OSHA Compliance Basics for Small Businesses

The Occupational Safety and Health Act of 1970 establishes the federal framework for workplace safety in the United States. It applies to most private sector employers and their workers, and it creates obligations that business owners often underestimate until an inspection, an accident, or an employee complaint brings them into focus. Understanding OSHA’s core requirements — and where your business has gaps — is both a legal obligation and a sound business practice.

Which Employers Are Covered

OSHA covers most private sector employers with one or more employees. Federal government agencies are covered by OSHA. Most state and local government employees are covered by state OSHA plans, not the federal program. Self-employed individuals with no employees are not covered. The size of a business affects OSHA’s compliance assistance approach and record-keeping requirements, but not the fundamental obligation to provide a safe workplace.

Twenty-nine states and territories operate their own OSHA-approved state plans, which apply to both private and public sector employers within those states. State plans must be at least as effective as the federal OSHA program, and many are more stringent. California, for example, operates Cal/OSHA, which has more comprehensive requirements in several areas, including heat illness prevention and workplace violence prevention.

The General Duty Clause

The most fundamental OSHA obligation is the General Duty Clause, which requires employers to provide a workplace ‘free from recognized hazards that are causing or are likely to cause death or serious physical harm’ to employees. The General Duty Clause is a catch-all provision that applies even where no specific OSHA standard addresses a particular hazard. OSHA uses it to cite employers for serious hazards that fall outside the specific standards, including workplace violence, extreme heat exposure, and other emerging risks.

Specific OSHA Standards

In addition to the General Duty Clause, OSHA has issued hundreds of specific standards covering particular industries and hazards. The major categories of OSHA standards include the general industry standards (29 CFR Part 1910), the construction standards (29 CFR Part 1926), the maritime standards, and the agricultural standards. General industry standards cover a broad range of hazards relevant to office, retail, service, and manufacturing environments, including electrical safety, hazard communication (the right-to-know standard), personal protective equipment, machine guarding, lockout/tagout for energy control, respiratory protection, and emergency action plans.

Hazard Communication: The Right-to-Know Standard

The Hazard Communication Standard (HazCom) — one of the most widely applicable OSHA requirements — requires employers to establish a written hazard communication program, maintain Safety Data Sheets (SDS) for all hazardous chemicals in the workplace, label containers of hazardous chemicals properly, and train employees on the hazards of the chemicals they work with and how to protect themselves. HazCom applies to virtually any employer that uses cleaning products, lubricants, paints, solvents, or other chemicals in the workplace — which is most employers.

Record-Keeping Requirements

OSHA requires employers with 11 or more employees in most industries to maintain records of workplace injuries and illnesses on OSHA Forms 300, 300A, and 301. The OSHA 300 Log records all work-related injuries and illnesses that result in days away from work, restricted work, job transfer, medical treatment beyond first aid, loss of consciousness, or diagnosis by a healthcare professional. The OSHA 300A annual summary must be posted in the workplace from February 1 through April 30 each year. Employers in certain low-hazard industries (retail, finance, insurance, real estate, and others) are partially exempt from these requirements.

Electronic Reporting

Establishments with 250 or more employees that are required to keep OSHA records must electronically submit their Form 300A data to OSHA annually. Establishments with 20 to 249 employees in certain high-hazard industries must also submit Form 300A data electronically. An updated rule effective in 2024 requires establishments with 100 or more employees in certain high-hazard industries to submit detailed case-by-case injury and illness data (Forms 300 and 301) to OSHA electronically each year.

OSHA Inspections

OSHA compliance officers may inspect workplaces without advance notice in most cases. Inspections are triggered by imminent danger situations, fatalities and catastrophes (deaths or hospitalizations that must be reported to OSHA within 8 hours of a fatality and 24 hours of an in-patient hospitalization), formal employee complaints, referrals from other agencies, programmed inspections targeting high-hazard industries, and follow-up inspections to verify correction of previously cited violations. Employers have the right to require a warrant before allowing inspection in some circumstances, though in practice most compliance inspections proceed without one.

Penalties

OSHA penalties are adjusted annually for inflation. For 2026, the maximum penalty for a serious violation is $16,131 per violation. Willful or repeated violations can be assessed at up to $161,323 per violation. Other-than-serious violations can be assessed up to $16,131 per violation, though OSHA typically reduces penalties significantly for small employers, good faith efforts at compliance, and prompt correction of cited hazards. Failure to abate a cited hazard after a correction deadline can result in daily penalties.

The Bottom Line

OSHA compliance is not just about avoiding citations and penalties — it is about keeping workers safe and avoiding the human and financial costs of workplace accidents. Small business owners should start with an honest hazard assessment of their workplace, identify which OSHA standards apply to their industry and operations, train employees on recognized hazards and how to report them, and develop written programs for the standards that require them. OSHA’s website includes free compliance assistance resources, and OSHA’s free on-site consultation program — separate from enforcement — can help small businesses identify and correct hazards without the risk of citations.