Last updated 2026-07-09

TL;DR
A workplace incident report documents what happened, who was involved, where and when, what caused it, and what you fixed. OSHA doesn't mandate one specific form, but your report has to hold enough detail to complete an OSHA 300 log entry and back up an investigation. A good template takes 10 to 20 minutes to fill out and protects you in a citation or a lawsuit.
What is a workplace incident report and do I actually need one?
An incident report is a written record of any unplanned workplace event that caused, or could have caused, injury, illness, property damage, or environmental harm. Near misses count too. The form captures facts while memory is fresh, points at root causes, and builds the paper trail you'll want when OSHA shows up, a workers' comp claim lands, or someone sues.
OSHA does not require a specific incident report form. What it does require, under 29 CFR 1904, is that employers with 11 or more employees record work-related injuries and illnesses on OSHA Forms 300, 300A, and 301 [1]. The OSHA 301 Injury and Illness Incident Report is basically OSHA's own template, and it's a fine starting point even if you have five people on payroll.
Here's the real reason to run a thorough report no matter your headcount. The form forces a structured investigation. Employers who skip it end up writing vague workers' comp narratives like "employee hurt back lifting box," which teaches you nothing about preventing the next one. A real report asks how heavy the box was, whether a cart was available, whether the employee was trained, and whether the task was even part of their job. That's where corrective action comes from.
The Bureau of Labor Statistics counted 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023, a rate of 2.4 cases per 100 full-time workers [2]. Every one of those should have produced a documented investigation. Most didn't.
What fields should a good incident report template include?
A workable template breaks into five parts. Drop any one and your investigation has a hole in it.
Part 1: Basic identifying information Employee name, job title, department, date of hire, supervisor name, contact information. If a contractor or visitor was involved, note their employer and status.
Part 2: Event details Date, time, and exact location. Precise location matters more than people think. "Warehouse" is useless. "Warehouse aisle 4, between shelving units B-6 and B-7, about 15 feet from the east loading dock" lets you walk back and look at the actual conditions.
Part 3: What happened (narrative and sequence) A plain-language account in chronological order. What was the employee doing right before? What happened? What was the immediate result? Attach photos and witness statements here. The OSHA 301 form asks for "what was the employee doing just before the incident occurred" and "how did the injury occur" as separate fields [1], which is a good model to copy.
Part 4: Injury or illness details Body part affected, nature of the injury (laceration, strain, burn), whether the employee got medical treatment, whether they lost time. These map straight to the OSHA 300 log columns.
Part 5: Root cause analysis and corrective action This is the section most small businesses skip, and it's the one that pays. Immediate cause (what directly caused it), contributing causes (conditions or behaviors that made it possible), and corrective actions with named owners and due dates. You don't need a formal methodology. A simple "5 Whys" walkthrough written into this section beats nothing by a mile.
| Section | OSHA 301 equivalent? | Required for 300 log? |
|---|---|---|
| Identifying info | Yes | Partial |
| Event details | Yes | Yes (date, location) |
| Injury/illness details | Yes | Yes |
| Narrative | Yes | No |
| Root cause + corrective action | No | No |
The root cause section is the one place your template goes past OSHA's own 301. That extra column is where injury prevention actually lives.
How does an incident report connect to OSHA 300 recordkeeping?
The OSHA 300 log, 300A summary, and 301 form are required records for most employers with 11 or more employees [1]. Your internal incident report feeds those records. The documents do different jobs.
The 300 log is a summary ledger: one row per recordable case, tracking case number, date, employee name, job title, location, description, and classification (days away, restricted work, job transfer, or other recordable). The 301 (or an equivalent) is the detailed narrative for each row. Your internal report is the investigation document that supports both.
A case is recordable under 29 CFR 1904.7 if it results in days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, or a significant injury or illness diagnosed by a healthcare professional [1]. First aid cases, by OSHA's definition, are not recordable, but document them internally anyway. Near misses should get a report too.
OSHA gives you seven calendar days from learning about a recordable case to complete the 301 [1]. That clock starts when you, the employer, find out, not when the injury happened. Use your incident report as the source document and the transfer to the 301 takes about five minutes, assuming your template mirrors the 301 fields.
Serious incidents run on a much tighter clock. Deaths go to OSHA within 8 hours. In-patient hospitalizations, amputations, and losses of an eye go within 24 hours [3]. Your report process has to flag these categories the moment they happen so someone picks up the phone.
When do you have to report an incident to OSHA directly?
Internal recordkeeping and direct reporting to OSHA are two separate obligations. Most incidents only need the internal record. A subset need a phone call or an online report to OSHA itself.
