OSHA compliance means following the safety and health standards set by the Occupational Safety and Health Administration — and making sure your workplace doesn’t injure or kill anyone. For employers specifically, that translates to: identifying the hazards in your operation, training workers before they’re exposed to those hazards, keeping injury records, and following whatever standards apply to your industry.
That’s the short version. The longer version is what this guide covers.
What Is OSHA, and Does It Actually Apply to Your Business?
The OSH Act of 1970 created OSHA and handed it one sweeping mandate: protect workers. The mechanism for doing that is a mix of specific standards (rules for particular hazards) and a catch-all requirement called the General Duty Clause, which says every employer must provide a workplace free from recognized hazards likely to cause serious injury or death.
That General Duty Clause matters more than most employers realize. It means OSHA can cite you for a hazard even if there’s no specific standard that addresses it. If your workers face a known danger and you haven’t addressed it, that’s citable — full stop.
As for who OSHA covers: most private-sector employers in all 50 states, plus federal employees. One worker. Twenty workers. Five hundred workers. It doesn’t matter. Small businesses are not exempt. The only real carve-outs are self-employed individuals with no employees, immediate family members on farm operations, and workers already regulated by other federal safety agencies like the Mine Safety and Health Administration.
About half the states run their own OSHA-approved programs — California (Cal/OSHA), Washington (L&I), Michigan (MIOSHA), and others. These state plans have to be at least as protective as federal OSHA, and some are stricter. If you operate in one of those states, you deal with the state agency, not the federal one.
Which OSHA Standards Apply to Your Operation?
OSHA splits its rules by industry type. Two sets cover the vast majority of American workplaces.
General Industry: 29 CFR Part 1910
Part 1910 is for everyone who isn’t in construction — manufacturing, warehousing, healthcare, retail, food processing, offices, labs. It’s a long list of standards, but a handful get cited over and over again:
Hazard Communication. If your workers handle chemicals, you need a written HazCom program, labeled containers, Safety Data Sheets for every chemical on-site, and documented training. OSHA is updating HazCom in 2026 to align with GHS Revision 7, which changes how some labels and SDSs are formatted. If your current program references the old GHS Rev. 3, it needs updating. Coggno’s Introduction to GHS and Hazard Communication course covers the employee training requirement, and you can browse the full HazCom training catalog for program-level options.
Lockout/Tagout. Maintenance and servicing work is where workers get caught in machinery. LOTO requires documented procedures for every piece of equipment where unexpected energization is a hazard. It’s one of the most-cited standards every year because written procedures are easy to audit. Browse Coggno’s Lockout/Tagout training courses to get your maintenance team properly trained and documented.
PPE. Employers must assess the workplace, determine what protective equipment is needed, and provide it at no cost. “Employees should bring their own gloves” isn’t compliant. Coggno’s PPE General Overview course walks employees through selection, inspection, and proper use, and the full PPE training catalog covers equipment-specific needs.
Emergency Action Plans. Any employer with 10 or more employees needs a written EAP covering evacuation, fire response, and employee accountability. If you have fewer than 10, a verbal plan is technically acceptable — but having it in writing is still good practice.
Bloodborne Pathogens. Required for any worker who could reasonably encounter blood or other potentially infectious materials on the job. Healthcare is the obvious one, but janitorial staff, school nurses, and first aid responders qualify too. Coggno offers a dedicated Bloodborne Pathogens training course that satisfies the annual retraining requirement.
Electrical safety, walking and working surfaces, machine guarding, and respiratory protection round out the perennial top-ten cited standards for general industry.
Construction: 29 CFR Part 1926
Part 1926 covers construction, alteration, and repair work — which OSHA defines broadly enough that it catches a lot of operations people don’t expect. The big ones are fall protection (the single most-cited OSHA standard across all industries, every year), scaffolding, excavation and trenching, crane and rigging operations, and electrical safety.
Construction is different from general industry in one important way: the hazards change constantly. A general industry plant looks more or less the same from week to week. A job site at framing looks nothing like that same site at finish work. That’s why OSHA inspection rates and citation rates are so high in construction — the dynamic environment creates new exposures faster than most companies can track them.
One practical note: if you run a construction company that also has a fabrication shop or a warehouse, Part 1910 governs those fixed operations and Part 1926 governs the field work. Both apply. When they overlap, OSHA uses a specific-over-general rule — the more specific standard wins.
What Does OSHA Actually Require You to Do Day-to-Day?
Beyond following the specific standards, a few operational requirements apply to almost every employer.
