Regulatory Context for Workplace Safety

Federal and state law creates an overlapping grid of enforceable obligations that governs nearly every employment relationship in the United States where workers face physical, chemical, biological, or ergonomic hazards. The Occupational Safety and Health Act of 1970 forms the statutory backbone of this structure, but it operates alongside state-plan programs, voluntary consensus standards, and sector-specific agency rules that each impose distinct compliance demands. Understanding which instruments apply — and where their authority begins and ends — is foundational to building a safety management system that holds up under enforcement scrutiny. The home resource for workplace safety topics situates this regulatory context within the full scope of occupational health and safety practice.

Primary regulatory instruments

The Occupational Safety and Health Administration (OSHA), operating under the U.S. Department of Labor, enforces the OSH Act of 1970 (29 U.S.C. § 651 et seq.) through two primary regulatory vehicles: industry-specific standards and the General Duty Clause.

Federal OSHA standards are codified in the Code of Federal Regulations across four major groupings:

1. 29 CFR Part 1910 — General Industry standards covering manufacturing, warehousing, healthcare, retail, and service operations
2. 29 CFR Part 1926 — Construction Industry standards applying to all construction, alteration, and repair work
3. 29 CFR Part 1915 — Maritime standards covering shipyard employment
4. 29 CFR Part 1928 — Agriculture standards covering field operations and agribusiness

The General Duty Clause (Section 5(a)(1) of the OSH Act) extends OSHA's reach beyond codified standards by requiring employers to furnish a workplace free from recognized hazards likely to cause death or serious physical harm — even when no specific standard addresses the hazard.

Beyond OSHA's regulatory framework, voluntary consensus standards issued by the American National Standards Institute (ANSI) and the National Fire Protection Association (NFPA) carry regulatory weight in two ways: OSHA incorporates some by reference into its standards (making them mandatory), and courts and enforcement bodies treat them as evidence of industry recognition when applying the General Duty Clause. The ANSI and NFPA standards overview details how these instruments interact with federal rules. At the international level, ISO 45001, published by the International Organization for Standardization, provides a management system framework that aligns with but does not replace OSHA obligations.

Compliance obligations

Compliance under the OSH Act operates on two levels: general obligations that apply to every covered employer, and standard-specific obligations triggered by industry classification, task type, or hazard presence.

General obligations for all covered employers include:

• Providing a hazard-free workplace (General Duty Clause)
• Complying with all applicable OSHA standards
• Maintaining injury and illness records under 29 CFR Part 1904 — required for employers with 11 or more employees in most industries
• Posting the OSHA "Job Safety and Health: It's the Law" poster at each worksite
• Allowing OSHA inspectors access during the inspection process
• Notifying OSHA within 8 hours of a work-related fatality and within 24 hours of any in-patient hospitalization, amputation, or eye loss (29 CFR § 1904.39)

Standard-specific obligations layer on top of these baseline requirements. An employer operating a facility with permit-required confined spaces must implement a written program under 29 CFR § 1910.146. An employer whose workers face energy-control hazards must establish procedures compliant with lockout/tagout rules at 29 CFR § 1910.147. Fall protection requirements at 29 CFR § 1926.502 mandate guardrails, personal fall arrest systems, or safety nets when workers operate at heights of 6 feet or more in construction (4 feet in general industry).

Penalties for willful or repeated violations can reach $156,259 per violation as of the OSHA penalty adjustment published by the Department of Labor for fiscal year 2023 (OSHA Penalties); serious violations carry a maximum of $15,625 per violation under the same schedule. The OSHA citations and penalties framework details how these figures are calculated and contested.

Exemptions and carve-outs

The OSH Act does not cover every worker in the United States. Four categories fall outside federal OSHA jurisdiction:

1. Self-employed individuals with no employees — OSHA's employer-focused mandate does not reach sole proprietors working alone
2. Immediate family members of farm employers on family-owned and -operated farms with no outside workers
3. Federal agency employees — covered instead by Executive Order 12196 (1980) and 29 CFR Part 1960, which assigns safety responsibility to each federal agency under DOL oversight
4. State and local government employees — exempt from federal OSHA unless the state operates an OSHA-approved state plan program

As of 2024, 29 states and territories operate OSHA-approved state plans (OSHA State Plans), of which 22 cover both private-sector and state/local government workers. State plans must be "at least as effective" as the federal program, but they may — and frequently do — adopt standards that are more stringent. California's Division of Occupational Safety and Health (Cal/OSHA), for example, maintains an Injury and Illness Prevention Program (IIPP) requirement under California Labor Code § 6401.7 with no direct federal equivalent.

Mining operations represent a separate federal carve-out: the Mine Safety and Health Administration (MSHA), operating under 30 CFR, holds exclusive jurisdiction over surface and underground mining, displacing OSHA authority at covered sites (30 U.S.C. § 801 et seq.).

Where gaps in authority exist

Even a comprehensive regulatory structure leaves identifiable zones where enforcement authority is ambiguous, contested, or functionally absent.

Emerging hazard lag is the most structurally persistent gap. OSHA's standard-setting process under Section 6 of the OSH Act requires notice-and-comment rulemaking, feasibility analysis, and often multi-year timelines. Recognized hazards for which no specific standard has been promulgated — heat stress in general industry is a frequently cited example — can only be addressed through General Duty Clause citations, which require OSHA to demonstrate employer recognition of the hazard and availability of a feasible abatement method. This creates a higher evidentiary burden than standard-specific enforcement.

Multi-employer worksites present a second structural gap. OSHA's Multi-Employer Citation Policy (OSHA Directive CPL 02-00-124) allows the agency to cite controlling, creating, correcting, and exposing employers, but the allocation of compliance responsibility among general contractors, subcontractors, and staffing agencies involves complex fact-specific determinations that litigation frequently contests.

Temporary and staffing agency workers occupy a compliance boundary where both the host employer and the staffing agency carry obligations — the host for site-specific hazard control and the staffing agency for general safety training and recordkeeping — but the practical division is rarely documented with precision, leaving workers in a coverage gap documented by OSHA's Temporary Worker Initiative (launched in 2013).

Psychosocial hazards, including workplace violence and chronic stress, lack a standalone general industry standard. OSHA has issued guidelines for healthcare and social service settings, but guidelines carry no independent enforcement authority. The absence of a specific standard means enforcement depends entirely on General Duty Clause theory or state-plan rulemaking — a distinction that directly affects the employer rights and responsibilities calculus and the practical scope of employee rights under OSHA.