Employee incident report: what to write, when, and why it matters

Last updated 2026-07-09

What is an employee incident report?

An employee incident report is a written record created after any workplace event that caused, or could have caused, an injury, illness, or property loss. That last part deserves a pause. The report isn't only for injuries that sent someone to the hospital. Near misses belong in the system too.

The document does two jobs at once. It creates an accurate, timestamped record of what happened, and it forces you to investigate why it happened instead of just logging the outcome. A report that says 'employee slipped and hurt wrist' is close to useless for prevention. A report that says 'employee slipped on hydraulic fluid leaking from forklift 3 for about two days, no absorbent placed, no work order submitted' is something you can act on. ^[1]

Small business owners often treat incident reports as a chore that follows injuries. Flip that thinking. The report is your investigation record first, your OSHA documentation second, and your workers' comp paper trail third. Those three purposes don't fight each other. They do mean you want more detail than the minimum the form asks for.

For background on what OSHA is and where these obligations come from, see our overview of osha.

What does OSHA require you to document after a workplace incident?

OSHA's recordkeeping rules live at 29 CFR Part 1904. Covered employers must record work-related injuries and illnesses that hit certain severity thresholds on three documents: the OSHA 300 Log (Log of Work-Related Injuries and Illnesses), the OSHA 301 Incident Report (or an equivalent form), and the OSHA 300A Annual Summary. ^[2]

An injury or illness is recordable if it involves any of these: days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, diagnosis of a significant injury or illness by a healthcare professional, or, in specific cases, needle sticks or hearing loss. ^[2]

The 301 is the OSHA incident report itself. It asks for about 20 data fields: employer and employee information, the case number from the 300 log, the date and time, where the event happened, what the employee was doing, how the injury occurred, what object or substance caused it, and the nature of the injury.

Exemptions exist. Employers with 10 or fewer employees, and employers in certain low-hazard industries, are partially exempt from routine recordkeeping, though they still have to report fatalities and severe injuries. ^[3] The industry exemptions sit in Appendix A to Subpart B of 29 CFR Part 1904. If you're not sure whether your NAICS code qualifies, check the OSHA recordkeeping page directly instead of guessing.

One thing no employer is exempt from: reporting a fatality within 8 hours, and any in-patient hospitalization, amputation, or loss of an eye within 24 hours. ^[3] Those are phone calls to OSHA, not forms you file later.

What are the OSHA incident reporting deadlines?

Three separate clocks matter here, and they don't all start at the same moment. Miss the fast ones and you've got a citation that has nothing to do with the injury itself.

Event	Reporting deadline	Method	Clock starts
Work-related fatality	8 hours	OSHA phone/online	When employer learns of death
In-patient hospitalization, amputation, or eye loss	24 hours	OSHA phone/online	When employer learns of event
Recordable injury or illness (300 log entry)	7 calendar days	Internal log	Date employer learns of case
300A annual summary posting	February 1 each year	Posted at workplace	Year-end

The 8-hour and 24-hour deadlines apply no matter when you learn about the event, weekends included. Report by calling 1-800-321-OSHA (1-800-321-6742) or through OSHA's online reporting tool. ^[3]

The 7-day window for the 300 log runs from the day you become aware the injury is work-related and recordable, not from the date of the incident. That gap matters when a diagnosis lands days after the event.

OSHA treats a failure to report an in-patient hospitalization as a violation separate from the underlying recordkeeping failure. So a single serious injury handled badly can produce two citations, not one. ^[3]

What should an employee incident report form include?

Use OSHA's own 301 form, build your own, or use your workers' comp insurer's form if it captures the same information. The practical minimum for a report that actually helps you:

1. Basic identifiers: name of injured employee, job title, department, date and time of incident, and exact location within the facility.

2. Incident description: a plain-language account in the employee's own words, then a supervisor's account. Collect these separately.

3. What caused the injury: the object, substance, or condition that directly caused harm. 'Floor' is not a cause. 'Wet floor near mop bucket with no wet-floor sign' is a cause.

4. Nature of the injury or illness: which body part, and what type of harm (laceration, sprain, burn, hearing loss, and so on).

