2.3 Severe Injury Reporting Timelines, Privacy Cases & Electronic Submission

Key Takeaways

  • Employers must report all work-related fatalities to OSHA within 8 hours, and all work-related inpatient hospitalizations, amputations, or losses of an eye within 24 hours under 29 CFR 1904.39.
  • Fatality reports are required if death occurs within 30 days of the work-related incident; inpatient hospitalizations, amputations, or eye losses must be reported if they occur within 24 hours of the work-related incident.
  • 29 CFR 1904.29(b)(7) identifies six specific intimate or sensitive health conditions as privacy concern cases, where the employer must write 'Privacy Case' instead of the employee's name on Form 300.
  • Employers must maintain a separate, confidential master list linking employee names to case numbers for all privacy concern cases.
  • Under 29 CFR 1904.41, covered establishments must electronically submit Form 300A (and for certain high-hazard establishments with 100+ employees, Forms 300 and 301) to OSHA annually via the Injury Tracking Application (ITA) by March 2.
Last updated: August 2026

2.3 Severe Injury Reporting Timelines, Privacy Cases & Electronic Submission

Beyond routine annual recordkeeping, 29 CFR Part 1904 mandates rapid direct reporting of severe incidents to OSHA, sets strict protections for employee medical privacy, dictates annual electronic data submission thresholds, and defines worker access rights.


Severe Injury & Fatality Reporting Timelines (29 CFR 1904.39)

Employers have an affirmative legal duty to report catastrophic and severe work-related events directly to OSHA within strict mandatory deadlines:

                             Work-Related Severe Incident
                                          │
             ┌────────────────────────────┴────────────────────────────┐
             ▼                                                         ▼
      FATALITY (Death)                                  INPATIENT HOSPITALIZATION,
  Report within 8 HOURS                                AMPUTATION, or LOSS OF AN EYE
  (If death occurs within 30 days)                        Report within 24 HOURS
                                                    (If event occurs within 24 hours)

Mandatory Reporting Timelines

  • Fatality Reporting: Within 8 hours of learning of a work-related death.
  • Inpatient Hospitalization, Amputation, or Loss of an Eye: Within 24 hours of learning of the event.

Event Time Limit Windows

  • 30-Day Window for Fatalities: The employer must report a fatality to OSHA only if the employee's death occurs within 30 days of the work-related incident. If an employee dies more than 30 days after the incident, the death does NOT trigger the 8-hour report under 1904.39 (though it must still be recorded on Form 300).
  • 24-Hour Window for Severe Injuries: The employer must report an inpatient hospitalization, amputation, or loss of an eye to OSHA only if the inpatient admission or loss occurs within 24 hours of the work-related incident.

Key Statutory Definitions

  • Inpatient Hospitalization: Defined under 1904.39(b)(6) as formal admission to the inpatient service of a hospital or clinic for care or treatment. Emergency room evaluation, outpatient observation, or diagnostic testing without formal admission does not trigger the 24-hour report.
  • Amputation: Defined under 1904.39(b)(11) as the traumatic loss of a limb or external body part, including full or partial amputations with or without bone involvement (e.g., fingertip amputations with or without bone loss, medical amputations resulting from irreparable damage).
  • Loss of an Eye: Includes physical enucleation or complete, permanent loss of sight resulting from a work incident.

Reporting Methods & Exemptions

Reporting must be completed using one of three approved methods:

  1. Calling the nearest OSHA Area Office by phone.
  2. Calling the 24-hour national OSHA toll-free hotline (1-800-321-OSHA / 1-800-321-6742).
  3. Submitting the report electronically via OSHA's online reporting portal at OSHA.gov.

Exemptions: Motor vehicle accidents occurring on a public street or highway (except in construction work zones) and commercial transit accidents (train, airplane, subway) do not require reporting under 1904.39, but must still be logged on Form 300 if recordable.


Privacy Concern Cases (29 CFR 1904.29(b)(7))

To protect worker confidentiality while maintaining public safety log transparency, OSHA restricts the disclosure of employee names for sensitive medical conditions.

