1910.1030(h)(1): Bloodborne Pathogens Medical Records
Employers must keep an accurate, confidential medical record for each employee with occupational exposure, including the employee's name, hepatitis B vaccination status and dates, exam and follow-up results, the healthcare professional's written opinion, and the information given to that professional. Records may not be disclosed without the employee's written consent except as required, and must be kept for at least the duration of employment plus 30 years.
Key takeaways
- 1910.1030(h)(1) is part of OSHA's general industry standards (29 CFR Part 1910).
- OSHA cited it 182 times in the last 3 years, in 178 inspections, with $82,137 in current penalties.
- Most citations: ME (41), CT (40), OR (20).
- Related part: 1910.1030(h) Recordkeeping (481 citations).
- Free 5-minute toolbox talk for your crew below.
In this article
What this rule covers
29 CFR 1910.1030(h)(1) ("Medical Records") is one requirement inside 1910.1030 Bloodborne pathogens, an OSHA general industry standard (Part 1910). It includes 11 sub-paragraphs. The official text below is copied word for word from the Electronic Code of Federal Regulations (eCFR). The numbers, injury cases and training on this page show how OSHA enforces it on real job sites.
Official text
(1) Medical Records. 182 citations
(i) The employer shall establish and maintain an accurate record for each employee with occupational exposure, in accordance with 29 CFR 1910.1020. Open (h)(1)(i) 13 citations
(ii) This record shall include: Open (h)(1)(ii) 164 citations
(A) The name of the employee; Open (h)(1)(ii)(a)
(B) A copy of the employee's hepatitis B vaccination status including the dates of all the hepatitis B vaccinations and any medical records relative to the employee's ability to receive vaccination as required by paragraph (f)(2); Open (h)(1)(ii)(b) 158 citations
(C) A copy of all results of examinations, medical testing, and follow-up procedures as required by paragraph (f)(3); 3 citations
(D) The employer's copy of the healthcare professional's written opinion as required by paragraph (f)(5); and 2 citations
(E) A copy of the information provided to the healthcare professional as required by paragraphs (f)(4)(ii)(B)(C) and (D). 1 citations
(iii) Confidentiality. The employer shall ensure that employee medical records required by paragraph (h)(1) are: 1 citations
(A) Kept confidential; and 1 citations
(B) Not disclosed or reported without the employee's express written consent to any person within or outside the workplace except as required by this section or as may be required by law.
(iv) The employer shall maintain the records required by paragraph (h) for at least the duration of employment plus 30 years in accordance with 29 CFR 1910.1020. Open (h)(1)(iv) 4 citations
Source: eCFR, text current as of 2026-10-15. Read all of 1910.1030.
Where and how often it was cited
| Year | Citations |
|---|---|
| 2023 | 12 |
| 2024 | 58 |
| 2025 | 73 |
| 2026 | 39 |
Top states: ME (41), CT (40), OR (20), TN (18), NJ (9)
Largest penalties
| Employer | Location | Penalty for this rule |
|---|---|---|
| C&C-DEPT OF THE MEDICAL EXAMINER | HONOLULU, HI | $13,395 |
| EXTENDED STAY AMERICA | CHESAPEAKE, VA | $9,745 |
| MID-PACIFIC INSTITUTE | HONOLULU, HI | $7,035 |
| COMPREHENSIVE AT ORLEANS, LLC | ALBION, NY | $6,384 |
| PLAINFIELD POLICE DEPARTMENT | PLAINFIELD, NJ | $5,400 |
Free toolbox talk
A 5-minute crew talk on 1910.1030(h)(1), plus alerts when this rule changes. Free.
OSHA interpretation letters
- Documentation of employees' hepatitis B vaccination status. (2007-02-07)
- Clarification on providing first aid training and maintenance of medical records under OSHA's BBP standard. (2007-02-05)
Related parts of this rule
- 1910.1030(h) Recordkeeping 481 citations
- 1910.1030(h)(2) Training Records 199 citations
- 1910.1030(h)(1)(ii) 164 citations
- 1910.1030(h)(1)(ii)(B) 158 citations
- 1910.1030(h)(2)(i) 154 citations
- 1910.1030(h)(5) Sharps injury log 91 citations
- 1910.1030(h)(5)(i) 87 citations
- 1910.1030(h)(2)(i)(C) 49 citations
- 1910.1030(h)(2)(ii) 44 citations
- 1910.1030(h)(2)(i)(D) 32 citations
- 1910.1030(h)(2)(i)(B) 18 citations
- 1910.1030(h)(1)(i) 13 citations
Get your crew competent
Trainers on Black Belt Safety: Marc Harvey, Dana Reyes
Trainers and suppliers: feature your business on this rule for $25/month.
Frequently asked questions
How long must these medical records be kept?
For at least the duration of employment plus 30 years.
Can the employer share these records?
Not without the employee's express written consent, except as required by this section or by law.
What do the records include?
Name, hepatitis B vaccination status and dates, exam and test results, the healthcare professional's written opinion, and information given to the professional.
About this page
Sources
- 29 CFR 1910.1030 (eCFR), text current as of 2026-10-15
- U.S. Department of Labor enforcement data: OSHA inspections, citations and accident records, copied nightly; data as of 2026-10-20
3-year window. Federal OSHA only; state-plan rules are not counted. Plain-language text is a summary, not legal advice; the official text controls. Black Belt Safety is not part of OSHA or the Department of Labor.