OSHA Standards and Requirements: A Complete Reference

The Occupational Safety and Health Administration enforces a layered framework of federal standards that apply to nearly every private-sector employer in the United States, covering hazard control, recordkeeping, worker training, and equipment requirements across four distinct industry sectors. Understanding how those standards are structured — and how OSHA enforces them — is foundational to maintaining compliance across general industry, construction, maritime, and agriculture operations. This page provides a comprehensive reference covering OSHA's definitional scope, the mechanics of standards promulgation, enforcement triggers, classification boundaries, and the most common compliance misconceptions.

• Definition and scope
• Core mechanics or structure
• Causal relationships or drivers
• Classification boundaries
• Tradeoffs and tensions
• Common misconceptions
• Checklist or steps
• Reference table or matrix
• References

Definition and scope

OSHA was established by the Occupational Safety and Health Act of 1970 (29 U.S.C. § 651 et seq.) with the stated purpose of ensuring safe and healthful working conditions for working men and women by authorizing the enforcement of standards developed under the Act. The Act covers most private-sector employers and their workers, as well as some public-sector employers in states operating under OSHA-approved state plan programs.

The jurisdictional reach of OSHA is broad but not unlimited. Federal OSHA directly covers approximately 130 million workers at 8 million worksites according to OSHA's program overview. Employers excluded from OSHA coverage include self-employed individuals, immediate family members of farm employers, and workplaces regulated by other federal agencies under separate safety regimes (such as the Mine Safety and Health Administration for mining operations).

OSHA standards fall under four primary regulatory parts in the Code of Federal Regulations:

• General Industry: 29 CFR Part 1910
• Construction: 29 CFR Part 1926
• Maritime: 29 CFR Parts 1915–1919
• Agriculture: 29 CFR Part 1928

Where no specific standard applies to a recognized hazard, OSHA may cite employers under the General Duty Clause (Section 5(a)(1) of the OSH Act), which requires employers to maintain a workplace free from recognized hazards likely to cause death or serious physical harm.

The broader regulatory context for workplace safety situates OSHA within the full landscape of federal and state agencies governing worker protection.

Core mechanics or structure

OSHA issues standards through a formal rulemaking process governed by the Administrative Procedure Act. The process involves at minimum: publication of a proposed rule in the Federal Register, a public comment period (typically 30 to 90 days), review of comments, and publication of a final rule. Emergency Temporary Standards (ETS) bypass portions of this process but remain subject to legal challenge and must be followed by a permanent standard within 6 months (29 U.S.C. § 655(c)).

Standards specify employer obligations across five primary categories:

1. Engineering controls — Physical modifications to equipment, layout, or ventilation that eliminate or reduce hazard exposure at the source.
2. Administrative controls — Policies, work rotation schedules, and procedural changes that limit worker exposure duration or frequency.
3. Personal protective equipment (PPE) — Required when engineering and administrative controls are insufficient; governed by standards including 29 CFR § 1910.132.
4. Training requirements — Specific, verifiable instruction mandated for hazard classes including lockout/tagout (29 CFR § 1910.147), hazard communication (29 CFR § 1910.1200), and confined space entry (29 CFR § 1910.146).
5. Recordkeeping and reporting — Covered under 29 CFR Part 1904, requiring injury and illness logs (OSHA 300), incident summaries (OSHA 300A), and fatality reporting within 8 hours.

Enforcement is carried out through programmed inspections (targeting high-hazard industries by OSHA's Site-Specific Targeting program), unprogrammed inspections (triggered by fatalities, complaints, or referrals), and follow-up inspections after prior citations. Details of that process are covered in OSHA Inspection Process.

Causal relationships or drivers

Three primary factors drive an employer's OSHA compliance burden: industry classification, establishment size, and hazard profile.

Industry classification determines which CFR part applies and whether sector-specific standards exist. A construction employer at a multi-employer worksite, for instance, operates under 29 CFR Part 1926 and faces joint liability analysis that general industry employers do not.

Establishment size affects recordkeeping exemptions. Employers with 10 or fewer employees in low-hazard industries are partially exempt from routine OSHA 300 log maintenance under 29 CFR § 1904.1. However, all employers — regardless of size — must report fatalities within 8 hours and in-patient hospitalizations of 3 or more employees within 24 hours.

Hazard profile activates specific standards. Employers whose operations involve confined spaces, energy control, bloodborne pathogens, or toxic substance exposures above permissible exposure limits (PELs) face standards-specific written programs, medical surveillance requirements, and documented training. The presence of a recognized hazard is the operative trigger — not the mere possibility of one.

OSHA's enforcement priority ranking (as documented in its Field Operations Manual) places imminent danger situations first, fatalities and catastrophic events second, worker complaints third, programmed inspections fourth, and follow-up inspections fifth.

Classification boundaries

OSHA standards are not self-selecting — an employer must identify the correct regulatory part before determining applicable requirements. The classification framework follows four primary axes:

Sector: The four sectors (general industry, construction, maritime, agriculture) each have separate regulatory parts. Overlap occurs at construction sites performing general industry activities (e.g., HVAC work inside an occupied building), where the nature of the work — not merely the location — governs which standard applies.

Hazard type: Horizontal standards apply across sectors (e.g., the Hazard Communication Standard at 29 CFR § 1910.1200), while vertical standards apply to specific substances or operations (e.g., the Asbestos standard at 29 CFR § 1910.1001 for general industry or 29 CFR § 1926.1101 for construction).

