OSHA Compliance 101: A Plain-English Guide for Business Owners and Safety Managers

OSHA compliance — meeting the safety and health standards set by the Occupational Safety and Health Administration — is a legal requirement for nearly every private sector employer in the United States. OSHA and workplace safety obligations cover everything from written program requirements and OSHA compliance training to recordkeeping deadlines and inspection rights. Yet most small and mid-sized business owners never received a clear explanation of what OSHA workplace safety regulations actually require, what an OSHA compliance program looks like in practice, or what OSHA compliance services can help them build and maintain one.

This guide covers all of it in plain language — written for operators, not lawyers.

Who OSHA Applies To

OSHA applies to most private sector employers and their workers in all 50 states, the District of Columbia, and U.S. territories. Federal government workers are covered under a separate Executive Order. State and local government employees are not covered by federal OSHA, but may be covered by an OSHA-approved state plan. Beyond specific standards, OSHA’s General Duty Clause requires employers to provide a workplace free from recognized hazards likely to cause serious harm — even when no specific standard addresses the hazard directly.

State Plans vs. Federal OSHA

Twenty-two states and two territories operate OSHA-approved state plans that cover private and public sector workers. These states must meet or exceed federal OSHA requirements but may have additional or stricter rules. If you operate in a state plan state — including California, Michigan, Washington, and others — check your state’s requirements beyond the federal baseline.

Small Business Exemption

There is no blanket small business exemption from OSHA. Companies with 10 or fewer employees are exempt from some recordkeeping requirements — specifically the OSHA 300 log — but are still required to follow all applicable OSHA safety standards and are subject to inspection.

The 4 Categories of OSHA Violations and What Each Costs in 2026

OSHA issues citations when inspectors find violations of its standards. There is no cap on total penalties per inspection — each violation is cited separately, so a single inspection can produce multiple citations across multiple standards. Current maximums, effective January 15, 2025 and carrying into 2026:

Violation Type	Description	Max Penalty Per Violation	How It Applies
Other-Than-Serious	Technical violation; unlikely to cause serious harm	Up to $16,550	Per citation item
Serious	Substantial probability of injury or death	Up to $16,550	Per citation item
Willful	Intentional disregard of OSHA requirements	$11,524–$165,514	Per citation item
Repeat	Same or similar violation within 5 years	Up to $165,514	Per citation item
Failure to Abate	Uncorrected past abatement deadline	Up to $16,550/day	Accrues daily

 

A note on Failure to Abate: unlike the other categories, these penalties accrue daily from the abatement deadline until the violation is corrected. Willful violations can also trigger criminal referrals in cases involving fatalities.

Having a documented safety program — even an imperfect one — demonstrates good faith and typically reduces penalty amounts during the informal conference process. See how OSHA fines increased in 2025 and what that means for employers operating under the current penalty structure.

The OSHA Inspection Process Step by Step

Most employers never face an OSHA inspection. When one does happen, it typically follows one of these triggers: a programmed inspection in a targeted high-hazard industry, a fatality or severe injury report, an employee complaint, a referral from another agency, or a follow-up to verify a previously cited violation has been corrected.

When an OSHA inspector (Compliance Safety and Health Officer, or CSHO) arrives:

Step 1 — Opening Conference

The inspector presents credentials, explains the scope and reason for the inspection, and requests your OSHA 300 logs and written programs. You have the right to request a warrant, though most employers do not exercise this.

Step 2 — Walkaround

The inspector tours the workplace, observes conditions, takes photos, and may interview employees privately. An employer representative should accompany the inspector throughout.

Step 3 — Document Review

The inspector reviews OSHA 300 log, training records, written programs, and equipment inspection logs.

Step 4 — Closing Conference

The inspector summarizes preliminary findings. Citations, if any, are not issued at this meeting — they follow later by mail.

Step 5 — Citation and Abatement

If violations are found, citations specify the standard violated, the proposed penalty, and a deadline to correct each violation. Employers have 15 working days to contest. See the complete guide to managing the OSHA visit from opening conference through abatement.

The 10 Most Commonly Cited OSHA Standards

OSHA’s most-cited standards list is consistent year to year. If any of these standards apply to your operation and you don’t have a documented program addressing them, that’s where to start.

Construction (29 CFR 1926)

Fall protection, scaffolding, ladders, hazard communication, PPE, eye and face protection, excavation, respiratory protection, electrical — general requirements, and fall protection training.