Training — Before Exposure, Not After an Incident
There’s no master OSHA training list. Requirements are embedded in individual standards, and they vary. HazCom training happens before workers handle chemicals. Respiratory protection training includes medical evaluation and fit testing before anyone puts on a respirator. Forklift operators have to be trained and evaluated before they get the keys.
What they all have in common: training must be in a language and vocabulary the employee understands, must cover the specific hazards in your workplace (not just generic safety content), and must be documented. That last part matters during inspections. Telling an OSHA inspector “we train everyone” without records to prove it is essentially the same as not training.
Injury Recordkeeping
Employers with 10 or more workers in most industries have to maintain OSHA recordkeeping forms: the 300 Log (the running list of recordable injuries and illnesses), the 300A Summary (the annual summary), and the 301 Incident Report (the detail form for each case). The 300A has to be posted in your workplace every year from February 1 through April 30.
In 2026, OSHA’s electronic submission requirements expanded. If you have 100 or more employees in a high-hazard industry, you now submit 300 Log data electronically through OSHA’s Injury Tracking Application. Establishments with 20 or more employees in certain industries submit 300A data electronically. If you’re not sure whether your NAICS code puts you in a covered category, OSHA’s website has a lookup tool.
Posting and Reporting
Every covered employer must post the OSHA “It’s the Law” poster at each worksite — visible, not stuffed in a break room cabinet. Failure to post is citable, and it’s an easy one for inspectors to spot on a walkthrough.
On the reporting side: any work-related fatality gets reported to OSHA within 8 hours. Hospitalizations, amputations, and eye losses within 24 hours. You can call the 24-hour hotline (1-800-321-OSHA), contact your local area office, or report online. Do not wait to see how the situation develops — the clock starts when you know about the incident.
Non-Retaliation
Workers have the right to raise safety concerns, file complaints, and participate in OSHA inspections without being fired, demoted, or otherwise punished for it. OSHA enforces this under Section 11(c) of the OSH Act. Retaliation cases tend to get OSHA’s attention quickly and can escalate beyond a standard inspection.
What Are the Actual Fines?
OSHA adjusts penalties annually. As of 2026:
Serious violations — up to $16,550 per violation. A serious violation is one where there’s a real chance of death or serious physical harm and the employer knew or should have known about it.
Willful or repeat violations — up to $165,514 per violation. Willful means you knew about the requirement and chose to ignore it. Repeat means OSHA cited you for the same thing within the last five years. Either way, expect the maximum.
Failure to abate — up to $16,550 per day past the correction deadline. This one adds up fast.
Beyond the dollar amounts: OSHA citations are public record and they stay on the record. Clients, insurers, bonding companies, and workers’ compensation carriers look at OSHA history. Repeat and willful violations can also trigger criminal referrals when a worker death is involved.
Penalty reductions are available — 20% for employers with a clean prior inspection history, 15% for correcting hazards on the spot. Good-faith compliance efforts also factor in. But the best strategy is obviously not getting cited in the first place.
How Do You Actually Build a Compliant Workplace?
Compliance isn’t a project you finish. It’s an ongoing part of how you run the operation.
Start With a Hazard Assessment
Walk the floor. Look at what people are actually doing, not what the job description says they do. Identify the physical, chemical, and ergonomic hazards in each work area. Several OSHA standards — PPE, respiratory protection, bloodborne pathogens — require a documented hazard assessment as the starting point for the program.
Build Written Programs Where OSHA Requires Them
HazCom, Lockout/Tagout, Respiratory Protection, Emergency Action Plans, and others require written programs. The programs need to describe your actual procedures, name the people responsible, and reflect your specific workplace. A downloaded template that hasn’t been customized doesn’t cut it. OSHA inspectors read these documents and they know what a real program looks like.
Train People Before They’re Exposed
New hire orientation covers the hazards in each role. Refresher training happens when procedures change, when someone is assigned new tasks, or when there’s reason to think they don’t actually understand the requirements. The “we did training at onboarding” answer doesn’t work if someone hasn’t touched the relevant task in two years.
For businesses with multiple locations or high turnover, online compliance training is the practical solution. Employees complete courses on their own schedule, and you get automatic completion records without chasing paper sign-in sheets. Coggno’s OSHA 10: General Industry covers the foundational hazard awareness every general industry worker needs. The OSHA 30: Construction Industry course goes deeper — it’s built for supervisors and safety leads who need to recognize hazards across the full range of construction activities.
Keep Records You Can Actually Find
Training records, injury logs, inspection checklists, equipment certifications — OSHA inspectors will ask for records going back years. The companies that handle inspections well aren’t necessarily more compliant than anyone else; they’re just better organized. A filing system you can actually navigate under pressure is worth building now.
