Work incident report: what it is, what to include, and when it's required

Last updated 2026-07-10

What is a work incident report?

A work incident report is a written account of an unplanned workplace event that caused or could have caused injury, illness, property damage, or environmental harm. It captures what happened, who was involved, where the event occurred, what conditions existed, and what you did about it right away.

The term covers a lot of ground. A laceration in a commercial kitchen. A forklift near-miss in a warehouse. A chemical splash that needed nothing more than an eyewash and a bandage. A fatality on a construction site. "Incident" is the umbrella word. Under it, safety professionals draw a line between a near-miss (nobody got hurt), an accident (injury or damage happened), and an occupational illness (a condition that built up from workplace exposure over time).

A good incident report does three things. It creates a legal record you may need if a workers' comp claim or an OSHA citation follows. It feeds your injury and illness log, which OSHA can audit. And it forces a root-cause look that can stop the same thing from happening twice.

Don't mix up the internal incident report with OSHA's required forms. They're related, but they're not the same. Your internal report is usually longer and lives with your investigation file. The OSHA 300 log, 300A summary, and 301 form are the regulatory records OSHA can subpoena. Plenty of small businesses run one detailed form that satisfies both jobs at once.

When is a work incident report legally required?

OSHA's recordkeeping rule, 29 CFR 1904, requires employers with more than 10 employees in most industries to record work-related injuries and illnesses that meet set criteria ^[1]. Employers with 10 or fewer employees, and employers in certain low-hazard industries (a list OSHA maintains and updates), are partially exempt from routine recordkeeping. Nobody is exempt from severe-injury reporting.

Here's the part that catches people. Every employer covered by the OSH Act, regardless of size or industry, must report to OSHA within 8 hours any work-related fatality, and within 24 hours any work-related in-patient hospitalization, amputation, or loss of an eye ^[2]. Those go straight to OSHA at 1-800-321-OSHA or online at osha.gov/report. Blow the deadline and you get a separate recordkeeping citation stacked on top of whatever hazard caused the injury in the first place.

For everyday recordable cases, the test is straightforward. A work-related injury or illness is recordable if it results in death, days away from work, restricted duty or job transfer, medical treatment beyond first aid, loss of consciousness, or a significant injury or illness diagnosed by a healthcare professional even when it causes none of the above ^[1]. You have 7 calendar days from learning of the case to decide whether it's recordable and enter it on the 300 log.

Near-misses aren't covered by 29 CFR 1904. OSHA doesn't require you to log or report an event that hurt nobody. Write them up internally anyway. It's one of the highest-return safety habits you can build. The Bureau of Labor Statistics counted about 2.6 million nonfatal occupational injuries and illnesses in private industry in 2023, and researchers have long estimated that near-misses outnumber recordable injuries by anywhere from 10-to-1 to several hundred-to-1, depending on the industry and how you count ^[3]. The wide range is the honest answer here. Nobody has a single clean figure, because most near-misses never get written down.

What are the OSHA recordkeeping forms and how do they relate to incident reports?

OSHA's system runs on three forms, all defined in 29 CFR 1904 ^[1]:

Form	Name	What it does	Who fills it out
OSHA 300	Log of Work-Related Injuries and Illnesses	Running tally of every recordable case during the calendar year	Employer (or a designated rep)
OSHA 300A	Summary of Work-Related Injuries and Illnesses	Annual summary, posted Feb 1 through Apr 30 each year	A company senior official certifies it
OSHA 301	Injury and Illness Incident Report	Detailed narrative for each individual case	Employer (employee may help)

The OSHA 301 is the form closest to what most people mean by "incident report." It asks for the employee's job title, date hired, date and time of injury, what the employee was doing, how the injury happened, what object or substance directly harmed them, and the nature of the injury. You must complete a 301, or an equivalent form carrying the same information, within 7 days of learning about a recordable case ^[1].

