OSHA recordkeeping citations are not dramatic. There is no collapsed trench or unguarded machine. An inspector simply asks to see your OSHA 300 log, flips through a few pages, and finds that a case was recorded late, a classification is wrong, or the 300A was never posted.
What most employers don't know is that the inspector is working from a script. In January 2025, OSHA replaced its recordkeeping enforcement directive for the first time in two decades: CPL 02-00-172, Part 1904 Recordkeeping Policies and Procedures (effective January 13, 2025), superseded the 2004-era CPL 02-00-135. The directive tells compliance officers, defect by defect, which subsection of Part 1904 to cite, when to cite it, and when to let it go. That means the citation record is not a mystery — you can read the playbook and see exactly which mistakes turn into citations.
That is what this post does. First the ground rules the directive sets — how recordkeeping violations are classified, how the six-month citation clock actually runs, and the threshold that separates a citable defect from a coaching moment. Then the five mistakes, each mapped to the specific provision OSHA's own directive tells inspectors to cite.
The Ground Rules: How OSHA Cites Recordkeeping Violations
Every Part 1904 violation is "other-than-serious" — but that is less comforting than it sounds. The directive is explicit: "Violations of Part 1904 are generally cited as Other-Than-Serious citations… Violations of Part 1904 may not be cited as serious citations." Other-than-serious citations carry penalties of up to $16,550 per violation. The per-violation arithmetic is what stings: a single missing entry is one violation, five missing entries are five violations. In December 2022, OSHA cited Amazon for 14 recordkeeping violations across six warehouses — $29,008 in proposed penalties — in inspections opened on referral, and the same per-violation arithmetic reaches a host employer that fails to record its temporary workers' cases. Recordkeeping errors are often the thread that unravels a larger enforcement action.
The six-month clock starts later than you'd think. Section 9(c) of the OSH Act bars citations issued more than six months after "the occurrence of any violation." For a failure to record, the directive says the violation occurs when the employer fails to enter the case within seven calendar days of learning it was recordable — not on the injury date. The directive's own example: an injury on April 1 that is recordable that day must be entered by April 8, and OSHA can cite the failure until October 8. If the case only becomes recordable on April 15 (say, first aid turns into medical treatment), the entry is due April 22 and the citation window runs to October 22. And for retention failures the exposure is far longer: once a record exists, losing or destroying it during the five-year retention period is a violation, so OSHA can cite "for failure to save the record for five calendar years plus six months."
Not every defect gets cited. For misclassifications and incomplete entries, the directive tells inspectors to cite only where the defects "materially impair the understandability of the nature of the hazards, injuries and/or illnesses at the workplace." A trivial error — the directive's example is misclassifying an injury as an illness — should normally draw instruction, not a citation. Over-recording gets the same treatment: if you logged cases you didn't need to, the inspector is told to have you line them out, not cite you. The citation policy targets records that hide what happened, not records that are imperfect.
Where Inspectors Look
The directive tells compliance officers to review your records at the start of an inspection, cross-check them against employee interviews and medical treatment evidence — including treatment received off-site — and to document any policy that discourages recording, such as an incentive program tied to the number of injuries on the log. A clean-looking log that interviews contradict is worse than an honest log with cases on it.
With the ground rules set, here are the five mistakes — and the exact provision each one gets cited under.
Mistake 1: Cases Missing From the Log (or No Log at All) — Cited Under 1904.4(a)
The most fundamental failure has the most fundamental citation. Where an employer failed to keep the required records at all and the inspector determines recordable injuries or illnesses occurred, the directive calls for a citation of section 1904.4(a) — the basic duty to record. The same provision covers the subtler version: records exist, but a specific recordable case never made it onto the OSHA 300 log.
Two nuances in the citation policy are worth knowing. First, if no records were kept but there were also no recordable cases, the directive says a citation "should normally not be considered" — the violation needs something that should have been recorded. (If you're unsure whether you're required to keep records at all, check the small-employer and industry exemptions first.) Second, OSHA carries the burden of proving each unrecorded case was work-related and met a recording criterion. That is why inspectors reconstruct cases from workers' compensation filings, clinic invoices, and employee interviews — they are building the proof the citation needs.
The practical failure mode here is rarely defiance. It is a recordability call made wrong in good faith: the case was written off as first aid when it was actually medical treatment, or dismissed as not work-related without walking the criteria.
How to Avoid It
Make the recordability determination from the criteria, not from memory, and document the reasoning for every "not recordable" call. The free recordability checker walks the 1904.5 and 1904.7 questions in order so the determination is reproducible. A documented no is defensible; an undocumented no looks like an unrecorded case.
