Back to Federal guidance

Employee identifiers in bloodborne exposure medical records

Summary A physician asked whether the bloodborne pathogens rule could require Social Security numbers in employee medical records. OSHA said its then-current recordkeeping provision expressly required each covered employee's name and Social Security number. It also said state plan requirements could be more stringent than federal OSHA's.
Document
Federal opinion letter
Agency
Occupational Safety and Health Administration (OSHA)
Document number
1992-08-07
Date issued
August 7, 1992
Status
Active
Status last verified October 9, 2026

Apply this to your situation

This page explains the general guidance. Ask about your specific situation and see what current federal labor law says, with citations.

About this page: The full text below is the official document from Occupational Safety and Health Administration (OSHA). Ezel adds the plain-English summary and tracks the document's status. The official source linked on this page is authoritative for any reliance.

August 7, 1992

Donald L. Johnson, M.D., P.A.v
Ophthalmology
[Recipient address omitted]
Dear Dr. Johnson:

This is in response to your letter of April 30, requesting clarification concerning the Occupational Safety and Health Administration (OSHA) regulation, 29 CFR 1910.1030, "Occupational Exposure to Bloodborne Pathogens." Specifically you were concerned about the recording of employees' social security numbers on their medical records. We apologize for the delay in this response.

The Bloodborne Pathogens Standard addresses recordkeeping and medical record access in section (h) of the regulation. Section (h)(1)(i) requires that the employer establish and maintain an accurate record for each employee with occupational exposure, in accordance with 29 CFR 1910.1020, "Access to Employee Exposure and Medical Records." Further, section (h)(2)(ii)(A) states that this record shall include the name and social security number of the employee. These are mandatory requirements.

In your letter, you referred to a Supreme Court decision addressing the right of an individual to prevent disclosure of social security numbers. After thorough research, we were unable to find such a 1959 United States Supreme Court case involving a requirement imposed on applicants for airline pilot licenses to disclose their social security numbers. In any event, we have received a legal opinion that OSHA can enforce the disclosure provisions of the standard because no action is taken by OSHA against the individuals whose social security numbers are on the records.

As you may know, the North Carolina Department of Labor and Industry operates its own occupational safety and health program under a plan approved and monitored by the U.S. Department of Labor, pursuant to section 18 of the Occupational Safety and Health Act of 1970. State plan requirements may be more stringent than federal OSHA regulations. Should you wish to contact them, they may be reached at the following address:

Commissioner North Carolina
Department of Labor
4 West Edenton Street
Raleigh, North Carolina 27603
Telephone: (919) 733-7166

We hope this information is responsive to your concerns. Thank you for your interest in worker safety and health.

Sincerely,
Patricia Clark, Director
Directorate of Compliance Programs

What does federal law require in your situation?

Ezel checks current federal labor law against your facts and answers with citations.

Opens in Ezel Pro.

  • Checks the law as it stands today, not only this page
  • Cites every source it relies on, so you can verify it
  • Chat, drafting and research in one workspace