# Incident reporting for labs and pharma production

> Technicians text in spills and exposures, and EHS and quality share one record.

Source: https://incidentkit.ai/solutions/laboratories-and-pharma-production · Updated Oct 5, 2026

**Status: rolling out.** This pack is being released in stages.

**Who:** Scientists, technicians and operators report. Lab managers, EHS and quality investigate, and the EHS or chemical hygiene officer owns fixes and exposure records.

## The problems

- **Two paper trails for one event:** A spill makes an EHS form, a quality deviation and a facilities email. Nobody sees all three, so the cause is investigated twice or never.
- **The exposure that never gets a consult:** After a spill or leak that makes exposure likely, the employee gets a medical consultation offer (1910.1450(g)(1)(iii)). A hallway report makes it hard to prove.
- **Needlesticks and the sharps log:** The sharps injury log needs device type and brand, work area and how it happened (1910.1030(h)(5)). Those facts vanish when the first report is spoken.
- **Equipment failures filed as maintenance tickets:** A silent fume hood alarm or freezer excursion becomes a maintenance work order. The pattern across rooms never reaches EHS.

## Incident types in the pack

- Chemical spill or release
- Skin or eye chemical splash
- Inhalation or fume hood failure
- Needlestick or sharps injury
- Exposure to blood or infectious material
- Compressed gas or cryogen event
- Fire, flash or small explosion
- Equipment failure
- Process deviation with a safety impact
- Biological containment breach
- Repetitive strain
- Near miss

## Regulators and standards

- **OSHA 29 CFR 1910.1450 (laboratory standard):** A written chemical hygiene plan. After a spill, leak or explosion that makes exposure likely, employees get a medical consultation offer, and records are kept (1910.1450(e), (g), (j)).
- **OSHA 29 CFR 1910.1200 (hazard communication):** Applies to labs in part: incoming labels stay intact, safety data sheets stay accessible, employees are trained. Non-laboratory chemical use follows the other standards, even in a lab.
- **OSHA 29 CFR 1910.1030 (bloodborne pathogens):** Employers with a Part 1904 log keep a confidential sharps injury log: device type and brand, work area, how it happened. Retention follows 1904.33.
- **OSHA 29 CFR 1904.8 (needlesticks and sharps):** Work-related needlesticks and cuts from sharps contaminated with blood or other potentially infectious material go on the 300 log as privacy cases, with no name.
- **OSHA 29 CFR Part 1904 and 1904.39:** Log recordable cases within seven calendar days. Report a fatality within 8 hours, and an inpatient hospitalization, amputation or loss of an eye within 24 hours.
- **FDA 21 CFR 211.192 (production record review):** Drug makers must fully investigate unexplained discrepancies and failed specifications, and record conclusions and follow-up. That is a quality-system duty. IncidentKit is not a quality system.

## How it works

1. **Report: from the bench, in one text** A technician texts what happened or scans the QR code on the room door. Lauren asks which chemical, how much, who was exposed and whether the hood worked.
2. **Investigate: a deviation-style record** The record has the shape quality teams know: description, containment, impact, root cause and disposition. Lauren drafts it, marked 'Lauren · draft', and you add the deviation number.
3. **Correct: CAPA with an owner and proof** Each corrective and preventive action has an owner, a due date and evidence, such as a hood service report or a revised SOP. Nothing closes until verified.
4. **Prove: exposure, sharps and OSHA together** The consultation offer, sharps details and any recordable case sit in one record. Exports of the OSHA 300, 300A and 301 are rolling out.

## Scenario: A solvent spill and a silent hood alarm

A technician spills about a liter of solvent and notices the hood alarm never sounded.

- **Mon 2:10 pm, Technician texts report before cleanup.** The transfer was outside the hood in Lab 3. The technician texts a report before cleanup starts.
- **2:14 pm, Lauren asks questions, SDS attached.** Lauren asks the chemical, quantity, ventilation, PPE, containment and symptoms. The SDS is attached.
- **2:25 pm, Lab manager offers medical consultation.** After confirming containment, the lab manager offers medical consultation to the two people nearby. The report routes to EHS.
- **Tue 9:00 am, Investigation finds hood monitor fault.** The hood's airflow monitor had been in fault three weeks, its ticket stuck in maintenance. Two earlier alarm reports appear in other labs.
- **Tue 11:00 am, Quality opens a linked deviation.** The room hosted a controlled step that day, so quality opens a deviation. Each record carries the other's number.
- **Day 3, Four actions get owners and dates.** Recertify the hood, add alarm faults to the daily start-up check, route them to EHS too, and retrain on transfers.
- **Day 12, Service report attached, actions close.** EHS verifies the service report and revised checklist and closes the actions. No one was hurt, so there is no OSHA 300 entry.
- **Day 90, Effectiveness check covers all labs.** A review of alarm-fault reports across all labs shows faults now reach EHS the same day, and none has sat unresolved.

