How to Set Up an OSHA Injury and Illness Log Step by Step

Last updated: August 12, 2026

Quick answer: to set up an OSHA injury and illness log, start by checking coverage, then choose the right forms, decide what counts as recordable, and keep a single year-by-year log with backup notes. This guide walks through how to set up an OSHA injury and illness log step by step without letting it turn into a compliance headache.

Need the log in the first place? That’s the first question. Before anything else, figure out whether you have to keep one and, if so, how to build it without turning recordkeeping into a mess. I’ll walk you through how to set up an OSHA injury and illness log step by step, because the wrong form, the wrong date, or the wrong case classification can turn a basic bookkeeping task into a compliance problem.

First, Check Whether You Need the Log at All

A small office with no OSHA-recordable injuries may still have to keep records if it is told to do so or if the industry falls under recordkeeping rules. So the answer is not always a neat yes or no. You still need to check whether the workplace is covered. In construction, manufacturing, warehousing, healthcare, and other higher-risk settings, I’d look at the rule closely before doing anything else.

The OSHA injury and illness log usually means OSHA Form 300, plus the summary and incident report forms that go with it. The real issue is not “How do I fill out a spreadsheet?” It’s “Which cases belong on the log, and what paper trail should sit behind each one?”

Here’s the cleanest way to sort it out:

1. Confirm whether your establishment is covered by OSHA recordkeeping rules.
2. Check whether your industry is partially exempt under OSHA’s current recordkeeping exemption list.
3. Decide who will own the log process—HR, safety, operations, or a single manager.
4. Gather your injury reports, first-aid records, workers’ comp notices, and medical restrictions.
5. Set up one place to store the log and the backup documents.
6. Use the OSHA forms, not a homemade version unless you are mapping the same fields exactly.

People often get tangled up because they think the log starts with the form. It doesn’t. The first step is deciding which events count. Miss that, and the form goes sideways too.

For the official forms and instructions, I’d start with OSHA’s recordkeeping page and the Form 300, 300A, and 301 instructions on OSHA’s site, or OSHA’s employer recordkeeping guidance. If you need the rule itself, the governing standard is 29 CFR Part 1904 from OSHA.

Quick check: if you are not sure whether your workplace is covered, stop here and confirm coverage before you open the log.

Set Up the Right OSHA Forms Before You Enter a Single Case

Already know you need the log? Then set up the three forms in the right order. Skip that and start with only the annual summary, and you’ll be rebuilding details later from memory. Bad idea.

The usual setup is:

• Form 300: the log of work-related injuries and illnesses
• Form 301: the incident report for each recordable case
• Form 300A: the annual summary

Even if your company uses software, keep the logic of these three forms. Software can help with storage and reminders, but it does not replace the decision rules.

Here is a practical setup path:

1. Create a folder or digital workspace for one calendar year only.
2. Put the OSHA 300 log at the top level.
3. Set up a matching incident report file for each case that may become recordable.
4. Set a calendar reminder for the annual summary period and the posting window.
5. Assign one person to review all entries before they are finalized.
6. Keep backup records that show why each case was or was not entered.

The biggest setup mistake? Mixing the log with workers’ compensation paperwork and pretending they mean the same thing. They do not. A case can be compensable under workers’ comp and still not be OSHA-recordable, and the reverse can also happen depending on the facts. Keep separate files, even when they overlap.

If you want a digital system, use a secure shared drive or EHS software with access controls, and consult a professional if your setup needs to handle privacy-sensitive cases or multi-site reporting. Real tools people commonly use include Microsoft Excel for simple logs, Google Sheets for shared access, or dedicated EHS platforms for larger operations. The trade-off is plain: spreadsheets are cheap and flexible, but they depend on discipline; software looks tidier, but only if someone keeps it current.

Quick check: if you can’t point to the folder, the owner, and the review process, your setup is incomplete.

How to Decide What Goes on the OSHA Injury and Illness Log

A clearly work-related event that meets OSHA recordability criteria belongs on the log. A tiny scratch that only needed basic first aid may not. But if you’re guessing, slow down. The log is not for every bump and bruise; it is for recordable cases under OSHA’s rules.

The main categories I would screen for are, with OSHA’s recordkeeping guidance in mind:

• death
• days away from work
• restricted work or transfer
• medical treatment beyond first aid
• loss of consciousness
• significant diagnosed injuries or illnesses
• certain work-related needlesticks, sharps injuries, or tuberculosis cases where applicable

The practical process looks like this:

1. Ask whether the event happened in the work environment or was otherwise work-related under OSHA’s definition.
2. Ask whether it involved a new case or a recurrence of an old one.
3. Check whether the employee got only first aid or received medical treatment beyond first aid, and consult OSHA’s guidance if the line is unclear.
4. Check for days away, restricted duty, or job transfer.
5. Check whether any special recording rules apply, such as sharps injuries or medical removal cases.
6. Document why you decided yes or no, even if you do not enter the case.