Most employers keep a longer internal form and then copy the key data onto the 301. That works fine. Some states, including California and Washington and the other OSHA State Plan states, have their own equivalent forms. If you operate in a State Plan state, check your state agency, because its rules can be tougher than federal OSHA's. The full State Plan list is on OSHA's site ^[4].

The forms are free. Download them from osha.gov. You don't submit them to OSHA unless you get an establishment-specific survey request or an inspection triggers a records request.

What should a work incident report include?

A solid incident report answers five questions: who, what, when, where, and why. Every field earns its place. A report that says "employee slipped and hurt back" is worthless for prevention and worse than worthless in court.

Here's what a thorough internal report should cover:

Basic identification. Employee name, job title, department, hire date, years in the role, and the names of any witnesses.

Event details. Exact date and time. Exact location, not "warehouse" but "warehouse Bay 3, near loading dock 7." The task the employee was doing when it happened.

Narrative. A plain-language account of exactly what happened, in order. What was the employee doing beforehand? What happened? What was the immediate result? Write it factually. This is not the place to assign blame.

Injury or illness description. Body part affected, type of injury (laceration, sprain, fracture, chemical burn), and severity. Did the employee get medical care? What kind? First aid only, emergency room, or admitted to the hospital?

Equipment and materials involved. Any machine, tool, vehicle, chemical, or material in the mix. Note model numbers and SDS reference numbers for chemical exposures.

Environmental conditions. Was the lighting adequate? Was the floor wet? Was PPE in use, and was it the right PPE for the task?

Root cause. This is the section most forms skip, and it's why the same accidents keep repeating. What was the direct cause (the immediate physical trigger), and what were the contributing or root causes (the training gaps, procedural holes, or management-system failures that let the direct cause exist)? More on that below.

Corrective actions. What did you do right away? What's planned for the longer term, who owns it, and when is it due?

Signatures. The injured worker's signature (if able), the supervisor's, and the safety manager's or owner's. Date everything.

For OSHA-reportable severe injuries, also record the date and time you reported to OSHA and the name of the representative you spoke with.

How do you write the incident narrative clearly and correctly?

The narrative is where most incident reports fall apart. People write three words ("employee fell") or they write a defensive essay that buries the facts under adjectives.

Write in past tense. One fact per sentence. Start with what the employee was doing right before the event, not with the injury. Here's the shape of it: "At approximately 9:15 a.m. on March 4, [employee name] was using a box cutter to open incoming inventory boxes on the receiving table. The blade slipped when it met a sealed tape strip. It contacted the employee's left index finger, causing a 1.5-inch laceration that required three sutures at urgent care."

That's the whole narrative. Notice there's no "unfortunately," no "regrettably," no "the employee should have." Just sequence.

A few hard rules:

No admissions of liability in the narrative. That belongs to the legal and insurance process. Write facts.

Record the employee's own account in their words when you can, then the supervisor's account separately. Separate perspectives matter, especially when the accounts differ.

Note what wasn't there. "No wet floor sign was posted." "PPE was not available at the workstation." "The machine guard had been removed before the shift." The absence of a safety measure counts as much as the presence of a hazard.

Finish the report the day of the incident or the next business day. Memory decays fast. OSHA's 7-day window to enter a case on the 300 log exists partly because investigation quality drops off hard after about a week.

What is a root cause analysis and do you have to do one?

OSHA doesn't spell out a root cause analysis requirement in its recordkeeping standard. But the General Duty Clause, Section 5(a)(1) of the OSH Act, requires every employer to furnish a workplace "free from recognized hazards that are causing or are likely to cause death or serious physical harm" ^[5]. So if you write an incident report, name a root cause, and then do nothing about it, that report can be used against you as evidence you knew about the hazard.

The practical answer: yes, run a root cause analysis on every recordable incident, and on any serious near-miss too.

It doesn't have to be elaborate. The 5 Whys method handles most small-business incidents. Ask why it happened, then ask why of each answer, up to five times, until you land on a systemic cause instead of a personal one.

