CSP-11 CSP-11 D2.10 · Domain 2 · Program Management · 25%
Retention / Privacy
During a clinic-system migration, HR schedules all 2020 files for deletion and asks the HSE coordinator to post a named injury log. The files include noise-monitoring results and medical-surveillance records for an employee who left in 2025. Which records must stay, and which OSHA form belongs on the noticeboard?
Updated . Independent CSP-11 practice. Not BCSP-endorsed. No pass guarantee.
Decision rule
Classify the record before counting. Part 1904 injury records, 1910.1020 covered medical records, and covered exposure records have different retention/access lanes.
Medical: generally employment + 30 years. Exposure: generally at least 30 years. Part 1904: separate five-year recordkeeping lane. Check stated exceptions and privacy/access rules.
In 20 seconds
- Classify the record before counting.
- Part 1904 injury records, 1910.1020 covered medical records, and covered exposure records have different retention/access lanes.
- Keep records as long as legal and system requirements demand — then dispose securely.
- Privacy and access control apply to medical and personal data in OH&S files.
How to apply Retention / Privacy
THEORY: Under 1910.1020(d), covered medical records generally use employment + 30 years while covered exposure records generally use at least 30 years, each with stated exceptions. Part 1904 injury-log retention and privacy are separate. CALC: If employment ends 2025-12-31, the simplified medical baseline reaches 2055-12-31; a 2020 exposure record generally reaches the corresponding date in 2050. Do not attach the separation date to the exposure clock. FIELD: Injury log, clinic notes and IH sampling left on a shared drive. Classify each, restrict access, preserve required records and keep the Part 1904 privacy lane separate. ASSESS: ‘Employment + 30 years for everything’ is the trap.
Worked case
Wrong first move: post a diagnosis and purge 2020 IH results after a generic five-year schedule. Correct move: separate the Part 1904 log, covered medical record and covered exposure record; apply each clock and exception check, then control access and disposition.
Why the rule holds
Access requests use 1910.1020(e); if timely access cannot reasonably be provided within 15 working days, give the required delay notice. Designated-representative and successor-transfer rules depend on the access/record lane. Related: 31, 85, 96.
Same rule, different setting
The land-rig office wants to shred clinic files at five years “because that’s the OSHA log rule,” and to radio diagnoses to the whole pad. You are the CSP. The question is which clock and which privacy rule actually apply.
The GC office wants to shred clinic files at five years “because that’s the OSHA log rule,” and to post the 300 with diagnoses in the dry shack. You are the CSP. The question is which clock and which privacy rule actually apply.
Picture / model
Build a record schedule from the record definition, applicable standard and triggering event. Distinguish OSHA injury-and-illness records from covered medical and exposure records; calculate retention end dates without mixing their clocks. Separate summary posting, employee access and privacy-case handling, then preserve retrievability, confidentiality and legal holds during migration, business transfer and authorized disposal.
Exam traps
Original SafePath contrasts for Retention / Privacy. These are study traps, not recalled BCSP items.
| Trap | Correct read |
|---|---|
| 8 hours | Fatality notification to OSHA |
| 24 hours | Amputation, in-patient hospitalization, loss of an eye |
| 7 calendar days | Record on the 300/301 |
| Employment + 30 years | 1910.1020 covered medical-record baseline — not the exposure-record or 300-log baseline |
| At least 30 years | 1910.1020 covered exposure-record baseline, subject to stated exceptions |
Field move
A closed office does not move the severe-injury clock to Monday.
Scenarios
Scenario 1 · Applied Scenario · CSP-11 D2.10
Amputation at 21:00 Friday. Office closed until Monday. OSHA notification due?
Best action: Within 24 hours of the amputation; weekends do not pause 1904.
Why: Evaluate the best response. The amputation was at 21:00 Friday and the office is closed until Monday. The best notice is within 24 hours. Weekends do not pause it. Monday morning is later than 24 hours from Friday night. Eight hours is the fatality clock, not the amputation clock. Seven calendar da…
Scenario 2 · Applied Scenario · CSP-11 D2.10
You are the CSP reviewing a live decision at an offshore fabrication night shift. Operations proposes a convenience path. The employer learns at 04:00 of a work-related fatality. Which OSHA notification deadline applies?
Best action: 8 hours from the fatality.
Why: Evaluate the best response. The employer learns at 04:00 of a work-related fatality. The best deadline is 8 hours from the fatality. Twenty-four hours is the severe-injury clock, not the fatality clock. Seven calendar days records the case. It does not notify the death. Employment plus 30 years is…
Scenario 3 · Applied Scenario · CSP-11 D2.10
A recordable sprain is known Monday. The 300 is still blank the following Wednesday (9 days) because “privacy.” Problem?
Best action: Recording is due in 7 calendar days; privacy-concern rules change name/description handling, not the clock.
Why: Evaluate the best response. The sprain was known Monday and the log is still blank the following Wednesday, nine days later, because of privacy. The best reading is that recording is due in 7 calendar days. Privacy-concern rules change how the name and description are handled. They do not move the…
If the stem says this
| Stem signal | Best direction |
|---|---|
| medical details sit in an open shared drive | restrict access and separate sensitive records |
| retention period is unknown | set a schedule from legal/system requirements |
| a litigation hold is active | suspend destruction |
| two answers work | higher hierarchy / system / design |
| boxes have no inventory | inventory and assign retention owners |
Check before you leave
- ✓ Keep records as long as legal and system requirements demand — then dispose securely.
- ✓ Privacy and access control apply to medical and personal data in OH&S files.
- ✓ Retention schedules need owners; ad-hoc boxes are not a program.
- ✓ Litigation holds override routine destruction.
- ✓ Do not store sensitive medical details in general incident folders without controls.
- ✓ Audit trails matter for critical safety records.
Blueprint mapping
Retention / Privacy is the SafePath study class for CSP-11 D2.10 inside CSP-11 Domain 2, Program Management (25%). A high-weight management domain focused on measuring performance, investigating incidents, managing change, building systems, leading people, controlling records and resources, and interpreting data.
SafePath uses the publicly posted CSP-11 outline as a study map. It does not reproduce official exam content, and it is not affiliated with or endorsed by BCSP or Pearson VUE.
Practice / flashcards / formulas
More classes in Program Management
Nearby lessons mapped to the same CSP-11 domain.
CSP-11 D2.10
Other classes on this task
Guides that use Retention / Privacy
- Oil and gas safety study guideProcess safety, change, and investigations
- CSP application and exam guideEligibility, scheduling, and exam method
- CSP-11 exam prep guideDomain weights, sample items, and a study sequence
- CSP-11 blueprint and weightsSeven published domains and the class map
- Seven-domain study directoryScope, tasks, and links into each lesson
Retention / Privacy study questions
- What decision does the Retention / Privacy class train?
- Classify the record before counting. Part 1904 injury records, 1910.1020 covered medical records, and covered exposure records have different retention/access lanes. This is independent SafePath CSP practice for CSP-11 D2.10. It is not an official BCSP item and it is not a pass guarantee.
- What exam trap shows up in Retention / Privacy?
- A common miss treats this as sufficient: 8 hours The stronger read is: Fatality notification to OSHA
- How does Retention / Privacy map to the CSP-11 blueprint?
- SafePath maps this class to CSP-11 D2.10 in Domain 2, Program Management (25% of the published blueprint). Use the public outline for study planning. SafePath is not affiliated with or endorsed by BCSP.
Verify
Verify: Confirm current certification requirements with BCSP and technical requirements with the cited authoritative standard.