- Part Number:1904
- Part Number Title:Recording and Reporting Occupational Injuries and Illnesses
- Subpart:1904 Subpart C
- Subpart Title:Recordkeeping Forms and Recording Criteria
- Standard Number:
- GPO Source:
Are there situations where I do not put the employee's name on the forms for privacy reasons? Yes, if you have a "privacy concern case," you may not enter the employee's name on the OSHA 300 Log. Instead, enter "privacy case" in the space normally used for the employee's name. This will protect the privacy of the injured or ill employee when another employee, a former employee, or an authorized employee representative is provided access to the OSHA 300 Log under §1904.35(b)(2). You must keep a separate, confidential list of the case numbers and employee names for your privacy concern cases so you can update the cases and provide the information to the government if asked to do so.
If I have removed the employee's name, but still believe that the employee may be identified from the information on the forms, is there anything else that I can do to further protect the employee's privacy? Yes, if you have a reasonable basis to believe that information describing the privacy concern case may be personally identifiable even though the employee's name has been omitted, you may use discretion in describing the injury or illness on both the OSHA 300 and 301 forms. You must enter enough information to identify the cause of the incident and the general severity of the injury or illness, but you do not need to include details of an intimate or private nature. For example, a sexual assault case could be described as "injury from assault," or an injury to a reproductive organ could be described as "lower abdominal injury."
[66 FR 6130, Jan. 19, 2001; 66 FR 52034, Oct. 12, 2001; 67 FR 77170, Dec. 17, 2002; 68 FR 38607, June 30, 2003; 81 FR 91809-91810 Dec 19, 2016; 82 FR 20548 May 3, 2017]