonably provide access within 15 working days, you must — within those same 15 working days — tell the requester the reason for the delay and the earliest date the record can be made available. (See who can ask for your SDS after a job ends for how this clock reaches subcontractor records.)
  • The first copy must be provided free of charge.
  • OSHA itself may access these records during an inspection.

There is also a transfer-of-records duty under 1910.1020(h): if you cease to do business, you must transfer the records to the successor employer, and if there is no successor, you must notify affected current employees of their access rights at least three months before the business ceases (1910.1020(h)(2)). Records cannot simply be shredded when a company folds. The day-of-departure steps for a single worker, from deactivating the login to handing a short-tenure worker their medical records, are in our offboarding checklist.

Your Duty to Notify Employees (1910.1020(g))

Keeping the records is only half the obligation — employees have to know the records exist and that they can see them. Under 1910.1020(g)(1), you must inform each employee, upon first entering employment and at least annually thereafter, of:

  • the existence, location, and availability of the exposure and medical records covered by the rule;
  • the person responsible for maintaining and providing access to them; and
  • each employee's right of access to these records.

This annual notice is easy to forget and simple to satisfy — a line in the employee handbook, a posted notice on the safety board, or an item in annual training all work — but skipping it is an independent citation even when every record is perfectly retained.

The designated representative. Access isn't limited to the employee. A designated representative — anyone the employee gives written authorization to act on their behalf, with a recognized or certified collective bargaining agent automatically a designated representative for exposure records and any analysis using them — can request the records too (1910.1020(c)(3)). A valid authorization names the employee and the representative, states which records may be released and why, is signed and dated, and is good for no more than one year (1910.1020(c)(12)).

The Paper Problem vs. Digital Retention

ChallengePaper systemsDigital retention
30-year durabilityDegrades; lost in moves, floods, firesCloud storage with redundant backups
SearchabilityManual search through boxesInstant search by worker, date, or chemical
15-working-day accessHard to locate; risks missing the deadlineExport and deliver in minutes
Transfer when a company closesOften lost, violating 1910.1020(h)Archive survives ownership changes
Proving completenessNearly impossibleSystem tracks retention status per record

1910.1020 is media-neutral, so digital records are fully acceptable provided they remain preserved, retrievable, and reproducible for the entire period. A paper file has a hard time surviving 30 years intact in a construction business, which is why electronic retention is the practical path.

Common Mistakes to Avoid

  • Don't assume the 30 years always starts at separation — for exposure records it starts at creation.
  • Don't treat minor first-aid logs as 30-year medical records — they are excluded.
  • Don't shred SDSs without a substitute identity/where/when record in place.
  • Don't confuse the OSHA 300 log (5 years, 1904.33) with exposure/medical records (30 years, 1910.1020).
  • Don't dispose of records when a company closes — transfer or notify per 1910.1020(h).
  • Do be ready to give access within 15 working days, or explain the delay within them (1910.1020(e)(1)(i)), first copy free.

The Real Cost of Non-Compliance

OSHA can cite recordkeeping and access failures under 1910.1020. The maximum penalties are $16,550 per serious or other-than-serious violation and up to $165,514 for a willful or repeated violation (29 CFR 1903.15(d)). There was no inflation increase for 2026 — the 2025 amounts remain in effect — so do not present 2026 as higher. Estimate your exposure with the OSHA Fine Calculator.

Beyond the citation, the deeper risk is evidentiary: if a former worker develops an occupational disease 25 years after a jobsite exposure and you cannot produce their records, the missing-evidence gap tends to cut against the employer in workers'-compensation and personal-injury proceedings. The records exist precisely to protect both the worker and the company decades after the fact.

What to Do Next

  1. Inventory your records by type (exposure, medical, first-aid, 300 log) — the type drives the retention period.
  2. Set the correct clock for each: creation date for exposure, separation date for medical.
  3. Move 30-year records to durable, backed-up digital storage with per-record retention tracking.
  4. Build an access workflow that can give access, with a free first copy, within 15 working days.
  5. Document a transfer/disposal procedure to satisfy 1910.1020(h) if the business changes hands.