## What is in the pack

**Forms:** Spill or exposure report: chemical, quantity, SDS, PPE, ventilation; Sharps supplement: device, work area, how it happened; Medical consult record: offered, accepted, physician's opinion; Equipment failure report; Deviation-style investigation worksheet and CAPA plan

**Routing:** Reports go to the lab or area manager and EHS; Spills with possible exposure prompt the consultation offer; GMP-area events also notify the quality unit; Sharps injuries go to occupational health, name kept confidential

**Exports:** OSHA 300 log, 300A summary and 301 report (rolling out); Sharps injury log view; Incident register by room, equipment and chemical; Investigation report as a PDF for the quality file; Audit trail

**Roles:** Reporter: any scientist, technician or operator; Lab or area manager: reviews and routes; Investigator: EHS or quality; Chemical hygiene or EHS officer: classifies and closes; Executive: certifies the 300A; Read-only: auditor or insurer

## Outcomes

- **One event, one record:** The EHS incident and the quality deviation point to each other, so both teams see the same facts and investigate once.
- **The exposure trail exists when asked:** The consultation offer, the chemical and the conditions are captured at the time, not rebuilt from memory.
- **Equipment patterns reach EHS:** Hood alarms, freezer excursions and centrifuge faults cluster by room and equipment, so a repeating failure stands out.
- **CAPA that is checked:** Actions carry an owner, date and evidence. Nothing closes until verified, and an effectiveness check shows if the fix held.

## Frequently asked questions

### Is IncidentKit a replacement for our quality management system?

No. It handles incidents, investigations and corrective actions for safety events. GMP deviations, batch impact, change control and regulatory submissions stay in your quality system. Put the deviation number on the incident, and the incident number on the deviation.

### Does the OSHA laboratory standard require an incident report?

Not as such. 29 CFR 1910.1450 does not prescribe an incident form. It does require an opportunity for medical consultation after a spill, leak or explosion that makes exposure likely, with records. An incident record that captures the offer makes that easy to show.

### How are needlesticks recorded?

A work-related needlestick or sharps cut contaminated with blood or other potentially infectious material goes on the OSHA 300 log as a privacy case, with no name (29 CFR 1904.8). Update the entry if a bloodborne disease is later diagnosed. Keep the separate sharps injury log too.

### Does a pharma production area follow the lab standard?

Not necessarily. The laboratory standard covers laboratory use of hazardous chemicals, and other uses follow the relevant OSHA standards even in a lab (1910.1450(a)(3)). Production areas usually follow hazard communication in full. Ask your EHS officer how each area is classified.

### What does it cost, and can a clinical lab use the free plan?

Non-patient incident reporting is free on the Open plan, with no seats, modules or setup fee. A clinical lab that touches patient information needs the per-site Regulated plan, with a business associate agreement and compliance packets. Research, QC and production labs fit Open.

## Sources

- [eCFR: 29 CFR 1910.1450, occupational exposure to hazardous chemicals in laboratories](https://www.ecfr.gov/current/title-29/section-1910.1450)
- [eCFR: 29 CFR 1910.1200, hazard communication](https://www.ecfr.gov/current/title-29/section-1910.1200)
- [eCFR: 29 CFR 1910.1030, bloodborne pathogens](https://www.ecfr.gov/current/title-29/section-1910.1030)
- [eCFR: 29 CFR 1904.8, needlestick and sharps injuries](https://www.ecfr.gov/current/title-29/section-1904.8)
- [eCFR: 29 CFR 1904.29, forms and privacy cases](https://www.ecfr.gov/current/title-29/section-1904.29)
- [eCFR: 29 CFR 1904.39, reporting fatalities, hospitalizations, amputations and loss of an eye](https://www.ecfr.gov/current/title-29/section-1904.39)
- [eCFR: 21 CFR 211.192, production record review](https://www.ecfr.gov/current/title-21/section-211.192)
- [OSHA: Incident investigation](https://www.osha.gov/incident-investigation)

## Related

- [Incident investigations and root cause analysis](https://incidentkit.ai/product/investigations)
- [Corrective and preventive actions (CAPA) tracking](https://incidentkit.ai/product/corrective-actions)
- [Incident audit trail: every change, who and when](https://incidentkit.ai/product/audit-trail)
- [Root Cause Analysis: How to Run One That Leads to Action](https://incidentkit.ai/use-cases/root-cause-analysis)
- [Corrective Actions: How to Close Them With Proof](https://incidentkit.ai/use-cases/close-corrective-actions)
- [Workplace Injury Reporting: Steps, Deadlines, Records](https://incidentkit.ai/use-cases/workplace-injury-reporting)
- [Root cause analysis and CAPA: methods and strong actions](https://incidentkit.ai/guides/root-cause-analysis-and-capa-guide)
- [Hazard communication 29 CFR 1910.1200: SDS, labels, training](https://incidentkit.ai/compliance/osha/hazard-communication)
- [OSHA recordkeeping requirements: 29 CFR 1904 explained](https://incidentkit.ai/compliance/osha/recordkeeping-overview)
- [OSHA 300 Log: how to fill it out, column by column](https://incidentkit.ai/compliance/osha/osha-300-log)
- [Recordable vs first aid: OSHA's medical treatment test](https://incidentkit.ai/compliance/osha/recordable-vs-first-aid)
- [OSHA severe injury reporting: 8-hour and 24-hour rules](https://incidentkit.ai/compliance/osha/severe-injury-reporting)
- [Injury reporting and retaliation: 29 CFR 1904.35 and 11(c)](https://incidentkit.ai/compliance/osha/employee-reporting-and-retaliation)