Under 29 CFR 1904.39, employers must report all work-related fatalities within 8 hours, and all work-related in-patient hospitalizations, amputations, or losses of an eye within 24 hours [3]. You can report three ways: call OSHA's 24-hour hotline at 1-800-321-OSHA (6742), call your nearest OSHA area office during business hours, or file through OSHA's online portal at osha.gov.
State-plan states run their own OSHA-approved programs (about half the country) and may set different thresholds. California's Cal/OSHA, for example, requires reporting any serious injury, illness, or death, including certain hospitalizations lasting longer than 24 hours, within 8 hours [4].
The internal report and the call to OSHA use the same facts. Complete your internal report first. It will have everything you need to answer OSHA's questions on that call, and you won't be improvising under pressure.
What does the OSHA 301 form look like and can I use it as my template?
Yes, and for a lot of small businesses it's enough. The OSHA 301 Injury and Illness Incident Report is a free fillable PDF from osha.gov [8]. It covers every field OSHA needs for recordkeeping.
The 301 has three sections. Employee information (name, address, hire date, gender, job title). Case information (date and time of injury, where it occurred, what the employee was doing, how the injury happened, object or substance involved, body part affected, injury description). Medical information (treating physician, hospital, lost time status).
What the 301 leaves out is a root cause section, corrective action fields, and a supervisor sign-off. For pure recordkeeping, fine. For a document that actually improves your safety program, you need those pieces.
Want one form that does both? Take the 301 fields as your base and add a page for root cause analysis, contributing factors, corrective actions (owner and due date), and signatures from the supervisor and the investigating manager. Now you have a record that satisfies OSHA and doubles as a genuine investigation.
How do you fill out an incident report step by step?
Speed and accuracy both matter here. Memories fade within hours, and the facts you need are freshest right after the event.
Step 1: Secure the scene. Before you document anything, make sure the area is safe. If equipment failed or a hazard still exists, keep people out until you've checked it. Basic, and people still skip it.
Step 2: Get medical attention for the injured person. Documentation waits. The report will still be there in an hour. The person won't.
Step 3: Notify the supervisor. The supervisor (or a designee) usually leads the investigation and fills out the report. Some companies hand it to a safety officer. Either way, assign it now and don't let the task float.
Step 4: Collect facts. Interview the injured employee as soon as they can talk. Interview witnesses separately, before they compare notes. Photograph the scene, the equipment, the contributing conditions. Preserve physical evidence: worn PPE, broken parts, spilled substances.
Step 5: Fill out the form. Complete every field. If something doesn't apply, write "N/A" so it's clear you didn't just skip it. "Employee slipped" is not acceptable. Write "Employee slipped on water pooled near the mop sink in the east break room; drain was partially blocked by a floor mat; employee was not wearing slip-resistant footwear."
Step 6: Determine recordability. Run the case against the 29 CFR 1904.7 criteria to decide whether it hits the 300 log. When in doubt, log it. OSHA has long held that over-recording beats under-recording.
Step 7: Complete the OSHA 301 (or equivalent). This has to happen within seven calendar days of learning about a recordable case [1].
Step 8: Implement and track corrective actions. Assign each one to a specific person with a due date. Then follow up. This step is the entire reason the report exists.
What are the most common mistakes on incident reports?
A handful of patterns show up over and over in weak reports.
Waiting too long. Some employers fill out the report days later, or only when a comp claim gets filed. Memory is shaky within 24 hours and close to useless after a week. OSHA expects you to learn about incidents promptly and act.
Writing conclusions instead of facts. "Employee was not paying attention" is a conclusion. "Employee stated he did not see the forklift approaching from his left" is a fact [see /articles/osha-basics/incident-report]. Stick to what you can observe or verify. Conclusions belong in the analysis section, not the narrative.
Leaving corrective action blank. This is the single most common deficiency. If you investigate and take no action, the whole thing is theater. OSHA investigators look for follow-through. So do plaintiff's attorneys.
Ignoring near misses. Near misses are free lessons. A near miss is an event that could have caused injury or illness but didn't. The BLS numbers only count the times things went wrong; the near-miss pool is far bigger. Documenting and investigating them is one of the highest-return things a small business can do.
Generic root causes. "Employee error" is not a root cause. It's the end of thinking. Ask why the error was possible. Bad training? Unclear procedure? A worker fatigued from mandatory overtime? Equipment in poor repair? The real cause is almost always a system problem, not a personal failing.
Incomplete witness information. Get names, contact details, and statements from every witness at the time. You will not track them down easily later, and their memories degrade fast.
