10.3 Recordkeeping Audits & Electronic Submission Rules

Recordkeeping Audits & Electronic Submission Rules

Beyond keeping the physical logs on-site for 5 years, employers must comply with modern electronic data reporting mandates and be prepared to defend the accuracy of their logs during focused OSHA recordkeeping audits. These regulations, governed by 29 CFR Part 1904, aim to compile occupational injury data to target high-hazard industries and improve national workplace safety.

---

1. Electronic Submission of Injury and Illness Data (29 CFR 1904.41)

Under OSHA's electronic recordkeeping rules, specific employers are required to submit their injury and illness data electronically to OSHA once a year. The data must be submitted through OSHA's secure online portal, the Injury Tracking Application (ITA).

Who Must Submit Electronically?

• Establishments with 250 or more employees: In industries that are already required to keep OSHA records, establishments with 250 or more workers must electronically submit their Form 300A annual summary.
• Establishments with 100 or more employees in High-Hazard Industries: Under current rules, establishments with 100 or more employees in designated high-hazard industries (specifically including Construction (NAICS 23), manufacturing, agriculture, and warehousing) must electronically submit detailed information from their OSHA Form 300 Log and Form 301 Incident Reports, in addition to the Form 300A Summary.
• Establishments with 20–249 employees in High-Hazard Industries: Establishments in specific high-hazard industries with 20 to 249 employees must electronically submit their Form 300A annual summary.

Key Deadlines

The electronic submission for the previous calendar year must be completed by March 2 of the following year (e.g., calendar year 2025 data must be submitted to the ITA portal by March 2, 2026). Failure to submit ITA data by the deadline can result in an "Other-Than-Serious" citation and penalty.

---

2. OSHA Recordkeeping Audits & Data Verification

OSHA Compliance Officers (CSHOs) do not simply accept an employer's OSHA 300 Log at face value. During programmed audits or standard safety inspections, CSHOs will verify the accuracy of the recordkeeping logs through a detailed auditing process.

The Verification Audit Process

To determine if an employer is under-reporting or failing to record injuries, a CSHO will request and cross-reference the following documents:

1. Workers' Compensation Reports: The CSHO will review all first reports of injury submitted to the insurance provider or state board and check if they match entries on the OSHA 300 Log.
2. First-Aid Logs: If the jobsite maintains an informal first-aid log or medical clinic book, the inspector will review it to see if any listed treatments exceeded the definition of first aid (e.g., if a worker was given prescription-strength medication but the case was left unrecorded).
3. Medical Invoices and Treatment Records: CSHOs may review medical billing records to verify the actual treatments administered.
4. Employee Interviews: The inspector will interview a sample of employees privately to ask if they have suffered any injuries during the year, if they reported them, and how the injuries were handled by management.

Recordkeeping Violations

• Unrecorded Case: Failing to record a recordable injury or illness on the OSHA 300 Log. This is a common citation and carries a penalty for each unrecorded case.
• Inaccurate Details: Failing to log correct details (such as the correct number of restricted days or classification columns).
• Late Recording: Failing to enter a recordable case on the OSHA 300 Log within 7 calendar days of receiving information about the incident.

---

3. State-Plan Variations & Public Sector Coverage

State-plan states (such as California, Oregon, Washington, and Michigan) operate their own safety programs under Section 18 of the OSH Act. While their recordkeeping requirements must be "at least as effective as" federal OSHA rules, they can introduce specific differences:

• Public Sector Recording: Under federal OSHA, state and local government agencies (public schools, municipal departments, county construction crews) are completely exempt from OSHA jurisdiction. However, State Plans are required to cover public sector workers. Consequently, public sector employers in State-Plan states must maintain OSHA 300 Logs and submit data just like private-sector employers.
• Lower Thresholds: Some State-Plan states have lower employee count thresholds or additional industries required to maintain safety logs.
• California (Cal/OSHA) Variance: Cal/OSHA has strict requirements regarding the reporting of serious injuries (requiring notification immediately, but no longer than 8 hours, for any serious injury, illness, or death, which is broader than federal OSHA's 24-hour window for inpatient hospitalizations).