5. Witness information: names and contact info for anyone who saw the event or found the injured employee.

6. Medical treatment: first aid only, emergency room, or referred to a physician? This decides recordability.

7. Root cause fields: at least two levels of 'why.' Most templates stop at the immediate cause. The good ones ask about contributing factors (training gaps, equipment condition, staffing, time pressure) and systemic factors (past near misses, known but unaddressed hazards).

8. Corrective actions: specific steps, named owners, and due dates. Leave this blank and the report is just documentation. Fill it in and it becomes a prevention tool.

The OSHA 301 form covers items 1 through 6. ^[2] Items 7 and 8 are what you add yourself, and they're the line between a compliant form and a useful one.

How do you write an incident report step by step?

Speed beats polish in the first hour. You want accurate information before memories fade and the scene changes. Here's the sequence I'd run.

Step 1: Respond to the incident. Injured people get care first. Then secure the scene enough to preserve evidence. Don't clean up a spill or move equipment before you document where it sat.

Step 2: Photograph everything. Timestamped phone photos are fine. Wide shots for context, close shots for the specific hazard. Broken guard, missing label, slick floor, get it all. ^[1]

Step 3: Collect the employee's statement once they're medically stable. Write it in their words. Ask: What were you doing right before this? What happened? What did you touch, step on, or come into contact with? Have you seen this hazard before?

Step 4: Get witness statements separately. Don't let witnesses compare notes first.

Step 5: Fill in the form fields. Objective facts first, then the narrative. Keep blame out of the description. 'Employee failed to follow procedure' is a conclusion. 'Employee was observed not wearing required PPE' is a fact. Let the root cause section handle why the procedure wasn't followed.

Step 6: Determine recordability. Walk the case through 29 CFR 1904.7 to decide whether it's first-aid-only or recordable. When you're unsure, record it. You can pull it later if new information clears it. ^[7]

Step 7: Enter the case in your 300 log within 7 days. File the 301 (or your equivalent) with it.

Step 8: Assign corrective actions and track them to done. This is the step most small businesses skip. It's also the only step that actually cuts injuries.

What counts as a near miss and should you document it?

A near miss is an event that could have hurt someone but didn't. OSHA does not require you to report near misses to the agency. There's no federal rule forcing you to log events where nobody got hurt. Every serious safety pro will still tell you to document them, and the numbers back that up.

The Bureau of Labor Statistics reported roughly 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023. ^[5] Occupational health research consistently finds that behind every serious injury sit many more minor injuries and near misses tied to the same hazard. Fixing the near miss costs a fraction of managing the serious injury it predicts.

A near miss form can be shorter than a full incident report: date, location, what almost happened, contributing conditions, and corrective action. The hard part isn't the form. It's making it safe to report. If workers think a near-miss report gets them disciplined, they'll stop filing them. The hazard stays right where it was.

Some sectors carry near-miss reporting duties through state plans or hazard-specific standards, so check whether your state adds requirements. See our state plans overview for more context. ^[6]

What is the difference between the OSHA 300, 301, and 300A forms?

These three forms work as a set under 29 CFR Part 1904, and mixing them up is one of the most common recordkeeping mistakes small employers make. ^[2]

The OSHA 300 log is a running list of every recordable case for the year. One line per case: date, employee name (unless privacy rules apply), job title, type of injury, and outcome (days away, restricted days, and so on). Think of it as the index.

The OSHA 301 Incident Report is the full case record for each line on the 300 log. Every case on the 300 gets a matching 301. This is the detailed narrative: the who, what, where, how, and what happened next. You can use a workers' comp first report of injury in place of the 301 if it captures every required field, but check your state's version against OSHA's 301 field list before you assume it qualifies. ^[2]

The OSHA 300A Annual Summary totals the prior year's cases and gets signed by a company executive. It must be posted from February 1 through April 30 each year where employees can see it. ^[2]

All three forms have to be kept for five years after the end of the calendar year they cover. ^[10] Current and former employees, their representatives, and OSHA all have the right to see these records.

How long do you have to keep incident report records?

Five years from the end of the calendar year the incident falls in. That's the OSHA rule at 29 CFR 1904.33. ^[10] A case recorded in November 2024 has to be kept through at least December 31, 2029.

The five-year rule covers the 300 log, every 301 (or equivalent), and that year's 300A summary. When OSHA inspects, they can request records going back five years. Not having them is a recordkeeping violation on its own, separate from any substantive safety problem they turn up.

