
Key Takeaways
- OSHA requires no near-miss report; 29 CFR 1904.4 and 1904.7 cover recordable injuries and illnesses, and 29 CFR 1904.39 covers fatalities, hospitalizations, amputations, and losses of an eye
- The failure is in the 5 stages after capture, which are scoring, routing, investigation, corrective action, and verification
- Score severity at intake so the urgent report never queues behind the routine one
- Require a documented root cause before any corrective action can be assigned
- Have a second person verify each fix, then re-check it at 30, 60, and 90 days
A worker spots a loose floor grating near a conveyor and files a report from the floor, on a phone, in under a minute. What happens over the next 4 hours decides whether that report becomes a fixed hazard or a message that sat unopened until somebody cleared an inbox. The gap between that report and the fix is where most near-miss programs fail.
Mobile capture is the part of this that already works, and it has for years. Your people can capture a near miss from a phone in under a minute, and most of them will if you ask. After that capture come 5 stages, which are scoring, routing, investigation, corrective action, and verification. Handoffs between those stages are where a report waits for somebody to notice it.
Near miss reporting software removes that wait by changing what a submission is. A submission becomes a timestamped workflow event with a named assignee and a required next action. The report filed before the first break is still moving at noon, and nobody had to remember it.
Why Near-Miss Reports Stall Before They Reach Anyone Who Can Act
The Rule Covers What Already Went Wrong
OSHA does not require you to report a near miss. 29 CFR 1904.4 requires you to record each work-related injury and illness that is a new case and meets the criteria in 29 CFR 1904.7. Recordable criteria are death, days away from work, restricted work or transfer, medical treatment beyond first aid, or loss of consciousness.
A separate criterion covers the worst outcomes and starts a clock. That clock, set by 29 CFR 1904.39, is 8 hours for a fatality and 24 hours for an in-patient hospitalization, an amputation, or the loss of an eye. A near miss trips none of those clocks, so nobody will ever cite you for the one you never wrote down, and nobody will find it either.
That absence puts a near-miss program on your own discipline. A program that collects near misses voluntarily is collecting hazard data before an injury forces the recordkeeping to start. That data is only usable when the reports move through a structured workflow that opens a record, names an investigator, and demands a root cause.
Where the Report Really Stops
The failure pattern is the same at every size. That pattern is a verbal report at shift end, an email to a coordinator who is out of office, or a paper form left in a bin. Each of those creates a message, and a message has no assignment, no clock, and no escalation trigger.
Near miss reporting software makes the submission itself the workflow event. That event opens the routing and the investigation at the moment the report is filed, with no inbox in between and no coordinator who has to be at a desk. You find out because that event went to somebody on your clock.
Set the clock yourself, because nothing external will set it for you:
- Give every submission a named owner before anybody reads it
- Score severity at intake, so the urgent report does not queue behind the routine one
- Require a documented root cause before a corrective action can be assigned
- Ask a second person to confirm the fix, and re-check it after the record closes
- Tell the worker who filed the report what happened to it

What the 5 Stages Have to Produce
Stage | What it has to produce | What breaks without a system |
|---|---|---|
Capture | A structured report with location, time, hazard type, and a photo | A verbal note or an email that triggers nothing |
Risk rating | A severity and likelihood score before anyone reads it | A judgment call that gets skipped when the supervisor is away |
Routing | A named investigator and a response clock | A shared inbox where nobody owns the report |
Investigation | A root cause linked to the original report | A separate email thread, and a ticket closed with no finding |
Verification | A second person confirming the fix, then re-checks | The assignee closing their own corrective action |
Row 2 is the stage most programs skip, and the reason is that scoring by hand only happens when somebody is free to do it. A supervisor scoring severity by hand will score it when they are at a desk, and a report filed before dawn waits until then. A score applied at intake routes the urgent report first.
Why the Investigation and the Fix Belong in One Record
The investigation turns a report into a root cause or a closed ticket. Requiring a documented root cause before assignment forces the first outcome. A 5-Whys chain, a Fishbone diagram, and a visual timeline all attach to the original submission, so that cause and the report stay in one trail.
The escalation you want to avoid starts with a hazard coming back. Almost every version of that escalation traces to an investigation that happened in an email thread and a corrective action assigned in a separate spreadsheet. Nothing linked the finding to the fix that was meant to address it.
