Protecting Confidentiality in Accident and Incident Reviews

When a workplace accident, incident, or near miss occurs, employees and safety committee members naturally want to understand what happened and how to prevent it from happening again. These discussions are essential to improving workplace safety. At the same time, they must be handled with care to ensure that the personal and medical information of employees injured during the accident or incident remains confidential.

In many cases, incidents involve sensitive details — such as injuries, medical treatment, or mental health concerns. Laws like HIPAA protect this type of information, while workers’ compensation regulations allow limited sharing when necessary. The key principle is simple: only the minimum amount of information needed to understand the safety issue should be shared. In Oregon, additional requirements may apply, and when multiple rules exist, the most protective standard should always be followed.

For safety committees, this means that incident information should be presented in a way that supports learning without identifying the people involved. Reports should focus on what happened, where it happened, and what factors contributed to the event — such as equipment, processes, or environmental conditions. Personal details, including names, medical diagnoses, and treatment information, are not needed for effective safety review and should not be included. Even small details can unintentionally reveal someone’s identity, especially in smaller departments or communities, so care must be taken to keep information general.

Some situations require even greater discretion. Incidents involving mental health, stress, trauma, or workplace violence are particularly sensitive and should be handled with a high level of confidentiality. The same is true when another employee may be involved in the incident, or when there is an active investigation or legal involvement. In these cases, very limited information may be shared, and only when it is clearly necessary to address a safety concern. Decisions about what can be released are often made with guidance from management, human resources, or legal counsel.

Employees and safety committee members each have a role to play in protecting confidentiality. Employees should feel confident reporting incidents and near misses, knowing their personal information will be handled respectfully. Safety committee members, in turn, are responsible for treating all information they receive as confidential. Discussions should stay within the committee, and questions should focus on identifying hazards and improving systems — not on individuals. The goal is always prevention, not blame.

Organizations also support this process by ensuring that reports are properly redacted before they are shared, providing training on confidentiality expectations, and maintaining clear policies about how information is handled. These steps help create consistency and reduce the risk of inappropriate disclosure.

There may be times when it is unclear whether certain information can be shared. In those situations, it is always appropriate to pause and ask for guidance. Supervisors, human resources, or legal counsel can help determine the right approach. A good rule of thumb is to err on the side of caution — if information is not necessary to understand the safety issue, it likely should not be shared.

Protecting confidentiality is not just about complying with laws; it is fundamental to building trust in the workplace. When employees know their privacy will be respected, they are more likely to report incidents, speak up about hazards, and participate in safety efforts. That openness strengthens the organization’s ability to identify risks and prevent future harm.

By focusing on hazards, trends, and solutions — while carefully safeguarding personal information — employees and safety committees can work together to make the workplace safer for everyone.

For additional information, contact Oregon OSHA Technical Support:

Location: Salem central office

Phone: 503-378-3272

Toll free: 800-922-2689 (inside Oregon only)

Email: tech.web@dcbs.oregon.gov

Website: https://osha.oregon.gov/Pages/Contact-Technical.aspx