Who Does OSHA Apply To?

Every employer with at least one employee falls under OSHA’s jurisdiction. That includes part-time workers, seasonal staff, and temporary hires. The only exceptions: self-employed individuals with zero employees, farms where only immediate family members work, and workplaces already regulated by another federal agency (like mining operations under MSHA).

Small businesses often assume OSHA doesn’t apply to them. That assumption is wrong, and it’s expensive. A company with five employees faces the same standards as one with 500. The difference is that small businesses with 10 or fewer employees in certain low-hazard industries are exempt from routine OSHA inspections and recordkeeping requirements under 29 CFR 1904. But they’re still required to comply with all safety standards and report severe injuries.

The General Duty Clause

Section 5(a)(1) of the OSH Act requires employers to provide a workplace “free from recognized hazards that are causing or are likely to cause death or serious physical harm.” This is OSHA’s catch-all. Even if no specific standard covers a hazard in your workplace, the General Duty Clause still applies.

OSHA uses this clause frequently against small businesses that assume they’re too small or too low-risk to worry about compliance. If a hazard exists and you know about it (or should know about it), you’re responsible for addressing it.

Industry-Specific Requirements

General Industry (29 CFR 1910)

If your business operates in manufacturing, warehousing, retail, healthcare, or office environments, Part 1910 applies. This covers the broadest range of employers and includes standards for:

• Walking-working surfaces and fall protection (1910 Subpart D)
• Exit routes and emergency action plans (1910 Subpart E)
• Powered platforms and vehicle-mounted work platforms (1910 Subpart F)
• Occupational health and environmental controls (1910 Subpart G)
• Hazardous materials handling (1910 Subpart H)
• Personal protective equipment (1910 Subpart I)
• Machine guarding (1910 Subpart O)
• Electrical safety (1910 Subpart S)

Construction (29 CFR 1926)

Construction employers face a separate, more extensive set of standards. Even if construction isn’t your primary business, any time your employees perform construction-type activities, Part 1926 applies. Key areas include:

• Fall protection (1926 Subpart M) with a 6-foot trigger height
• Scaffolding (1926 Subpart L)
• Electrical safety (1926 Subpart K)
• Excavations (1926 Subpart P)
• Stairways and ladders (1926 Subpart X)
• Steel erection (1926 Subpart R)
• Cranes and derricks (1926 Subpart CC)

Construction standards are generally stricter than general industry. Fall protection triggers at 6 feet in construction versus 4 feet in general industry. Scaffolding has its own dedicated subpart. If your small business does any construction work, even occasionally, these standards apply to those activities.

Common Required Trainings by Category

Hazard Communication (HazCom) – 29 CFR 1910.1200

If your employees work with or near any chemicals, including common items like cleaning supplies, paints, or adhesives, HazCom training is required. An online HazCom certification course can streamline compliance. This is one of the most frequently cited OSHA standards, year after year.

Required elements:

• Written hazard communication program
• Safety Data Sheets (SDS) accessible for every hazardous chemical on site
• Container labeling with GHS-compliant labels
• Employee training on chemical hazards, SDS interpretation, protective measures, and what to do in an emergency

Training must happen before employees are exposed to chemicals and again whenever a new chemical hazard is introduced to the workplace.

Fall Protection – 29 CFR 1910.28 / 1926.501

Fall protection is OSHA’s most cited standard. For general industry, protection is required at 4 feet above a lower level. For construction, the trigger is 6 feet. For shipyard employment, it’s 5 feet.

Training must cover:

• How to recognize fall hazards
• Proper use, inspection, and limitations of fall protection systems
• The role of each component in a personal fall arrest system
• Rescue procedures after a fall

A competent person must conduct the training, and retraining is required when an employee demonstrates they don’t understand or can’t perform their duties safely, when workplace conditions change, or when new fall protection systems are introduced.

Personal Protective Equipment (PPE) – 29 CFR 1910.132

Employers must conduct a hazard assessment to determine what PPE is needed, then provide it at no cost to employees (with limited exceptions for safety-toe footwear and prescription safety eyewear). Training must cover:

• When PPE is necessary
• What PPE is required for each task
• How to properly put on, take off, adjust, and wear PPE
• Limitations of the PPE
• Proper care, maintenance, useful life, and disposal

Each employee must demonstrate they understand the training before working independently. Retraining is required when the employee shows they haven’t retained the knowledge, when workplace changes make previous training obsolete, or when new PPE types are introduced.