Workers' comp records carry their own retention rules under state law, and those often run longer than OSHA's five years, especially when a claim stays open or disputed. Run your state's requirement next to the OSHA minimum. Don't assume one covers the other.

Digital retention is fine. OSHA doesn't require paper. Just keep your electronic records backed up and pullable on short notice when OSHA asks.

Can an employer be penalized for not having incident reports?

Yes, and for a small business the numbers hurt. OSHA penalty amounts adjust every year under the Federal Civil Penalties Inflation Adjustment Act. As of 2024, the maximum penalty for a serious violation is $16,131 per violation, and willful or repeated violations reach $161,323 per violation. ^[4]

Recordkeeping violations get cited often during inspections: failure to keep 300 logs, failure to complete 301 forms, failure to report fatalities on time. OSHA can treat each missing or incorrect entry as a separate violation, so the count adds up fast.

There's a quieter risk too. If you can't produce incident reports when OSHA asks, it points to one of two things: incidents happened and weren't documented (which reads as underreporting), or your safety program has holes wide enough to justify a closer look. Either way, missing records widen an inspection instead of narrowing it.

For more on how OSHA training and inspections fit together, see our guide on osha training.

What is the difference between an incident report and an accident report?

In most workplaces the two terms mean the same thing. Some safety programs deliberately say 'incident' instead of 'accident,' and the reason goes past semantics.

'Accident' implies randomness, something that just happened with no clear cause. 'Incident' is neutral: an event occurred, now we investigate why. That framing shapes the whole investigation. Call the form an 'accident report' and you've baked in a quiet assumption that the event was unavoidable. Safety pros lean toward 'incident' because it keeps the door open to systemic causes: management decisions, deferred maintenance, weak training, time pressure.

OSHA's own form is titled the 301 Incident Report. ^[2] Most workers' comp insurers still say 'accident report' or 'first report of injury.' Either one captures the same required information for compliance. The label matters less than the quality of the investigation behind it.

For a broader look at incident documentation, see our related article on incident report.

How does a good incident report connect to your written safety program?

On its own, an incident report is just documentation. Inside a working safety program, it's a feedback loop. Every completed report tells you which procedures need rewriting, which training gaps are real, which equipment needs service, and which supervisors are enforcing standards and which aren't.

OSHA has no single standard requiring every employer to keep a general written safety program. A federal Injury and Illness Prevention Program rule (I2P2) was discussed for years but never finalized. Several standards do require written programs for specific hazards: lockout tagout under 29 CFR 1910.147, hazard communication under 29 CFR 1910.1200, respiratory protection under 29 CFR 1910.134, and others. Many state plan states require more. ^[6]

If you're building or updating a program and want a faster start, SafetyFolio's safety program generator turns your basic business information into a draft OSHA-compliant written program in about 15 minutes, which you can then shape around the incident patterns you're actually seeing on your 300 log.

Here's the connection that matters. If the same type of incident shows up on your 300 log two years running, your written program isn't reaching the root cause. The corrective action section of your 301 forms should feed revisions back into your standard operating procedures, training content, and maintenance schedules. Most small businesses keep these as separate documents. The ones with lower injury rates run them as one system.

What are common mistakes employers make on incident reports?

A few failure patterns show up again and again in real incident reports and OSHA inspection narratives.

The biggest one: completing the form but skipping the investigation. A form that logs 'employee injured wrist while using press brake' without asking why the guard was missing or when it was last inspected isn't an investigation. It's a description.

Second: recording only OSHA-recordable injuries and ignoring near misses and first-aid-only cases. Your 300 log captures recordables. Your internal tracking should capture everything. The near misses are your early warning system.

Third: supervisors reporting late. In a lot of small businesses, the supervisor collects verbal information and writes it up two or three days later. Memory drifts, the scene has changed, and the 7-day clock has been running without the owner even knowing about the case. Make same-day reporting mandatory for any injury involving medical treatment.

Fourth: writing conclusions instead of facts. 'Employee was being careless' is a conclusion. 'Employee was reaching across a moving conveyor belt' is a fact. The fact supports a corrective action. The conclusion supports nothing.

Fifth: leaving the employee out of the corrective action stage. Workers know the daily reality of their job better than any supervisor. Fill out corrective actions with management only and you'll miss the practical fixes.

