Skip to content

Approaching: Nov 20, 2026 — HCS 2024 Deadline. Get ready →

General Industry (29 CFR 1910)

Access to Employee Exposure and Medical Records

Verified vs OSHA sources · 2026-10-05

29 CFR 1910.1020

29 CFR 1910.1020 gives workers and their representatives the right to access their exposure and medical records, and sets how long those records must be kept: employee exposure records for at least 30 years, and medical records for the duration of employment plus 30 years. It is the retention backbone behind every substance-specific health standard.

29 CFR 1910.1020 at a glance

What it requires
Employee (and their reps') right of access to exposure and medical records, plus long-term retention
Exposure records
Kept at least 30 years (29 CFR 1910.1020(d)(1)(ii))
Medical records
Kept for the duration of employment plus 30 years (1910.1020(d)(1)(i))
Access deadline
Records provided to the employee within 15 working days of a request (1910.1020(e)(1))
Max penalty (2026)
$16,550 per serious violation; $165,514 per willful
The #1 confusion
This is an access-and-retention rule, not an exposure limit; retention differs by record type

What 29 CFR 1910.1020 requires (plain English)

29 CFR 1910.1020, Access to Employee Exposure and Medical Records, gives workers, their designated representatives, and OSHA the right to see the exposure-monitoring and medical records an employer keeps, and it sets how long those records must be preserved. It is the backbone that makes every substance-specific health standard enforceable over a worker's lifetime, because occupational disease can surface decades after exposure.

The core retention rules are long: employee exposure records must be kept for at least 30 years, and employee medical records for the duration of employment plus 30 years. A few narrow exceptions apply: background environmental sampling data need be kept only one year if the sample results and key data are retained, health-insurance claim records kept separately are exempt, and the records of employees who worked less than one year may be given to the employee at termination instead of retained.

On access, when an employee or a designated representative asks, the employer must provide the records in a reasonable time, place, and manner, within 15 working days, at no cost for the first copy. The standard also requires informing employees of the existence and location of these records and of their access rights. 1910.1020 works hand in hand with the health standards (asbestos, lead, silica, benzene and the rest), each of which points back to it for recordkeeping.

The regulatory text

“Each employee exposure record shall be preserved and maintained for at least thirty (30) years...”
29 CFR 1910.1020(d)(1)(ii)

Key facts about 29 CFR 1910.1020

  • Employee exposure records must be kept for at least 30 years (1910.1020(d)(1)(ii)).
  • Employee medical records must be kept for the duration of employment plus 30 years (1910.1020(d)(1)(i)).
  • Employees and their designated representatives have a right of access to these records (1910.1020(e)).
  • Access must be provided within 15 working days of a request, at no cost for the first copy.
  • A Safety Data Sheet may satisfy exposure-record retention, or a record of the chemical's identity, where and when it was used.
  • OSHA also has a right of access to these records under the standard.
  • 1910.1020 is the retention backbone for every substance-specific health standard (asbestos, lead, silica, benzene, etc.).

Scope: who 29 CFR 1910.1020 applies to

Regulatory framework
General Industry (29 CFR 1910)
Citation reference
29 CFR 1910.1020
Enforcement status
In force and enforced
Jurisdiction
Federal OSHA (29 State-Plan jurisdictions may be stricter)

State-Plan states (e.g. California, Washington, Michigan) operate OSHA-approved programs that must be at least as effective as federal OSHA and frequently impose higher penalties or additional requirements. Confirm the rule as adopted in your state.

Key requirements of 29 CFR 1910.1020

#Employer obligation
1Preserve exposure records for 30 years
2Preserve medical records for employment + 30 years
3Provide employee access within 15 working days
4Provide OSHA access upon request
5Inform employees of their access rights annually

Summarized from the text of 29 CFR 1910.1020. Always read the full regulation for the binding language.

Common Exposure & Medical Records violations

Deficiencies OSHA cites under 29 CFR 1910.1020 include the ones below, in no particular order. Distinct deficiencies can be cited as separate items, and each serious item carries up to $16,550 (2026). Broader per-instance stacking exists but is a discretionary, case-by-case OSHA enforcement policy, not an automatic multiplier.

  • Exposure records discarded before 30 years (1910.1020(d)(1)(ii)).
  • Medical records not kept for employment plus 30 years (1910.1020(d)(1)(i)).
  • Failure to provide records to an employee or representative within 15 working days (1910.1020(e)(1)).
  • Employees not informed of the existence, location, and access rights for their records (1910.1020(g)).
  • Charging for or obstructing access to the first copy of records (1910.1020(e)).

This is an access-and-retention rule, not an exposure limit, and retention differs by record type

1910.1020 sets no PEL and controls no hazard directly; it governs who can see records and how long they are kept. The retention periods are commonly confused: employee exposure records are kept 30 years, but medical records are kept for the duration of employment plus 30 years, not the same clock. Some records have shorter rules (certain background sampling data one year; the records of employees employed less than a year may be handed to them at termination). And a Safety Data Sheet can serve as an exposure record, or the employer may instead keep a record of the chemical's identity and where and when it was used. Discarding a health standard's monitoring results after a few years is a classic 1910.1020 violation.

What OSHA inspectors look for

A compliance officer checks whether exposure-monitoring and medical records are retained for the required periods, whether workers and their representatives can obtain them within 15 working days at no cost for the first copy, and whether employees were told these records and their access rights exist. Discarding monitoring results early is a classic finding.

