Medical Surveillance Programs in Healthcare: What They Are and How to Run One

Ask three people in a hospital what "medical surveillance" means and you'll get three answers: the annual TB test, the respirator questionnaire, the new-hire physical. All of those are pieces, but none of them is a medical surveillance program on its own. A real program is the thing that stitches those individual data points together and tells you whether your workplace is actually making people sick.

For anyone running occupational health at a hospital, clinic, or long-term-care facility, this is one of the areas where OSHA has teeth and where a lot of programs are quietly out of date. Below is what a surveillance program is, which standards actually require one, and how to enroll people the right way — by exposure, not by title.

What is a medical surveillance program?

Start with OSHA's own definition. Medical surveillance is "the analysis of health information to look for problems that may be occurring in the workplace that require targeted prevention." OSHA describes it as a feedback loop to the employer — you pool screening results across a group of employees, look for abnormal trends, and use those trends to fix the workplace (OSHA — Medical Surveillance).

That population framing is the whole point, but it's not the only shape surveillance takes. You can also track a single employee over time, or start an investigation from a single sentinel case — one worker whose lab value or symptom is the canary that makes you look harder at everyone else doing that job.

In practice, a program usually bundles a few standard elements: baseline (pre-placement) examinations, periodic follow-up exams, biological monitoring, trend analysis, and review by a licensed healthcare professional (OSHA — Medical Screening and Surveillance Requirements Guide). One important caveat about that guide: OSHA is explicit that it "is not a standard or regulation," and directs you to the actual CFR text for any compliance question. The guide is a helpful reference, but the enforceable requirements live in the standards themselves.

Surveillance vs. screening — and why the difference matters

This is the distinction that trips up the most programs, and it's worth getting straight because the two words describe different jobs.

Screening is about the individual. You test one worker to detect or diagnose a health condition early — a baseline audiogram, a hepatitis B titer, a spirometry reading. The output is a clinical decision for that one person.

Surveillance is about the population. You take those pooled screening results and analyze them to spot workplace exposure patterns and judge whether your controls are working (OSHA — Medical Surveillance). As OSHA puts it, screening addresses individual health while surveillance protects the workforce as a whole.

The relationship runs one direction: screening data feeds surveillance. If your sterile-processing techs are individually screened for ethylene oxide exposure and you never aggregate those results, you have screening and nothing more. The moment you look across the department and notice a trend, you have surveillance. Most programs do the individual part well and skip the aggregation — which is exactly the part that would catch a failing engineering control before it hurts the next person.

Which OSHA standards require surveillance

There is no single OSHA standard called "medical surveillance program." The requirements live inside individual standards, each tied to a specific hazard. These are the ones that matter most in healthcare, with the paragraph cites so you can go straight to the text:

• Bloodborne Pathogens — 29 CFR 1910.1030(f). Hepatitis B vaccination must be made available after training and within 10 working days of initial assignment to every employee with occupational exposure to blood or other potentially infectious material, at no cost (1910.1030(f)(2)(i)). The same standard requires a confidential post-exposure medical evaluation and follow-up after an exposure incident (1910.1030(f)(3)).
• Respiratory Protection — 29 CFR 1910.134(e). You must provide a medical evaluation to determine an employee's ability to use a respirator before they're fit-tested or required to use one. It's performed by a physician or other licensed health care professional using the Appendix C questionnaire, with follow-up exams triggered by positive answers or new symptoms (1910.134(e)(1)). This is the standard that governs N95 use for TB and aerosol-generating procedures.
• Formaldehyde — 29 CFR 1910.1048(l). Preplacement and periodic exams for staff exposed above the action level — think pathology and histology (OSHA guide).
• Ethylene Oxide — 29 CFR 1910.1047(i). Preplacement, annual, emergency, and termination exams — relevant wherever EtO sterilization happens (OSHA guide).
• Occupational Exposure to Hazardous Chemicals in Laboratories — 29 CFR 1910.1450. The lab standard doesn't run a population-level surveillance program; it requires the employer to provide an opportunity for medical consultation and examination under specific triggers — for example, when an employee develops signs or symptoms of a chemical exposure, or after a spill or other event likely to cause overexposure (1910.1450(g)). Relevant to clinical and research labs.

One nuance that trips people up: the compliance duty is usually to offer surveillance, not to force it. OSHA has stated this plainly in the respirable crystalline silica construction standard, where the employer must make medical surveillance available "whether or not the employee agrees to take the examinations or tests" (OSHA interpretation, Feb 2, 2018). That's a construction rule (1926.1153) — general-industry silica sits at 1910.1053 — but it's cited here for the general principle it illustrates: document the offer and the declination, and you've met your obligation.