How do electronic incident report systems compare to paper forms?

Paper works. OSHA accepts paper. For a shop with fewer than 10 employees and a handful of incidents a year, a paper binder is a legitimate, cheap system. ^[3]

Electronic systems earn their cost at higher incident volumes, across multiple sites, or when you want to spot trends. What you get: automatic timestamping (handy when OSHA asks exactly when you learned of a case), built-in recordability decision trees, automatic routing to supervisors and HR, and year-end aggregation for the 300A.

The catch with most software: it makes form-filling faster without making the investigation better. A well-built paper form with mandatory root cause fields beats a slick app that lets you check boxes and call it finished.

If you go electronic, confirm three things. The system produces outputs matching OSHA's 300 and 301 format. Your records export cleanly (don't let your incident data get trapped in a vendor's platform with no way out). And access controls comply with 29 CFR 1904.29, which requires certain sensitive cases to read 'privacy case' on the 300 log instead of the employee's name. ^[8]

For the broader OSHA training framework that supports these systems, see our overview of osha 30 training.

Frequently asked questions

Who is responsible for completing an employee incident report?

The immediate supervisor usually completes the report within 24 hours, with the injured employee contributing their own statement. In small businesses without a safety department, the owner or operations manager handles it. OSHA holds the employer responsible for accurate recordkeeping no matter who fills out the form, so train supervisors specifically on how to complete and submit reports correctly.

Does a near miss have to be reported to OSHA?

No. Federal OSHA does not require reporting near misses to the agency. You must report fatalities within 8 hours and in-patient hospitalizations, amputations, or eye loss within 24 hours. A near miss with no injury triggers no OSHA notification. Documenting near misses internally is still standard practice in any serious safety program, because they flag hazards before someone gets hurt.

What is a privacy case on the OSHA 300 log?

Under 29 CFR 1904.29, certain injuries get recorded without the employee's name on the 300 log to protect confidentiality. These include injuries to intimate body parts, sexual assaults, HIV or hepatitis cases, tuberculosis, mental illness, and needle sticks involving contaminated sharps. You still complete the full 301 with the name. You just write 'privacy case' in the name column of the 300 log.

Can an employee refuse to give a statement for an incident report?

Yes, an employee can decline to give a written statement, and OSHA doesn't require you to force one. Your internal investigation policy can require cooperation as a condition of employment, which many unionized workplaces handle through their collective bargaining agreements. Document the refusal in the report. You can still complete the report using supervisor observations, witness statements, and physical evidence from the scene.

Is a first-aid-only injury recordable on the OSHA 300 log?

No. 29 CFR 1904.7 lists the specific treatments that count as first aid. If the only treatment was on that list (cleaning a wound, applying a bandage, over-the-counter medication at non-prescription strength, a non-rigid means of support), it's not recordable. Document it internally anyway. The moment treatment crosses into prescription medication, physical therapy, or a doctor's work restriction, it becomes recordable.

How do you report a work-related fatality to OSHA?

Call OSHA at 1-800-321-OSHA (1-800-321-6742) or use the online reporting form at osha.gov. You must report within 8 hours of learning the employee died from a work-related incident. If the death follows an incident that happened more than 30 days earlier, you still report it. The report triggers an OSHA inspection in most cases. Having your documentation in order before the call helps.

Do you have to report a work-related injury that happens off-site?

Yes, if the injury is work-related. Under 29 CFR 1904.5, a case is work-related if the work environment caused or contributed to the injury. An employee hurt at a client's site while doing their job is a work-related case. An employee hurt in a car accident driving to work from home generally is not, unless they were traveling for work. Work-from-home injuries have specific rules under 29 CFR 1904.5(b)(7).

What happens if you file an OSHA 300 log incorrectly?

OSHA can cite you for recordkeeping violations during an inspection, and each incorrect or missing entry is a potential separate violation. The maximum fine for a serious violation reached $16,131 per violation as of 2024. Inaccurate logs also skew your Days Away, Restricted, or Transferred (DART) rate and Total Recordable Incident Rate (TRIR), which insurers and large contractors review before deciding to work with you.

Does a workers' compensation claim automatically create an OSHA recordable case?