How do near miss reports differ from injury incident reports?
A near miss is an event that could have caused injury or property damage but didn't. A forklift that nearly clips a pedestrian. A chemical drum that almost tips off a shelf. A worker who almost steps into an unguarded floor opening. The only thing separating a near miss from a hospital visit is luck.
OSHA does not require you to record near misses on the 300 log, and there's no mandatory near miss form. But OSHA strongly encourages near miss programs and has published guidance on them [5]. The logic is simple: near misses and real injuries share the same causes.
Your near miss template can be a stripped-down version of your injury report: date, time, location, what happened, who was involved, what injury or damage could have resulted, and what you're doing about it. Keep it short enough that people actually fill it out. A 20-minute form that never produces a visible change gets abandoned within a month.
One thing to protect: make near miss reporting rewarded, not punished. If employees think a report leads to discipline, they stop reporting. OSHA has written guidance on anti-retaliation protections for workers who raise safety concerns under Section 11(c) of the OSH Act [6].
Do incident reports have to stay confidential, and how long do I keep them?
OSHA 300 log records must be kept for five years after the end of the calendar year they cover [1]. That covers Forms 300, 300A, and 301. Your internal report, if it's equivalent to the 301, should be held for the same period at minimum.
Workers' comp rules in most states set their own retention periods, and many require keeping injury records for several years after a claim closes. When in doubt, hang onto incident records for at least ten years. Storage is cheap. Destroyed evidence in litigation is not.
On confidentiality: the 300 log must be available to employees, former employees, and their representatives on request [1]. But you have to protect privacy in sensitive cases. Under 29 CFR 1904.29, you must not enter an employee's name on the 300 log for privacy concern cases, which include sexual assault, mental illness, HIV infection, hepatitis, tuberculosis, and needle-stick injuries [1]. For those, you enter "privacy case" in the name column and keep a separate confidential list matching case numbers to names.
Your internal report forms contain medical information, so treat them as confidential personnel records. Store them separately from general personnel files (consistent with ADA requirements), and limit access to HR, safety staff, and supervisors with a need to know.
What should a supervisor do immediately after a workplace incident?
The supervisor's first few minutes set the tone for everything that follows. Here's a realistic order of operations.
First, get the injured person care. Call 911 if you need to. Assign someone to accompany the employee to urgent care or the ER for off-site treatment. Don't let an injured employee drive themselves.
Second, secure the scene. If equipment was involved, lock it out or tag it out until it's inspected [see /articles/osha-basics/lockout-tagout]. If a chemical spill contributed, follow your hazard communication plan [see /articles/osha-basics/hazard-communication]. Preserve conditions as close to the incident state as you can, but never at the cost of safety.
Third, notify your safety manager or whoever owns investigations. In a small shop that might be you. Do it right away, not at the end of the shift.
Fourth, gather witnesses. Get their names and ask each to write a short statement while it's fresh. Keep them apart so they don't shape each other's memory.
Fifth, start the report. Even if you can't finish it, get the time-sensitive facts down: exact time, exact location, who was present, what the conditions looked like. Fill in the rest once things settle.
For serious incidents (potential fatality, hospitalization, amputation, loss of an eye), the supervisor also needs to alert ownership immediately. The 8-hour and 24-hour OSHA reporting windows start from when the employer learns of the incident [3], and that clock does not pause for a shift change.
Can a free incident report template work for all industries, or do I need something specific?
A solid core template, built on the OSHA 301 fields plus a root cause section, works across most general industry and construction settings. The bones don't change whether someone strained their back in a warehouse or burned an arm in a commercial kitchen.
Some industries have extra requirements or signature incident types worth building in. Construction sites see falls, struck-by events, and caught-in/between hazards at much higher rates than general industry [2]. A construction template might add fields for scaffold or ladder type, fall height, harness use, and weather. Healthcare sees a disproportionate share of needlesticks, patient handling injuries, and workplace violence, and each of those benefits from targeted fields.
If you work under a standard-specific rule like process safety management (29 CFR 1910.119) or bloodborne pathogens (29 CFR 1910.1030), those standards carry their own incident investigation requirements that go past the basic template. Read the standard for your industry.
For most small businesses in manufacturing, retail, food service, warehousing, or office settings, a well-built general template covers it. The trick is using it every time, not chasing the perfect form.
If building a written safety program to sit alongside your incident reporting is on your list, SafetyFolio's safety program generator produces an OSHA-aligned written program in about 15 minutes, which you can then pair with your incident report workflow [see /articles/osha-basics/osha].
What happens if you don't document a workplace incident?
