BETA — This tool is in active development. Data is for reference only.
GHS Ecosystem: GHS Symbols → Hazard Classification & ATE Calculator ▶ You are on GHS Pictograms GHS Labels → Order Certified GHS Labels

SDS Management: Compliance Obligations, Retention, and Best Practices

How to manage a compliant SDS library — accessibility, keeping safety data sheets current, retention rules, and manual vs software approaches under OSHA HCS and EU REACH.

·GHS Pictograms Editorial

Safety data sheets are easy to think of as paperwork — a document that arrives with a shipment and gets filed away. In practice, keeping that collection complete, current, and accessible is one of the most frequently cited compliance obligations in industry. OSHA’s Hazard Communication Standard is consistently among the agency’s ten most-cited standards, and a large share of those citations come down to SDS management: a missing sheet, an outdated one, or a library employees cannot actually reach during their shift.

This article sets out what SDS management requires, the rules that are most often misunderstood — accessibility, currency, and retention — and how manual and software-based approaches compare. The focus is on the United States (OSHA HCS) and the European Union (REACH), the two frameworks most likely to apply to a chemical handler.

At a glance

SDS management is the ongoing process of keeping a safety data sheet for every hazardous chemical in your workplace, in its current version, accessible to the people who need it, and retained for the required period. Four duties sit at its core: completeness (an SDS for each hazardous chemical), currency (the latest version), accessibility (readily available during each work shift), and retention (records kept for the legal minimum). In the US these duties flow from OSHA HCS (29 CFR 1910.1200) and the records standard 1910.1020; in the EU they flow from REACH. The legal obligation rests with the employer, even where the day-to-day work is delegated to an EHS manager.

What SDS management actually requires

The starting point is scope: the Hazard Communication Standard applies to essentially any employer that has at least one hazardous chemical in the workplace, across general industry, construction, and maritime sectors. For every one of those chemicals, the employer must hold the supplier’s SDS — and the chemical manufacturer, importer, or distributor must provide it free of charge, both with the product and whenever an updated version is issued.

From there, management is the discipline of keeping that set in good order over time. The four duties below are not separate tasks so much as continuous states the library has to stay in: every hazardous chemical represented, every sheet current, every sheet reachable on shift, and the historical record preserved. The sections that follow take the three that cause the most confusion.

Accessibility: the work-shift rule

The accessibility requirement is precise. Under 29 CFR 1910.1200(g)(8), the employer must maintain copies of the required SDSs and ensure they are readily accessible during each work shift to employees when they are in their work area(s). “Readily accessible” means without having to ask a manager or file a request — employees must be able to reach the sheet directly.

Electronic access is explicitly permitted. The same paragraph allows electronic access and other alternatives to paper copies as long as no barriers to immediate employee access in each workplace are created. In practice that means a reliable system, employees who know how to use it, and a fallback (such as a printed back-up or a second device) for a power or network outage. Where employees travel between locations during a shift, 1910.1200(g)(9) allows the SDSs to be kept at the primary workplace facility, provided workers can still get the information they need in an emergency.

In the EU, REACH Article 35 gives workers and their representatives a right of access to the information on the substances and mixtures they use or may be exposed to — the practical effect is the same obligation to make SDS information available to the workforce.

Keeping SDSs current

A compliant library is a current one. In the US, the employer must keep the most recently received version of each SDS and replace an older sheet when a new one arrives; the supplier’s duty to issue updates is the engine that keeps this moving.

The EU spells the update mechanism out in detail. REACH Article 31(9) requires a supplier to update the SDS without delay when new information affecting risk-management measures or hazards becomes available, when an authorisation is granted or refused, or when a substance is added to the Candidate List. The supplier must then provide the updated version free of charge, on paper or electronically, to every recipient it supplied in the preceding 12 months, and mark the new version with a revision date.

Currency is also a moving target because the underlying classifications change. In the US, the HCS 2024 update aligns the standard with the seventh revised edition of the GHS, and its compliance deadlines run in phases between May 2026 and May 2028 after the four-month extension OSHA issued in January 2026. As suppliers re-classify products and re-issue sheets, an SDS library has to take in the new versions rather than sit on the ones it has.

How long must you keep an SDS?

This is the most misunderstood part of SDS management. The frequently repeated “keep SDSs for 30 years” rule is not in the Hazard Communication Standard. It comes from a separate OSHA standard, 29 CFR 1910.1020 (Access to Employee Exposure and Medical Records), which treats an SDS as a form of employee exposure record.

What 1910.1020 actually requires is an option. Under paragraph (d)(1)(ii)(B), the SDS itself need not be kept for any set period as long as some record of the identity of the substance (its chemical name, where it was used, and when it was used) is retained for at least 30 years. Keeping the SDS is simply the easiest way to satisfy that record — but a chemical-use log can serve the same purpose.