Treat every doctor visit as recordable, and you’ll over-log; treat every bandage as trivial, and you’ll miss cases. Neither extreme helps. Honestly, the middle ground is where the work lives. Keep OSHA’s definition of “first aid” nearby and use it every time, because people misclassify that point constantly.

One habit pays off: write a one-line decision note for every reported incident, even the non-recordables. “No log entry: first aid only, no lost time, no restriction.” That kind of note saves time later if someone asks why a case was not recorded.

Quick check: if you are unsure whether the case was first aid only, or whether work restriction counts, this is the part where you need the rule, not a guess.

Step by Step: Fill Out OSHA Form 300 Correctly

Once you have a recordable case, this is the part most people want handled for them. Fair enough. The form is straightforward after you understand what each line does. Rush it, though, and the mistakes pile up around dates, categories, and narrative detail.

Here’s the workflow I’d follow for each case:

1. Open a new case entry on Form 300 for the year of the incident.
2. Enter the employee’s name or an approved privacy case identifier if the injury is privacy-sensitive.
3. Record the job title, department, and a short description of what happened.
4. Classify the case in the correct outcome column: death, days away, restricted work/transfer, or other recordable case.
5. Count and enter the number of days away from work or days of restriction, if applicable.
6. Update the entry when the case changes, such as when restrictions are extended or the employee returns.
7. Cross-check the log against the supporting Form 301 or incident report.

The short description matters more than people think. “Back injury” is too thin. “Employee strained lower back lifting 40-pound box from pallet to cart” is much better. You do not need a novel. You do need enough detail so someone reading later can tell what happened.

A common trap is forgetting that case status can change. A simple medical visit can turn into days away later. If that happens, update the log. Another trap is placing the wrong case in the wrong column. Mark a restriction case as “other recordable case,” and your summary numbers stop making sense.

I also recommend checking each entry against a simple audit list:
– date of injury
– date of death, restriction, or day away, if any
– outcome column
– employee identifier or privacy case number
– description of event
– case count for that year

If you use an electronic form, watch for hidden spreadsheet problems like copied formulas, filtered rows, or overwritten dates. Those errors stay hidden until someone asks for the annual summary.

Quick check: if your current log has vague descriptions or uncounted restriction days, it needs cleanup before year-end.

Use the Annual Summary the Right Way

If the log is the running record, Form 300A is the snapshot. That matters because people often assume the summary is just a copy of the log. It is not. It is a year-end tally, and it has to match the underlying entries.

Here is the path I would use at year-end:

1. Close the calendar-year log only after confirming all recordable cases are entered.
2. Tally the totals for death, days away, restricted work, and other recordable cases.
3. Count total days away and total restricted days for the year.
4. Review the average number of employees and total hours worked, if your system tracks them for the summary.
5. Have a designated company official certify the summary.
6. Post the summary in the required workplace location for the required posting period, or follow the current electronic reporting rules if they apply to your establishment.

The annual summary is where bookkeeping mistakes come into view. If the totals on Form 300A do not match the log, find the mismatch before you certify or post it. I would never sign off on a summary I had not reconciled against the source cases.

For many employers, the hard part is not the arithmetic. It is making sure late cases, corrected diagnoses, or revised day counts get captured before the summary is frozen. If an employee’s status changed in December and you only notice in January, you may need to update the prior year’s record depending on the facts and OSHA’s timing rules. That is a good moment to read the instruction sheet, not improvise.

Quick check: if your year-end summary was built from memory instead of the log, rebuild it now.

Common Setup Mistakes and the Smarter Alternative

If you are putting the log together for the first time, this table will save you from the mistakes I see most often.

Situation	Best Path	Why Other Options Fail
Small workplace with only a few incidents	Use OSHA’s forms in a shared spreadsheet or binder with one owner	A scattered email chain loses dates and case notes
Multi-site employer	Keep one log per establishment, with a clear local owner	A single company-wide log blurs where cases happened
Privacy-sensitive cases	Use the privacy case rules and a case number instead of a name where allowed	Exposing names creates unnecessary confidentiality risk
Late-reported injury	Enter it when you learn it and correct the year-end summary if needed	Waiting until “next year” breaks the record for the year it belongs to
Mixed workers’ comp and OSHA tracking	Keep separate decisions for OSHA recordability and compensation	Treating the two systems as the same causes over- and under-reporting

The smarter alternative, in most ordinary workplaces, is not fancy software first. It is a clean process first. If the process works on paper, software can make it easier. If the process is fuzzy, software just gives you bad records faster.