The 6 Exclusive Privacy Concern Categories

Under 29 CFR 1904.29(b)(7), an employer must substitute the words "Privacy Case" in place of the employee's name in Column B of the OSHA Form 300 Log if and only if the injury or illness falls into one of the following six categories:

  1. An injury or illness to an intimate body part or the reproductive system.
  2. An injury or illness resulting from a sexual assault.
  3. Mental illnesses (e.g., post-traumatic stress disorder, major depression diagnosed by a PLHCP).
  4. HIV infection, hepatitis infection, or tuberculosis infection.
  5. Needlestick injuries and cuts from sharp objects contaminated with another person's blood or other potentially infectious material (OPIM) under 29 CFR 1904.8.
  6. Other illnesses where the employee independently and voluntarily requests in writing that their name not be entered on the log.
Case CategoryLog Entry Rule (Form 300 Column B)Confidential Master Key List Required?
Standard Injury (e.g., broken leg)Enter Full Employee NameNo
Intimate Body Part InjuryEnter "Privacy Case"YES (Confidential Master List)
Contaminated NeedlestickEnter "Privacy Case"YES (Confidential Master List)
Voluntary Employee Request (Illness)Enter "Privacy Case"YES (Confidential Master List)
Non-listed condition (e.g., back strain)Enter Full Employee Name (No arbitrary privacy designation)No

Confidential Master Key List Protocol

Employers must maintain a separate, confidential master key list linking the case numbers of all Privacy Cases to the corresponding employee names. This list must be kept confidential and disclosed only to OSHA CSHOs during an inspection, or to government health auditors.


Electronic Data Submission via ITA (29 CFR 1904.41)

Under 29 CFR 1904.41, specific covered establishments must electronically submit injury and illness data annually to OSHA's Injury Tracking Application (ITA) by March 2 of the year following the calendar year covered.

                         Electronic Submission Rules (ITA)
                                         │
         ┌───────────────────────────────┼───────────────────────────────┐
         ▼                               ▼                               ▼
 250+ Employees                 20-249 Employees                100+ Employees
 (Recordkeeping Industries)     (High-Hazard App A)             (High-Hazard App B)
 Submit Form 300A               Submit Form 300A                Submit Form 300A,
                                                                Form 300 & Form 301

Submission Categories & Industry Thresholds

  1. Establishments with 250+ Employees: Establishments with 250 or more employees in industries required to keep routine OSHA records must electronically submit Form 300A annually.
  2. Establishments with 20–249 Employees in High-Hazard Industries: Establishments with 20 to 249 employees in designated high-hazard industries listed in Appendix A to Subpart E (e.g., manufacturing, construction, department stores, nursing care facilities) must electronically submit Form 300A annually.
  3. Establishments with 100+ Employees in Designated High-Hazard Industries: Under OSHA's expanded rule, establishments with 100 or more employees in designated high-risk industries listed in Appendix B to Subpart E must electronically submit Form 300A, Form 300 (Log), and Form 301 (Incident Reports) (with case-level data redacted for personal identifiers) annually.

Employee Access Rights to Records (29 CFR 1904.35)

29 CFR 1904.35 grants workers, former employees, and authorized employee representatives (e.g., union officials) affirmative rights to inspect workplace safety records:

  • OSHA 300 Log Access: Upon request, the employer must provide a copy of the OSHA Form 300 Log to any current employee, former employee, or authorized employee representative by the end of the next business day.
  • OSHA 301 Incident Report Access:
    • An employee or former employee is entitled to receive a complete copy of the Form 301 report describing their own injury or illness by the end of the next business day.
    • Authorized employee representatives are entitled to receive copies of Form 301 reports for collective workplace injuries by the end of the next business day, but the employer must redact employee names, addresses, health care provider details, and confidential medical info from Column 301 fields.
Test Your Knowledge

What are the mandatory OSHA reporting deadlines under 29 CFR 1904.39 for a work-related fatality versus an inpatient hospitalization, amputation, or loss of an eye?

A
B
C
D
Test Your Knowledge

Which of the following cases MUST be classified as a 'privacy concern case' under 29 CFR 1904.29(b)(7), requiring the employer to enter 'Privacy Case' instead of the employee's name on Form 300?

A
B
C
D
Test Your Knowledge

What is the annual deadline for establishments required by 29 CFR 1904.41 to electronically submit their injury and illness data (Form 300A / Forms 300 & 301) to OSHA's Injury Tracking Application (ITA)?

A
B
C
D
Test Your Knowledge

Under 29 CFR 1904.39, what type of medical care qualifies as an 'inpatient hospitalization' that triggers the 24-hour reporting requirement to OSHA?

A
B
C
D