https://completemarkets.com/company/CompleteMarkets/Articles/content-package/IMMS-Library/TabCategory/article-post/1457/ACCESS-TO-EMPLOYEE-EXPOSURE-AND-MEDICAL-RECORDS/
... OSHA may obtain personal medical records promptly without the written consent of the subject employees, but will adhere to strict data controls to protect confidentiality. RECORDS AND RETENTION RATES-The rule covers records of employee exposure to toxic substances and harmful physical agents and employee personal medical records. Exposure records must be maintained for 30 years and medical records for the duration of employment, plus 30 years. First aid records and experimental toxicological research records are excluded from the 30-year retention requirements. If a company maintains a chemical inventory or set of material safety data sheets, it need not retain production records, shipping records, invoices, batch cards, or other similar documents. Biological monitoring results, except those pertaining to alcohol or drugs, are to be retained, but records created in anticipation of litigation (Workers' Compensation ... concerning the toxic substance is disclosed as required. they state that the specific chemical identity is being withheld as a trade secret. they make the chemical name available to health professionals, employees, and designated representatives under certain specified conditions. In a medical emergency, an employer must immediately disclose the specific chemical identity of a toxic substance to a treating physician or nurse when needed for emergency or first aid treatment. The employer may obtain a statement of need and a confidentiality agreement as soon as circumstances permit. When there is no emergency, requestors seeking trade secret identity must put their request in writing, describing the medical or health need for which this is requested and explain why other information (such as health risks of the chemical, proper protective measures, etc.) is insufficient. Requestors must ...