No. Workers' comp and OSHA recordkeeping use different criteria. A workers' comp claim can be filed for an injury OSHA would classify as first-aid-only and not recordable. And some OSHA recordable cases, like restricted duty following a doctor's order, may not trigger a workers' comp claim if the employee keeps working. Evaluate each case under both frameworks independently.

How do you calculate your OSHA TRIR from your incident reports?

TRIR (Total Recordable Incident Rate) equals the number of recordable cases times 200,000, divided by total hours worked in the year. The 200,000 figure represents 100 employees working 40 hours a week for 50 weeks, so the rate is normalized per 100 full-time equivalents. Your 300 log gives the case count. Your payroll gives total hours. BLS publishes industry-average TRIRs annually so you can benchmark. ^[13]

Can a supervisor be held personally liable for failing to complete an incident report?

Under federal OSHA, citations and penalties go to the employer, not individual supervisors. Some state OSHA plans have broader authority. Within the company, a supervisor who knowingly fails to document or report a recordable injury can face internal discipline. If the failure is deliberate and part of a pattern of underreporting, it can feed into broader enforcement against the employer, which can reach upper management.

What is the OSHA 301 form and where do you get it?

The OSHA 301 Incident Report is the detailed per-case form that pairs with each entry on your 300 log. Download it free from osha.gov. It covers about 20 fields: employee and employer information, incident details, nature of injury, and medical treatment received. You can substitute your workers' comp first report of injury if it captures all the same information. Most employers use the 301 directly or a combined form.

How do incident reports affect workers' compensation insurance premiums?

Insurers use your claims history to calculate your Experience Modification Rate (EMR), which drives your workers' comp premium. More claims, or more severe ones, push your EMR above 1.0 and raise premiums. Fewer claims pull it below 1.0 and cut them. Incident reports themselves don't raise premiums. Filed claims do. But thorough reporting and root cause work tends to reduce future claims, which is what controls premium cost over time.

Sources

1. OSHA, Incident Investigation overview: OSHA guidance recommends preserving the scene and documenting conditions as part of incident investigation before cleanup or equipment movement.
2. OSHA, 29 CFR Part 1904 Recordkeeping Rule and forms (300, 300A, 301): OSHA requires covered employers to record qualifying work-related injuries on the 300 log and 301 form, retain records five years, and post the 300A summary February 1 through April 30.
3. OSHA, Severe Injury and Fatality Reporting requirements: Employers must report a work-related fatality within 8 hours and an in-patient hospitalization, amputation, or loss of an eye within 24 hours by phone or online, regardless of partial recordkeeping exemptions.
4. OSHA, Civil Penalty Policy and current penalty amounts: As of 2024, the maximum OSHA penalty for a serious violation is $16,131 per violation and for willful or repeated violations is $161,323 per violation.
5. Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses 2023: BLS reported approximately 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023.
6. OSHA, State Plan States list and requirements: Several OSHA state plan states have broader written safety program requirements than federal OSHA, including mandatory Injury and Illness Prevention Programs.
7. OSHA, 29 CFR 1904.7 General recording criteria (first aid definition): 29 CFR 1904.7 lists specific treatments qualifying as first aid; cases treated only with first aid are not recordable on the OSHA 300 log.
8. OSHA, 29 CFR 1904.29 Forms and recording criteria for privacy cases: 29 CFR 1904.29 requires that certain sensitive injury types be listed as 'privacy case' on the 300 log without the employee's name to protect confidentiality.
9. OSHA, 29 CFR 1904.5 Work-relatedness determination: Under 29 CFR 1904.5, a case is work-related if the work environment caused or contributed to the injury or illness, including injuries at client sites.
10. OSHA, 29 CFR 1904.33 Retention and updating of old forms: OSHA requires employers to retain 300 logs, 301 forms, and 300A summaries for five years following the end of the calendar year they cover.
11. OSHA, 29 CFR 1910.147 Lockout/Tagout standard requiring written program: 29 CFR 1910.147 requires a written energy control program as part of lockout/tagout compliance.
12. OSHA, 29 CFR 1910.1200 Hazard Communication standard requiring written program: 29 CFR 1910.1200 requires employers to have a written hazard communication program covering chemical labeling, SDSs, and employee training.
13. BLS, Injuries, Illnesses, and Fatalities program (industry rate tables): BLS publishes industry-average TRIR and DART rates annually, allowing employers to benchmark their incident rates against sector peers.