OSHA Recordable Injuries and Illnesses: The Complete 2026 Guide to 29 CFR 1904 Recordkeeping, Forms 300, 300A, 301, and Reporting Requirements

An OSHA recordable injury or illness is any work-related event that meets the criteria spelled out in 29 CFR Part 1904, and understanding what makes a case OSHA recordable is one of the most important compliance skills any safety professional, HR manager, or supervisor can develop. The stakes are real: misclassified cases can trigger citations, distort safety metrics, and damage relationships with insurance carriers, customers, and government agencies that scrutinize injury rates before awarding contracts.

Despite how routine recordkeeping sounds, the rules contain dozens of subtle traps. A laceration that needs sutures is recordable, but the same cut closed with butterfly strips is not. A prescription written but never filled still counts as medical treatment beyond first aid. A positive drug test on a post-incident screen does not automatically remove a case from the log. These distinctions matter because every recorded case feeds into your Days Away, Restricted, or Transferred (DART) rate and your Total Recordable Incident Rate (TRIR).

This guide walks through the full recordkeeping system as it stands in 2026, including the expanded electronic submission rule that took effect on January 1, 2024 and continues to apply. We cover Form 300 (the log), Form 300A (the annual summary that must be posted from February 1 through April 30), and Form 301 (the individual incident report). We also explain reporting requirements that exist separately from recordkeeping, like the eight-hour fatality rule and the 24-hour hospitalization, amputation, or eye-loss rule.

If you are studying for an OSHA 10 or OSHA 30 card, this material shows up on the exam in multiple forms. You will see scenarios asking whether a specific event is recordable, questions about how long records must be kept, and items testing your knowledge of which industries are partially exempt. Practicing realistic questions through free basic OSHA practice questions and answers is the fastest way to lock in the rules and recognize the patterns examiners use.

Beyond the exam, recordkeeping has practical consequences every single day. Workers' compensation carriers use your logs to set premiums. General contractors review TRIR before awarding subcontracts. The Bureau of Labor Statistics surveys employers and uses anonymized log data to publish the annual workplace injury statistics that drive federal policy. State plan states like California, Michigan, and Washington layer additional requirements on top of federal rules, and getting those state-specific nuances wrong can cost you.

We also tackle the human side of recordkeeping: how to interview an injured worker, how to document medical treatment without violating HIPAA, how to handle a case that crosses calendar years, and how to correct a log when new information surfaces months after the fact. By the end of this guide, you will be able to read a fact pattern, apply the regulatory test, and confidently classify any case as recordable, non-recordable, or reportable.

Whether you manage a single facility or a multi-state operation with hundreds of locations, the principles here apply uniformly. Federal OSHA recordkeeping rules are not negotiable, but how you operationalize them — through software, paper logs, or hybrid systems — is where smart safety teams gain efficiency and accuracy. Let's start with the core definitions and work outward.

The OSHA recordkeeping system relies on three forms that work together, and confusing them is one of the most common mistakes new safety coordinators make. Form 300 is the Log of Work-Related Injuries and Illnesses — a running, year-by-year list of every recordable case at your establishment. Form 300A is the Summary of Work-Related Injuries and Illnesses, a single-page rollup of the prior year's totals that must be physically posted in a visible location from February 1 through April 30. Form 301 is the Injury and Illness Incident Report, a detailed individual record for each case.

Form 300 captures the case in columns: case number, employee name (or a privacy substitute for certain sensitive cases), job title, date of injury, where it occurred, a brief description, and a classification that drives most safety metrics. The classification columns are mutually exclusive — you check exactly one of death, days away, restricted/transferred, or other recordable. You also enter the number of days away and the number of restricted days, which feed directly into your DART rate.

Form 300A is what most employees actually see. It must be signed by a company executive certifying that they have reviewed the OSHA 300 log and reasonably believe the entries are accurate. The signing executive must be the owner, an officer of the corporation, the highest-ranking official at the establishment, or that person's immediate supervisor. Delegating the signature to a safety coordinator does not satisfy the rule, and OSHA has issued citations for improper certifications.

Form 301 is the most detailed document. It includes information about the employee, the physician or health care professional, the location and circumstances of the event, and a narrative of what happened. The 301 must be completed within seven calendar days of receiving information that a recordable case occurred. Employers may substitute an equivalent form — most workers' compensation first reports of injury qualify — as long as it contains the same data elements required by 29 CFR 1904.29.