Mistake 2: Recording Cases Late — Cited Under 1904.29(b)(3)
Under 29 CFR 1904.29(b)(3), each recordable case must be entered on the 300 log and 301 incident report within seven calendar days of learning that a recordable case occurred. Not seven business days — seven calendar days. The directive makes late entry its own citation: if the employer recorded the case but the inspector can establish "through employee interviews, records review, or other means" that the entry came after the seven-day window, section 1904.29(b)(3) is the cite.
This is among the easiest violations to prove because the evidence is usually the employer's own paperwork: the incident report is dated the day of injury, the workers' comp claim went in that week, and the log entry appears in a batch with ten others dated December 31. Employers who update the log monthly, quarterly, or — worst case — in a scramble before the February 300A deadline are creating a dated trail of per-case violations.
There is a related citation for using the wrong forms entirely: if records are kept but not on the OSHA 300, 300A, and 301 forms or a true equivalent (a form with comparable fields), the directive points inspectors to section 1904.29(a). A spreadsheet can be a lawful equivalent form — but only if it actually captures the same information.
How to Avoid It
Build a same-day notification habit: when a supervisor learns of an injury, it reaches whoever maintains the log that day, and the entry happens inside the seven-day window even if details are still incomplete. You can always update an entry later — the initial entry is what must be timely.
Mistake 3: Misclassified or Incomplete Cases — Cited Under 1904.7(b)(3)/(b)(4) and 1904.29(b)(1)/(b)(2)
Every recordable case gets classified into exactly one of four outcome categories — death, days away from work, job transfer or restriction, or other recordable cases — reflecting the most serious outcome of the case. This is where the directive gets granular about which provision covers which defect: misclassifying the case on the 300 log (checking "other recordable" when the employee was actually on restricted duty, or failing to enter the day counts) is cited under section 1904.7(b)(3) or (b)(4); other deficiencies on the 300 log or 300A are cited under 1904.29(b)(1); deficiencies on the 301 incident report under 1904.29(b)(2); and failing to mark a privacy concern case where required is its own citation under 1904.29(b)(6).
Remember the filter from the ground rules: these citations issue when the defects "materially impair the understandability" of the workplace's hazards and injuries. A misclassification that erases days away from work does exactly that — it also silently corrupts your DART rate, which inspectors recalculate from the log. So does a case entered with no day counts at all. The day-counting rules — start the day after the injury, count calendar days including weekends, cap at 180 — are where accurate classifications most often go wrong in practice.
The root cause is usually abandonment, not ignorance: the case was classified correctly on day one and never revisited. The employee got stitches and was logged "other recordable"; two days later the doctor imposed a week of light duty; the log never heard about it.
How to Avoid It
A log entry is not final until the employee is back to full, unrestricted duty. Follow every open case to its conclusion and update the classification and day counts as the outcome evolves — OSHA's instruction is to line out the original entry and check the correct column. If the outcome changes after the year closes, the update duty follows the log into retention.
Mistake 4: 300A Failures — Five Separate Citations Under 1904.32
The annual summary looks like one obligation, but the directive treats it as a bundle of independently citable duties. Failing to create the summary is cited under 1904.32(a)(2). Failing to have it certified by a company executive — an owner, a corporate officer, or the highest-ranking official at the establishment, not the safety manager — is 1904.32(a)(3). Failing to post it by February 1 is 1904.32(a)(4). Taking it down early — it must stay up through April 30 — is 1904.32(b)(6). And if you use an equivalent form that omits the employee-access and penalty statements printed on the official 300A, that is 1904.32(b)(2)(iii). One neglected form, five distinct ways to be cited.
The directive also removes the most common excuse in advance: "Citations under section 1904.32 should normally be considered even if no injuries or illnesses occurred." A zero-case year still requires a completed, certified, posted 300A with zeros in every field.
Multi-establishment employers multiply the exposure: each physical location needs its own 300A posted on-site. A single summary at headquarters does not cover the branch locations — it produces a citable gap at every location without one.
How to Avoid It
Set a calendar reminder for January 15 to prepare the 300A, another for February 1 to verify it is physically posted at every establishment, and a third for April 30 before anyone takes it down. Verify the signer meets the company-executive definition — certification by the wrong title is a separate citable defect from not posting at all.
Mistake 5: Skipping the March 2 Electronic Submission — Cited Under 1904.41
This is the newest entry in the citation record, and the one with the most automated enforcement behind it. Covered establishments must submit their injury data through OSHA's Injury Tracking Application by March 2 each year. The directive provides that failure to submit is cited — other-than-serious, like everything else in Part 1904 — under section 1904.41(a)(1)(i), (a)(1)(ii), or (a)(2), depending on which submission duty applies.
