The Foundation of Workplace Safety: Understanding 29 CFR 1904
In the realm of construction safety and industrial compliance, few things carry as much weight—or as much potential for liability—as the OSHA recordkeeping process. While HazCom programs often take center stage in safety discussions, the documentation of injuries and illnesses under 29 CFR 1904 is the primary tool federal and state inspectors use to gauge a company’s safety culture.
The Occupational Safety and Health Administration (OSHA) requires most employers with more than 10 employees to keep a standardized set of records documenting serious work-related injuries and illnesses. These records serve three primary purposes. First, they allow employers to analyze their own operations to find and fix hazards. Second, they provide OSHA with data to target inspections and resources. Third, they ensure workers have access to information about the hazards they face.
Failure to maintain these records accurately is not just a clerical error; it is a violation that carries significant legal and financial consequences. For 2026, a "Serious" violation carries a maximum penalty of $16,550, while "Willful" or "Repeated" violations can skyrocket to $165,514 per instance. If an inspector finds a pattern of misrepresenting injury data, they may apply these fines per individual entry on the log. To see how these costs compare to your annual revenue, you can use our /tools/fine-calculator to model potential exposure.
This guide provides an exhaustive breakdown of the Form 300, 301, and 300A, the criteria for recordability, and the technological solutions available to ensure zero-defect compliance.
1. Who Must Keep Records: Size and Industry Exemptions
Not every company is required to maintain the 300 Log. OSHA provides exemptions based on two criteria: company size and industry classification.
The "Small Employer" Exemption
Under 29 CFR 1904.1, if your company had 10 or fewer employees at all times during the last calendar year, you do not need to keep OSHA injury and illness records unless specifically asked to do so in writing by OSHA or the Bureau of Labor Statistics (BLS). This "10 or fewer" count includes every employee on your payroll at any one time including temporary and seasonal workers.
The Partial Industry Exemption
Under 29 CFR 1904.2, certain low-hazard industries are partially exempt. This list includes specific retail, service, finance, and real estate sectors. However, it is vital to note that the construction industry (NAICS 23) is NOT exempt. Regardless of your safety record, if you have more than 10 employees, you must maintain these records.
| Requirement Category | Exemption Rule | Notes |
|---|---|---|
| Small Business | 10 or fewer employees | Count peaks, not averages |
| High-Risk Industry | Never exempt | Includes Construction, Manufacturing, Warehousing |
| Low-Risk Industry | Specifically listed NAICS | e.g., Florists, Shoe Stores, Legal Services |
| Serious Incident Reporting | NEVER EXEMPT | Fatality within 8 hours; Hospitalization/Amputation within 24 hours |
Even if you are exempt from routine recordkeeping, you are never exempt from the "Fatalities and Severe Injuries" reporting rule. You must report any work-related fatality within 8 hours and any inpatient hospitalization, amputation, or loss of an eye within 24 hours. Failure to report these incidents leads to the highest tier of /blog/osha-penalties-2025-construction.
2. Defining "Recordable": The OSHA Decision Tree
Determining whether an incident belongs on your log is the most common point of failure for safety managers. Under 29 CFR 1904.4, you must consider an injury or illness "recordable" if it results in any of the following:
- Death
- Days away from work
- Restricted work or transfer to another job
- Medical treatment beyond first aid
- Loss of consciousness
- A significant injury or illness diagnosed by a physician or other licensed health care professional (PLHCP)
The Work-Relatedness Test
The central question is: Did an event or exposure in the work environment either cause or contribute to the resulting condition, or significantly aggravate a pre-existing condition?
The "Work Environment" is defined as the establishment and other locations where one or more employees are working or are present as a condition of their employment. This includes work-related travel and work performed at home, provided the injury is directly related to the performance of work rather than the general home environment.
Determining Recordability Checklist
- Did the employee experience an injury or illness?
- Is the injury or illness work-related?
- Is the injury or illness a new case?
- Does the injury or illness meet one or more of the "General Recording Criteria" (Medical treatment, lost time, etc.)?
If you are unsure of the exposure risks on your site, use our /tools/hazcom-compliance-scorer to evaluate your current hazard communication and safety posture before an incident occurs.
3. First Aid vs. Medical Treatment: The Line in the Sand
Confusion between "First Aid" and "Medical Treatment" accounts for roughly 40% of recordkeeping errors. OSHA provides an exhaustive, "exclusive" list of what counts as First Aid under 29 CFR 1904.7(b)(5)(ii). If a treatment is on this list, it is first aid and not recordable (unless it also involves lost time or restricted duty). If it is not on this list, it is medical treatment.
The First Aid List
- Using non-prescription medication at non-prescription strength.
- Administering tetanus immunizations.
- Cleaning, flushing, or soaking wounds on the surface of the skin.
- Using wound coverings such as bandages, Band-Aids, gauze pads, or butterfly bandages.
- Using hot or cold therapy.
- Using any non-rigid means of support, such as elastic bandages, wraps, or non-rigid back belts.
- Using temporary immobilization devices while transporting an accident victim (e.g., splints, slings, neck collars, back boards).