The fallout runs from minor to severe, and it compounds.
Short term, skipping the report means you lose the investigation window. Evidence gets cleaned up. Witness memories fade. You never learn what caused the incident, so the next one gets more likely.
On the OSHA side, failing to complete and keep required records (300, 301) violates 29 CFR 1904, and OSHA can cite you. As of 2024, OSHA's maximum penalty for a serious violation is $16,131 per violation, and willful or repeated violations can reach $161,323 per violation [7]. OSHA adjusts these annually under the Federal Civil Penalties Inflation Adjustment Act. A pattern of under-recording, meaning you routinely fail to log recordable cases, is a far bigger problem than one missed entry.
In workers' comp, missing or incomplete documentation slows or complicates a claim. If it goes to litigation, a missing incident report is a gap the opposing attorney will spot and use.
The most underrated consequence is cultural. Employees notice. When workers report incidents and see nothing happen (no documentation, no investigation, no fix), they stop reporting. Near misses go dark. Minor injuries get ignored until they turn into serious ones. Your safety culture erodes quietly, and you won't feel the damage until an incident hits that you should have seen coming.
Where can I get a free incident report template to download right now?
A few legitimate free sources exist. Here's the honest rundown.
OSHA Form 301 is the baseline free template. It's a fillable PDF straight from osha.gov [8], and it meets every recordkeeping requirement OSHA sets. Its limit is the missing root cause and corrective action sections.
OSHA's full recordkeeping forms packet bundles 300, 300A, and 301 in one download from osha.gov. Setting up your system from scratch? Grab this packet and build on it.
State workers' compensation boards often publish their own incident report forms, and some satisfy OSHA and state comp reporting at the same time. Check your state labor department's website.
Industry associations sometimes publish specialized templates. The National Safety Council, for one, publishes safety resources including investigation forms, though some sit behind membership.
To go past OSHA's basic 301, add these: a root cause section (5 Whys or equivalent), a corrective action table with owner and due date fields, supervisor and safety manager signature lines, and a field marking whether the case is OSHA-recordable.
If you want your reports to feed a complete written safety program instead of living as loose documents, SafetyFolio's free resources pair with a safety program generator that builds the program your incident report should reference. The report tells you what went wrong. The written program tells everyone what to do instead.
Frequently asked questions
Is an incident report the same as an OSHA 301 form?
They do the same job but aren't identical. The OSHA 301 is OSHA's official incident report form, required for recordable cases under 29 CFR 1904. An internal incident report can be an equivalent form that meets or beats the 301's fields. Most good internal templates include everything on the 301 plus root cause analysis and corrective action sections that OSHA's form leaves out.
Do I need an incident report for near misses?
OSHA doesn't require it, but you should do it anyway. Near misses share the same root causes as actual injuries. Documenting and investigating them is how you stop the next one. Keep the near miss form short enough that people actually complete it. A five-minute form that gets used is worth far more than a thorough one that stays blank.
How soon after an incident do I have to complete the report?
For OSHA-recordable cases you must complete the 301 or equivalent within seven calendar days of learning about the case, per 29 CFR 1904.29. For fatalities, report to OSHA within 8 hours. For in-patient hospitalizations, amputations, or eye losses, within 24 hours. Your internal report should be started the same day the incident happens, while the facts are fresh.
Can I use a digital or electronic incident report instead of paper?
Yes. OSHA accepts electronic recordkeeping. Plenty of employers use software or a fillable PDF on a shared drive. The record still has to meet the required content standards and be available to employees on request. Some larger employers must submit OSHA 300A data electronically through OSHA's Injury Tracking Application (ITA), depending on industry and size.
What's the difference between a first aid case and a recordable case?
Under 29 CFR 1904.7, first aid is a specific list of one-time treatments that don't require professional medical judgment beyond basic care. Cases treated with only first aid are not recordable. Anything requiring prescription medication, stitches, X-rays for a fracture, restricted duty, days away from work, or a formal diagnosis by a healthcare professional is recordable.
Who should sign the incident report?
At minimum, the supervisor who ran the investigation signs and dates it. Many employers also want a signature from the injured employee (or a note if they can't sign), a safety manager or HR representative, and whoever owns the corrective actions. Signatures create accountability and confirm each party reviewed the findings.
Do small businesses with fewer than 10 employees need to do incident reports?
They're exempt from routine OSHA 300 log recordkeeping under 29 CFR 1904.1, but they still have to report fatalities, hospitalizations, amputations, and eye losses to OSHA directly. More to the point, the practical value of incident reports (finding causes and preventing recurrence) applies to every business regardless of size. Skipping documentation because you're below the threshold is a false economy.