Surveillance enrollment: how to enroll employees by hazard exposure

Here's the rule that fixes most enrollment problems: surveillance enrollment is triggered by exposure and job duties, not by job title. A nurse who never enters an airborne-isolation room and a nurse who runs aerosol-generating procedures all shift have the same title and completely different surveillance needs. Build your triggers off tasks and exposures, then map each exposure to the standard that governs it.

A working map for a typical facility:

• Respirator users (N95, PAPR) → 1910.134 medical evaluation before first use, then re-evaluate on new symptoms.
• Occupational exposure to blood/OPIM → HBV vaccine offered within 10 working days of assignment; post-exposure evaluation on any incident.
• Sterile processing / EtO → 1910.1047(i) exams. Pathology / formaldehyde → 1910.1048(l) exams.
• Oncology, pharmacy, and nursing staff handling antineoplastics → NIOSH hazardous-drug surveillance (a recommendation — see below).

For every enrollee, run the same lifecycle: baseline at hire, periodic updates on the interval the standard sets, exposure-incident-triggered evaluations as events occur, and a clean records handoff at termination. The termination step is the one people forget, and it's where the retention clock (below) starts to run.

Hazardous drugs: a recommendation, not a mandate

NIOSH estimates about 5.5 million U.S. healthcare workers are potentially exposed to hazardous drugs. For them, NIOSH recommends a surveillance program built on a health/medical, reproductive, and work-history questionnaire; targeted lab tests (for example, a baseline complete blood count tied to the target organs of the drugs in use); and a physical exam at hire, updated periodically (NIOSH Pub. 2013-103). NIOSH is non-regulatory, so this is a recommendation — reinforced by USP General Chapter <800> — rather than an OSHA mandate. Even so, it is widely treated as the standard of care for hazardous-drug handling, and that is how most malpractice and enforcement reviews will read a program that skips it.

TB: check whether your program is current

This is the item worth flagging hardest, because so many programs are running on autopilot. In 2019, CDC and the National Tuberculosis Controllers Association updated their guidance: a baseline individual TB risk assessment, symptom screen, and a TB test (skin or blood) at hire — but no routine annual testing absent a known exposure or evidence of ongoing transmission, plus annual TB education for all personnel (CDC MMWR, May 17, 2019). Plenty of facilities still run annual TB tests they no longer need to. If yours does, you're spending money and staff time on testing CDC no longer recommends. That guidance was still the operative recommendation as of this writing — confirm it before you rewrite a policy.

Recordkeeping and the cost of getting it wrong

Surveillance generates records with unusually long lives. Under the Access to Employee Exposure and Medical Records standard, employee medical records must be kept for the duration of employment plus 30 years (1910.1020(d)(1)(i)), and exposure records for at least 30 years (1910.1020(d)(1)(ii)). There's a narrow exception: records for employees who worked less than a year may be handed to the employee at termination instead of retained. Bloodborne-pathogens records mirror the same duration-plus-30-years rule (1910.1030(h)(1)(iv)).

The penalties are real and they adjust for inflation every January. OSHA currently publishes a maximum civil penalty of $16,550 per serious or other-than-serious violation and $165,514 per willful or repeated violation (OSHA — Penalties). Because the figures move each January, confirm the current-year amount on osha.gov before you quote it in a policy or a budget request.

Retention math is where surveillance programs most often fail an audit — not because the exams didn't happen, but because someone couldn't find the 22-year-old formaldehyde baseline. Enrollment-by-exposure, due/overdue tracking, and automatic retention timers are exactly the kind of bookkeeping worth systematizing; it's a core part of what an occupational-health platform like carefoundryESC is built to handle, but the principle stands whatever you use to track it.

FAQ

Is medical surveillance the same as a pre-placement physical? No. The pre-placement exam is the baseline — one screening event for one person. Surveillance is the ongoing analysis of those baselines and periodic exams across a group to detect workplace trends (OSHA). The physical is one input; the program is the analysis you build on top of it.

Do I have to enroll every nurse in respirator surveillance? Only those who use a respirator. The 1910.134(e) medical evaluation is triggered by respirator use, not by holding a nursing license. Build enrollment off task-level exposure, not job title.

Can an employee refuse surveillance? Generally, yes — your duty is usually to offer it and document the offer. OSHA has stated the employer must make surveillance available "whether or not the employee agrees" to participate (OSHA interpretation, 2018). Record every declination.

How long do we keep the records? Medical records: duration of employment plus 30 years. Exposure records: 30 years (1910.1020). Plan storage accordingly — these outlive most careers.

If your program still runs on annual TB tests and a spreadsheet of due dates, this is a good quarter to map every hazard to its governing standard, switch enrollment to an exposure basis, and set your retention clocks. Start with the standards above and the CFR text they point to, and keep the documentation tight — the paper trail is what an auditor reviews first.