Written and maintained by CASRAI Editorial Board
Last updated
The sharps injury log required by 29 CFR 1910.1030(h)(5) of OSHA’s Bloodborne Pathogens Standard is a separate, standalone record from the OSHA 300 Log. It exists specifically to track percutaneous injuries from contaminated sharps — needlesticks, lancets, broken glass, scalpel cuts — with three pieces of device-level detail the 300 Log was never designed to capture: the type and brand of device involved, the department or work area where the exposure occurred, and an explanation of how the incident happened. A lab that only maintains a 300 Log, even a meticulously kept one, is not in compliance with 1910.1030(h)(5).
This page covers what the sharps injury log must contain, who has to keep one, how confidentiality works, and exactly how it differs from — and interacts with — the general injury and illness recordkeeping this cluster already covers in OSHA-Reportable Laboratory Injuries.
The legal basis: a Bloodborne Pathogens Standard requirement, not a Part 1904 one
The sharps injury log traces to the Needlestick Safety and Prevention Act, which took effect January 18, 2001 (66 FR 5325) and amended 29 CFR 1910.1030 to add paragraph (h)(5). That placement matters: the sharps injury log is a Bloodborne Pathogens Standard requirement, sitting alongside the exposure control plan and the sharps-evaluation duties already covered in Exposure Control Plan for Bloodborne Pathogens — not a Part 1904 recordkeeping form. It applies to any employer who is already required to maintain the general injury and illness log under 29 CFR Part 1904, which means the same population that keeps a 300 Log (research laboratories in scope under 1910.1030(e), covered elsewhere in Bloodborne Pathogens Standard in Research Laboratories) is the population that must also keep a sharps injury log.
What the sharps injury log must contain
1910.1030(h)(5) sets a floor of three required data points per entry:
- Device type and brand. Not just “needle” — the specific device (e.g., a particular safety-engineered blood collection set, a conventional syringe, a specific manufacturer’s lancet). This is the field the 300 Log has no equivalent for, and it’s the whole point of the log: OSHA created it so employers evaluating safer sharps devices under the standard’s annual review duty would have real incident data tied to specific products, not just an injury count.
- Department or work area. Where the exposure incident occurred — granular enough to identify a pattern (a specific bench, procedure, or unit generating repeat injuries), not just “the lab.”
- Description of how the incident occurred. The circumstances of the exposure — what the employee was doing, what went wrong.
The regulation requires this information be “recorded and maintained in such manner as to protect the confidentiality of the injured employee.” In practice, that mirrors how needlesticks are already treated on the 300 Log: 29 CFR 1904.29(b)(7)(v) designates contaminated needlestick and sharps injuries as privacy-concern cases, meaning the employee’s name is not entered on the 300 Log itself. The sharps injury log carries the same expectation — identify the device and circumstances without exposing the individual’s identity in a document that isn’t access-controlled the way personnel medical records are.
Retention: five years, same clock as the 300 Log
The sharps injury log must be maintained for the period set by 29 CFR 1904.33 — five years following the end of the calendar year the records cover, the same retention window that applies to the 300 Log, the 300-A annual summary, and individual 301 incident reports. There’s no separate, shorter retention clock for the sharps log specifically.
Why a case can be sharps-log-worthy even when staff assume it isn’t “OSHA-recordable”
This is where labs most often under-log. 29 CFR 1904.7 sets the general recordability bar for workplace injuries: an injury is only OSHA-recordable if it involves medical treatment beyond first aid, days away from work, restricted duty, job transfer, loss of consciousness, or a significant diagnosed injury/illness. A cut that needed nothing more than a bandage would not, under that general standard, be recordable.
