OSHA Compliance
OSHA Pub 3148 Component 5: Recordkeeping & Evaluation
How OSHA expects healthcare facilities to evaluate and measure a workplace violence program — the recordkeeping and program-evaluation component of Publication 3148.
OSHA's recommended healthcare workplace violence program has five components, and the fifth — recordkeeping and program evaluation — is the one that proves the other four are alive. Recordkeeping captures what happened and what you did about it; program evaluation periodically reviews that record to judge whether the program is working. Together they convert a static plan into a defensible, improving program of record.
#Why the fifth component is the one surveyors trust
A management commitment, a worksite analysis, hazard controls, and training can all exist on paper and still be dead. The fifth component is what an inspector or surveyor uses to test whether the program is real: it asks for the record of incidents, corrections, training, and reviews, and it expects that record to show a loop that closes. OSHA Publication 3148 names recordkeeping and program evaluation as its final element precisely because it is the evidence that a good-faith effort is ongoing, not a one-time document. Skip it, and a worksite analysis becomes a snapshot that grows stale the day after it is signed.
#The two halves of the component
#Half one: recordkeeping
Recordkeeping is the program's memory. OSHA expects a healthcare facility to maintain, at minimum:
| Record | What it captures | Why OSHA wants it |
|---|---|---|
| Incident and near-miss reports | Every assault, threat, and close call | Establishes the hazard and tracks trends |
| OSHA 300/301 injury entries | Violence-related injuries with days away, restriction, or transfer | Federal recordkeeping obligation; see the 300 Log guide |
| Hazard assessments and corrective actions | Findings from the worksite analysis and their fixes | Demonstrates feasible abatement |
| Training rosters and competencies | Who was trained, on what, and when | Proves the workforce is prepared |
| Program evaluation minutes/reports | Periodic review of the whole program | Shows the loop closes |
The discipline that matters is linkage: an incident report should connect to a hazard assessment finding, which connects to a corrective action, which connects to a verified control. A pile of disconnected forms is recordkeeping; a traceable chain is evidence.
#Half two: program evaluation
Program evaluation is the periodic step back to ask: Is this working? OSHA Publication 3148 recommends evaluating the program at least annually, and after any serious incident or significant change. A credible evaluation reviews trends in your incident data, the status of corrective actions, training completion, and whether last year's controls actually reduced the hazards they targeted — then sets the next year's priorities. It is the mechanism by which leading and lagging indicators become decisions rather than a wall chart.
#What OSHA looks for in the records
An inspector reading your records is testing three things, in this order:
- Completeness — does the log reflect the violence everyone knows occurs on a high-acuity unit, or is it suspiciously thin? An underreported log that contradicts the unit's reputation is a red flag, not a clean record.
- Traceability — can each identified hazard be followed to a corrective action and a verification date? Findings without follow-through are the recognition-without-abatement trap.
- Currency — was the program evaluated recently, and did the evaluation change anything? An evaluation that reports "no changes needed" three years running reads as a rubber stamp.
The facility that passes this read is rarely the one with the thickest binder. It is the one whose records tell a coherent story: hazards found, controls applied, results measured, priorities reset.
#Recordkeeping is not the same as the 300 Log
A frequent confusion is treating the OSHA 300 Log as the program's recordkeeping. It is not. The 300 Log records recordable injuries — a narrow, federally defined subset that misses threats, near-misses, and many verbal assaults. A workplace violence program needs a separate, broader incident log that captures the events the 300 Log never will, then maps the qualifying ones onto the 300/301 forms. The two systems serve different purposes; the program log drives prevention, the 300 Log meets a recordkeeping standard. Conflating them produces a program that only "sees" the incidents serious enough to injure someone — the opposite of prevention.
#Make one evaluation satisfy three regimes
For a Texas facility, the annual program evaluation is not just OSHA-recommended housekeeping — it is a statutory obligation under Texas Health & Safety Code Chapter 331 (the SB 240 mandate, effective September 1, 2024), which requires an annual evaluation of the workplace violence prevention plan reported to the governing body. The Joint Commission likewise expects an annual worksite analysis and ongoing review of incident data (EC, HR, and LD chapters, effective January 1, 2022 for hospitals). These are not three separate evaluations. A single, well-structured annual review — built on one record set, reported to your board — answers the OSHA recommendation, the Chapter 331 mandate, and the Joint Commission expectation at once. Building three parallel processes is wasted effort; building one and documenting it three ways is survey-readiness.
#Turning the record into a board-ready evaluation
The output of the fifth component should be a concise, governing-body-ready report: incident trends with their year, the status of every open corrective action, training completion rates, the controls evaluated, and the priorities set for the coming year. That report is the artifact that satisfies the Chapter 331 annual obligation and demonstrates to any inspector that the program is a living program of record. The detail of structuring it lives in turning your annual plan evaluation into a board-ready report.
VIGILO builds the recordkeeping architecture and the annual evaluation cadence as a single deliverable through annual program reviews, so the same record set feeds your OSHA good-faith defense, your Chapter 331 governing-body report, and your Joint Commission survey evidence. If you want to know whether your current records would survive that read, a flat-fee survey-readiness audit scores your incident log, corrective-action tracking, and program evaluation against OSHA, Chapter 331, and the Joint Commission in one report.
This article provides general compliance information, not legal advice or a guarantee of any safety or survey outcome; consult qualified counsel for your facility. Primary sources: OSHA Publication 3148 (recordkeeping and program evaluation component); 29 CFR Part 1904 (OSHA recordkeeping); Texas HSC Chapter 331; The Joint Commission EC/HR/LD workplace violence requirements.