All three forms must be retained for five years following the end of the calendar year they cover. During that retention period, the records must be available within four business hours for OSHA inspectors, and employees, former employees, and their representatives have specific rights to access the logs. Form 301s containing personally identifiable information have stricter access rules than the 300 log itself. Studying the recordkeeping standard pairs well with the broader compliance topics covered in OSHA Basic OSHA Practice 2.

Establishments with ten or fewer employees at all times during the previous calendar year are partially exempt from the routine recordkeeping requirements, though they must still report fatalities, hospitalizations, amputations, and eye losses. There is also a list of partially exempt industries by NAICS code — primarily lower-hazard service sectors like legal offices, insurance carriers, and many retail categories — that do not have to keep the log unless OSHA or BLS specifically requests it.

Multi-establishment employers maintain separate logs for each physical location expected to operate for more than one year. Short-term projects of less than a year can be combined onto a single log at the corporate or regional level. Construction employers, contractors, and franchise operators face additional questions about which entity owns the log for each worker — generally, the employer that directs the means and manner of work is the recordkeeper of record.

The electronic submission rule, formally called the Improve Tracking of Workplace Injuries and Illnesses rule, requires certain employers to submit injury and illness data to OSHA through the Injury Tracking Application (ITA) each year. The current version of the rule, which took full effect on January 1, 2024, expanded the scope significantly and changed what information must be submitted. Establishments with 100 or more employees in designated high-hazard industries must now submit Form 300, Form 301, and Form 300A data, while smaller establishments in covered industries submit only Form 300A.

Specifically, three categories of employers must submit data. First, establishments with 250 or more employees that are required to keep OSHA injury and illness records submit Form 300A. Second, establishments with 20 to 249 employees in industries on Appendix A of Subpart E submit Form 300A. Third, establishments with 100 or more employees in industries on the new Appendix B submit Forms 300A, 300, and 301. The expanded list captures manufacturing, construction, utilities, transportation, agriculture, healthcare, retail, and many service sectors.

The annual submission deadline is March 2. Data must reflect the prior calendar year — so the March 2, 2026 submission covers calendar year 2025 cases. Employers create or use an existing account at the ITA portal, identify each covered establishment, and either manually enter the data, upload a CSV file, or use API integration with their recordkeeping software. The ITA validates required fields, flags obvious errors, and provides a confirmation when the submission is accepted.

One of the more controversial aspects of the current rule is that OSHA intends to publish much of the submitted data in a public, searchable format. Establishment names, addresses, NAICS codes, and high-level injury counts will appear on a public portal. Detailed Form 300 and 301 narrative descriptions will have personally identifiable information removed before publication, but employer-level data will be visible. This transparency push is intended to allow workers, customers, and the public to compare safety performance across companies.

Employers covered by the electronic submission rule still maintain paper or electronic logs onsite — the ITA submission does not replace the routine recordkeeping requirements of 29 CFR 1904 Subparts C and D. The annual electronic submission is in addition to, not instead of, posting the 300A summary, keeping the 300 log current, completing 301 reports, and meeting the eight-hour and 24-hour acute reporting obligations.

Anti-retaliation provisions baked into the rule prohibit employers from discouraging reports of work-related injuries or illnesses. Mandatory post-incident drug testing without an articulable safety basis, blanket disciplinary programs that punish reporters, and safety incentive programs that withdraw rewards because of reported injuries can all run afoul of the anti-retaliation language. Section 11(c) of the OSH Act provides separate protections for workers who exercise their reporting rights.

Penalties for failing to submit electronically follow the same structure as other OSHA citations. A serious other-than-serious citation for missing or late submission can reach the standard maximum per violation, and willful violations are substantially higher. Beyond the direct fines, missed submissions trigger flags in the ITA system that often lead to follow-up correspondence and, in some cases, programmed inspections targeting recordkeeping accuracy.

Even careful safety teams stumble on a small set of recurring recordkeeping mistakes that show up repeatedly in OSHA citation data. The most common is under-recording cases that involve prescription medication when the employee chose not to fill the prescription. As discussed above, the prescription itself is the trigger. Auditors love this issue because it is easy to prove — they request the workers' compensation file, see the prescription on the medical record, and then check whether the case appears on the 300 log.

A close second is improper Form 300A certification. The rule explicitly requires a company executive — owner, corporate officer, highest-ranking official at the establishment, or that person's immediate supervisor — to sign the summary. Citations have been issued where a safety coordinator, plant manager who was not the highest official, or HR representative signed instead. Treat the certification as a serious leadership act and put it on the executive's calendar each January.