Fire Safety and Emergency Action Plans – 29 CFR 1910.38 / 1910.39

Every employer needs an Emergency Action Plan (EAP) if any OSHA standard requires one (and several do). If you have 10 or fewer employees, the plan can be communicated orally rather than in writing. The plan must cover:

• Reporting procedures for fires and emergencies
• Evacuation routes and procedures
• Procedures for employees who stay behind to operate critical equipment
• Accounting for all employees after evacuation
• Rescue and medical duties for designated employees

If portable fire extinguishers are provided, employees must receive training on their use upon initial assignment and annually thereafter (1910.157). If you have an evacuation-only policy (everyone leaves, no one fights fires), you can skip extinguisher training, but the extinguishers still need to be maintained and inspected.

Lockout/Tagout (LOTO) – 29 CFR 1910.147

Any workplace with machinery or equipment that could release stored energy during maintenance needs a LOTO program. This applies to manufacturing, food processing, auto repair, and many other industries. Training requirements differ by role:

• Authorized employees: Those who perform lockout/tagout. Must be trained in recognizing hazardous energy sources, the type and magnitude of energy, and the methods and means to isolate and control it.
• Affected employees: Those who operate machines where lockout is performed. Must know the purpose and procedure of LOTO and that they must never attempt to restart locked-out equipment.
• Other employees: Anyone who works in areas where LOTO is used. Must know about the procedure and that they must never remove locks or tags.

Retraining is required whenever there’s a change in job assignments, equipment, or procedures, or when an inspection reveals inadequacies in an employee’s knowledge.

Respiratory Protection – 29 CFR 1910.134

If employees use respirators (mandatory or voluntary), you need a written respiratory protection program. Required training elements:

• Why the respirator is necessary and how improper fit or use compromises protection
• Limitations and capabilities of the respirator
• How to use the respirator in emergency situations
• Inspection, donning, doffing, seal check procedures
• Maintenance and storage procedures
• Medical signs and symptoms that may limit respirator use

Annual fit testing is required for tight-fitting respirators. Training must also be conducted annually. Medical evaluations must be completed before fit testing.

Powered Industrial Trucks (Forklifts) – 29 CFR 1910.178

Forklift operator training is one of the more structured OSHA requirements. Training must include both formal instruction (lecture, discussion, video, written material) and practical training (demonstrations and hands-on exercises). Operators must pass an evaluation before operating a forklift independently.

Performance evaluations are required every three years. Refresher training is needed after an accident or near-miss, when an operator is observed operating unsafely, when assigned a different truck type, or when workplace conditions change.

Documentation Requirements

Training is only as good as your records. OSHA doesn’t have one universal recordkeeping standard for training. Instead, documentation requirements are embedded in individual standards. As a best practice, every training record should include:

• Employee name and job title
• Date of training
• Training topic and specific standard(s) covered
• Name and qualifications of the trainer
• Method of training (classroom, hands-on, online, etc.)
• Evidence of competency (test scores, practical demonstrations, sign-off sheets)

Keep training records for the duration of employment plus at least 3 years. Some standards require longer retention. Medical records under 1910.1020 must be kept for 30 years past the end of employment.

Digital records are acceptable. OSHA doesn’t require paper. Whatever system you use, records must be accessible and producible during an inspection.

How to Prioritize Training on a Budget

Small businesses rarely have the budget for a full-time safety manager. Here’s how to prioritize effectively:

Step 1: Conduct a Hazard Assessment

Walk through your workplace and identify every hazard. Talk to your employees. They know what’s dangerous. Review your injury logs (OSHA 300 if applicable) and near-miss reports. This assessment drives everything else.

Step 2: Identify Mandatory Trainings

Based on your hazard assessment, list every OSHA standard that applies. Match each standard to its training requirement. This is your non-negotiable list.

Step 3: Rank by Risk

Not all trainings carry equal urgency. Prioritize by:

1. Trainings related to your highest-severity hazards (fall protection, LOTO, confined spaces)
2. Trainings required before exposure (HazCom, respirator fit testing, forklift certification)
3. Annual recertifications coming due
4. Trainings for newly hired employees

Step 4: Use Cost-Effective Training Methods

Online training works well for knowledge-based components like HazCom awareness, GHS label reading, and regulatory overviews. Hands-on components still need to happen in person, but the classroom portion can be handled online, saving time and money.

