Disclaimer: This article summarizes general concepts from OSHA 29 CFR 1910.1020 for informational purposes. It does not constitute legal or compliance advice. OSHA standards are complex and interpretations vary by context. Consult your department's legal counsel or a qualified safety professional to determine your specific obligations. Requirements may differ for volunteer vs. paid departments depending on jurisdiction and applicable state plans.
OSHA 29 CFR 1910.1020 is one of the most consistently overlooked recordkeeping requirements in the volunteer fire service. It covers access to employee exposure and medical records — and for firefighters, who encounter smoke, hazardous materials, carcinogens, and biological hazards in the course of ordinary operations, it applies in full.
The specific requirement most departments miss: exposure records must be maintained for 30 years. Medical records must be maintained for the duration of employment plus 30 years.
Important scope note: This article covers both types of records under 1910.1020. Axe & Node covers the exposure records side — smoke, HazMat, biological incidents. It does not store physician evaluations, physicals, or clinical medical records. Those require a separate medical records system. Understanding which records your department needs to manage — and through which systems — is the starting point for compliance.
For a volunteer department, "duration of employment" may be ambiguous — but the exposure record retention requirement isn't. Thirty years from when the exposure occurred, regardless of whether the member is still active.
Why This Standard Exists
The 30-year retention requirement wasn't arbitrary. OSHA established it because occupational diseases — particularly cancers associated with smoke, carcinogen exposure, and hazardous material incidents — often don't manifest until decades after the exposure event. The preamble to the original standard explained that "occupational exposure to toxic substances and harmful physical agents can result in practically every form of apparent 'non-occupational' health problem."
Firefighters have among the highest rates of occupational cancer of any profession. The exposure records that seem routine — logging a structure fire where members entered without SCBA, documenting a hazmat incident, recording smoke inhalation at a vehicle fire — become critical evidence decades later when a member develops an occupational cancer claim.
What the Standard Requires
1910.1020 requires employers to:
- Create and maintain exposure records for employees exposed to toxic substances or harmful physical agents
- Preserve those records for 30 years (exposure records) or employment duration plus 30 years (medical records)
- Make records available to employees upon request within 15 working days
- Notify employees annually of the existence, location, and availability of records covered by the standard
- Transfer records to NIOSH if the department intends to dispose of them at the end of the retention period — not simply discard them
The Paper Filing Problem
Most volunteer departments that track exposure incidents at all do so on paper forms filed in a binder. That binder approach has an obvious 30-year problem: paper degrades, binders get lost in station renovations, files don't survive officer transitions, and records from 20 years ago may simply not exist anymore.
The compliance question isn't just "do we have a form for this." It's "can we produce records from a structure fire that happened 22 years ago if a retired member's attorney requests them today."
For most departments with paper-based systems, the honest answer is no.
What Counts as an Exposure Record
An exposure record under 1910.1020 includes any record containing information about an employee's exposure to a toxic substance or harmful physical agent. For firefighters, this includes:
- Smoke inhalation incidents at structure fires
- Hazardous material response records
- SCBA usage or non-usage at smoke incidents
- Biological exposure incidents
- Chemical exposure at vehicle fires, industrial incidents, or hazmat calls
The standard is explicit that records showing non-detectable or below-threshold exposure still count as exposure records that must be retained. Documenting that a member entered a structure with SCBA and had no measured exposure is still a record that needs to be kept for 30 years.
The Digital Retention Solution
The practical path to 30-year retention compliance is digital record-keeping. The OSHA standard explicitly recognizes electronic records as a valid format — records can be maintained as computer database entries rather than paper documents.
A digital exposure record has several advantages over paper for long-term retention:
- Survives officer turnover: Records live in a system, not in a binder on someone's shelf
- Searchable and filterable: Finding all exposure records for a specific member across a 30-year period is a query, not a physical search
- Exportable on request: When a member or attorney requests records, export takes minutes
- Timestamped at creation: Records show when they were created, not when they were entered into a spreadsheet weeks later
The Notification Requirement
One requirement that gets almost no attention: the standard requires employers to inform employees, at the time of initial hire and at least annually thereafter, of the existence, location, and availability of their exposure and medical records. This isn't a one-time disclosure. It's an annual obligation.
Most departments have no systematic mechanism for this notification. It doesn't require elaborate compliance infrastructure — a brief annual statement to all members that exposure records are maintained, where they're kept, and how to request them satisfies the requirement. But it has to actually happen, and it has to be documented.
The Practical Standard
Meeting 1910.1020 for a volunteer fire department requires three things:
- Log exposure incidents at the time they occur — not reconstructed later, and not dependent on member self-reporting
- Store those records in a system that can retain them for 30 years — not a paper binder that will be lost in the next station renovation
- Have a mechanism to produce records on request — within 15 working days, at no cost to the member
None of this is operationally complex. It's a records discipline problem, and the cost of not maintaining that discipline is measured in decades — when a member's occupational disease claim depends on records that no longer exist.
What Axe & Node covers under OSHA 1910.1020: Exposure incident records — smoke, HazMat, biological exposures — with 30-year digital retention, per-member history, and exportable reports.
What it does not cover: Physician evaluations, physicals, clinical health surveillance, or any medical records. These must be maintained through a separate medical records system or your department's healthcare provider. OSHA 1910.1020 requires both exposure records and medical records — Axe & Node handles the exposure side, not the medical side.
See Full Coverage Scope →