Posting failures are another perennial favorite. The 300A must be posted from February 1 through April 30 in a conspicuous location where notices to employees are customarily posted. Tucking it in a binder in the safety office does not count. Multi-shift operations need to confirm that workers on every shift have access to a posted copy. Remote workforces present a challenge that OSHA has addressed through guidance allowing electronic posting in some circumstances, but the safest approach is a physical posting at every establishment with employees.

Late entries on the Form 300 are easy to identify during an inspection. Cases entered weeks or months after the seven-day deadline create a paper trail showing when knowledge was acquired and when the entry was made. A best practice is to build the seven-day window into the workers' compensation intake process so that every claim automatically triggers a recordability assessment within days. Pair the workflow with periodic reviews using OSHA Basic OSHA Practice 3 scenarios for trainees.

Privacy concerns generate another category of mistakes. Certain cases — injuries involving the reproductive system, mental illnesses, HIV or hepatitis, sexual assault, needlestick or sharps incidents under bloodborne pathogen rules, and any case the employee voluntarily requests be kept private — require the employer to enter "Privacy Case" instead of the employee's name in the Form 300. A separate, confidential list ties the case numbers to names and must be safeguarded. Mixing the two is a common HR misstep.

Multi-establishment employers sometimes fail to maintain separate logs for each location, instead combining everything into a single corporate log. The rule requires a log for each establishment expected to operate for more than one year. Short-duration projects under twelve months may be consolidated. When in doubt, more logs is safer than fewer. The same principle applies when employees split time across multiple establishments — the log of the establishment where they spent the most time during the year of the injury is generally the right home for the case.

Finally, day-counting errors plague many logs. The day of injury is never counted as a day away or restricted day. Calendar days, not workdays, are counted, and the count continues even when the employee would not otherwise have been scheduled to work (weekends, holidays, vacation). Caps apply — once you reach 180 calendar days of away or restricted/transferred time, you stop counting and enter 180 on the log. Getting these basics right protects the integrity of the entire metric system that flows from the 300.

Putting the OSHA recordable rules into daily practice means building a workflow that catches every potentially recordable case at the moment it happens and routes it through a consistent classification process. Start with the first-report-of-injury form your workers' compensation carrier uses. Treat any completed first report as a trigger for recordability analysis, even if the worker declines treatment or returns to full duty before the end of the shift. Many recordable cases hide in the file as a single doctor's note.

Train front-line supervisors on the difference between first aid and medical treatment using real examples from your industry. A construction crew lead should know that surgical glue on a hand laceration is recordable while butterfly strips are not. A warehouse supervisor should understand that prescription muscle relaxants for a back strain trigger recordability even if the employee never picks up the prescription. Short ten-minute toolbox talks every quarter reinforce these distinctions far better than annual classroom training alone.

Document the classification decision for every case, especially the borderline ones. A simple memo to file explaining why a case was determined to be first aid and not medical treatment becomes invaluable during an OSHA inspection three years later when memories have faded. The memo should reference the specific 1904.7 criteria, the treatment provided, and the source of the medical information used to decide. This habit protects the company and creates an audit trail of consistent decision-making.

Coordinate with workers' compensation, HR, and operations on a shared dashboard or tracking system. Recordkeeping software like Origami Risk, KPA Flex, Intelex, or even a well-built SharePoint list works as long as everyone uses it consistently. The system should generate the Form 300, the 300A summary, and a CSV export ready for ITA upload. Reconciling the workers' compensation claims list against the OSHA log every quarter catches cases that fell through the cracks.

Build a calendar of recordkeeping deadlines and assign owners. January 31 — finalize the prior year's 300 and prepare the 300A for executive signature. February 1 — post the certified 300A in all establishments. March 2 — submit covered data to the ITA. April 30 — take down the posted 300A. October 31 — internal audit of year-to-date entries to catch any classification errors before year-end. These four or five recurring tasks form the rhythm of compliance.

For organizations preparing safety professionals or supervisors for certification, regular practice with realistic exam questions accelerates mastery. Working through varied scenarios — recordable, non-recordable, reportable, exempt — builds the pattern recognition that lets you classify cases in seconds rather than hours of regulatory research. The investment in training pays back many times over in citation avoidance and more accurate safety metrics that actually reflect what is happening on the floor.

Finally, remember that recordkeeping is a means, not an end. The point of the 300, 300A, and 301 is not just to satisfy OSHA — it is to surface the data that drives real injury prevention. Use the log as a tool to spot trends, target hazards, and measure whether your safety investments are working. A clean, accurate recordkeeping system is the foundation of every effective safety management system, and the discipline of getting it right transforms safety from paperwork into prevention.