OSHA Privacy Concern Cases: What to Leave Off the 300 Log
The 300 log is shown to employees, former employees and their representatives on request. For some cases the employee's name must not appear (1904.29(b)(6)).
The privacy concern cases
- An injury or illness to an intimate body part or the reproductive system
- An injury or illness resulting from a sexual assault
- Mental illnesses
- HIV infection, hepatitis or tuberculosis
- Needlestick injuries and cuts from sharp objects contaminated with another person's blood or other potentially infectious material
- Other illnesses, if the employee independently and voluntarily asks that the name not be entered
What to do
Write “privacy case” where the name goes and keep a separate, confidential list of case numbers and names (1904.29(b)(6)). If the description could still identify the person, you may use discretion in describing it (1904.29(b)(9)).
Safetally flags descriptions that look like these cases, lets you mark any case private, prints “Privacy case” on the 300 log and keeps names out of everything it exports to OSHA.
Last reviewed 2026-10-27. General information, not legal advice — 29 CFR Part 1904 and OSHA's own guidance decide what applies.