It can sometimes be confusing to understand how long employers are required to keep employee medical records.
That’s because OSHA’s employee medical recordkeeping requirements are defined in several places, depending on whether or not the rules apply to general industry, a specific industry, or an even more specific health and safety topic.
But, in the high-stakes world of industrial safety, a single missing document can cost your company upwards of $16,550 per violation — the current OSHA maximum for a “serious” citation.
With federal inspections reaching record highs and new permanent standards for silica in effect and proposed heat illness rule on the way, the “set it and forget it” approach to employee medical recordkeeping is a massive liability.
Ultimately, if you aren’t auditing your medical archives regularly, you’re likely sitting on a compliance landmine.
To bridge the gap between these rising risks and your daily operations, it’s essential to master the fundamental timeline that governs almost every medical document in your facility.
Here, we’ll show how to maintain 2026 OSHA compliance on your worksite and avoid significant medical recordkeeping violations.
Let’s take a look.
Related: OSHA 300A Reporting: Tips for Correctly Classifying an Incident.
Related: OSHA Updates Submission Requirements for Injury and Illness Records.
1. The 2026 Core Standard: The “Duration Plus 30” Rule
The bedrock of US health and safety recordkeeping remains OSHA standard 29 CFR 1910.1020.
For any employee exposed to toxic substances or harmful physical agents, most medical records must be preserved for the duration of their employment plus thirty (30) years.
This long-term retention is a functional necessity due to the decades-long latency periods of occupational diseases.
Under current 2026 enforcement, the following must be archived:
* Medical and employment questionnaires or histories.
* Results of pre-employment, periodic, and exit physical examinations.
* Formal medical opinions and PLHCP (Physician or Other Licensed Health Care Professional) recommendations.
* First-aid records that involve toxic exposure or internal injuries.
2. Permanent Standards for Respirable Crystalline Silica
As of 2026, the temporary “grace periods” for silica compliance have expired. If an employee is exposed at or above the Action Level (25 μg/m³) for 30 or more days per year, medical surveillance is a strict legal mandate, not a suggestion.
Current rules require employers to offer medical examinations every three years unless a PLHCP recommends a more frequent cadence.
Crucially, the “Written Medical Opinion” you receive for your files must not contain specific medical findings or private diagnoses. It should only state whether the employee has any detected medical conditions that place them at increased risk.
Forging or losing these specific three-year updates is currently a top-tier target for OSHA audits.
– See OSHA’s Standard for Respirable crystalline silica (1910.1053).
3. Hearing Conservation and the Audiometric Exception
A common point of failure for safety managers is the “data bloat” caused by treating all noise data equally.
2026 rules draw a sharp line between exposure data and medical results:
* Noise Exposure Measurements: Records of dosimetry, area monitoring, and calibration logs only need to be retained for two (2) years.
* Audiometric Testing: Actual hearing test results (baselines and annual audiograms) are classified as medical records and must be kept for Duration + 30 years.
Modern digital safety systems should be programmed to auto-delete exposure measurements after the 24-month mark, while flagging audiometric results for long-term encrypted storage.
– See OSHA’s Guidelines for Hearing Conservation.
4. Respiratory Protection: Fit Tests vs. Medical Clearances
Under 29 CFR 1910.134, there is a critical distinction in “document lifespans” that many facilities miss.
Medical Evaluations: These determine if a worker is physically capable of wearing a respirator. These are physiological records and fall under the Duration + 30 Years rule.
Fit Test Records: These are technical confirmations that a specific mask fits a specific face. These only need to be kept until the next fit test is administered (usually annually).
Storing 30 years of fit tests is unnecessary and creates “compliance noise” that can slow down an inspector’s review of your more critical medical clearances.
5. Mandatory Electronic Submission and Data Privacy
In the modern age of electronics, “keeping records” no longer means a filing cabinet in the back office. OSHA’s expanded Electronic Submission Rule now requires a wide range of high-hazard industries to submit injury and illness data annually via the ITA (Injury Tracking Application).
While the raw medical testing results remain on-site, they must be “instantly accessible.” If an employee or their authorized representative requests access to their medical records, you have exactly 15 working days to provide them at no cost.
Failure to produce digital or hard copies within this window is a direct pathway to a “Willful Violation” citation.
6. Emerging Hazards: PFAS and Heat Illness Surveillance
Today’s regulatory landscape has expanded to include “Forever Chemicals” (PFAS), along with the proposed Federal Heat Injury and Illness Prevention Standard.
While a universal PFAS retention standard is still evolving, proactive safety professionals are already applying the 30-year rule to blood-level monitoring for workers in chemical manufacturing and firefighting.
In the same vein, you may also want to consider medical evaluations triggered by heat-related incidents as a long-term record, as OSHA increases focus on acclimatization protocols and thermal stress history.
Key Takeaways
Maintaining compliant employee medical records is no longer just a clerical task. It’s a vital component of a resilient safety culture.
By separating short-term exposure data from long-term medical histories, you protect both your workers and your organization’s bottom line. Ensure your team understands the specific triggers for silica and respiratory protection to avoid the “data bloat” that obscures critical insights.
When you work with Worksite Medical, you can rest assured that we safely store and maintain your employees’ medical records. And, we can help you navigate which ones you need to keep and which ones you don’t.
You’ll also get access to those records when you need them. Our occupational health service doesn’t end with testing – we’re here to help you develop the most efficient and compliant EHS program that fits your needs.
When you need on-site medical surveillance testing, we’re here for you. Complete the form below and schedule your mobile testing today!
Medical Surveillance and Monitoring With Worksite Medical
In most cases, OSHA requires medical surveillance testing, and at no cost to employees.
Worksite Medical makes that program easier with mobile medical testing.
We travel right to your workplace to conduct vision testing, on-site respirator fit tests (including N95 masks), silica exam physicals, audiometric exams, OSHA and HIPAA compliant online respirator medical clearances, pulmonary function tests, heavy metal lab work, and much more, right on your job site.
We also keep accurate, easy-to-access medical records for your convenience. You’ll keep your employees at work, and stay ahead of OSHA & MSHA inspections.
With Worksite Medical, a mobile medical testing unit — we can bring all the resources of a lab to you. Our certified lab technicians can perform both qualitative and quantitative respirator tests to ensure a perfect fit.
You’ll keep your employees at work, and stay ahead of OSHA and MSHA inspections.
Protect your team and your workplace now with Worksite Medical. Not sure what you need? Try our medical testing wizard here.
Give us a call at 1-844-622-8633, or complete the form below to schedule an on-site visit or to get your free quote.
