EHS Compliance Benefits: What OSHA Actually Requires for Medical Surveillance Recordkeeping

Most EHS compliance advice stops at "build a safety culture." That's not wrong, but it skips the part that actually gets tested in an OSHA inspection or a workers' comp claim: whether the employer can produce the specific medical surveillance and exposure records the standards require, in the form they require, for as long as they require. A company can run a genuinely safety-conscious operation and still fail a records request because nobody mapped which OSHA standard creates which recordkeeping duty. The benefit of real EHS compliance isn't a feeling of safety, it's a file that holds up when someone asks for it.

What does 29 CFR 1910.1020 require for medical and exposure records?

29 CFR 1910.1020 is the general rule governing access to employee exposure and medical records, and it sets the baseline retention period most occupational health recordkeeping duties borrow from: medical records for each employee must be preserved for the duration of employment plus 30 years, and records of employee exposure measurements or analyses using exposure or medical data must be kept for at least 30 years. The rule doesn't dictate a specific format or storage medium, so a scanned PDF in a compliant records system satisfies it the same way a paper folder does, with one exception: chest X-ray films have to be preserved in their original form, not just as a report summarizing them.

How does 1910.95 change recordkeeping for hearing conservation specifically?

OSHA's noise standard, 29 CFR 1910.95, requires audiometric test records for each employee in the hearing conservation program, and those records fall under the same 1910.1020 exposure-and-medical-record framework, meaning duration of employment plus 30 years. What trips employers up isn't the retention period, it's which records count: the annual audiogram itself, the baseline audiogram it's compared against, noise exposure measurements, and the professional review documentation when a standard threshold shift gets evaluated. Losing the baseline audiogram is the single most common hearing conservation recordkeeping failure Foster sees, because without it a current-year test has nothing to compare against, and reconstructing a baseline after the fact isn't a real option.

How does 1910.134 change recordkeeping for respirator medical evaluations?

Under 29 CFR 1910.134, employees who wear respirators need a physician or other licensed health care professional (PLHCP) evaluation before assignment and periodic reevaluation afterward, and that evaluation is itself a medical record subject to 1910.1020. In practice, employers frequently keep only the PLHCP's final written recommendation rather than the full medical questionnaire, since the questionnaire contains health information the employer generally shouldn't see in detail. That's a legitimate way to limit what the employer's own file holds, but the employer still needs to be able to show the evaluation happened, when, and that the PLHCP's clearance covers the specific respirator and conditions the employee works under.

Record type	Governing standard	Minimum retention
Employee medical records	29 CFR 1910.1020	Employment + 30 years
Exposure measurement records	29 CFR 1910.1020	30 years
Audiometric test records	29 CFR 1910.95	Employment + 30 years
Respirator medical evaluation	29 CFR 1910.134	Employment + 30 years
OSHA 300/300A injury and illness logs	29 CFR 1904	5 years

Why does the retention period matter more than the policy binder?

An EHS compliance program built around a well-written policy binder but a thin records system fails in the moment that actually counts, when a former employee files a hearing loss claim eight years after leaving, or an OSHA inspector asks for three years of audiometric history during an unrelated inspection and the hearing conservation files turn out to only go back two. The policy never gets checked in isolation. What gets checked is whether the record the policy promised to create actually exists, dated correctly, for the employee named in the request. A compliance program that can produce that record on demand is doing the job; one that can only produce the policy describing how it's supposed to work is not.

How Foster builds recordkeeping into the testing itself

Foster's audiometric testing, BAT certification, and calibration services generate the underlying medical surveillance and exposure records as a normal output of the test, not a separate paperwork step layered on afterward. Clients using Foster's hearing conservation testing get baseline and annual audiograms stored in a format that satisfies 1910.1020's retention and retrievability requirements without a manual filing step, and the same applies to the calibration certificates Foster issues for the instruments used to generate those records, since a defensible audiogram also depends on being able to show the audiometer that produced it was in calibration at the time, which is what Foster's calibration service documents. For employers tracking recordkeeping duties across multiple OSHA and DOT standards at once, see how a 1904 recordable decision interacts with the separate medical surveillance clock, since the two obligations run on different timelines and get confused often.

Frequently asked questions

Does 1910.1020's 30-year retention apply to every workplace record?

No. It applies specifically to employee medical records and employee exposure records as defined in the standard, which covers things like audiograms, respirator medical evaluations, and chemical exposure monitoring data. General personnel files, training attendance sheets, and most other HR records follow different, usually shorter, retention schedules.

Who is responsible for keeping these records if a third party administers the test?

The employer remains responsible for ensuring the records exist and are retrievable, even when a contractor or service provider like Foster performs the actual testing. Most service agreements specify where the records are stored and how the employer accesses them, but the retention obligation under 1910.1020 sits with the employer, not the vendor, unless the contract explicitly shifts custodial responsibility.

What happens if a required medical record is lost or was never created?

There's no way to retroactively create a valid baseline audiogram or exposure measurement after the fact; a missing record is simply missing. For audiometric testing specifically, this usually means the employee needs a new baseline established going forward, with the gap in historical data documented rather than fabricated. This is one reason OSHA treats intentional recordkeeping falsification as a serious violation separate from the underlying missing record.

Sources

• 29 CFR 1910.1020, Access to employee exposure and medical records (OSHA)
• 29 CFR 1910.1020 (eCFR)