Here's how that plays out. Employee slipped on a wet floor. Why? Water was on the floor. Why? The mop bucket leaked. Why? The bucket had a crack maintenance never fixed. Why? There was no inspection schedule for cleaning equipment. Why? There was no written maintenance program for it. Root cause: a missing maintenance program, not the employee's shoes.

The gap between "employee wasn't careful" and "we had no maintenance program for cleaning equipment" is the gap between a fix that works and a fix that doesn't. OSHA's own incident-investigation guidance pushes employers toward systemic causes rather than one-off blame ^[6].

For the serious ones, especially amputations, fatalities, and hospitalizations, step up to a formal method like fault tree or bow-tie analysis. They take longer and produce corrective action plans that hold up better.

Who is responsible for completing the incident report?

Usually the injured employee's direct supervisor completes the report, with input from the employee, any witnesses, and the safety manager or owner if there is one. That's standard across most industries.

29 CFR 1904.35 gives employees and their representatives the right to report injuries and illnesses free from retaliation ^[7]. It also requires employers to tell employees how to report and to avoid discouraging reporting through policies like automatic discipline for any injury regardless of cause. OSHA has cited employers for attendance policies that penalize workers for injury-related absences, treating them as indirect suppression of reporting.

In a small business with no safety pro, the owner or ops manager takes this on. Fine. What matters is that one named person is accountable for getting reports done, reviewed, entered on the 300 log inside the 7-day window, and followed through with corrective action.

Some situations add wrinkles. Construction sites with multiple employers need to track whose employee got hurt and which company's recordkeeping obligation applies. Under 29 CFR 1904.31, you record injuries to employees on your payroll or workers you supervise day to day, even if they're on a temp agency's payroll ^[1].

How long do you have to keep incident reports and OSHA records?

29 CFR 1904.33 requires you to keep the OSHA 300 log, the 300A summary, and every 301 incident report for 5 years past the end of the calendar year they cover ^[1]. Records from calendar year 2024 must be kept through December 31, 2029.

During those 5 years, you have to update the 300 log if a case's outcome changes. Employee returns to full duty with no restrictions? Update it. Employee's condition worsens into more days away from work? Update it.

Your longer internal reports (the ones beyond the 301) don't carry a specific federal OSHA retention mandate. Workers' comp laws in most states require claim-related records for 3 to 7 years, and some states go longer. Since the internal report is often the factual backbone of a comp claim, hold it at least as long as your OSHA records. For any incident with a significant injury, 7 to 10 years is smart.

Keep these somewhere you can reach fast. OSHA can request your 300 logs on short notice during an inspection, and employees, former employees, and their personal representatives have the right to see the 300 log by the end of the next business day after they ask ^[1].

What's the difference between a recordable incident and a reportable incident?

This is the single most common mix-up in OSHA compliance, and getting it right saves you real money.

"Recordable" means the case goes on your OSHA 300 log under 29 CFR 1904. The triggers: death, medical treatment beyond first aid, days away from work, restricted work or job transfer, loss of consciousness, or a significant injury diagnosed by a healthcare professional.

"Reportable" in OSHA's language means you call OSHA directly through the severe-injury reporting process. Only four events trigger it: work-related fatalities (8-hour window), in-patient hospitalizations (24-hour window), amputations (24-hour window), and eye losses (24-hour window) ^[2].

A case can be recordable without being reportable. A worker sprains a wrist and takes 3 days off. That's recordable. You don't call OSHA. A case can be both at once. A hospitalization means a 24-hour phone report to OSHA and an entry on your 300 log.

First aid cases are neither. OSHA lists specific treatments that count as first aid under 1904.7(a), including bandaging, nonprescription medications at nonprescription strength, and tetanus shots ^[1]. Stay inside that list and the case is first-aid-only. You don't log it, though keeping an internal first-aid log is a smart move for spotting trends before they become recordables.

What happens if you don't file an incident report or miss OSHA's deadlines?

The consequences are real, and they stack.

