OSHA has amended the process in which its employees gather and use sensitive and personally-identifiable medical files.
The agency's Rules of Agency Practice and Procedure Concerning Occupational Safety and Health Administration Access to Employee Medical Records details how information is obtained and utilized. Revisions to the rule are meant to "improve efficiency in implementing these internal procedures."
One main amendment to the rule transfers approval of written medical access orders (MAOs) from the Assistant Secretary of Occupational Safety and Health to the OSHA Medical Records Officer (MRO). The MRO is responsible for determining the transfer and public disclosure of personally-identifiable employee medical information in OSHA's possession;
It also clarifies that a written MAO does not constitute an administrative subpoena, and it establishes new procedures for the access and safeguarding of personally-identifiable employee medical information maintained in electronic form.