What makes this mistake different is that OSHA does not need an inspection to detect it. Under the ITA Non-Responder Enforcement Program (announced by memorandum in April 2024), OSHA's Office of Statistical Analysis runs weekly reports matching open inspections against its list of establishments that appear to have missed the submission deadline. If your establishment is flagged and an inspector is already in your workplace for any reason, the inspection now includes your submission failure — the citation window runs six months from the deadline, to September 2. You are not hoping OSHA doesn't notice; OSHA has already noticed, by database query.
Whether you must submit — and which forms — depends on establishment size and industry: 300A data for establishments with 250+ employees and for those with 20–249 employees in designated higher-hazard industries, plus 300/301 case detail for establishments with 100+ employees in a second industry list. The ITA submission walkthrough covers the mechanics, and the free ITA checker determines which requirement applies to your establishment.
How to Avoid It
Treat March 2 like a tax deadline: it arrives every year, it applies establishment by establishment, and missing it creates a violation visible to OSHA from Washington without anyone visiting your site. If you discover a missed submission mid-year, submit late — enforcement discretion favors employers who corrected the failure before the inspector arrived.
When Recordkeeping Gets Expensive: Repeat, Willful, and Egregious Cases
Everything above is an other-than-serious citation with a $16,550 ceiling. The directive's final section explains how the ceiling moves.
Repeat. For repeated recordkeeping violations, the penalty from the current inspection "should normally be multiplied by 2 for the first repeated violation and multiplied by 5 for the second" — and where the Area Director decides deterrence requires it, by 10. Repeat recordkeeping penalties are normally reduced only for employer size; the other reductions fall away.
Willful. A willful recordkeeping violation — intentional disregard of the requirements or plain indifference to them — carries a maximum of $165,514 per violation, a tenfold jump. This is where deliberately kept-thin logs end up: a documented decision not to record, or a pattern the inspector can frame as indifference, converts a paperwork citation into six figures.
Egregious. In the worst cases, OSHA's violation-by-violation policy applies — each unrecorded case, each year, cited and penalized as its own instance rather than grouped. The historic multi-million-dollar recordkeeping settlements of enforcement lore came from exactly this policy.
Two adjacent citations round out the exposure. Failing to produce your records within four business hours of an authorized government representative's request is cited under 1904.40(a) — the inspection-day version of a lost binder. And failing to report a fatality within 8 hours or an in-patient hospitalization, amputation, or eye loss within 24 hours is cited under the applicable provision of 1904.39 — the severe-injury reporting rules run on much faster clocks than the log itself. Finally, the directive reminds inspectors that retaliating against an employee for reporting an injury — including through incentive programs or blanket post-incident drug testing that discourage reporting — is citable under 1904.35(b)(1)(iv), even though the log entries themselves are perfect.
A Note on Penalty Reductions for Small Employers
In July 2025, OSHA expanded the penalty reductions available to small businesses. The size-based reduction runs on a four-tier table: employers with 25 or fewer employees — previously the threshold was 10 — now qualify for a 70 percent reduction, 26 to 100 workers gets 30 percent, 101 to 250 gets 10 percent, and above 250 there is no size reduction at all.
Three more reductions stack on top of the size tier, and it is worth keeping them straight because two of them are 15 percent. Quick Fix gives 15 percent for correcting a hazard immediately during the inspection. Good faith gives 15 percent for a documented and effective safety and health management system with only incidental deficiencies — or 25 percent for a written system carrying the core elements OSHA specifies. History gives 20 percent for a clean inspection record over the past five years, or for never having been inspected.
These reductions are meaningful, but none of them is automatic and none survives a bad record. Quick Fix is off the table entirely for high-gravity serious, willful, repeated, and failure-to-abate violations. The history reduction inverts into a penalty increase if you have serious high-gravity citations that became final orders in the past five years. And if OSHA finds numerous recordkeeping violations alongside a high injury rate, the good-faith reduction is what goes first — an ineffective safety and health management system is precisely what that reduction is measuring.
The Pattern Behind All Five
Read the citation policy end to end and a pattern emerges: OSHA cites process failures, not honest imperfection. The materially-impair threshold, the no-citation instruction for over-recording, the burden of proof on unrecorded cases — the directive consistently aims at records that conceal, delay, or omit, and consistently declines to punish records that merely contain a fixable mistake. Every one of the five mistakes above is a process gap: no same-day notification path, no follow-through on open cases, no calendar for the February and March deadlines, no owner for the electronic submission.
That is also why the fix is structural, not heroic. LogStead closes the process gaps directly: incidents are logged once and flow to the 300 log, 301 report, and 300A automatically, the recordability wizard makes the 1904.5/1904.7 determination reproducible and documented, classification changes update day counts and rates in place, and deadline reminders cover the February 1 posting and March 2 ITA submission — so the record OSHA's directive tells an inspector to scrutinize is the record you already keep.