12.5 Medical Documentation & Occupational Health Records

12.5 Medical Documentation & Occupational Health Records

Quick Summary: Medical Documentation is its own sub-topic under Clinical Practice on the COHN blueprint, and it is the single highest-leverage administrative competency the occupational health nurse (OHN) has. Occupational health records are the primary evidence in workers' compensation disputes, OSHA citations, ADA failure-to-accommodate claims, and malpractice actions — often decades after the encounter. The governing rules are not the ones most nurses expect: in the employment setting the operative authorities are the ADA, 29 CFR 1910.1020, GINA, and state law far more often than HIPAA.

Four Record Systems That Must Stay Separate

Exam Trap Warning: The 5-year OSHA recordkeeping retention and the 30-year 1910.1020 retention are the most frequently confused pair in this topic. The OSHA 300 Log is a safety record kept 5 years. The employee medical record is kept for the duration of employment plus 30 years. They are different records under different standards and they are stored separately.

ADA Confidentiality: The Separate File Rule

The Americans with Disabilities Act requires that all medical information obtained about an employee — from a post-offer exam, a fitness-for-duty evaluation, a medical surveillance program, or a voluntary wellness program — be collected on separate forms, kept in separate medical files, and treated as a confidential medical record. It does not go in the personnel file, and the supervisor does not get a copy.

Disclosure is permitted only in narrow circumstances:

• Supervisors and managers may be told about necessary work restrictions and accommodations — the restriction, never the diagnosis.
• First aid and safety personnel may be told if the condition might require emergency treatment.
• Government officials investigating ADA compliance may be given relevant information.
• Workers' compensation offices and insurers, and state second-injury funds, as required.

This applies to all employees, not only those with disabilities.

GINA Title II layers on top: family medical history is genetic information, and requesting it is generally prohibited. When the OHN requests medical information from a provider — for a fitness-for-duty evaluation or a return-to-work certification — the request should carry the GINA safe harbor warning instructing the provider not to supply genetic information, including family medical history.

HIPAA Is Usually Not the Rule You Want

HIPAA's Privacy Rule protects protected health information held by a covered entity. Employment records held by an employer in its role as employer are expressly excluded from the definition of PHI. An occupational health unit operated by the employer is therefore usually not governed by HIPAA for its employment-related records — unless it functions as a health care provider that conducts standard electronic transactions such as billing insurance, in which case it may be a covered entity for that activity and must erect appropriate separation.

The practical consequence: the confidentiality of the OHN's file is protected primarily by the ADA, 1910.1020, GINA, state law, and the professional duty of confidentiality — not by HIPAA. Citing HIPAA to a supervisor is common and usually legally wrong; citing the ADA separate-file rule is correct and enforceable.

29 CFR 1910.1020: Access to Employee Exposure and Medical Records

Retention

• Employee medical records: duration of employment plus 30 years. Three exceptions need not be retained: health insurance claims records maintained separately from the employer's medical program; first-aid records of one-time treatment of minor injuries made on site by a non-physician and kept separately; and the records of employees employed less than one year, provided those records are given to the employee at termination.
• Employee exposure records: 30 years. Background data to monitoring need be kept only 1 year if the sampling results, methodology, and interpretive summary are kept 30 years. SDSs need not be retained if a record of the substance identity, where it was used, and when is kept 30 years.
• Analyses using exposure or medical records: 30 years.
• Chest X-ray films must be preserved in their original state.

Access

• Employees, their designated representatives (including a union with written authorization), and OSHA have a right of access.
• Access must be provided in a reasonable time, place, and manner. If the employer cannot reasonably provide access within 15 working days, it must within those 15 working days tell the requester why and give the earliest date the record can be made available.
• The first copy is provided without cost. The employer may charge reasonable, non-discriminatory administrative costs only for additional copies.
• Employees must be informed of the existence, location, and availability of these records, and of their rights under the standard, on first employment and at least annually.

OSHA 300 Log Privacy Cases

Certain recordable cases must be entered on the OSHA 300 Log with "Privacy Case" in place of the employee's name, with a separate confidential list linking case numbers to names:

• Injury or illness to an intimate body part or the reproductive system
• Injury or illness resulting from a sexual assault
• Mental illness
• HIV infection, hepatitis, or tuberculosis
• Needlestick and sharps injuries from objects contaminated with another person's blood or OPIM
• Any other case where the employee voluntarily requests that their name be withheld

Charting That Survives a Deposition

Documentation is judged years later by people who were not there. Defensible entries are:

• Contemporaneous — written at the time of the encounter. A late entry is permissible but must be labeled as such, with the date and time of the event and the date and time of the entry. Never backdate.
• Objective and factual — record findings, measurements, quotes, and actions. Record the worker's own words in quotation marks. Do not record conclusions about fault, credibility, or motive. "Employee is faking to get out of work" and "Employee is a chronic complainer" are indefensible; "Employee reports pain 8 of 10; no guarding, swelling, or deformity observed; full active range of motion demonstrated" is defensible and says the same clinically useful thing.
• Complete — assessment, intervention, worker response, education provided and how comprehension was verified, disposition, and follow-up plan. Not documented, not done.
• Corrected properly — a single line struck through the error, leaving it legible, with the correcting nurse's initials, date, and time, and a brief reason such as "wrong chart." Never erase, obliterate, use correction fluid, or delete. In an electronic record, use the system's amendment function; audit trails record every change, and an attempted deletion is far more damaging than the original error.
• Free of blame and of information the employer is not entitled to. The fitness-for-duty communication that leaves the unit states restrictions and duration, not diagnosis, medications, or clinical findings.

Applied example: a worker reports a needlestick from a discarded sharp. The clinical note in the medical record documents the source, the exposure, counselling, testing offered and consented to, and PEP decision-making. The OSHA 300 Log records the case as a privacy case with no name. The supervisor learns only that the worker may return to work with no restrictions. Three separate records, three different audiences, one encounter.