A sharps injury log must contain three pieces of information at minimum: the type and brand of device involved, the department or work area where the injury happened, and an explanation of how the incident occurred. These requirements come from OSHA’s Bloodborne Pathogens Standard (29 CFR 1910.1030), and all records must protect the confidentiality of the injured employee.
The Three Required Data Fields
OSHA keeps the minimum requirements straightforward. Every entry in a sharps injury log needs:
- Type and brand of device: The specific sharp object that caused the injury, including the manufacturer’s name and the exact product line. A generic entry like “BD needle” isn’t sufficient. Because manufacturers often sell dozens of products, the log needs to identify the particular device clearly enough that someone reviewing it later can tell exactly which product was in use.
- Department or work area: Where in the facility the exposure incident took place, such as the emergency department, a surgical suite, or a patient room on a specific floor.
- Explanation of how the incident occurred: A brief narrative describing the circumstances. This might note that the injury happened during needle recapping, while disposing of a device, during a surgical procedure, or while handling waste.
These are minimums. Employers can and often do record additional details, such as the date and time, the procedure being performed, whether the device had a safety feature, and whether that feature was activated. More detail makes the log more useful for identifying patterns and preventing future injuries.
Why Device Details Matter So Much
The type and brand requirement exists for a practical reason. Employers are required to evaluate and select safer sharps devices as part of their Exposure Control Plan, and the injury log is the primary tool for assessing whether specific products are actually reducing injuries. If entries are vague, that evaluation becomes meaningless.
OSHA has clarified that log entries need to be “complete enough for evaluators to determine accurately which particular product was actually being used when the incidents occurred.” So writing down just a company name won’t cut it. You need the specific product. The one exception: when identifying the device would require additional handling that could create more exposure risk. If a housekeeper is stuck through a trash bag, for example, the type and brand can be recorded as “Unknown.”
Confidentiality Requirements
The log must be recorded and maintained in a way that protects the injured employee’s identity. You cannot include the employee’s name on the OSHA 300 Log for needlestick and sharps injuries. These cases are treated as privacy cases under OSHA’s recordkeeping rules, meaning the employee’s name is kept on a separate, confidential list rather than on the log itself.
This matters for practical setup. If you’re designing a paper or electronic log, build it so that entries can be reviewed for safety trends without revealing who was injured. Identifiable details should be stored separately and accessible only to those who need them for medical follow-up or incident investigation.
Who Has to Keep a Sharps Injury Log
Not every employer with sharps exposure needs to maintain this log. The requirement applies only to employers who are also required to keep an OSHA Log of Work-Related Injuries and Illnesses (the OSHA 300 Log) under 29 CFR 1904. If your business is exempt from general OSHA recordkeeping, you’re exempt from the sharps log too.
This exemption covers many small healthcare practices. Dentists’ offices and doctors’ offices, for instance, are not required to maintain a sharps log because they fall into industry categories exempt from OSHA’s general recordkeeping rules. Hospitals, nursing facilities, outpatient care centers, and larger clinical operations typically do have to keep one.
How Long Records Must Be Kept
OSHA requires employers to retain the 300 Log, annual summary, and related incident report forms for five years following the end of the calendar year they cover. The sharps injury log follows the same retention framework. If an injury occurs in 2025, you need to keep that record through the end of 2030.
During that five-year window, records must be updated if new information comes to light. In California, for example, if a sharps injury initially recorded as a simple puncture later results in a diagnosed bloodborne illness like HIV, hepatitis B, or hepatitis C, the record must be updated to reflect that diagnosis and reclassified from an injury to an illness.
Using the Log for Annual Reviews
The sharps injury log isn’t just a compliance document that sits in a filing cabinet. Employers must review their Exposure Control Plan at least annually, and the injury log feeds directly into that review. The data helps identify which departments have the most incidents, which devices are causing injuries despite safety features, and whether newly adopted safety devices are performing as expected.
This is where thorough entries pay off. A log that captures the specific product, the exact work area, and a clear narrative about how the injury happened gives a safety committee real data to work with. A log filled with vague entries like “needle stick in clinic” provides almost nothing actionable.
Penalties for Noncompliance
Failing to maintain an accurate sharps injury log can result in OSHA citations. As of January 2025, penalties reach up to $16,550 per violation for serious or other-than-serious violations, and up to $165,514 per violation for willful or repeated offenses. A failure-to-abate penalty of $16,550 per day can also apply if an employer doesn’t correct the issue after being cited. Incomplete or missing log entries, not just a missing log entirely, can trigger these penalties if OSHA determines the recordkeeping doesn’t meet the standard.