The Exposure and Medical Records SOP

Purpose

A silica reading from a coring job, a blood lead result and an audiogram matter most in year twenty-five, when a former employee is diagnosed and the question is what they were exposed to. 29 CFR 1910.1020 sets how long those records survive and who may see them, and 29 CFR 1926.33 applies it to construction work. This SOP keeps the shop's records findable, separated, retained long enough, and released to the right person on time.

Scope

Covers: every employee exposure record and employee medical record the shop makes, keeps, contracts for, or has access to, as 1910.1020 defines them. Exposure records include air and noise monitoring results, biological monitoring that measures absorption (blood lead), and safety data sheets. Medical records include medical questionnaires, exam and test results, PLHCP (physician or other licensed health care professional) opinions, first-aid records, and employee medical complaints.

Does not cover: the OSHA injury and illness log under 29 CFR Part 1904, which has its own five-year retention; ordinary personnel files; health insurance claims records and employee assistance program records, which the rule excludes when they are kept separately; and deciding which exams a tech needs (see related: Medical Surveillance: What It Is and When It Is Required). The rule does not require a shop to create a record; other standards do that, and this one governs the records once they exist. This SOP is not legal advice; a question about a specific request or a business sale goes to your own attorney.

Roles and responsibilities

The handoff that fails is clinic to shop: the shop gets a one-page opinion and assumes the clinic keeps the rest forever. It may not, unless the shop has asked it to.

Procedure

1. Inventory what the shop already holds. Pull every document that could be an exposure or medical record: the SDS binder or database, any air sampling or noise dosimetry reports, lab worksheets, blood lead results, respirator medical recommendations, silica written opinions, audiograms, first-aid logs, and clinic notes from work injuries. Sort each into one of four bins: exposure record, medical record, analysis using either (a summary or study built from them), or out of scope. Acceptance: every document is in a bin, and the count per bin is written on the inventory sheet. Wrong looks like: a medical document filed inside a personnel folder, or a monitoring report nobody can find but a job note mentions. Stop rule: a medical document found in a personnel file is moved to the medical store at once (step 2) and the folder it came from is noted; a report that is referenced but missing gets a request to whoever ran the sampling for a copy, logged with the date. Hazard: a confidentiality breach while sorting; medical documents are sorted by the owner alone, not at the front desk.

2. Separate medical records and restrict who can open them. Medical records go in a locked cabinet or an access-restricted electronic folder, apart from personnel files and apart from exposure records. Name no more than two people who may open it, normally the owner and the office manager. A shop with 15 or more employees also owes this separation under the Americans with Disabilities Act, and some states extend similar duties to smaller employers. Acceptance: zero medical documents in personnel files on a spot check of every active employee's folder, and a written access list of at most two names. Wrong looks like: a supervisor who can read a tech's audiogram to "see how bad it is," or a shared drive folder anyone in the office opens. Stop rule: if anyone outside the access list has opened medical records, the owner revokes the access that day and logs what was seen and by whom. Hazard: a disclosure of medical information that the employee did not authorize, which no later step can undo.

3. Tag each record with its retention period, and make the clinic keep its half. Medical records are kept for at least the duration of employment plus 30 years. Three exceptions apply under 1910.1020(d)(1)(i): health insurance claims records kept separately; first-aid records of one-time treatment of minor scratches, cuts, burns and splinters made on site by a non-physician and kept separately; and the records of an employee who worked less than one year, if they are given to the employee when they leave. Exposure records are kept for at least 30 years, except that lab worksheets and other background data may go after one year if the sampling results, the sampling method, the analytical method and a summary of the background data are kept for 30. An SDS may be discarded only if a record of the chemical's identity, where it was used and when, is kept for 30 years. Analyses using these records are kept 30 years. Then write to each clinic the shop uses, asking it to retain the full medical file for employment plus 30 years or return it to the shop before disposal, because the duty to preserve is the employer's even when the clinic holds the file. Acceptance: every item carries either "employment + 30 years" or a destroy-no-earlier-than year, and each clinic has a dated written answer on file. Wrong looks like: a shredding pass that clears "anything older than seven years," the habit borrowed from tax records. Stop rule: no record in either bin is destroyed until its tag allows it; if a clinic will not commit, the shop requests the files and keeps them itself. Hazard: permanent loss; a destroyed exposure record cannot be recreated.