- Drilling of a fingernail or toenail to relieve pressure, or draining fluid from a blister.
- Using eye patches.
- Removing foreign bodies from the eye using only irrigation or a cotton swab.
- Removing fragments from areas other than the eye by irrigation, tweezers, cotton swabs, or other simple means.
- Using finger guards.
- Using massages.
- Drinking fluids for relief of heat stress.
Everything else is Medical Treatment. This includes stitches, prescribing prescription drugs (even if the employee doesn't fill the prescription), and physical therapy. Using a /tools/inspection-action-plan can help you document these treatments immediately to ensure they are categorized correctly.
4. Form 300: The Log of Work-Related Injuries and Illnesses
The OSHA 300 Log is your master list of all recordable incidents for the year. Each entry must be made within seven (7) calendar days of receiving information that a recordable case has occurred.
Column-by-Column Guidance
- Column A (Case Number): Use a unique identifier (e.g., 2026-001).
- Column B (Employee Name): Except in privacy cases (see Section 9).
- Column C (Job Title): Be specific (e.g., "Journeyman Electrician" not just "Worker").
- Column D (Date of Injury): The date the incident occurred or the illness was first recognized.
- Column E (Location): Where exactly on the site did it happen? (e.g., "North Loading Dock").
- Column F (Description): Describe the injury, body part affected, and the object/substance that directly injured the person. (Example: "Laceration to left index finger from circular saw").
Classifying Outcomes (Columns G through J)
You must check only one of these boxes based on the most serious outcome of the case:
- G (Death)
- H (Days away from work)
- I (Job transfer or restriction)
- J (Other recordable cases) - Use this for medical treatment beyond first aid where the employee returned to full duty immediately.
Tracking Days (Columns K and L)
When counting days away or days restricted, you count calendar days, including weekends, holidays, and vacation days. The count begins the day after the injury occurred. There is a cap of 180 days for any single case.
5. Form 301: Injury and Illness Incident Report
While the 300 Log is a summary list, Form 301 is the detailed deep-dive for each individual case. Under 29 CFR 1904.29, you must complete a 301 (or an equivalent form like an insurance first-report-of-injury) for every recordable entry on your 300 Log.
Key Data Requirements
Form 301 asks for details that go beyond the log:
- What was the employee doing just before the incident?
- What happened?
- What was the injury or illness?
- What object or substance directly harmed the employee?
In construction, these reports often trigger the need for a /tools/fall-protection-plan-builder update or a review of /tools/ppe-selector choices. You must keep 301 forms on file for five years following the end of the calendar year that these records cover.
6. Form 300A: The Annual Summary
The 300A is the "Summary" page that totals all the data from your 300 Log. Even if you had zero injuries for the year, you must still fill out and post the 300A.
Mandatory Posting Requirements
- Dates: The 300A must be posted from February 1 to April 30 of the following year.
- Location: It must be posted in a conspicuous place where notices to employees are customarily posted (e.g., breakroom, safety board).
- Certification: A "Company Executive" must certify the 300A. OSHA defines this as the owner, an officer of the corporation, the highest-ranking official at the site, or their immediate supervisor.
Failure to post the 300A is one of the most common citations during random OSHA inspections. To ensure your site is prepared for an unannounced visit, review /blog/how-to-prepare-for-osha-hazcom-inspection.
7. Electronic Submission (ITA Portal)
Recent changes to 29 CFR 1904.41 have expanded the requirements for electronic submission of records to OSHA’s Injury Tracking Application (ITA).
Who Must Submit?
- Establishments with 100+ employees in high-hazard industries: This includes almost all construction firms of this size. These companies must submit their 300, 301, and 300A data.
- Establishments with 20-249 employees in certain industries: Must submit their 300A summary data.
- Establishments with 250+ employees: Must submit their 300A summary data.
The deadline for electronic submission is March 2 each year for the previous year’s data. If you are struggling with the data entry, our /tools/osha-300a-auto-filler can help streamline the process.
8. Privacy Cases and Restricted Entries
Under 29 CFR 1904.29(b)(6) through (10), certain cases are designated "privacy concern cases." For these, you do not enter the employee's name on the 300 Log. Instead, enter "Privacy Case" in the name field.
What Qualifies as a Privacy Case?
- An injury or illness to an intimate body part or the reproductive system.
- An injury or illness resulting from a sexual assault.
- Mental illnesses.
- HIV infection, hepatitis, or tuberculosis.
- Needle-stick injuries and cuts from sharp objects that are contaminated with another person's potentially infectious material.
- Other illnesses, if the employee voluntarily requests that their name not be entered on the log (only for illnesses, not injuries).
You must maintain a separate, confidential list of the case numbers and employee names for privacy concern cases so that they can be identified if necessary.
9. Multi-Employer Worksites: Who Records the Injury?
In construction, worksites often have a General Contractor (GC), several subcontractors, and temporary labor agencies. This creates confusion regarding who is responsible for recording an injury.
The "Day-to-Day Supervision" Standard
Under OSHA’s ruling, the employer who provides day-to-day supervision of the employee is responsible for recording the injury or illness.
