OSHA Injury Reporting Flowchart: Complete 2026 Guide to Recordkeeping, Severe Incident Reporting, and Form 300A Compliance

An osha injury reporting flowchart is the single most useful tool a safety manager can keep within arm's reach during a workplace incident. When an employee gets hurt, the clock starts ticking, and decisions about whether to call OSHA, log the case, or simply administer first aid must happen within hours. A clear flowchart turns OSHA's dense regulatory language under 29 CFR 1904 into a series of yes-or-no questions that anyone on the safety team can follow without panicking or guessing.

Most employers misunderstand the difference between recording an injury internally and reporting it to OSHA externally. Recording means entering the case on your Form 300 log. Reporting means picking up the phone and calling OSHA within 8 or 24 hours, depending on severity. A flowchart separates these two paths cleanly so you never miss a federal deadline simply because someone confused logging with calling.

The current 2026 reporting rules require employers to call OSHA within 8 hours of any work-related fatality and within 24 hours of any in-patient hospitalization, amputation, or loss of an eye. These triggers apply to nearly every employer with more than 10 employees, including industries that are otherwise partially exempt from routine recordkeeping. Knowing the trigger is half the battle.

Recordable injuries follow a different logic. An injury is recordable when it is work-related and results in death, days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, or diagnosis of a significant injury by a licensed healthcare professional. The flowchart walks each case through these gates one at a time, ending in either a Form 300 entry or a closed file.

Electronic submission rules add another layer. Establishments with 100 or more employees in designated high-hazard industries must submit Form 300, 301, and 300A data through OSHA's Injury Tracking Application each March. Establishments with 20 to 249 employees in certain industries must submit only the 300A summary. The flowchart should include a fork at the end of the year that routes each location to the right ITA workflow.

For supervisors who only see one or two injuries a year, the flowchart prevents the most common compliance failure: doing nothing because no one knew which form applied. For larger employers, it standardizes decisions across plants, shifts, and locations so two similar injuries don't get logged differently. That consistency matters when OSHA shows up for an inspection and asks why your DART rate looks suspicious.

This guide walks through every branch of the flowchart, from the first report at the jobsite to the February 1 posting deadline for the 300A summary. We cover severe injury reporting timelines, recordable versus reportable distinctions, the first-aid exemption list, privacy concern cases, and the electronic submission cutoffs. You can also brush up on adjacent topics like OSHA approved hard hats if your incidents involve head injuries that may have been preventable with proper PPE.

Understanding the difference between a recordable injury and a reportable injury is the foundation of every OSHA injury reporting flowchart. Recordable injuries get logged on your internal Form 300 and never directly notify OSHA unless the agency inspects you. Reportable injuries trigger a phone call to OSHA within hours and can lead to a programmed inspection at your facility. Treating these two categories as the same thing is the most common compliance mistake new safety coordinators make.

A case becomes recordable when it is work-related, is a new case, and results in at least one of the general recording criteria. Those criteria are death, days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, or a significant injury or illness diagnosed by a physician or other licensed healthcare professional. Even one of these triggers is enough to require an entry on the Form 300 log.

A case becomes reportable when it meets the severe injury criteria laid out in 29 CFR 1904.39. Those criteria are a work-related fatality, an in-patient hospitalization of one or more employees, an amputation, or the loss of an eye. The reporting deadlines are 8 hours for the fatality and 24 hours for the other three categories, measured from the time the employer learned of the event.

Work-relatedness is the gate that opens both paths. OSHA presumes any injury that occurs in the work environment is work-related unless one of nine specific exceptions applies. Those exceptions include eating personal food contaminated outside the workplace, voluntary participation in wellness programs, personal grooming, common colds and flu, and motor vehicle accidents in employer parking lots while commuting. Apply these tests before you log anything.

First aid is the most common reason a case stays off the Form 300 log even though medical attention was given. OSHA's first-aid list is exhaustive and exclusive: anything not on the list counts as medical treatment. The list includes non-prescription medications at non-prescription strength, tetanus immunizations, cleaning and bandaging surface wounds, hot or cold therapy, rigid finger guards, drinking fluids for heat stress, and removing foreign bodies from the eye with cotton swabs.