4. File each new record within 5 working days of arrival. A monitoring report, a written opinion or an audiogram is dated on arrival, sorted into its bin, tagged per step 3, and filed. Five working days is a shop default, not the rule's; tune it. Acceptance: arrival date and filing date written on the record, no more than 5 working days apart. Wrong looks like: a written opinion still in the envelope a month later, or a dosimetry report saved only in the consultant's email. Stop rule: anything past 5 working days is filed the day it is found and the delay noted in the request log, so the gap is visible at the annual review. Hazard: the record exists but cannot be found, which in an access request is the same as not having it.

5. Tell employees about their records at hire and every year. Under 1910.1020(g), each employee covered by the rule is told, when hired and at least annually, that the records exist, where they are, who is responsible for them, and their right to see them, and a copy of the standard is available to them. Acceptance: a dated notice in each new hire's onboarding packet, and an annual notice sent or posted with its date recorded in the request log. Wrong looks like: a notice that went out once in a past year and never again. Stop rule: if the annual date has passed, the notice goes out that week. Hazard: employees who do not know a record exists cannot ask for it, which defeats the rule's purpose.

6. Answer an access request within 15 working days, at no cost. An employee may see and copy their own exposure and medical records; a designated representative (a union, an attorney, a family member) may see exposure records, and may see an employee's medical records only with that employee's specific written authorization, using a form like the one in Appendix A of the standard. Respond within 15 working days of the request, or tell the requester in writing why not and the earliest date it will be provided. Copies are free. Acceptance: request date, response date no more than 15 working days later, what was provided, and for any medical record released to a representative, the signed authorization on file. Wrong looks like: a supervisor answering by phone, a copying charge, or a spouse given a blood lead result on request. Stop rule: a request for someone else's medical record without written authorization is refused in writing, the employee is told it was asked for, and the owner is told the same day. Hazard: disclosure to someone not entitled to it, or a missed deadline that is itself a violation.

7. When someone leaves, keep the file and offer a copy. Departure does not start the destruction clock for medical records; employment plus 30 years runs from the last day of employment. Offer the departing employee a copy of their records. If they worked less than one year, giving them their medical records at termination is what lets the shop stop retaining them, so record that hand-over. Acceptance: the file marked with the final date of employment and the 30-year date computed from it, and a note that a copy was offered and accepted or declined. Wrong looks like: the whole folder, medical records included, boxed with personnel files for a seven-year purge. Stop rule: medical records never go in a general archive box. Hazard: loss of the only record a former employee may need decades later.

8. If the shop closes or sells, the records go somewhere. A successor employer receives all exposure and medical records. With no successor, employees are notified of their access rights at least three months before the business ceases. Acceptance: a dated transfer receipt from the successor, or a dated notice to employees at least three months ahead. Wrong looks like: records left in a storage unit that lapses. Stop rule: no sale closes without the records transfer written into it; that clause goes to the shop's attorney. Hazard: permanent loss at the one moment nobody is watching for it.

The record this produces

An inventory sheet (bins, counts, retention tags), the access list, clinic retention letters, and a request log with one line per event: date, type (filing, notice, request, departure, transfer), whose record, and what was done when. The owner reviews the log each year when the step 5 notice goes out.

Worked pass: a fourteen-person shop's first inventory

• Step 1: 61 documents pulled. Exposure 34 (SDS sheets, two silica sampling reports, one noise dosimetry survey with its lab worksheets), medical 19 (respirator recommendations, two silica opinions, one blood lead result, audiograms), analysis 1 (a consultant's summary of the silica sampling), out of scope 7 (insurance claim forms kept apart). 34 + 19 + 1 + 7 = 61. Failed: three respirator medical recommendations were inside personnel folders. Stop rule applied: moved to the medical store that hour, the three folders noted.
• Step 2: Locked cabinet, access list of two (owner, office manager). Spot check of all 14 active folders finds no remaining medical documents. Passed.
• Step 3: Exposure items tagged 30 years; the dosimetry lab worksheets tagged one year since the results, method and summary are kept. Medical items tagged employment plus 30. The clinic's written answer commits to retention. Passed.
• Step 4: A new silica opinion arrives on a Monday and is filed Wednesday, 2 working days. Passed.
• Step 5: Annual notice sent and dated. Passed.
• Step 6: A tech asks for his audiograms on a Monday; copies are handed to him the following Wednesday, 7 working days later, free. In the same week his brother calls asking for the tech's blood lead result, with no authorization. Refused in writing, the tech is told, the owner is informed. Passed, stop rule exercised.
• Steps 7 and 8: no departures or sale this period.

References

• 29 CFR 1910.1020, Access to Employee Exposure and Medical Records, including Appendix A; 29 CFR 1926.33
• 29 CFR Part 1904, injury and illness recordkeeping (separate retention)
• See related: Medical Surveillance: What It Is and When It Is Required
• See related: The Exposure Assessment SOP