Example: how a violation is cited

A plant discards its air-monitoring records after five years, so a former worker developing lung disease cannot trace their exposure. OSHA cites 1910.1020(d) because exposure records must be kept 30 years: a retention failure that defeats long-latency disease claims, with penalties from $16,550.

Illustrative example, not a specific OSHA case.

Exposure & Medical Records compliance checklist

Use this to evaluate your compliance with 29 CFR 1910.1020. Each item is a key requirement OSHA may verify during an inspection.

  • Preserve employee exposure records for at least 30 years, and medical records for employment plus 30 years.
  • Keep either the Safety Data Sheets or a record of each chemical's identity and where and when it was used.
  • Provide requested records to employees and their designated representatives within 15 working days.
  • Do not charge for the first copy of records; provide access in a reasonable time, place, and manner.
  • Inform employees, on hiring and annually, of the records' existence, location, and their access rights.
  • Transfer records to any successor employer, or notify NIOSH if the business ceases with no successor.

2026 penalties for 29 CFR 1910.1020

Maximums set by 29 CFR 1903.15(d). 2026 amounts unchanged from 2025 (no CPI adjustment; OMB M-26-11). Not an increase. The 2025 OSHA penalty levels remain in effect for 2026; OSHA made no inflation adjustment for 2026. 29 CFR 1903.15 identifies January 15, 2025 as the effective reference for these amounts, while OSHA's public penalties page currently references penalties assessed after Jan. 15, 2026.

Violation typeMinimumMaximumWhen it applies
Serious$1,085$16,550Substantial probability of death or serious physical harm.
Other-Than-Serious$0$16,550Relates to safety/health but unlikely to cause death or serious harm.
Willful$11,823$165,514Intentional, knowing, or voluntary disregard of the requirement.
Repeated$4,256$165,514A substantially similar violation cited within the last 5 years.
Failure to AbateNone$16,550/dayup to $16,550 per day; total capped at 30x the daily amount (FOM Ch.6)

Access-to-records citations arise during health inspections and records requests. Serious violations reach $16,550 and willful or repeat violations $165,514; premature record destruction and denied access are the usual findings.

Maximums and the willful minimum are set by 29 CFR 1903.15(d); the serious and repeated minimums are OSHA policy floors from its annual penalty adjustment memo. OSHA applies gravity-based and size, good-faith and history reductions (FOM CPL 02-00-164 Ch.6). Estimates only, not legal advice.

The business case for Exposure & Medical Records compliance

Occupational cancers and lung diseases surface decades after exposure, long after a job ends. The 30-year exposure and employment-plus-30-year medical retention, and the worker's right to see the records, are what make it possible to link a disease back to a workplace exposure years later.

Exposure & Medical Records penalties by state

Penalties and enforcement vary by state. State-Plan states may impose higher penalties and additional requirements beyond federal 29 CFR 1910.1020.

Frequently asked questions about 29 CFR 1910.1020

How long must employee exposure records be kept?

At least 30 years. Under 1910.1020(d)(1)(ii), employee exposure records, such as air-monitoring results and Safety Data Sheets, must be preserved and maintained for at least 30 years, with a few narrow exceptions (for example, certain background sampling data may be kept only one year if the results and key data are retained). This long horizon exists because occupational disease can appear decades after exposure.

How long must employee medical records be kept?

For the duration of employment plus 30 years. Under 1910.1020(d)(1)(i), the employer must preserve each employee medical record for at least the length of that person's employment plus 30 years. The records of employees who worked less than one year need not be retained after employment if they are provided to the employee upon termination.

Do employees have the right to see their exposure and medical records?

Yes. Under 1910.1020(e), employees and their designated representatives have a right of access to relevant exposure and medical records, and the employer must provide them within 15 working days of a request, at no cost for the first copy. OSHA also has a right of access. The employer must inform employees of the existence, location, and availability of these records.

Does 1910.1020 set an exposure limit?

No. 1910.1020 is a records access and retention standard: it does not set a permissible exposure limit or control any hazard directly. Instead, it guarantees that the exposure-monitoring and medical records generated under the substance-specific health standards are kept for decades and are accessible to workers, their representatives, and OSHA, so that long-latency occupational disease can be traced back to exposure.

Regulatory history of 29 CFR 1910.1020

OSHA issued the access-to-records rule in 1980 (45 FR 35212), originally numbered 1910.20 and later redesignated 1910.1020. It established the 30-year exposure and employment-plus-30-year medical retention periods that the substance-specific health standards rely on, reflecting the long latency of occupational cancers and lung diseases.

Related glossary terms

Key terms that appear in 29 CFR 1910.1020, each with a full plain-English explainer.

Primary sources

OSHA figures on this page are imported from HazComFast's verified regulatory module (verified 2026-10-05 against eCFR, OSHA.gov, and the Federal Register).

This page is an educational summary, not legal advice. OSHA standards and penalty amounts change; confirm requirements against the current regulation and your applicable State-Plan before acting.

Get the Binder in Order Before the Inspector Arrives. Are You Ready?

OSHA does not give advance notice of inspections (29 CFR 1903.6). Get the binder in order before the opening conference, not during it.

Serious Violation

$16,550

per violation (max)

HazComFast Pro

$199/mo

10 jobsites, unlimited chemicals, unlimited workers

New sign-ups are paused. The free tools below need no account, and customers can log in as usual.

Your account keeps working as usual. Cancel anytime.