When OSHA issues a citation, a lawsuit is filed, or an insurance claim is opened, your safety records stop being paperwork and become legal evidence. Deleting, modifying, or losing those records, even by accident during a routine office cleanup, can trigger spoliation sanctions. In federal court, for electronic records, Rule 37(e) of the Federal Rules of Civil Procedure lets a judge order measures to cure the prejudice, and keeps the harshest ones, such as an adverse-inference instruction or dismissal, for a party that acted with intent to deprive the other side of the information; state courts apply their own rules. The duty to preserve attaches the moment you reasonably anticipate litigation, which for a construction employer is often the day the citation lands.
HazComFast's Legal Hold locks the relevant records the instant a legal event triggers, so nothing is lost or altered while the matter is open.
At a glance: The duty to preserve attaches once litigation is reasonably anticipated, often the day an OSHA citation lands, which also starts the 15-working-day contest clock (1903.17). A legal hold locks relevant records so they can't be deleted or edited (even by admins) and overrides normal retention (1910.1020: 30 years for exposure records, employment + 30 years for medical records; 1904.33: 5 years). A legal hold preserves safety records from the moment litigation is reasonably anticipated, which helps avoid spoliation sanctions, and it overrides normal OSHA retention schedules so a held record is kept even after its retention date passes.
The moment records become evidence
A held record can't be deleted even after its normal 1910.1020 / 1904.33 retention date passes, and the 15-working-day contest clock (1903.17) starts the same day.
What a legal hold must preserve
A legal (or litigation) hold is a directive to preserve all documents that may be relevant to a proceeding. In construction safety, that usually means:
- SDS access and read-proof confirmations,
- Training records and sign-in sheets,
- Near-miss and incident reports,
- Inspection records and corrective actions,
- Equipment inspection histories,
- Permit records (hot work, confined space, excavation),
- Chemical inventory changes.
Why paper systems fail a legal hold
| Risk | Paper records | HazComFast Legal Hold |
|---|---|---|
| Accidental deletion | Files tossed during cleanup | Locked records cannot be deleted by any user |
| Modification | Entries altered after the fact | Every change is logged with the user who made it |
| Loss | Water, fire, theft | Held records stay put even if someone tries to close the whole account: that deletion is refused while a hold is active |
| Incomplete preservation | Hard to find all relevant records | System-wide search flags everything in scope |
| Chain of custody | Hard to prove authenticity | Timestamped, user-attributed audit logs |
The 15-day clock: why timing is everything
Under 29 CFR 1903.17, an employer who wants to contest a citation has 15 working days from receiving it to notify the OSHA Area Director in writing. Miss that window and the citation and its penalty become a final order: no review, no negotiation, save the narrow relief the Review Commission can grant in extraordinary circumstances (note 1 to 29 CFR 2200.33). That same 15-day period is when your defense is built, and it depends entirely on records that must not change underneath you.
- Day 1: citation received → activate the legal hold.
- Days 1–3: the system identifies and locks every relevant record.
- Days 3–10: review the locked records to build the defense.
- Days 10–15: generate a citation-defense package from the locked set.
- Contest or abate: the locked records serve as evidence throughout.
Without a hold, records from the citation period can be overwritten or deleted during normal operations: quietly destroying the defense you are trying to build.
How the hold works
Trigger: a manager specifies which record types the hold covers (incident reports, training records, SDS documents, permits…), the reason (citation, lawsuit, claim), and the custodian. Identify: every record of the covered types falls under the hold, organization-wide. Lock: a held record cannot be deleted by anyone, on any route, and every blocked attempt is logged with who tried and why it was refused. Monitor and release: a dashboard shows active holds; the custodian releases the hold when the matter closes, and the release is logged.
What separates a lock from a label
Most safety software sells legal hold as a checkbox that greys out a delete button. A hold you can defend does more than that, and this is what HazComFast's does:
- It refuses on every route, for everyone. Once a hold is on, nobody can delete a covered record, not even an administrator, whether they try from the screen or any other way.
- It writes down every refusal. Each blocked attempt is logged with who tried, when, and why it was refused, in an audit log that nobody can edit or erase.
- It doesn't lapse quietly. A hold whose end date has passed keeps protecting until a person releases it. Deleting the whole organization is refused too while a hold is active.
- It opens when you release it, and only then. Releasing the hold is logged; after that, a legitimate deletion goes through with a required reason, logged as well. A lock that could never open would not be a control, it would be a malfunction.
How it fits OSHA's retention duties
A legal hold sits on top of, and overrides, your normal retention schedule:
- 29 CFR 1910.1020(d): employee exposure records are kept at least 30 years, and employee medical records for the duration of employment plus 30 years, with the exceptions (d)(1) lists. (See the deep dive on 30-year record retention.)
- 29 CFR 1904.33: the OSHA 300, 300A, and 301 forms are kept for five years following the year they cover.
- A record under legal hold cannot be deleted even after it reaches its normal expiration date.
Read the underlying access-and-retention rule on the Access to Employee Exposure and Medical Records (1910.1020) page, and know your penalty exposure in the 2026 penalty schedule.
Which version was in force on the day of the incident
After an accident, the question isn't what the emergency plan says today. It's what it said on the morning of the incident, and what changed since. In HazComFast, the emergency action, fire prevention and fall protection plans keep their versions, each dated at your organization's local time with the time zone written. Any two versions compare side by side, restoring an old one creates a new version without overwriting anything, and the version history goes into the Defense Package export. How long to keep them is covered by the section above.
