What medical surveillance really requires
Why protocols, exposure groups, follow-up and audit trails matter far beyond the exam itself.
Medical surveillance is often described as "giving exams." That framing is exactly why programs fall behind. A surveillance program is not a series of appointments; it is a standing commitment to watch a defined population for the early effects of a defined hazard — on a schedule, with follow-through, and with records that can survive an audit.
The exam is the visible part. The program is everything around it: who is in scope, what protocol applies, when the next cycle is due, and what happens when a result comes back abnormal.
It starts with the exposure group, not the person
Surveillance obligations attach to exposure, not headcount. Before scheduling anyone, you need defensible groups: who is exposed to noise above the action level, who wears a respirator, who works with hazardous drugs or bloodborne pathogens. Get the grouping wrong and you will either over-test people who don't need it or — far worse — miss people who do.
Those groupings are not static. People change jobs, new lines open, exposures get re-assessed. A program that can't re-draw its cohorts quickly will drift out of compliance quietly.
Each hazard carries its own protocol
There is no generic surveillance exam. The components, frequency and follow-up are dictated by the specific standard. A few examples that drive most programs:
- Occupational noise: audiometric testing and follow-up under 29 CFR 1910.95.
- Respirator users: medical evaluation before fit-testing under 29 CFR 1910.134.
- Bloodborne-pathogen exposure: post-exposure evaluation and follow-up under 29 CFR 1910.1030.
- All of the above: durable medical and exposure records under 29 CFR 1910.1020.
Follow-up is the part that gets missed
An abnormal audiogram that triggers no retest. A respirator evaluation that flags a condition and goes nowhere. These are the failures that turn a paperwork problem into a worker-harm problem. A real program closes the loop: every abnormal result has an owner, a next action and a deadline, and none of it depends on someone remembering.
Records are the program's memory
Under 29 CFR 1910.1020, employee medical and exposure records generally must be preserved for the duration of employment plus thirty years, and made available on request. That is a long memory to keep in a spreadsheet. The programs that hold up are the ones where the schedule, the results, the follow-up and the retention all live in one system that can answer "show me everyone due this quarter" and "show me this person's full history" without a manual hunt.
Frequently asked questions
What is the difference between a physical and medical surveillance?
A physical is a point-in-time assessment. Medical surveillance is an ongoing, hazard-specific program that monitors a defined exposure group on a recurring schedule, with required follow-up and long-term recordkeeping under standards such as 29 CFR 1910.1020.
How long must medical surveillance records be kept?
Under 29 CFR 1910.1020, employee medical and exposure records generally must be retained for the duration of employment plus thirty years, with specific exceptions noted in the standard.
What triggers a surveillance requirement?
Exposure does. Requirements attach to defined hazards — noise above the action level, respirator use, hazardous drugs, bloodborne pathogens — each governed by its own OSHA standard.
Sources
Schedule recurring protocols in your workspace
Set up exposure groups, recurring protocols and follow-up reminders in your free workspace so nothing falls through the cracks between cycles.
Related thinking
When Workforce Health Is the Core of Your Platform, the Difference Is Easy to See
Most EHS platforms were built around safety compliance. Enterprise Health is built for the big “H” in EHS.
Audiometric and respiratory surveillance basics
A quick, practical look at recurring protocols, required follow-up and the documentation they demand.
OSHA 300A filing season: practical tips for cleaner reporting
How to prepare injury data, review exceptions and reduce last-minute reporting risk before the electronic submission deadline.
How AI is changing occupational-health documentation
Where purpose-built assistance can reduce administrative load while keeping clinicians firmly in control.