Missing the 8-hour or 24-hour severe-injury reporting deadline is its own violation under 29 CFR 1904.39. OSHA can cite it and, under the 2024 penalty schedule, the maximum for a serious or other-than-serious violation is $16,550 per violation; willful or repeated violations can reach $165,514 ^[8]. Inspectors have issued reporting citations even when the employer had no other violations, because timely reporting is how OSHA decides whether to send someone out at all.

Failing to keep required records, or falsifying them, is a separate matter. Backdating a 300 log entry, changing an outcome after the fact to dodge recording a case, or coaching employees not to report can all draw recordkeeping citations. In egregious cases, it can trigger a criminal referral under Section 17(g) of the OSH Act.

Then there's workers' comp. Most state statutes require employers to file a First Report of Injury with the state inside a set window, commonly 3 to 10 days after the employer learns of the injury, though it varies by state. Miss that and you can face penalties from the state comp board and a messier claim that costs you more in the end.

And there's civil litigation. A report written promptly and accurately can be your best defense in a personal injury suit. A report that never existed, or that shows up late and looks altered, often becomes the plaintiff's best exhibit.

How do you build an incident reporting system that actually gets used?

The biggest reason incident reporting fails isn't paperwork. It's culture. Workers don't report injuries and near-misses when they expect discipline, embarrassment, or a shrug. OSHA's anti-retaliation rule under 1904.35 sets the legal floor ^[7]. Culture decides whether reporting is real or just for show.

Here's what works.

Make reporting physically easy. If the form lives in a binder in the safety manager's locked office, it won't get used for the small stuff. Keep copies in break rooms, on shared drives, or on a tablet near the first aid station.

Separate the report from the discipline conversation. Fill out the report first. Have any performance talk later, on its own, and only when the facts clearly show a rule violation rather than a system failure. Most incidents are system failures.

Review near-miss reports in safety meetings without blame. When workers see a near-miss report lead to a fixed hazard, and nobody got fired, reporting climbs. Safety management research supports this, though the size of the improvement swings a lot by industry and company size.

Building your safety program from scratch as a small business? A tool like SafetyFolio can generate a written incident investigation procedure fitted to your industry in a fraction of the time it takes to write one cold. The written program is the base. The forms and the culture get built on top of it.

For higher volume, a simple spreadsheet or basic safety management software does the job. You don't need expensive tools. A shared Google Sheet with consistent fields, reviewed monthly, beats an elaborate system nobody opens.

Train supervisors on incident investigation, more than incident reporting. A supervisor who can run a 5 Whys is worth far more than one who can fill out a form. Free OSHA training is available from OSHA and its Training Institute Education Centers.

Are there special incident reporting rules for specific industries?

Yes. Several industries carry their own reporting requirements layered on top of 29 CFR 1904.

Construction (29 CFR 1926) has no separate incident report standard, but its hazard profile means incidents with cranes, excavations, scaffolding, and powered industrial trucks fall under additional standards with their own documentation demands. If a forklift is involved, pull the forklift certification records as part of the investigation.

Healthcare (29 CFR 1910.1030, the Bloodborne Pathogens standard) requires a sharps injury log on top of the 300 log for needlestick and sharp-object injuries. That log stays confidential, is kept for 5 years, and records the device type and brand, the work area where the exposure happened, and how the incident occurred ^[9].

Mining runs under the Mine Safety and Health Administration (MSHA), not OSHA. MSHA has its own accident reporting requirements under 30 CFR 50, with different forms and timelines.

Transportation companies covered by the Department of Transportation carry additional reporting requirements for crashes involving commercial vehicles.

For any workplace handling hazardous chemicals, a chemical exposure should trigger an OSHA 301, a review of your hazard communication documentation, and a look at the Safety Data Sheet for the substance involved.

State Plan states add their own layers. California's Cal/OSHA, for one, requires employers to investigate serious injuries and illnesses and keep the investigation records, with specific investigation elements beyond what federal OSHA asks for ^[4].