Employer type: Controlling employer, creating employer, exposing employer, and correcting employer represent 4 distinct roles in multi-employer worksite analysis, each carrying different citation exposure under OSHA's multi-employer citation policy.

State plan coverage: 29 states and jurisdictions operate OSHA-approved state plans as of the date of OSHA's state plan directory. State plan standards must be at least as effective as federal OSHA standards but may impose stricter requirements.

Tradeoffs and tensions

Specificity vs. flexibility: Prescriptive standards (specifying exact guardrail heights, decibel limits, or respirator cartridge types) provide clear enforcement benchmarks but can lag technological change. Performance-based standards (requiring that a hazard be controlled to a specific outcome level) offer flexibility but create ambiguity in enforcement and litigation.

Compliance cost vs. penalty exposure: OSHA penalties for serious violations reach up to $16,131 per violation, and willful or repeated violations carry penalties up to $161,323 per violation (as adjusted by the Federal Civil Penalties Inflation Adjustment Act). Employers weighing abatement investment against citation risk must account for the possibility that uninspected hazards may produce injury costs and workers' compensation liability that exceed penalty ceilings.

Federal vs. state standards: In 22 states without state plans, federal OSHA is the sole enforcement authority. In the 29 state plan jurisdictions, employers face the possibility of standards that differ materially from federal requirements — including California's Cal/OSHA, which maintains stricter requirements on heat illness prevention and aerosol-transmissible diseases.

Voluntary programs vs. enforcement: OSHA's Voluntary Protection Programs (VPP) and consultation services offer employers paths to recognition and assistance outside the enforcement context, but VPP participation does not confer immunity from citation if a fatality or serious incident triggers a mandatory inspection.

Common misconceptions

Misconception 1: OSHA only applies to large employers.
The OSH Act establishes no minimum employee threshold for coverage. The partial recordkeeping exemption for employers with 10 or fewer employees in low-hazard industries does not exempt those employers from complying with safety standards, responding to inspections, or reporting fatalities.

Misconception 2: Compliance with a specific OSHA standard precludes a General Duty Clause citation.
OSHA's enforcement position, confirmed through the Occupational Safety and Health Review Commission (OSHRC), is that compliance with a specific standard does not automatically preclude a General Duty Clause citation if a recognized hazard beyond the standard's scope exists. The two are not mutually exclusive.

Misconception 3: OSHA inspectors must provide advance notice.
Under 29 U.S.C. § 657(f)(2), advance notice of an inspection is prohibited except in four narrow circumstances (imminent danger, after-hours inspection, complex inspections requiring specialist coordination, or where notice is required to ensure the employer and employee representative are present). Unauthorized advance notice by any person is subject to criminal penalty.

Misconception 4: An OSHA 300 log entry constitutes an admission of liability.
OSHA recordkeeping regulations at 29 CFR § 1904.0 state explicitly that recording a case does not mean the employer or worker was at fault, that an OSHA rule was violated, or that the worker is eligible for workers' compensation.

Misconception 5: Training delivered once satisfies all OSHA training requirements.
Refresh or retraining obligations exist under dozens of specific standards. Lockout/tagout retraining is required when the employer has reason to believe a worker lacks proficiency (29 CFR § 1910.147(c)(7)(iii)). Respiratory protection training is required annually (29 CFR § 1910.134(k)). Training records must document the content, trainer qualifications, and attendee identity.

Checklist or steps

The following sequence identifies the structural steps in establishing OSHA standards compliance for an establishment. This is a structural reference, not a substitute for professional compliance analysis.

1. Determine coverage — Confirm whether the establishment falls under federal OSHA or a state plan jurisdiction using OSHA's state plan directory.
2. Identify applicable CFR part — Match primary operations to general industry (1910), construction (1926), maritime (1915–1919), or agriculture (1928).
3. Conduct a hazard inventory — Identify all recognized hazards present, including those covered by specific standards and those potentially subject to the General Duty Clause. (See Hazard Identification and Assessment.)
4. Cross-reference applicable standards — For each identified hazard class, locate the specific standard subpart and determine whether a written program, engineering control specification, or training requirement applies.
5. Assess recordkeeping obligations — Confirm employee count and industry classification against the partial exemption criteria at 29 CFR § 1904.1; establish 300/300A/301 log infrastructure if required.
6. Document written programs — Standards including Hazard Communication, Lockout/Tagout, Respiratory Protection, and Emergency Action Plans require written programs. (See Written Safety Programs and Plans.)
7. Establish training records — Identify all standards imposing training requirements, document delivery dates, content covered, and trainer qualifications.
8. Implement reporting protocols — Establish internal procedures to ensure fatalities are reported to OSHA within 8 hours and in-patient hospitalizations of 3 or more workers within 24 hours, per 29 CFR § 1904.39.
9. Conduct periodic internal audits — Review OSHA 300 logs, training records, written programs, and physical hazard controls against current CFR requirements on at least an annual cycle.
10. Monitor rulemaking activity — Track Federal Register notices for proposed and final rules affecting applicable standards through regulations.gov or OSHA's rulemaking page.

Reference table or matrix

The table below maps the four OSHA-regulated sectors to their primary CFR citation, the regulatory instrument governing them, and three representative standards within each sector. This matrix supports initial standards identification; full subpart enumeration requires direct CFR review.