Short Answer

A SAP must keep copies of SAP reports for five years. An employer must keep the SAP reports it receives for five years from the date received. 49 CFR § 40.311(g)-(h) The SAP must also maintain clinical records consistent with applicable professional and legal requirements, separate from this five year report retention rule.

Detailed Explanation

The SAP's Retention Obligation

Under Part 40, a SAP must keep copies of the reports sent to employers for five years. The SAP must also maintain clinical records according to applicable law, and must make records available to DOT agency representatives and the National Transportation Safety Board (NTSB) upon request. 49 CFR § 40.311(g)

This means two overlapping but distinct obligations exist for a SAP: retaining the formal reports for five years under Part 40, and separately maintaining underlying clinical records consistent with the professional and legal standards that already apply to the SAP's licensed practice (for example, state licensing board rules or HIPAA, where applicable). Specifics of clinical record retention beyond the five year SAP report requirement can vary by state and by the SAP's licensing board, so confirm details with the applicable board if you have a specific question.

The Employer's Retention Obligation

An employer must keep the SAP reports it receives for five years from the date received, not five years from the date of the underlying violation. 49 CFR § 40.311(h) This is a distinct clock from the SAP's own five year retention period, though in practice the two periods often overlap closely.

Why Retention Matters

Both retention requirements exist so that DOT agencies and, where applicable, the NTSB, can verify that the Return to Duty process was properly documented and followed. This matters most in situations involving audits, investigations following an accident, or a driver's employment history moving between DOT regulated employers.

Applicable Regulations

• 49 CFR § 40.311(g), requiring the SAP to keep report copies for five years and maintain clinical records per applicable law
• 49 CFR § 40.311(h), requiring the employer to keep received reports for five years from receipt

Professional Observation

In my experience, employees sometimes assume their SAP records disappear once they return to safety sensitive duty. They don't, at least not for five years. It's worth keeping your own copies of anything you receive from your SAP or your employer during this process, since your own file can be useful if a question about your history ever comes up later.

Common Misconceptions

Misconception

SAP reports are destroyed once an employee successfully completes follow up testing.

Reality

Both the SAP and the employer are required to retain the relevant reports for five years, regardless of when the employee completes follow up testing. 49 CFR § 40.311(g)-(h)

Why the Confusion Occurs

Once an employee is back on the job and testing negative, the process can feel finished. The retention requirement exists precisely so a documented record survives beyond that point.

Frequently Asked Questions

Can I get a copy of my own SAP report?

Yes, and in some situations the SAP is required to send you a report directly, for example if you have no current employer. 49 CFR § 40.311(f) Ask your SAP or your DER about obtaining a copy for your own records.

Do these records ever get shared outside the employer and the SAP?

The regulation specifically allows access by DOT agency representatives and the NTSB upon request. 49 CFR § 40.311(g) Broader confidentiality protections may also apply depending on the SAP's professional licensing requirements; confirm specifics with your SAP if you have concerns.

Related Articles

• What Information Is Included in a SAP Report?
• What Happens During the Follow Up SAP Assessment?

Primary Authorities/Sources

• 49 CFR § 40.311, SAP report requirements and retention

Questions About Your Records?

If you need help understanding what records exist about your Return to Duty process, a qualified SAP or your DER can help point you in the right direction.

Schedule an Initial SAP Assessment