Restricted work is a recordability trigger that confuses many supervisors. Restricted work exists when an employee is kept from performing one or more routine job functions or from working a full workday because of the injury. Routine functions are activities the employee regularly performs at least once a week. If the restriction is recommended by a physician but the employee ignores it and works full duty, the case is still recordable based on the recommendation.

Privacy concern cases get special handling. OSHA designates injuries involving intimate body parts, sexual assault, mental illnesses, HIV or hepatitis infections, needlesticks, and other conditions specified in 1904.29(b)(7) as privacy concern cases. You still log them on Form 300, but you do not enter the employee's name on the log. Instead, you write "privacy case" in the name column and keep a separate confidential list of names. Review your OSHA.gov bookmarks to keep the regulatory text close.

Electronic submission through OSHA's Injury Tracking Application is the newest layer of the injury reporting flowchart and the layer most employers get wrong. The ITA portal opens January 2 each year and closes March 2 for the prior calendar year's data. Missing the deadline triggers a Failure to Report citation that can run several thousand dollars per establishment, and OSHA increasingly uses ITA data to target high-hazard inspections under its Site-Specific Targeting program.

The 2024 final rule expanded electronic reporting significantly. Establishments with 100 or more employees in designated high-hazard industries listed in Appendix B of 29 CFR 1904 must now submit Form 300, Form 301, and Form 300A data annually. This includes detailed case-by-case information that was previously kept only on internal logs. The covered industries include hospitals, nursing homes, warehousing, grocery stores, agriculture, manufacturing, and many construction trades.

Establishments with 20 to 249 employees in the broader Appendix A high-hazard list submit only the Form 300A summary. Establishments with 250 or more employees in any industry covered by routine recordkeeping also submit only the 300A annually. Establishments smaller than 20 employees or in partially exempt low-hazard industries are not required to submit electronically, although they must still maintain logs if they are otherwise covered.

Account creation in the ITA takes time and should be done well before March 2. Each establishment needs its own ITA record linked to the parent company. The legal entity must be correctly identified because OSHA matches ITA submissions to its inspection database using the company's legal name and EIN. Errors in legal name or NAICS code can result in a successful submission being flagged as missing during enforcement reviews.

Data is uploaded either through manual entry on the ITA web form, a CSV file matching OSHA's template, or an API integration that pulls directly from an EHS software platform. Manual entry is realistic for small employers with a handful of cases. CSV upload is the right approach for mid-size companies with multiple locations. API integration is reserved for large enterprises with hundreds of establishments and existing case management systems.

Confidentiality matters. The 2024 rule requires employers to submit employee names on Form 301 to OSHA, even though those names are not posted publicly. OSHA stripped personally identifiable information from public ITA data but the underlying records exist in federal databases. Privacy concern cases retain their privacy designation in the upload, and employee names are still omitted from publicly searchable summaries. Train HR teams on how this affects records requests under state public records laws.

State-plan states add another wrinkle. Twenty-two states operate their own OSHA-approved state plans covering private-sector employers, and these states may have stricter reporting thresholds, different forms, or earlier deadlines. California, for example, requires reporting of serious injuries within 8 hours, not 24, and uses Cal/OSHA Form 5020 instead of Form 301. Confirm your state plan rules before assuming federal deadlines apply at your facility.

The most common OSHA injury reporting mistakes cluster around a handful of decision points where the flowchart fails because the user did not pause long enough to apply the rule correctly. Recognizing these failure modes ahead of time is the cheapest form of compliance insurance an employer can buy. We see the same five or six errors at company after company during third-party audits and OSHA inspections.

The first mistake is treating any medical treatment as automatically recordable. Many cases involve a clinic visit but only first aid was administered. If a nurse cleaned a laceration with non-sterile water, applied butterfly bandages or Steri-Strips, and gave the worker non-prescription ibuprofen at non-prescription dose, the case is first aid only and stays off the log. The clinic visit itself does not make a case recordable; what matters is what was actually done.