What makes an incident report legally defensible?

Incident reports surface in three legal settings: OSHA citation proceedings, workers' compensation hearings, and civil litigation. The same qualities carry the report in all three.

Timeliness. A report done the day of the incident carries far more weight than one done a week later. Dates and times should be specific, not rounded guesses.

Accuracy over completeness. "Unknown at this time" beats a made-up entry. Courts and OSHA judges are not impressed by a tidy, complete-looking report full of wrong facts.

Facts kept apart from conclusions. "The floor was wet" is a fact. "Employee was careless" is a conclusion. Keep conclusions out of the factual sections. Your corrective action section can address behavior, but frame it as a training gap, not a character verdict.

Witness statements. Collect them the day of the incident. Have witnesses write their own account in their own hand if you can, or have someone record it verbatim and get the witness to sign.

Photographs. Take them right away, before the scene gets cleaned up. Shoot the exact location from several angles, any equipment involved, and any conditions (wet floor, poor lighting, missing guard). Label and date every photo.

Chain of custody for physical evidence. If a tool broke and caused the injury, secure it. Don't toss it. Don't repair it before the investigation wraps.

One more thing worth thinking through. Don't write the corrective action section in a way that admits you knew about the hazard and ignored it. If your corrective action is "install machine guard" and an absent guard caused the injury, a plaintiff's attorney will ask when you learned the guard was missing and why you waited. Write the corrective action accurately, but be deliberate about how you describe the timeline and what was or wasn't known.

Frequently asked questions

How soon after an incident do I have to complete an incident report?

For OSHA recordkeeping, you have 7 calendar days from learning of a recordable case to enter it on the 300 log and complete the 301. For fatalities, report to OSHA within 8 hours. For hospitalizations, amputations, and eye losses, within 24 hours. Internal incident reports should be finished the same day or the next business day, while memory is fresh.

Do small businesses with fewer than 10 employees have to file incident reports?

Employers with 10 or fewer employees are partially exempt from OSHA's routine recordkeeping under 29 CFR 1904, so they don't maintain the 300 log for routine cases. They are never exempt from severe-injury reporting. Fatalities must reach OSHA within 8 hours, and hospitalizations, amputations, and eye losses within 24 hours, no matter the company size.

What is the difference between a first aid case and a recordable case?

OSHA defines first aid as specific treatments listed in 29 CFR 1904.7(a): bandaging, nonprescription medications at label strength, tetanus shots, and similar. If all treatment for an injury stays inside that list, the case is first-aid-only and not recordable. Once treatment crosses into prescription medications, sutures, or professional care beyond first aid, the case becomes recordable.

Can an employee be disciplined for being involved in a workplace incident?

OSHA's anti-retaliation rule under 29 CFR 1904.35 prohibits discouraging injury and illness reporting. Employees can still face consequences for genuine safety violations, but OSHA scrutinizes blanket policies that automatically discipline anyone involved in an incident regardless of cause, treating them as reporting suppression. Tie discipline to a documented rule violation, not to the fact that an injury happened.

Do near-miss incidents need to be reported to OSHA?

No. OSHA's recordkeeping standard at 29 CFR 1904 covers work-related injuries and illnesses, not near-misses. Near-misses don't go on the 300 log and don't get reported to OSHA. Investigating and documenting them internally, though, is one of the most effective hazard-prevention practices available, and OSHA actively encourages it.

What OSHA form is used for incident reports?

OSHA Form 301, the Injury and Illness Incident Report, documents the details of each recordable case. It works alongside the 300 log (the running tally of all cases) and the 300A (the annual summary). You can use an equivalent form carrying the same fields in place of the official 301. All forms are free at osha.gov.

Who has access to completed OSHA incident records?

Current and former employees and their personal representatives can access the 300 log by the end of the next business day after a request, per 29 CFR 1904.35. Form 301s hold more personal detail, so access is limited to the injured employee, their personal representative, and government officials. OSHA inspectors can request records during an inspection.