One honest limitation: if you have multiple departments reporting injuries to different managers, a simple log can fail unless someone centralizes the decisions. In that case, I would rather see one trained recordkeeper than five people updating five versions.

Quick check: if different supervisors are making different recordability calls, your problem is process design, not form design.

Edge Cases That Break the Normal Advice

Some cases do not fit the clean, textbook path. That’s where people get into trouble.

1. Remote employees
   – Situation → An employee works from home and reports an injury.
   – What changes → Work-relatedness can be murky because the home environment is also the living environment.
   – What to do instead → Ask exactly what activity was being performed and whether the injury arose out of work tasks, not household life. Document the reasoning carefully.

2. Temporary workers
   – Situation → A temp worker is injured at your site.
   – What changes → The host employer and staffing agency may both have obligations.
   – What to do instead → Decide who controls the day-to-day supervision and coordinate recordkeeping responsibility in writing. Do not assume the agency handles everything.

3. Employee declines treatment
   – Situation → The employee says they’re fine and refuses care.
   – What changes → Refusal does not automatically make the case non-recordable if the underlying facts meet OSHA criteria.
   – What to do instead → Record the facts, not the attitude. If symptoms, diagnosis, or later treatment change the case status, update the log.

4. Late diagnosis
   – Situation → A minor incident later becomes a serious diagnosis.
   – What changes → A case that looked non-recordable can become recordable later.
   – What to do instead → Keep the original report, then amend the record if the diagnosis crosses the recordability line.

5. Mixed-duty or light-duty assignments
   – Situation → The employee returns on modified duty.
   – What changes → Restricted work days may need to be counted.
   – What to do instead → Track the actual restrictions, not just whether the person was “back at work.”

6. Psychological injury or illness
   – Situation → A mental health claim is reported after workplace stress or trauma.
   – What changes → These cases can require a careful look at OSHA’s special criteria.
   – What to do instead → Review the facts against OSHA’s guidance before deciding whether it belongs on the log.

If You Want a Digital System, How Should You Organize It?

When the log lives on a screen, the system should make recordkeeping easier, not harder. A secure shared drive, spreadsheet, or EHS platform can work if the file structure is simple and access is controlled.

Start with one year per folder. Then give each case its own file name that matches the log entry number. Keep the source documents together: incident report, medical note if available, supervisor statement, and the decision memo. That way, when someone asks why a case was or was not recorded, you are not hunting through email.

Then set permissions carefully. HR, safety, and managers may all need to view the log, but not everyone should be able to edit it. Once too many people can change the file, the audit trail gets weak. OSHA cares about the accuracy of the record, not how modern the software looks.

A digital setup also helps if you need to track corrections. Instead of rewriting old entries in place, keep a dated change log. That makes it easier to explain why a case moved from first aid only to days away, or why a late diagnosis changed the annual total.

If you are choosing between a spreadsheet and software, think about volume. A small site with a few cases a year may not need a full platform. A larger operation with multiple facilities usually benefits from software, but only if the workflow is actually enforced.

How Do You Keep the Log Accurate All Year?

Don’t wait until December to think about it. Build a monthly routine if you want the log to hold up in an audit. Review new incident reports, compare them with medical updates, and reconcile the log against any open cases.

A simple monthly check can catch the usual errors:
– missing case numbers
– wrong year
– wrong category
– incomplete day counts
– cases that never got closed out
– descriptions too vague to defend later

If you already have a safety committee, put the log on the agenda. If you do not, schedule a short internal review with the person who owns the log and one manager from operations. That is usually enough to catch errors early.

The best logs are boring. That is a compliment. When the record is neat, the decisions are traceable, and the yearly totals match, you spend less time explaining yourself and more time running the workplace.

When Should You Ask for Help?

If you are dealing with a fatality, a hospitalization, a tricky work-from-home case, or a case that might cross the line between first aid and medical treatment, stop and get help from someone who knows OSHA recordkeeping. The same goes for multi-state employers that may have layered reporting duties or EHS software setups that need validation.

A good outside review can save hours later. It can also keep you from baking a bad assumption into the log and then repeating it in the annual summary.

If you are unsure, the safest move is to check the OSHA instructions, document your reasoning, and have a qualified professional review the borderline cases before year-end.