Related tools: Record Retention Calculator · Records Retention Schedule · OSHA Fine Calculator

The standard: Access to Employee Exposure & Medical Records — 29 CFR 1910.1020

The hub & related reading: OSHA recordkeeping — 300, 300A & 301 · Are digital SDS legal under OSHA? · Legal hold and record locking for construction safety · OSHA forms 300, 300A, and 301 recordkeeping guide · How long to keep each OSHA record: the retention chart

Penalties: 2026 OSHA penalty schedule · penalties by state


Sources: 29 CFR 1910.1020 (access to employee exposure and medical records), 29 CFR 1904.33 (injury-log retention), 29 CFR 1903.15(d) (civil penalties). Penalty figures verified against the OSHA 2026 annual adjustment memo (effective Jan 15, 2026). Verified 2026-06-26. This article is general information, not legal advice; State-Plan states may adopt equivalent or stricter requirements.

Frequently Asked Questions

How long must OSHA exposure and medical records be kept?

Employee exposure records must be kept for at least 30 years (29 CFR 1910.1020(d)(1)(ii)). Employee medical records must be kept for the duration of employment PLUS 30 years (1910.1020(d)(1)(i)). These are minimums — a few records (such as certain first-aid records and short-tenure medical records given to the employee) are exempt or shorter.

Does the 30 years start when the employee leaves?

For MEDICAL records, retention runs for the duration of employment plus 30 years (29 CFR 1910.1020(d)(1)(i)), so the 30-year clock effectively begins at separation. For EXPOSURE records (air monitoring, SDSs kept as exposure records, biological monitoring), the 30 years runs from the date the record was created, not from separation (1910.1020(d)(1)(ii)).

Are first-aid records covered by the 30-year rule?

Not always. Under 29 CFR 1910.1020(d)(1)(i)(B), a first-aid record of one-time treatment and observation of minor scratches, cuts, burns, splinters, and the like need not be retained for any specified period, but only if it was made on-site by a non-physician and is kept separately from the employer's medical program and its records. Otherwise it is part of the employee medical record and is kept for the duration of employment plus 30 years.

Do I have to keep an SDS for 30 years?

Not necessarily. An SDS can serve as an exposure record. You may either keep the SDS itself for 30 years, OR — under 1910.1020(d)(1)(ii)(B) — keep a substitute record of the chemical's identity, where it was used, and when, for 30 years instead of the SDS. You do not have to retain SDSs for chemicals you no longer use if that substitute record exists.

How fast must I give an employee their records when they ask?

Access must be provided in a reasonable time, place and manner; if you cannot provide it within 15 working days, you must, within those 15 working days, tell the requester why and the earliest date the record will be available (29 CFR 1910.1020(e)(1)(i)). A first copy is free: you provide it without cost, make copying facilities available without cost, or loan the record for copying (1910.1020(e)(1)(iii)).

Does OSHA accept electronic/digital records for the 30-year requirement?

Yes. 1910.1020 is media-neutral. Records may be kept in any form (paper, microfiche, or electronic) as long as they are preserved, retrievable, and reproducible for the full retention period. Digital storage with redundant backups is the practical way to keep them intact that long.

Do I have to tell employees these records exist?

Yes. Under 1910.1020(g)(1), you must inform each employee — upon first entering employment and at least annually thereafter — of the existence, location, and availability of their exposure and medical records, the person responsible for them, and their right of access. Missing this annual notice is a citable violation on its own.

OSHA figures and citations here come from our regulatory source-of-truth modules, last checked against the eCFR, OSHA.gov, and the Federal Register on October 5, 2026. Last reviewed October 5, 2026.

About This Article

Published by: HazComFast

Published: February 25, 2026

Last Updated: October 5, 2026

This content is for informational purposes only and does not constitute legal advice.

Ready to simplify your HazCom compliance?

HazComFast keeps your SDS library, GHS labels, and training records audit-ready, with the jobsite's SDS on the crew's phones.