What should I do if an employee refuses to sign the incident report?

You can't force a signature. Note on the form that the employee declined to sign and record the date. Have a witness co-sign acknowledging the refusal. The report is still valid. The employee has the right to add their own account or objections in writing. Keep that with the incident report.

Does an incident report affect my workers' compensation insurance rates?

Indirectly, yes. Comp premiums for most employers reflect their experience modification rate (EMR), which measures claims paid against industry norms. Thorough reports that support prompt medical treatment and accurate claims handling can lower total claim costs, which helps the EMR over time. Skipping documentation lets costs spiral and complicates claim resolution, which pushes the other way.

How is a work incident report different from an OSHA 300 log entry?

The 300 log is a one-line summary per recordable case: name, job title, date, description, and outcome columns. An incident report (the 301 or an equivalent) is the full narrative and investigation record for that same case. The 300 log tracks; the incident report investigates. Both are required for recordable cases under 29 CFR 1904.

What is the penalty for not reporting a fatality to OSHA within 8 hours?

Missing the 8-hour fatality reporting window violates 29 CFR 1904.39. OSHA can issue a citation with a penalty up to $16,550 per violation under the 2024 schedule. Repeated or willful failures can reach $165,514. OSHA has issued these citations even when the resulting inspection turned up no other violations.

Do I need a separate incident report system for remote workers?

OSHA's recordkeeping rules apply to work-related injuries wherever the work happens. A remote worker hurt while doing work duties may have a recordable injury. The hard part is investigation, since you can't photograph the scene or grab physical evidence. Build your report form and procedure to work over phone and email for remote staff, and address remote hazards in your written safety program.

Can I use software or apps to complete incident reports instead of paper forms?

Yes. OSHA has no paper requirement. Electronic formats are fine as long as they capture the required information, can be retrieved and printed on request, and protect employee privacy with access controls. Many employers use spreadsheets, shared cloud documents, or dedicated safety apps. Whatever you use, make sure authorized employees can reach the 300 log within the one-business-day window.

What information goes in the corrective action section of an incident report?

List the specific actions taken or planned to prevent a repeat: equipment repairs, engineering controls, procedure changes, retraining, PPE additions, or program updates. For each one, name the owner and set a target completion date. Vague entries like 'retrain staff' don't cut it. Say who gets trained, on what, by whom, and by when. Then follow up and document that the action was done.

Sources

1. OSHA, 29 CFR Part 1904 Recordkeeping Rule (full regulatory text): Employers with more than 10 employees must record qualifying injuries and illnesses on Forms 300, 300A, and 301; 7-day entry deadline; 5-year retention requirement; first aid definitions; employee access rights
2. Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses, 2023: Approximately 2.6 million nonfatal occupational injuries and illnesses recorded in private industry in 2023
3. OSHA, State Plans page (osha.gov): State Plan states may have requirements more stringent than federal OSHA; California, Washington, and others operate their own occupational safety programs
4. OSHA, General Duty Clause, OSH Act Section 5(a)(1): Each employer shall furnish employment and a place of employment free from recognized hazards that are causing or are likely to cause death or serious physical harm
5. OSHA, Incident Investigation page (osha.gov): OSHA recommends employers investigate incidents to identify root causes and system failures, not just individual errors
6. OSHA, Civil Penalty Amounts (adjusted for inflation, 2024): Maximum penalty for other-than-serious and serious violations is $16,550 per violation in 2024; willful or repeated violations up to $165,514 per violation
7. OSHA, 29 CFR 1910.1030 Bloodborne Pathogens Standard: Healthcare employers must maintain a confidential sharps injury log in addition to the OSHA 300 log, retained for 5 years, including device type, work area, and description of the incident
8. OSHA, Recordkeeping Forms download page: OSHA recordkeeping forms are free and available for download; OSHA 301 requires employee job title, hire date, date and time of injury, activity at time of injury, event description, object involved, and injury nature