Contaminated sharps injuries don’t get evaluated against that bar. 29 CFR 1904.8(a) sets a standalone, stricter trigger: any work-related needlestick or cut from an object contaminated with another person’s blood or other potentially infectious material is recordable, full stop, regardless of treatment level. A splash without a cut is handled differently — recordable only if it later meets 1904.7 or produces a diagnosed bloodborne illness — but a percutaneous injury from a contaminated sharp is automatically in scope. Because every case that triggers a 300 Log entry under 1904.8 also triggers a sharps injury log entry under 1910.1030(h)(5), the practical result is that a “minor” needlestick a lab tech dismisses as not worth reporting is, almost always, both a 300 Log case and a sharps injury log entry the moment it’s contaminated blood or OPIM. If the case is later reclassified — for example, a diagnosed bloodborne infection surfaces after the fact — 1904.8(b)(3) requires updating the 300 Log entry from injury to illness; update the sharps injury log entry to match for the same case.
Sharps injury log vs. OSHA 300 Log, side by side
| Sharps injury log | OSHA 300 Log | |
|---|---|---|
| Governing standard | 29 CFR 1910.1030(h)(5), Bloodborne Pathogens Standard | 29 CFR 1904, general recordkeeping |
| Scope of incidents | Percutaneous injuries from contaminated sharps only | All recordable work-related injuries and illnesses |
| Required fields | Device type/brand, department/work area, description of how it occurred | Case classification (days away, restricted duty, etc.), body part, general injury/illness description |
| Device-specific detail | Required | Not captured |
| Employee name | Excluded, confidentiality required | Excluded for privacy-concern cases including needlesticks |
| Retention | 5 years (29 CFR 1904.33) | 5 years (29 CFR 1904.33) |
| Who must keep it | Any employer required to keep 1904 records, when a sharps exposure occurs | Employers not covered by the 1904.1/1904.2 size or industry exemption |
Neither log substitutes for the other. A completed 300 Log with a needlestick entry that lacks device type, location, and incident narrative is not a substitute for a sharps injury log — and a sharps injury log alone doesn’t satisfy the separate duty to enter the case on the 300 Log and, on time, the individual 301 form.
Why this data feeds device-evaluation decisions, not just compliance
The sharps injury log isn’t a paperwork-only requirement. 1910.1030’s exposure control plan duties — the annual review and documented evaluation of safer sharps engineering controls, covered in Exposure Control Plan for Bloodborne Pathogens — are meant to be informed by real incident data. A sharps injury log that consistently names the same device or the same work area is the evidence an institution needs to justify switching to a different safety-engineered device or changing a procedure, and it’s the kind of documentation OSHA inspectors expect to see behind an ECP’s annual-review entry, not a blank recitation that “devices were reviewed.”
Frequently asked questions
Does the sharps injury log apply to academic and research laboratories?
Yes, if the laboratory is in scope of the Bloodborne Pathogens Standard and is otherwise required to keep Part 1904 injury and illness records. Research labs working with human blood, unfixed human tissue, or certain cell lines are commonly in scope — see Bloodborne Pathogens Standard in Research Laboratories for how that determination is made.
Can the sharps injury log be combined with the OSHA 300 Log?
OSHA doesn’t require a separate physical form, only that the device type/brand, work area, and incident description fields are captured somewhere and that confidentiality is preserved. Because the 300 Log’s own columns don’t have room for device-specific detail, most institutions keep the sharps injury log as its own document rather than trying to force the extra fields into 300 Log columns.
Who is exempt from keeping a sharps injury log?
The requirement attaches to employers who are already required to maintain the general injury and illness log under Part 1904. An employer that qualifies for the Part 1904 recordkeeping exemption (10 or fewer employees, or a partially exempt low-hazard industry classification) is not separately obligated to build a sharps injury log on top of that exemption — but note the exemption never removes the standalone duty to report a fatality, in-patient hospitalization, amputation, or loss of an eye to OSHA regardless of recordkeeping status.
Does the sharps injury log need the injured employee’s name?
No. The regulation requires the log to protect the injured employee’s confidentiality, consistent with how needlestick and sharps injuries are already treated as privacy-concern cases on the 300 Log itself.
What happens if a logged sharps injury is later diagnosed as a bloodborne infection?
Update both records. 29 CFR 1904.8(b)(3) requires reclassifying the case on the 300 Log from an injury to an illness when a later diagnosis confirms an infectious bloodborne disease; the sharps injury log entry for the same incident should be updated to stay consistent with the reclassified case.