Lock the record before it can quietly disappear
When a citation or claim lands, the defense depends on records that can't change underneath you. HazComFast holds relevant records the moment you trigger it (no deletion or edit, every attempt logged), and rolls the locked set into a citation defense package. Estimate the exposure, then keep the evidence intact on trial.
The hub & related: OSHA recordkeeping: 300, 300A & 301 · 30-Year Record Retention: OSHA 1910.1020 · How to Contest an OSHA Citation · The OSHA Citation Defense Package · Read-Proof SDS Confirmation · How long to keep each OSHA record
Sources & verification (retention re-read 2026-10-08 on the eCFR, title 29 up to date as of 2026-10-06; the rest verified 2026-07-17 against osha.gov): the 15-working-day contest window per 29 CFR 1903.17; retention per 29 CFR 1910.1020(d) and 29 CFR 1904.33. Spoliation and legal-hold duties arise under the Federal Rules of Civil Procedure and case law, not OSHA; Rule 37(e) as quoted in published federal decisions (govinfo.gov), 1903.22(c), note 1 to 2200.33 and 1910.1020(d)(1) re-read on October 14, 2026. General guidance, not legal advice.
Frequently Asked Questions
What is a legal hold, and why does it matter for safety records?
A legal hold (or litigation hold) is a directive to preserve every document that may be relevant to a legal proceeding: an OSHA contest, a lawsuit, or an insurance claim. Once you reasonably anticipate litigation, the duty to preserve attaches, and if relevant safety records are then deleted or altered, even accidentally during routine cleanup, a court can sanction the party that lost them. Spoliation is a matter of civil procedure and case law. OSHA sets the floor underneath it: 29 CFR 1910.1020(d) tells each employer to 'assure the preservation and retention of records,' with each employee exposure record preserved 'for at least thirty (30) years' under (d)(1)(ii), and 29 CFR 1904.33(a) says you 'must save the OSHA 300 Log, the privacy case list (if one exists), the annual summary, and the OSHA 301 Incident Report forms for five (5) years following the end of the calendar year that these records cover.' A hold is what keeps a record past those dates and out of the routine cleanup that would otherwise be allowed.
How long do I have to contest an OSHA citation?
15 working days from the day you receive the citation, not counting the day of receipt (29 CFR 1903.22(c)). Under 29 CFR 1903.17, an employer who intends to contest must notify the OSHA Area Director in writing within that window, or the citation and penalty become a final order not subject to review, save the narrow relief the Review Commission can grant in extraordinary circumstances (note 1 to 29 CFR 2200.33). The moment a citation arrives is the moment to trigger a legal hold on every record from that inspection period.
How long must OSHA safety records be kept?
It depends on the record. Under 29 CFR 1910.1020(d), employee exposure records are kept at least 30 years, and employee medical records for the duration of employment plus 30 years, with the exceptions 29 CFR 1910.1020(d)(1) lists. OSHA Form 300, 300A, and 301 recordkeeping forms must be retained for five years following the year they cover under 29 CFR 1904.33. A legal hold overrides these schedules: a record under hold must be kept even after it reaches its normal expiration date.
Can a record under legal hold be deleted?
No. Once a hold is on, nobody can delete a covered record, not even an administrator, and the refusal holds whatever route the request takes. The dates it protects are OSHA's own: 29 CFR 1910.1020(d) requires the employer to assure preservation and retention, (d)(1)(ii) keeps each employee exposure record at least thirty years, and 29 CFR 1904.33(a) keeps the 300 Log, the privacy case list, the annual summary and the 301 forms five years past the calendar year they cover. A deletion attempt is written to the audit log as blocked, with who tried and when, and nobody can edit or erase that log. That preserves the chain of custody you need to prove the record is authentic.
Can a legal hold be scoped to specific workers or jobsites?
A hold covers every record of the types you pick, across the organization: incident reports, training records, SDS documents, permits. That is the unit 1904.33(a) uses when it names record types: the 300 Log, the privacy case list, the annual summary, the 301 forms. 1910.1020(d) sets its periods by category of record in the same way. Courts read preservation duties broadly, and so does the hold: it is not narrowed to one worker, one jobsite, or a date range. The custodian (often legal counsel) releases the hold when the matter concludes, and the release is logged.
Does a legal hold expire on its own?
No. A hold whose end date has passed keeps protecting until the custodian releases it; the date is a reminder to review the matter, not a switch. The release is logged, and from then on a deletion needs a written reason, which is logged too. That matters because the records a hold usually covers are the ones OSHA already keeps for years: employee exposure records for at least thirty years under 29 CFR 1910.1020(d)(1)(ii), and the 300 Log, the privacy case list, the annual summary and the 301 forms for five years under 29 CFR 1904.33(a).
Site-wide regulatory figures such as compliance dates and penalty amounts come from our regulatory source-of-truth modules, last checked against the eCFR, OSHA.gov, and the Federal Register on October 5, 2026. Last reviewed October 14, 2026.
About This Article
Published by: HazComFast
Published: February 26, 2026
Last Updated: October 14, 2026
This content is for informational purposes only and does not constitute legal advice.