General Industry (29 CFR 1910)

Hazard communication, respiratory protection, lockout/tagout, powered industrial trucks (forklifts), ladders, electrical — general requirements, machine guarding, PPE — eye and face, walking-working surfaces, and bloodborne pathogens.

OSHA Recordkeeping Requirements

OSHA’s recordkeeping rules apply to employers with 11 or more employees in most industries.

OSHA 300 Log

Must be maintained throughout the year, recording all work-related injuries and illnesses that meet OSHA’s recordability criteria: days away from work, restricted duty, medical treatment beyond first aid, loss of consciousness, or diagnosis of a significant condition by a healthcare professional.

OSHA 300A Summary

A summary of the prior year’s incidents must be posted in a visible location from February 1 through April 30 each year. The summary must be signed by a company executive.

Electronic Submission (ITA)

Employers with 100 or more employees in high-hazard industries are required to submit 300A data electronically through OSHA’s Injury Tracking Application (ITA) by March 2 each year. Some employers with 20–249 employees in designated industries also have submission requirements. See the complete guide to the March 2 OSHA reporting deadline.

Building a Minimum Viable OSHA Compliance Program

Step 1 — Identify Your Applicable Standards

Not all standards apply to all employers. Start with the standards that clearly apply to your industry and operations. The most-cited list above is a useful starting point.

Step 2 — Write the Required Programs

For each applicable standard that requires a written program — hazard communication, lockout/tagout, fall protection, respiratory protection, emergency action plan — document the policy that reflects how your operation actually works.

Step 3 — Train Your Employees

Required training under OSHA standards must be documented. Who was trained, on what, when, by whom. Completions on file. Expirations tracked.

Step 4 — Set Up Your Recordkeeping

OSHA 300 log maintained and current. 300A posted February 1 through April 30. Incident forms completed within 7 days of a recordable event.

Step 5 — Establish an Inspection Cadence

Regular workplace inspections that identify hazards, document findings, and drive corrective actions to closure. This is both a compliance best practice and your documented evidence of program activity.

Step 6 — Know Your Reporting Obligations

Fatalities within 8 hours. Hospitalizations, amputations, eye losses within 24 hours. Know the OSHA reporting number and have it accessible before you need it.

When to Get Professional Help

OSHA compliance is manageable for most businesses with the right framework. Outside expertise is worth the investment when:

You’ve Received a Citation

Citation response, abatement negotiation, and informal conference preparation have real stakes. See the OSHA mediation steps for contesting a citation. 

You’ve Had a Serious Incident or Fatality

OSHA’s investigation process in these situations is complex, and early documentation and response decisions matter significantly. See how OSHA crisis response works. 

You Have No Formal Program

A safety management company can govern and administer your OSHA compliance program on an ongoing basis — identifying your obligations, building the documentation structure, assigning required training, and keeping your records current. Your team carries out the work. The program structure ensures the right things are happening on schedule.

Frequently Asked Questions

Does OSHA inspect small businesses?

Yes. There is no size threshold that exempts a business from OSHA inspection. Smaller employers may be lower priority for programmed inspections, but complaints, fatalities, and severe injuries trigger inspections regardless of company size. OSHA also conducts free, confidential consultation programs for small businesses — separate from enforcement.

Can I refuse an OSHA inspection?

You can request that an inspector obtain an inspection warrant before entering, which is a legal right under the Fourth Amendment. However, OSHA can typically obtain a warrant quickly, and exercising this right rarely improves your position. What you should do is have a designated representative accompany the inspector and document everything the inspector observes.

How much do OSHA fines cost?

Current maximums (effective January 2026): serious and other-than-serious violations up to $16,550 per violation; willful and repeat violations up to $165,514 per violation; failure to abate up to $16,550 per day past the abatement deadline. There is no cap on total penalties per inspection — each violation is cited separately. Penalties are reduced based on hazard gravity, compliance history, good faith, and company size.

What is the difference between state OSHA and federal OSHA?

Federal OSHA sets the minimum standards that apply nationally. Twenty-two states and two territories operate OSHA-approved state plans that must be at least as effective as federal OSHA and may have additional or stricter requirements. If your business operates in a state plan state, you are subject to that state’s standards, not federal OSHA’s standards directly.

How long do I have to fix an OSHA citation?

OSHA citations specify an abatement deadline — the date by which the cited violation must be corrected. Abatement periods vary by hazard and can range from immediate for imminent danger conditions to several months for complex hazards. If you cannot meet the deadline, file a petition for modification of abatement (PMA). You have 15 working days from receipt to contest the citation.

Want a free compliance gap assessment? → Contact Us