OSHA’s free resources include the On-Site Consultation Program for businesses with fewer than 250 employees. This program provides free, confidential workplace assessments. No citations, no penalties. It’s genuinely one of the best deals in federal government.

Step 5: Build a Training Calendar

Spread trainings across the year instead of cramming them into one overwhelming session. For a detailed breakdown of how often each training needs to happen, see our complete training frequency schedule. Monthly 30-minute sessions are more effective (and less disruptive) than annual full-day marathons.

Current OSHA Penalty Amounts

OSHA adjusts penalties annually for inflation. As of 2026, the maximum penalties are:

Violation Type	Maximum Penalty Per Violation
Serious	$16,550
Other-Than-Serious	$16,550
Willful or Repeated	$165,514
Failure to Abate	$16,550 per day
Posting Requirements	$16,550

Small businesses may receive penalty reductions based on employer size, good faith, and violation history. Businesses with 25 or fewer employees can receive up to a 60% reduction. But reductions aren’t guaranteed, and willful violations don’t qualify for most reductions.

These are per-violation amounts. If OSHA finds the same hazard affecting 10 employees, that can be 10 separate violations. A single inspection can result in six-figure penalties even for small businesses.

State Plans vs. Federal OSHA

Twenty-two states and territories run their own OSHA-approved state plans covering private sector employers. These states must maintain standards “at least as effective” as federal OSHA, but many go further.

Key differences to watch for:

• California (Cal/OSHA): Has its own heat illness prevention standard, workplace violence prevention requirements, and an Injury and Illness Prevention Program (IIPP) mandate that federal OSHA doesn’t require.
• Washington (DOSH): Requires a written Accident Prevention Program for all employers. Has specific standards for agriculture, including heat exposure rules.
• Oregon (Oregon OSHA): Has heat illness prevention and wildfire smoke rules not found in federal standards.
• Michigan (MIOSHA): Maintains separate general industry and construction standards with some requirements exceeding federal minimums.

If you operate in a state-plan state, check your state’s specific requirements. Federal OSHA standards are the floor, not the ceiling. Your state may have additional training requirements.

Quick-Start Compliance Checklist

Use this checklist to assess where your small business stands right now:

Immediate Actions

• Post the OSHA “Job Safety and Health: It’s the Law” poster in a visible location (required for all employers)
• Conduct a workplace hazard assessment
• Check whether your state has a state plan with additional requirements
• Identify all chemicals in your workplace and obtain Safety Data Sheets
• Determine if you need to maintain OSHA 300 logs (required for 11+ employees in most industries)

Within 30 Days

• Create a written Hazard Communication program
• Develop an Emergency Action Plan
• Identify all required trainings based on your hazard assessment
• Set up a training documentation system
• Review PPE needs and order required equipment

Within 90 Days

• Complete all initial required trainings for current employees
• Develop a written Lockout/Tagout program (if applicable)
• Establish a respiratory protection program (if applicable)
• Build a 12-month training calendar
• Schedule any required medical evaluations (respirator use, noise exposure, etc.)

Ongoing

• Train new employees before they’re exposed to hazards
• Conduct annual refresher trainings where required
• Update programs when workplace conditions, equipment, or processes change
• Document everything. If it isn’t written down, it didn’t happen.
• Review your injury and illness records quarterly

Getting Started

Compliance feels overwhelming until you break it into pieces. Start with the hazard assessment. That single step tells you exactly which standards apply, which trainings you need, and where your biggest risks are. Everything else flows from there.

For small businesses, online training platforms offer a practical way to cover the knowledge-based components of required OSHA training efficiently. Employees can complete modules on their own schedule, and the platform handles documentation automatically. Pair online coursework with hands-on practice for skills-based requirements like forklift operation, fall protection equipment use, and fire extinguisher training.

The cost of compliance is always less than the cost of an incident. Beyond OSHA penalties, workplace injuries carry workers’ compensation costs, lost productivity, potential lawsuits, and damage to your reputation. A structured training program protects your employees and your business.