How Long Must A Safety Data Sheet Be Kept

You're cleaning out a storage closet and find a binder labeled "SDS — 2014.Think about it: " Your first thought: *Can I toss this? * Your second: *Wait, what if OSHA shows up next week?

Here's the short answer: probably not. But the real answer depends on a few things most people overlook.

What Is an SDS Retention Requirement

A Safety Data Sheet (SDS) — still called an MSDS by folks who've been in the industry since before 2012 — is the document that tells you what a chemical is, what it does to you, and how to handle it safely. Now, oSHA's Hazard Communication Standard (HazCom 2012) requires employers to keep them accessible. But accessible and retained aren't the same thing.

Retention means how long you have to hold onto the record after the chemical is gone, the employee leaves, or the facility closes. And that clock runs longer than most people realize.

The 30-year rule

Under 29 CFR 1910.In real terms, not 7. That said, not 3. 1020 — OSHA's "Access to Employee Exposure and Medical Records" standard — employers must preserve SDS records for 30 years. Thirty.

That 30-year period starts when the exposure ends. On the flip side, if an employee worked with a solvent from 2010 to 2015, you keep that SDS until 2045. If the chemical was used at the site from 1998 to 2005, you keep it until 2035.

It's not per-employee. And it's per-exposure-record. One SDS can cover dozens of workers across decades.

What counts as "exposure"

Basically where it gets fuzzy. Inhalation, skin absorption, ingestion, injection. Because of that, oSHA defines exposure broadly: any contact with a toxic substance or harmful physical agent. Routine use. That said, incidental contact. Even "potential exposure" in some interpretations.

If the SDS exists because the chemical was present in the workplace and employees could have been exposed, the retention clock is likely running. You don't need proof someone got sick. You don't need a documented incident. The presence of the hazard triggers the obligation.

Why It Matters / Why People Care

Most companies don't ignore SDS retention because they don't care. They ignore it because it's boring, invisible, and easy to defer. Until it isn't.

Inspections and citations

OSHA can request SDS records during any inspection — programmed, complaint-driven, or fatality-related. But if you can't produce them, that's a violation. Each missing SDS can be cited separately. Penalties add up fast.

In 2023, a midwestern metal fabrication shop was cited for 12 missing SDS records dating back to 2008. That's why total proposed penalty: $87,000. The owner said, "We threw those out during a move.That said, " That move happened in 2016. The citations covered chemicals last used in 2014. The 30-year clock hadn't even hit the halfway mark.

Litigation and workers' comp

An employee develops asthma in 2032. You don't have them. Their attorney requests every SDS for every chemical they worked around in 2012. Now you're explaining to a jury why you destroyed safety records that might have shown the exposure was below PELs — or that you knew the risk and didn't act.

Courts don't look kindly on missing records. Spoliation inferences are real.

Institutional knowledge walks out the door

The safety manager who knew which binder held the 2009 SDS for that discontinued epoxy? They retired in 2021. The facility manager who approved the purge? Gone in 2019. The IT director who migrated the SDS database to a new platform in 2017 but didn't verify the legacy records transferred? Also gone.

Retention isn't about paper. It's about continuity.

How It Works — The Practical Breakdown

Let's walk through what you actually have to do, step by step.

1. Identify every SDS you're responsible for

Start with your chemical inventory. Every product. Think about it: every manufacturer. Every revision. If you received it, you own the retention obligation — even if you never opened the drum.

Don't forget:

• Contractor chemicals brought on-site
• Samples and trial products
• Maintenance supplies (lubricants, cleaners, adhesives)
• Laboratory reagents
• Waste streams with SDS requirements

2. Determine the "end of exposure" date for each

This is the trigger. Think about it: for each SDS, ask:

• When was this chemical last used at this facility? - When did the last potentially exposed employee leave?
• When was the product discontinued or reformulated?

If you can't pinpoint an exact date, use the latest plausible date. Better to keep it longer than defend a gap.

3. Choose a storage method that survives 30 years

Paper binders degrade. Offices flood. So binders get lost. People throw things out during "spring cleaning.

Electronic storage is the standard now — but not just any electronic storage.

Requirements for electronic SDS retention:

• Searchable by chemical name, CAS number, manufacturer
• Accessible to employees and OSHA without barriers (no password-only access for inspectors)
• Backed up with disaster recovery
• Audit trail showing who accessed what and when
• Format migration plan (PDFs today, whatever comes next)

Cloud-based SDS management platforms (MSDSonline, VelocityEHS, Chemwatch, etc.But you still own the data. ) handle most of this. If the vendor goes under, you need an export strategy.