- Scenario A: A subcontractor's employee is injured while working under the direct supervision of the subcontractor’s foreman. The subcontractor records the injury.
- Scenario B: A temporary staffing agency sends a worker to a GC, and the GC’s site superintendent tells the worker what to do and how to do it. The GC records the injury, as they are providing day-to-day supervision.
For complex sites, using a /tools/hazcom-program-generator can help define these responsibilities in your written safety plans.
10. Common Recordkeeping Violations (and How to Avoid Them)
OSHA inspectors look for "under-reporting" and "misclassification." Here are the most common citations:
- Failure to record within 7 days: Often discovered when comparing medical bills or workers' comp claims to the 300 Log.
- Failure to count calendar days: Many employers mistakenly only count "scheduled work days" for lost time.
- Missing Executive Certification: The 300A must be signed by an executive, not just the safety manager.
- "First Aid" Misclassification: Recording an injury as first aid when a prescription was issued.
- Inaccurate NAICS Codes: Using a corporate office NAICS for a high-risk field site to avoid electronic submission requirements.
The financial impact of these errors can be devastating. Beyond the $16,550 base fine, OSHA may use "egregious" citations for willful recordkeeping failures. You can assess your financial risk using the /tools/safety-pays-calculator to see how an injury (and the resulting fine) affects your bottom line.
11. State Plan Variations
While Federal OSHA sets the standard, 22 states (like California, Washington, and Michigan) operate their own OSHA-approved State Plans. These states must have recordkeeping requirements that are "at least as effective" as Federal OSHA.
For example, Cal/OSHA has stricter requirements regarding the definition of a "Serious" injury and different reporting timelines. If you operate in a State Plan state, always verify if there are additional forms or faster reporting windows for hospitalizations. Our /tools/hazcom-audit-checklist-2026 includes specific checks for state-level variations.
12. Digital Solutions and Recordkeeping Best Practices
Manual paper logs are a liability. They are prone to damage, loss, and transcription errors. In the modern regulatory environment, digital recordkeeping is the only way to ensure 100% compliance.
Best Practices for Recordkeeping Excellence
- Weekly Hazard Sweeps: Use /tools/inspection-action-plan to identify potential injuries that weren't reported.
- Chemical Exposure Integration: Ensure any illness related to chemical exposure is cross-referenced with your /tools/sds-qr-code-generator to identify the culprit substance.
- Monthly Reconciliation: Compare your Workers' Comp "First Report of Injury" list with your OSHA 300 Log to ensure they match.
- Training for Foremen: Use a /tools/toolbox-talk-generator to create a session specifically on "How to Report an Injury Immediately."
Recordkeeping Maintenance Roadmap
- Yearly: Train all supervisors on the difference between first aid and medical treatment.
- Monthly: Review the 300 Log for completeness and accuracy.
- February 1: Post the 300A Summary.
- March 2: Electronically submit data to the ITA.
- April 30: Remove the 300A Summary from the posting area.
- Ongoing: Keep records for at least five (5) years.
13. The Integration of HazCom and Recordkeeping
It is a common mistake to view Recordkeeping and Hazard Communication (29 CFR 1910.1200) as separate silos. In reality, they are deeply linked. If an employee is injured by a chemical splash, your 301 form must include the chemical name, and your HazCom program must have the corresponding SDS.
If an OSHA inspector finds an injury caused by a chemical, they will immediately ask to see:
- The 300 Log entry for the injury.
- The GHS-compliant label for that secondary container (/blog/secondary-container-labels-osha-rules).
- Evidence that the employee received HazCom training (29 CFR 1910.1200(h)(1)).
- The SDS for that specific chemical.
Using the /tools/ghs-label-generator ensures that your site chemicals are properly labeled, reducing the chance of accidental exposure that leads to a recordable illness.
Conclusion: Reducing Risk Through Rigorous Documentation
OSHA recordkeeping is more than a bureaucratic hurdle; it is a vital diagnostic tool for your business. An accurate 300 Log reveals trends—perhaps your drywall crew has a high rate of eye injuries, suggesting a need for better safety glasses, or your electricians are suffering from heat exhaustion, requiring a revamped hydration plan.
However, the administrative burden is real. Between tracking calendar days, managing privacy cases, and handling electronic submissions, safety managers can easily become overwhelmed.
HazComFast is designed to take the guesswork out of compliance. Whether you need to generate a compliant GHS label, build a complete Hazard Communication plan, or calculate the potential costs of an OSHA fine, our suite of tools is built for the rugged realities of the construction site.
Ready to simplify your compliance?
- Generate your 2026 HazCom Program: /tools/hazcom-program-generator
- Audit your site's recordkeeping readiness: /tools/hazcom-audit-checklist-2026
- Check your exposure risk: /tools/silica-exposure-calculator
Don't wait for an OSHA inspector to knock on your trailer door. Get ahead of the regulations today and ensure your company is protected from the rising costs of non-compliance. Your employees deserve a safe workplace, and your business deserves the security that comes with ironclad recordkeeping.