Can an incident report be used against the employer in a lawsuit?
Yes, it can be discoverable in litigation. That's a reason to make reports accurate and factual, not a reason to avoid them or write vague ones. A thorough, honest report that documents corrective action is your best defense: it shows you investigated promptly, took responsibility, and fixed the problem. A missing or falsified report does far more damage in court than an honest one.
What if the employee refuses to cooperate with the incident investigation?
Document the attempt and proceed with what you have: physical evidence, witness accounts, your own observations. Employees have a right not to self-incriminate, but refusing to take part in a safety investigation can be handled through your disciplinary policy if that's how your written safety program is structured. Never threaten discipline for reporting an injury, which is explicitly prohibited under OSH Act Section 11(c).
Do I need a separate vehicle accident report form?
Vehicle accidents involving company vehicles or occurring during work duties need documentation, and if they cause a work-related injury meeting OSHA criteria, that injury goes on the 300 log. Many employers use a separate motor vehicle accident form alongside the standard incident report because vehicle crashes have extra fields: road conditions, vehicle damage, insurance information, police report number. Both forms do different jobs and both should be completed.
How long do I have to keep incident report records?
OSHA requires you to keep 300, 300A, and 301 records for five years after the end of the calendar year they cover, per 29 CFR 1904.33. State workers' comp laws may require longer. When records are relevant to open litigation or claims, hold them until final resolution. In practice, keeping incident records at least ten years is a reasonable default for most employers.
What industries have the highest injury rates and why does that matter for my template?
Per BLS data for 2023, the highest nonfatal injury and illness rates include agriculture, forestry, and fishing (5.5 per 100), transportation and warehousing (4.5 per 100), and healthcare (4.1 per 100). High-hazard industries benefit from specialized report fields tailored to their common incidents, like fall height and harness fields for construction, or patient handling fields for healthcare.
Should I report near misses involving forklifts or other powered industrial trucks?
Yes, without hesitation. Forklift incidents are a leading cause of serious industrial injuries. OSHA's powered industrial truck standard at 29 CFR 1910.178 carries extensive requirements, and near miss documentation in forklift operations can flag training gaps, traffic management problems, or maintenance issues before someone gets hurt. Near miss reports in forklift operations are among the highest-value safety documents a warehouse can produce.
Sources
- OSHA, Recordkeeping Rule (29 CFR 1904) and Forms 300, 300A, 301: OSHA requires employers with 11 or more employees to record work-related injuries and illnesses on Forms 300, 300A, and 301; 301 must be completed within 7 calendar days; 300 records retained 5 years; privacy case rules under 29 CFR 1904.29
- Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses, 2023: 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023, a rate of 2.4 per 100 full-time workers; industry-specific rates for agriculture, transportation, healthcare
- OSHA, Report a Fatality or Severe Injury (29 CFR 1904.39): Employers must report work-related fatalities within 8 hours and in-patient hospitalizations, amputations, or losses of an eye within 24 hours
- California Department of Industrial Relations, Cal/OSHA Reporting Requirements: Cal/OSHA requires reporting of serious injuries, illnesses, or deaths within 8 hours, including certain hospitalizations
- OSHA, Incident Investigation: A Guide for Employers: OSHA encourages near miss reporting programs as a component of incident investigation; near misses share root causes with actual injuries
- OSHA, Worker Rights: Anti-Retaliation Protections (Section 11(c) of the OSH Act): Section 11(c) of the OSH Act prohibits employer retaliation against workers who report safety concerns or injuries
- OSHA, Civil Penalty Amounts (adjusted 2024): As of 2024, OSHA's maximum penalty for a serious violation is $16,131 per violation; willful or repeated violations up to $161,323 per violation
- OSHA, OSHA 301 Injury and Illness Incident Report (fillable form): OSHA's official 301 form is a free fillable PDF covering employee information, event details, injury description, and medical information
- OSHA, Determination of Recordable Cases (29 CFR 1904.7): First aid cases are not OSHA-recordable; recordable cases include those requiring prescription medication, stitches, X-rays for fractures, restricted duty, or days away from work
- OSHA, Powered Industrial Trucks Standard (29 CFR 1910.178): OSHA's powered industrial truck standard sets extensive requirements relevant to near miss and incident documentation in forklift operations
- Bureau of Labor Statistics, Occupational Injury/Illness Industry Data, 2023: Agriculture, forestry, and fishing had a rate of approximately 5.5 per 100; transportation and warehousing approximately 4.5 per 100; healthcare approximately 4.1 per 100 in recent BLS data