Two practical points follow. First, on superseded sheets: OSHA’s interpretation is that if a product’s formulation has not changed, you may replace the old SDS with the new one; if the formulation has changed, you should keep both for the 30-year window, because they document exposure to different substances. Second, on access: where these records are requested by an employee or their representative, they must be provided within 15 working days.

In the EU, the retention period is shorter and set directly by REACH Article 36: each manufacturer, importer, downstream user, and distributor must keep the information needed to carry out their REACH duties — which includes SDSs — for at least 10 years after they last made, imported, supplied, or used the substance or mixture.

Manual vs software approaches

For a small operation with a handful of chemicals, a manual system can be compliant: a labelled binder or a shared folder, a spreadsheet index, and a calendar reminder to check for updates. The risk is not that manual management is illegal — it is that it quietly drifts out of compliance. Binders go missing from a work area, a revised sheet never replaces the old one, and nobody notices a gap until an inspection or an incident.

Purpose-built SDS management software addresses those failure modes directly. A well-designed system maintains a searchable library indexed by product, manufacturer, and identifiers such as CAS or UN number; flags or automatically pulls in updated versions so the library stays current; gives employees electronic access from any work area on any shift; preserves superseded versions for the retention window; and synchronises a single library across multiple sites. For an organisation with hundreds of chemicals or several locations, that automation is usually the difference between a library that stays compliant and one that decays between audits.

Common SDS management failures

  • Gaps in the library — a hazardous chemical in use with no SDS on file.
  • Outdated sheets — an old version still in place after the supplier issued a revision, or a sheet that predates current classification rules.
  • MSDS still on file — legacy Material Safety Data Sheets that were never replaced with the 16-section SDS (see MSDS vs SDS).
  • No shift access — SDSs locked in an office, on a single computer that is off during a shift, or reachable only by asking a supervisor.
  • No version control — superseded sheets discarded when a changed formulation means both should have been retained for 30 years.

Key takeaways

  • SDS management means keeping an SDS for every hazardous chemical complete, current, accessible on every shift, and retained for the required period.
  • Accessibility is judged per work shift and per work area; electronic access is allowed as long as there are no barriers to immediate access.
  • The “30-year” rule comes from OSHA 1910.1020, not HazCom — you may keep the SDS or a record of the chemical’s identity, where, and when it was used; in the EU, REACH Article 36 sets a 10-year minimum.
  • Suppliers must issue updates and re-supply recipients of the last 12 months (EU); libraries must absorb HCS 2024 changes as deadlines phase in through 2028.
  • Manual management can be compliant but drifts; software is usually the difference at scale.

Sources

Frequently asked questions

What is SDS management?

SDS management is the ongoing process of collecting, organising, and maintaining a safety data sheet for every hazardous chemical in a workplace so that current versions are accessible to employees when they need them. In the United States it is a requirement of OSHA's Hazard Communication Standard (29 CFR 1910.1200); in the EU the equivalent duties sit in REACH. In practice it covers four things: having an SDS for each hazardous chemical, keeping each one current, making them readily accessible during every work shift, and retaining records for the required period.

How long do you need to keep an SDS?

The often-cited "30 years" does not come from the Hazard Communication Standard but from OSHA 29 CFR 1910.1020, which treats an SDS as an employee exposure record. You may either keep the SDS itself for 30 years or, alternatively, keep a record of the chemical's identity, where it was used, and when it was used for at least 30 years. If a supplier changes a product's formulation, both the old and new SDS should be kept for 30 years. In the EU, REACH Article 36 requires manufacturers, importers, downstream users, and distributors to keep relevant information — including SDSs — for at least 10 years after the substance or mixture was last made, imported, supplied, or used.

Are paper SDSs required, or is electronic access allowed?

Electronic access is allowed. OSHA 29 CFR 1910.1200(g)(8) permits electronic access and other alternatives to paper copies as long as there are no barriers to immediate employee access in each workplace — employees must know where to find the SDS, the system must be reliable, and a back-up should be available in case of a power or network failure. The requirement is that the SDS is readily accessible during each work shift, not that it is printed.

How often must SDSs be updated?

An SDS must reflect current information for the chemical. In the EU, REACH Article 31(9) requires suppliers to update an SDS without delay when new hazard or risk-management information becomes available, when an authorisation is granted or refused, or when a substance is added to the Candidate List — and to re-supply the updated version free of charge to anyone supplied in the preceding 12 months. In the US, employers must keep the most recently received version and replace an older one when a new SDS arrives, and classifications are changing under HCS 2024 as its deadlines phase in between 2026 and 2028 (see OSHA HCS 2024 Changes).

Who is responsible for managing SDSs in a workplace?

The employer. Under OSHA HCS the employer must maintain an SDS for each hazardous chemical and ensure employees can access it on every shift, while chemical manufacturers, importers, and distributors are responsible for authoring SDSs and supplying them free of charge to downstream customers and for issuing updated versions. In practice the work is often delegated to an EHS or safety manager, but the legal obligation rests with the employer.