A written access order from WISHA will contain at least the following information:

(1) The identity of employees whose medical information is being requested. This may be either by name, job classification, time clock number, department, or similar identifier.

(2) A description of the medical information that will be examined.

(3) The purpose for seeking access to this medical information, and any additional evidence supporting access to the medical information.

(4) A step-by-step description of how the records will be obtained, copied, reviewed, and stored, specifying the following:

(a) Who will be in charge of on-site review of the records, or who will take possession of the records for off-site review.

(b) Where the records will be reviewed.

(d) If the records are to be reviewed on-site, what type of information will be copied and removed off-site.

(5) How personal identifiers will be separated from the medical information and how long this information will be kept.

(6) The principal WISHA investigator's full name, business address and telephone number.

(7) The full names and titles of all individuals that will review the records.

(8) The WISHA industrial hygiene program manager's full name, business address and telephone number.

Note:	WISHA does not need a written access order for the following types of employee medical records:
	• Medical records and analyses that do not contain personal identification information.
	• Examination of records to verify compliance with the medical surveillance requirements of another occupational health and safety rule.
	• The following records when required by another occupational health and safety rule:
	– Medical opinions.
	– Biological monitoring results.
	– Results of medical examinations and laboratory tests.

PDFWAC 296-802-50010

Content of WISHA written access orders.