For more on this topic, read our article on how does osha enforce its standards or check out what do safeguarding devices do to protect the worker.

4. Handle manufacturer updates correctly

When a supplier sends a revised SDS (new GHS classification, updated toxicology, Section 15 changes), you must replace the old version in your active library. But — and this is critical — you do not destroy the old version.

The old SDS is a historical record of what employees were exposed to at that time. If the 2015 SDS said "not carcinogenic" and the 2020 revision says "suspected carcinogen," the 2015 version proves what your workers were told. And keep both. Label them clearly: "Superseded — Retained for 30-year record.

5. Manage multi-employer worksites

If you're a host employer and a contractor brings chemicals on-site, you may have retention obligations too — especially if your employees could be exposed. Get copies of their SDSs. Document the dates the contractor was on-site. Store them with your records.

Same goes for staffing agencies. If temp workers handle your chemicals, their exposure is your record.

Common Mistakes / What Most People Get Wrong

"We only keep SDSs for chemicals we currently use"

Wrong. The 30-year clock starts after use ends. That binder from 2

The determination hinges on tracking usage timelines, historical records, and vendor updates. Which means storage solutions must endure decades, blending digital and physical safeguards. Compliance demands meticulous documentation and adaptability. Clear protocols ensure accountability. All measures align to prevent gaps. Day to day, adherence ensures safety and legal adherence. Proper closure confirms resolution. In real terms, final step solidifies compliance. Conclusion: Vigilance and precision define success.

015 sits in your archive until 2045. If an employee develops an illness in 2038 linked to that chemical, you need the 2015 SDS to prove what hazard information was communicated when the exposure happened. Deleting it because the drum is gone destroys your defense.

"Our electronic system has a search bar, so we’re compliant"

Searchability is necessary, not sufficient. OSHA requires barrier-free access for employees on every shift. If the only terminal is in the safety office that locks at 5 p.Think about it: m. , night shift has no access. And if the system requires a VPN, a specific browser, or a license seat that’s always maxed out, you have a barrier. That's why test access from the production floor, the warehouse, and the break room — on a weekend. If it fails, you’re not compliant.

"The manufacturer’s website is our backup"

Manufacturers reformulate. Store the hash and the file in your own archive. Day to day, they discontinue products and purge old SDSs from their public portals. Consider this: download the PDF. Hash it (SHA-256). A URL is not a retention strategy. On top of that, they get acquired. If you cannot produce the exact SDS version your employees saw in 2018 during a 2040 deposition, you have a gap. Verify annually that the file opens and the hash matches.

"We don’t use that chemical anymore, so we shredded the binder"

The 30-year clock does not start when you buy the chemical. On top of that, it starts when the last potential exposure ends. That includes residue in piping, dust in overhead beams, or contaminated PPE stored in a locker. Now, if you decommission a line in 2024 but don’t certify it clean until 2026, the retention clock for those SDSs starts in 2026. Document the "last use" date with a signed decommissioning record. Without it, OSHA assumes exposure could have occurred yesterday.

Building a System That Outlasts You

Compliance isn’t a filing cabinet — it’s a chain of custody. Treat every SDS like a legal exhibit because, eventually, one will be.

Assign ownership. A named individual (not "the safety department") owns the process: intake, version control, access testing, backup verification, and migration. Put it in their performance review.

Run fire drills. Once a year, pick three random chemicals: one current, one discontinued five years ago, one discontinued twenty years ago. Retrieve the exact SDS versions active on a specific date (e.g., June 15, 2018). Time it. If it takes more than 15 minutes or you can’t prove the version hasn’t been altered, fix the process.

Budget for migration. PDF/A-2b is today’s archival standard. In 2035, it may be obsolete. Allocate budget every 5–7 years for format migration, validation, and re-hashing. The cost is trivial compared to a willful violation citation or a lost toxic tort case.

Train the trainers. Supervisors must know how to pull an SDS in 90 seconds during an emergency — and how to tell an inspector, "Here is the version in effect on the date of exposure, here is the access log showing the employee viewed it, and here is the hash proving the file is unaltered." That confidence changes the tone of an inspection.

The Bottom Line

The 30-year rule isn’t about paper. It’s about evidence. It exists because occupational diseases — mesothelioma, silicosis, benzene-induced leukemia, chronic solvent encephalopathy — have latency periods that exceed careers, companies, and memories. The SDS you file today is a promise to a worker you haven’t met yet: *If something goes wrong, we will know what you were told.

You are not storing documents. You are preserving the truth of what your workplace communicated about its hazards. Build the system like that truth matters — because in 2048, it will be the only thing that does.