That linkage is also what an inspector or an insurer asks to see. They ask for a connected chain from the near miss to the root cause to the corrective action. That chain exists because the workflow demanded each stage reference the one before it. A drawer of completed forms holds no chain, so it confirms nothing.
Keep the Investigation and the Fix in One Record
Route every near miss to a named investigator, require a root cause, and verify the fix before the record closes.
Why a Verified Fix Gets Re-Checked at 30, 60, and 90 Days
A corrective action marked complete is a claim, and a verified fix checks it. In a spreadsheet process the person who assigned the action usually closes it too, so nothing independent confirms the work was done or that it addressed the root cause. A second person verifying closure is what turns the claim into a resolved hazard.
Re-checks at 30, 60, and 90 days catch the fix that held at first and failed later, which is the failure mode nobody else has a trigger for. A corrective action that survived 30 days and failed at 60 re-opens the original record, so the recurrence attaches to the near miss that predicted it. A report filed months later tells you nothing about that near miss.
The interval matters because corrective actions fail for different reasons. A fix that worked at the volume and crew you had in March can degrade by June, and the 60-day re-check is where you see it. Catching it in June costs you a work order.
That recordable is where the OSHA 300 log stops being separate work. 29 CFR 1904.29 requires the 300, 300-A, and 301 forms for every recordable case, and a system holding the incident data generates them from it. Reconciling 2 sets of incident data at year end is work that exists only when they were never the same record.
How KC Safety Runs the Chain from Phone to Verified Fix
KC Safety offers anonymous, no-login intake so the front line reports at all, and every submission enters a tracked workflow the instant it is sent. Root-cause workflows covering 5-Whys, Fishbone, and a visual timeline run on every incident. Each incident then sends its corrective action to a named owner with a due date, which is the accountability step a description of intent never carries.
That owner's fix is verified by a second person, and the system re-checks it at 30, 60, and 90 days. Each re-check writes back to the same incident record that produced the OSHA 300, 300A, and 301 logs, so the compliance log and the incident file never diverge. Approve the fix and the matching training auto-assigns in the learning platform.
That assignment closes the chain, and sites in construction and engineering run it from the phone in a worker's hand to a re-check 90 days later. The worker who reported the loose grating gets told what happened to it, which is the single thing that decides whether the next one gets reported at all. Telling them costs a sentence and buys the next report.
Frequently Asked Questions
1. Does OSHA require near-miss reporting?
No. 29 CFR 1904.4 and 1904.7 require you to record work-related injuries and illnesses that meet the general recording criteria, and 29 CFR 1904.39 requires you to report a fatality within 8 hours and an in-patient hospitalization, amputation, or loss of an eye within 24 hours. A near miss meets neither test, so a near-miss program runs on your own discipline.
2. Why do near-miss programs collect reports and still miss hazards?
The reports arrive as messages. A verbal note at shift end, an email to somebody who is away, or a paper form in a bin creates no assignment, no response clock, and no escalation trigger. The hazard data only becomes usable when each submission opens a tracked record with a named investigator and a required root cause.
3. What does a 5x5 or similar risk score change?
It removes a manual decision from every submission. Scoring severity and likelihood at intake routes the urgent report to the right investigator immediately, and it stops a low-visibility near miss from waiting until a supervisor is back at a desk. Both the urgent and the routine report keep moving, and neither goes unscored.
4. Why re-check a corrective action at 30, 60, and 90 days?
Corrective actions fail for different reasons at different points. A fix that worked at the volume and crew in place at implementation can degrade as either changes, and a scheduled re-check catches that degradation before it produces a recordable injury. A failure at 60 days re-opens the original record instead of arriving months later as an unconnected new report.
5. How does incident data connect to the OSHA 300 log?
29 CFR 1904.29 requires the OSHA 300, 300-A, and 301 forms for every recordable case. A system that holds the incident record can generate those forms from the same data, which removes the year-end reconciliation between an incident dataset and a compliance log that should have been one record all along.
References
- Legal Information Institute. 29 CFR 1904.4, Recording criteria.
- Legal Information Institute. 29 CFR 1904.7, General recording criteria.
- Legal Information Institute. 29 CFR 1904.29, Forms.
- Legal Information Institute. 29 CFR 1904.35, Employee involvement.
- Legal Information Institute. 29 CFR 1904.39, Reporting fatalities, hospitalizations, amputations, and losses of an eye.