Watch for 2026 Changes
Three areas are active right now. The Heat Illness Prevention standard is moving toward a federal rule — if your workers are exposed to heat, indoors or out, this one is coming. HazCom is updating to GHS Revision 7, which affects labels and SDSs for many chemical manufacturers and downstream users. And electronic recordkeeping requirements Coggno’s Accident Investigation for Supervisors covers how to document incidents properly and identify root causes before OSHA asks. expanded at the start of 2026 for large and high-hazard employers.
What Training Does Your Business Actually Need?
It depends on your industry and what your workers are exposed to. A 20-person metal fabrication shop has different requirements than a 20-person medical office. But most employers — regardless of industry — need training that covers at minimum: chemical hazard communication, emergency procedures, PPE selection and use, and how to report injuries and near-misses.
Construction adds fall protection, scaffolding, excavation awareness, and equipment-specific training on top of those basics. Healthcare adds bloodborne pathogens and respirator programs. Food processing has its own set of sanitation and chemical handling requirements.
Coggno’s OSHA compliance course catalog is organized by standard and industry, so you can build a training matrix that maps to your actual requirements rather than buying courses you don’t need.
Get Your Team Trained — Without the Paperwork Headache
If you’re dealing with the recordkeeping burden of managing training across a team, Coggno’s platform handles the tracking automatically. Workers complete courses online, certificates generate on completion, and you have an audit-ready record without chasing anyone down. Browse the full OSHA compliance course catalog at Coggno — organized by standard and industry — to build a training matrix that maps to your actual requirements.
Frequently Asked Questions About OSHA Compliance
Who does OSHA apply to?
Most private-sector employers and their employees across all 50 states, DC, and US territories. Federal employees are covered too. Self-employed individuals with no employees are not covered, nor are immediate family members working on farm operations.
What’s the difference between OSHA 10 and OSHA 30?
OSHA 10 is a 10-hour entry-level program — it’s designed for workers who need foundational hazard awareness and an understanding of their rights on the job. OSHA 30 is a 30-hour program for supervisors, managers, and safety professionals who need to identify hazards, manage compliance programs, and understand how OSHA inspections work.
Can OSHA show up without warning?
Yes. OSHA does not need to give advance notice. Inspections happen after fatalities or serious injuries, in response to worker complaints, as part of programmed enforcement in high-hazard industries, and as follow-ups to prior citations. If an inspector shows up, you can ask to see their credentials and request a brief delay to get your safety manager on-site — but you cannot refuse entry.
How long do I have to fix a violation after a citation?
OSHA sets an abatement deadline on each citation — it can range from immediate to several months depending on how complex the fix is. You must notify OSHA when the hazard is corrected. Miss the deadline and you’re looking at Failure to Abate penalties of up to $16,550 per day until it’s resolved.
Does online OSHA training satisfy OSHA requirements?
For most awareness and procedural training, yes — provided the course covers the required content and employees have a way to ask questions and get answers. Some standards require hands-on components that can’t be done online: respirator fit testing, forklift operator evaluations, and confined space entry drills, for example. Online training from an accredited provider handles the knowledge piece; the practical components still need to happen in person.
FAQ
Who does OSHA apply to?
Most private-sector employers and their employees across all 50 states, DC, and US territories. Federal employees are covered too. Self-employed individuals with no employees are not covered, nor are immediate family members working on farm operations.
What's the difference between OSHA 10 and OSHA 30?
OSHA 10 is a 10-hour entry-level program — it’s designed for workers who need foundational hazard awareness and an understanding of their rights on the job. OSHA 30 is a 30-hour program for supervisors, managers, and safety professionals who need to identify hazards, manage compliance programs, and understand how OSHA inspections work.
Can OSHA show up without warning?
Yes. OSHA does not need to give advance notice. Inspections happen after fatalities or serious injuries, in response to worker complaints, as part of programmed enforcement in high-hazard industries, and as follow-ups to prior citations. If an inspector shows up, you can ask to see their credentials and request a brief delay to get your safety manager on-site — but you cannot refuse entry.
How long do I have to fix a violation after a citation?
OSHA sets an abatement deadline on each citation — it can range from immediate to several months depending on how complex the fix is. You must notify OSHA when the hazard is corrected. Miss the deadline and you’re looking at Failure to Abate penalties of up to $16,550 per day until it’s resolved.
Does online OSHA training satisfy OSHA requirements?
For most awareness and procedural training, yes — provided the course covers the required content and employees have a way to ask questions and get answers. Some standards require hands-on components that can’t be done online: respirator fit testing, forklift operator evaluations, and confined space entry drills, for example. Online training from an accredited provider handles the knowledge piece; the practical components still need to happen in person
