Employee privacy and OSHA’s proposed e-submission of Forms 300/301 data
OSHA has proposed requiring certain employers to submit information from their Forms 300/301 during the annual electronic submission requirement. Sites having 100+ workers in certain industries would have to submit this data ... data which will then be made public.
You may be wondering how OSHA will protect the privacy of workers during this process.The agency recently clarified that it’s limiting the information being collected in an attempt to reduce that risk. So, not ALL fields from the Forms 300/301 will be allowed to be submitted.
Here’s a rundown:
- From the OSHA Form 300 - OSHA will not collect Employee Name (column B)
- From the OSHA Form 301 - OSHA will not collect Employee Name (field 1), Employee Address (field 2), Name of physician or other health care professional (field 6), or Facility name and address if treatment was given away from the worksite (field 7).
In addition, while the Agency will collect Date of Birth (Field 3 from the OSHA Form 301), only employee age will be provided in the posted data.
There’s still going to be work on OSHA’s part to ensure no worker identifying information is made public, but this will limit the exposure, albeit by requiring a little more work by employers in submitting the data.
Who would be covered by this proposal?
The proposed rule would impact establishments with 100 or more employees in the highest-hazard industries. These establishments would be required to submit Form 300 Log and Form 301 Incident Report data, as well as Form 300A data, which they have been submitting annually. Note: Establishments with 20-249 employees in certain high-hazard industries would continue to submit only their Form 300A summary information. Further, establishments with 250+ employees not in a high-hazard industry would no longer submit their Form 300A summary information.