How Long Must Safety Data Sheets and Hazmat Records Be Kept?

A Safety Data Sheet must be kept and readily accessible for as long as the hazardous chemical it covers is present in your workplace, and after that a record identifying the chemical must be preserved for at least 30 years if any employee was exposed to it. That two-layer structure is the heart of safety data sheet retention requirements, and it is where most employers get tripped up: the Hazard Communication Standard tells you to keep the SDS while the chemical is on site, but a separate OSHA rule quietly extends the obligation for decades after the chemical is gone.

While the Chemical Is in Your Workplace

OSHA’s Hazard Communication Standard requires every employer to maintain an SDS for each hazardous chemical present in the workplace and to keep it readily accessible during each work shift.1eCFR. 29 CFR 1910.1200 – Hazard Communication Employees must be able to pull the sheet up without leaving their work area.

The Hazard Communication Standard itself does not set a retention period after you stop using a chemical. Once that chemical leaves your facility, this particular regulation no longer requires you to keep its SDS on file. That is not the end of the story, though, because a second OSHA standard picks up where this one stops.

The 30-Year Rule After Exposure

OSHA’s Access to Employee Exposure and Medical Records standard is what turns a short-term document into a long-term one. It requires you to preserve records tied to employee exposure for decades, and SDSs indicating a health hazard fall inside that net.

There is a narrow shortcut for SDSs. You do not have to keep the actual data sheet for 30 years as long as you retain a record of the chemical’s identity (if known), where it was used, and when it was used, for at least 30 years.2eCFR. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records – Section: Preservation of Records In practice, keeping the full SDS is easier than reconstructing partial records decades later.

Employees and their designated representatives have the right to see and copy their own exposure and medical records. Access must be provided within 15 working days of a request, and copies come at no cost to the employee.4eCFR. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records – Section: Access to Records

Related Hazmat Records You Probably Also Keep

If you handle hazardous chemicals, you are almost certainly generating other records that carry their own retention clocks. The periods vary, and they do not track the SDS timeline.

Hazardous Waste Manifests

When hazardous waste leaves your facility on a manifest, EPA rules require you to keep a signed copy for at least three years from the date the waste was accepted by the initial transporter.5eCFR. 40 CFR Part 262 Subpart D – Recordkeeping and Reporting Applicable to Small and Large Quantity Generators If a signed copy comes back from the designated disposal facility, you replace the original with that version and the three-year clock restarts. Three years is the floor. Many environmental managers hold manifests longer because contamination can surface well after the fact.

DOT Shipping Papers

Anyone preparing a shipping paper for a hazardous material shipment must retain a copy. The period depends on what was shipped:

Copies must be accessible at or through your principal place of business and produced to federal, state, or local officials on request.

Hazmat Employee Training Records

Employers with hazmat employees must create a training record covering current training and the preceding three years, then keep it for as long as the person works as a hazmat employee, plus 90 days after they leave that role or the company.7eCFR. 49 CFR 172.704 – Training Requirements Each record must include the employee’s name, the most recent training completion date, the training materials (or a description), the trainer’s name and address, and certification that the employee was trained and tested.

OSHA Injury and Illness Logs

OSHA Form 300 logs, the annual Form 300A summary, and Form 301 incident reports must all be kept for five years after the end of the calendar year they cover.8Occupational Safety and Health Administration. 29 CFR 1904.33 – Retention and Updating The 300 Log is a living document during those five years: you must update it for newly discovered recordable injuries or illnesses and for reclassifications. The annual summary and individual incident reports do not require updating.

Quick-Reference Retention Periods

  • Safety Data Sheets for in-use chemicals: as long as the chemical is present in the workplace
  • SDS or chemical-identity records for exposure purposes: 30 years
  • Employee exposure records: 30 years
  • Employee medical records: duration of employment plus 30 years
  • Analyses using exposure or medical records: 30 years
  • EPA hazardous waste manifests: 3 years from acceptance by transporter
  • DOT shipping papers for hazardous waste: 3 years
  • DOT shipping papers for other hazmat: 2 years
  • DOT hazmat training records: duration of employment plus 90 days
  • OSHA 300 Log, 300A Summary, 301 Reports: 5 years after end of calendar year

Electronic Storage and Access

Both the exposure and medical records standard and the Hazard Communication Standard allow electronic storage. Under 1910.1020, any format is acceptable as long as the information is preserved and retrievable, with the sole exception of chest X-rays, which must be kept in their original form.2eCFR. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records – Section: Preservation of Records For SDSs, electronic systems are permitted as long as they create no barriers to immediate employee access in each workplace.1eCFR. 29 CFR 1910.1200 – Hazard Communication

“No barriers” means employees on every shift, including nights and weekends, can retrieve an SDS without tracking down a supervisor or calling IT. If you rely on a computer system, you need a backup for outages. OSHA has said binders or printed copies can serve that role.9Occupational Safety and Health Administration. Hazard Communication Standard: Safety Data Sheets Whatever format you choose, index by chemical name or work area rather than by supplier or purchase order. During an emergency or an inspection, no one has time to flip through a filing cabinet organized by invoice number.

Selling or Closing the Business

Retention obligations do not end when an employer sells or shuts down. If a successor employer exists, all records covered by the exposure and medical records standard must be transferred to that successor, who takes on the remaining retention obligation.10Occupational Safety and Health Administration. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records – Section: Transfer of Records If you are buying a company that handled hazardous materials, those 30-year records come with the deal.

When no successor exists, the closing employer must notify affected employees of their access rights at least three months before the business stops operating. The employer must also either transfer the records to the Director of NIOSH or notify NIOSH in writing at least three months before disposing of any records that would otherwise need to be preserved for 30 years.11Occupational Safety and Health Administration. Retention of Medical Records for Companies Ceasing to Do Business

What It Costs to Get This Wrong

OSHA can cite a record-keeping failure as a serious, other-than-serious, or willful violation. As of the January 2025 inflation adjustment, a serious violation carries a maximum penalty of $16,550, and a willful or repeated violation can reach $165,514 per violation.12Occupational Safety and Health Administration. OSHA Penalties A failure-to-abate penalty can reach $16,550 per day. Missing SDSs are among the most commonly cited Hazard Communication violations, and inspectors check for them routinely.

On the EPA side, RCRA penalties run higher. A compliance order for a Subtitle C violation, which includes manifest and record-keeping failures, can result in penalties up to $124,426 per day of noncompliance. Civil penalties for individual violations can reach $93,058, with each day of continued noncompliance counted as a separate offense.13eCFR. 40 CFR 19.4 – Statutory Civil Monetary Penalties, as Adjusted for Inflation Even when the assessed penalty falls below the statutory ceiling, the per-day structure means a record-keeping gap that goes unnoticed for months can produce a bill that threatens the business.