• Requirements for covered employers include workplace assessment, maintaining accurate medical and exposure records for employees, providing employee access to their records, and more.

Covered employers must:

• Assess the workplace for any toxic substance or harmful physical agent exposures that may generate medical or exposure records.
• Preserve and maintain accurate medical and exposure records for each employee.
• Keep employee medical records for at least the duration of employment plus 30 years.
• Keep employee exposure records for at least 30 years.
• Provide employees access to their medical and exposure records and make records available to employees’ designated representatives, and to the Occupational Safety and Health Administration (OSHA).
• Inform employees annually of the existence and location of medical and exposure records and the process and rights for accessing them.

Note: In 2019, OSHA removed the requirement for employers to use Social Security numbers to identify employees in exposure monitoring, medical surveillance, and other records. However, OSHA does not require employers to remove Social Security numbers from existing records. Further, OSHA does not prohibit employers from continuing to use Social Security numbers to identify employees. Employers are simply no longer required to include employee Social Security numbers in those records.