Post-Accident Drug Testing and OSHA Recordkeeping: Avoiding Retaliation Traps

Post-accident drug testing isn't banned, but testing used to deter or punish injury reporting, rather than for a real safety reason, can violate 1904.35. Testing required by state or federal law, or done to investigate the cause of an incident, is generally permissible.

Recordkeeping programs fail when employees fear reporting injuries.

Employees, former employees, their personal representatives, and authorized employee representatives can ask for your injury records (29 CFR 1904.35(b)(2)). A copy of the relevant 300 Log is due by the end of the next business day, with names left on except for privacy cases. An employee or former employee gets their own 301 by the end of the next business day. An authorized collective bargaining representative gets the “Tell us about the case” section of the establishment's 301s within 7 calendar days. The first copy is free. Government representatives get records within 4 business hours (29 CFR 1904.40). You must also have a reasonable procedure for reporting injuries and must not retaliate against anyone for reporting (29 CFR 1904.36).

Keep incident reporting and testing policies reasonable and avoid practices that deter accurate reporting. Access requests arrive without warning. If privacy fields and descriptions were not reviewed in advance, a next-business-day deadline becomes a rushed redaction exercise. The fix is to keep logs request-ready all year (privacy cases flagged, descriptions reviewed) and to log each request with its time and requester type.

HR leaders sit where recordkeeping meets policy: how employees report, how cases are discussed, and how discipline and incentives are designed.

Teams treat every injury report as automatic suspicion and chill future reporting.

The same log that employees can request is the one inspectors ask for, so descriptions, privacy handling, and reporting procedures are tested by both.

• Testing may be appropriate in some circumstances but should be tied to legitimate safety reasons.
• A personal representative is anyone the employee designates in writing, or the legal representative of a deceased or legally incapacitated employee.

A company tests every employee who reports any injury, including a paper cut. That can deter reporting. It changes the policy to test when the incident investigation suggests impairment could have played a role, or when the law requires it, as with DOT-covered drivers.

1. Review the policy language.
2. Train supervisors.
3. Accept reports without suspicion.
4. Document the neutral safety reasons for any test.

What to keep in the case file:

• Date, time, requester, and requester type for each request
• What was provided and when
• The privacy review done before release
• Your written injury reporting procedure and how employees were told about it

300log produces an establishment's OSHA 300 Log, with privacy cases masked, or an individual 301 in a couple of clicks, so access deadlines are measured in minutes rather than days.

For a quick answer without an account, use the free deadline calendar.

• Employee Access to OSHA 300 Logs: What Employers Should Be Ready to Provide
• Employee Access to the OSHA 300 Log: The Next Business Day Rule
• Authorized Employee Representative Access to OSHA Injury Records
• Do You Count the Day of Injury on the OSHA 300 Log?