The second mistake is forgetting to update the case classification when work status changes. An employee placed on restricted duty for two days who then transitions to seven days away from work must have the original entry updated to reflect the days-away classification. OSHA inspectors routinely pull payroll records and cross-reference them against the 300 log to catch unreported transitions, and inconsistencies become easy citations.

The third mistake is calendar-year versus fiscal-year confusion. OSHA recordkeeping operates strictly on the calendar year regardless of your company's fiscal year. Cases that occurred in late December but whose status was not finalized until January still belong on the prior year's log. The 300A summary must be posted by February 1 of the following calendar year, and the ITA submission covers the calendar year that ended.

The fourth mistake is mishandling temporary and contract workers. The employer who supervises the day-to-day work is responsible for recording the injury, not necessarily the staffing agency. If your supervisor directs a temp's daily tasks, controls the work pace, and provides the tools, you log the injury on your 300 even though the temp is on the agency's payroll. Coordinate with the staffing partner so the same case is not double-recorded.

The fifth mistake is failing to maintain a five-year retention. Once a case is on the log, the log, 301, and 300A for that year must be preserved for five calendar years following the year covered. That means a 2026 log will be retained through 2031. Digital archives are acceptable as long as they can be produced for an OSHA inspector within four business hours. See how to get OSHA 10 certified if your team needs deeper recordkeeping training.

The sixth mistake is ignoring needlestick and bloodborne pathogen reporting requirements. Any needlestick or sharps injury involving contamination with another person's blood or other potentially infectious material is automatically recordable and must be entered as a privacy concern case. The exposure incident also triggers the bloodborne pathogens standard requirements for post-exposure evaluation, follow-up, and confidential medical records under 29 CFR 1910.1030.

Building a working OSHA injury reporting flowchart inside your facility means more than printing a one-page poster. The chart should live in three places: a laminated copy at each first aid station, a digital copy embedded in your incident reporting software, and a training module that every supervisor completes during onboarding and refreshes annually. When all three are aligned, the chance of missing a deadline drops dramatically.

Start with a tabletop exercise. Pick a hypothetical incident such as a forklift operator who fractures a foot and is admitted to the hospital overnight. Walk a group of supervisors through the flowchart one branch at a time. Time how long it takes them to identify that this is a 24-hour reportable event under 1904.39 and that it will also be recordable as a days-away case on Form 300. Use the gaps in their answers to refine your training.

Build a shared escalation contact list. The flowchart should name a primary contact who places the OSHA call, a backup who covers nights and weekends, and a corporate compliance lead who reviews every severe injury report after the fact. The list should include direct cell numbers, not just office lines. Many fatalities occur outside business hours, and a dead office number does not pause the 8-hour clock.

Integrate the flowchart with your workers' compensation reporting. The information needed for an OSHA Form 301 overlaps heavily with the data needed for a workers' comp first report of injury. Use a single intake form that captures both data sets, then route the same record into both systems. This eliminates the common error of one system showing days away while the other shows return-to-work the same day.

Audit your logs annually before posting the 300A. Compare the 300 log to your workers' comp loss runs, your absence management records, and your clinic invoices. Look for cases where medical treatment was billed but no log entry exists, or cases where lost-time payments were issued but the log shows the case as medical-only. These discrepancies are the exact patterns OSHA inspectors search for during a recordkeeping audit.

Train new supervisors with real anonymized cases from your own history. Generic training material teaches the rule, but your own cases teach the judgment. Walk new managers through three or four anonymized incidents from prior years, including at least one case that turned out not to be work-related and one that was a near miss without recording obligation. Show how the decisions were documented at the time.

Finally, plan your annual review around the calendar. December is the time to confirm every recordable case from January through November has a complete 301 and a clean 300 entry. January is the time to certify the 300A, post it, and prepare the ITA upload. March 2 is the absolute deadline for ITA submission. February through April keeps the 300A on the wall. Repeat every year with no exceptions.