OSHA Compliance: Small Business Safety Guide [2026]

Quick Answer: Does OSHA Apply to My Small Business?

Almost certainly yes. The Occupational Safety and Health Act of 1970 covers virtually all private-sector employers with one or more employees. The only exemptions are:

• Self-employed individuals with no employees
• Immediate family members of farm operators
• Workers covered by other federal safety agencies (e.g., mine workers under MSHA, certain transportation workers under DOT)
• State and local government employees (unless in a state with an OSHA-approved state plan)

---

The General Duty Clause

Section 5(a)(1) of the OSH Act, known as the General Duty Clause, requires every employer to furnish a workplace "free from recognized hazards that are causing or are likely to cause death or serious physical harm." This is a catch-all provision that applies even when no specific OSHA standard covers a particular hazard.

When OSHA Uses the General Duty Clause

OSHA typically cites the General Duty Clause when:

• A specific standard does not exist for the hazard (e.g., workplace violence, extreme heat -- although OSHA is in the process of developing a heat standard)
• The hazard is "recognized" in the industry (through industry standards, employer knowledge, or common sense)
• The hazard is causing or likely to cause serious harm
• A feasible method exists to reduce or eliminate the hazard

Example: OSHA has used the General Duty Clause to cite employers for inadequate COVID-19 protections, workplace violence hazards in healthcare facilities, and ergonomic hazards causing musculoskeletal disorders.

Employer Obligations Under the General Duty Clause

1. Identify hazards: Conduct regular workplace inspections and hazard assessments
2. Take corrective action: Implement feasible controls to reduce or eliminate recognized hazards
3. Train employees: Ensure workers understand the hazards they face and the protections in place
4. Document: Maintain records of hazard assessments, corrective actions, and training

---

OSHA's Top 10 Most Cited Standards

Every year, OSHA publishes the most frequently cited standards. Understanding these helps small businesses prioritize compliance efforts. The fiscal year 2025 top 10 (the most recent complete data) includes:

1. Fall Protection -- General Requirements (29 CFR 1926.501): 6,307 violations. Applies to construction sites with unprotected sides and edges 6 feet or more above lower levels.

2. Hazard Communication (29 CFR 1910.1200): 2,888 violations. Requires employers to inform workers about hazardous chemicals through labels, Safety Data Sheets (SDS), and training.

3. Ladders in Construction (29 CFR 1926.1053): 2,573 violations. Covers ladder selection, inspection, use, and training requirements.

4. Scaffolding (29 CFR 1926.451): 2,362 violations. Addresses scaffold construction, use, and dismantling in construction.

5. Respiratory Protection (29 CFR 1910.134): 2,185 violations. Requires employers to provide appropriate respirators and implement a written respiratory protection programme.

6. Lockout/Tagout (29 CFR 1910.147): 2,065 violations. Covers the control of hazardous energy during servicing and maintenance of machines and equipment.

7. Fall Protection -- Training (29 CFR 1926.503): 1,523 violations. Requires training for employees exposed to fall hazards.

8. Powered Industrial Trucks (29 CFR 1910.178): 1,470 violations. Covers forklift operation, training, and certification requirements.

9. Personal Protective Equipment -- Eye and Face (29 CFR 1910.133): 1,398 violations. Requires appropriate eye and face protection where hazards exist.

10. Machine Guarding (29 CFR 1910.212): 1,266 violations. Requires guarding of moving parts, point of operation, and power transmission apparatus on machines.

Key insight for small businesses: Hazard Communication (#2), Lockout/Tagout (#6), and Machine Guarding (#10) affect nearly every business with a warehouse, workshop, or production area. Fall protection standards (#1, #3, #4, #7) dominate the list for construction.

---

OSHA Record-Keeping Requirements

Who Must Keep Records?

All employers with 11 or more employees at any point during the previous calendar year must maintain OSHA injury and illness records, unless they fall into a partially exempt industry classification.

Partially exempt industries (based on NAICS codes): Certain low-hazard industries such as retail stores, offices, restaurants, and service businesses are exempt from routine record-keeping but must still report fatalities and severe injuries. The full list is in 29 CFR 1904.2.

Employers with 10 or fewer employees are exempt from routine record-keeping but must still:

• Report any workplace fatality within 8 hours
• Report any in-patient hospitalization, amputation, or loss of an eye within 24 hours

The OSHA 300 System

Covered employers must maintain three forms:

OSHA 300 Log (Log of Work-Related Injuries and Illnesses)

• Record each recordable injury or illness on a running log throughout the year
• A case is "recordable" if it results in death, days away from work, restricted work activity, transfer to another job, medical treatment beyond first aid, loss of consciousness, or a significant injury diagnosed by a physician

OSHA 300A Summary (Summary of Work-Related Injuries and Illnesses)

• Complete the summary at the end of each calendar year
• Post the summary in a conspicuous location from February 1 through April 30 of the following year
• A company executive must certify the summary

OSHA 301 Incident Report (Injury and Illness Incident Report)

• Complete a detailed incident report for each recordable case
• Must be completed within 7 calendar days of learning about the injury or illness
• Workers' compensation forms may be used as a substitute if they contain equivalent information

Electronic Reporting

Establishments with 250 or more employees in industries covered by the record-keeping regulation must electronically submit their OSHA 300 Log, 300A Summary, and 301 Incident Reports annually through OSHA's Injury Tracking Application (ITA).

Establishments with 20-249 employees in high-hazard industries must electronically submit their OSHA 300A Summary annually.

Retention

Records must be retained for 5 years following the end of the calendar year they cover.

---

OSHA Poster Requirement

Every employer covered by the OSH Act must display the "Job Safety and Health: It's the Law" poster (OSHA 3165) in a conspicuous place where employees can see it. The poster is available free of charge from OSHA's website in English and Spanish.

Failure to display the poster can result in a citation and penalty of up to $16,131.

---

The OSHA Inspection Process

What Triggers an Inspection?

OSHA conducts approximately 33,000 inspections per year. Inspections are prioritized:

1. Imminent danger situations: Where workers face immediate risk of death or serious harm
2. Fatalities and catastrophes: All workplace deaths and incidents with 3+ hospitalizations
3. Worker complaints and referrals: Formal complaints from employees or referrals from other agencies
4. Targeted inspections: Based on high-hazard industry emphasis programmes
5. Follow-up inspections: Verifying that previously cited hazards have been corrected

The Inspection Itself

An OSHA inspection follows a standard procedure:

1. Arrival and Presentation of Credentials

• The compliance officer presents their credentials (photo ID)
• The employer has the right to verify credentials by calling the local OSHA area office

2. Opening Conference

• The officer explains the purpose of the inspection
• The employer can ask questions about the scope and procedure
• The employer selects a representative to accompany the officer

3. Walkaround

• The officer inspects the workplace, photographs hazards, takes measurements, and interviews employees
• An employee representative has the right to accompany the inspection
• Employers should not coach employees or restrict access to the officer

4. Closing Conference

• The officer discusses findings and potential violations
• The employer can present evidence of compliance efforts
• The officer explains the citation and penalty process

Your Rights During an Inspection

• You can ask for credentials and verify them
• You can accompany the officer during the walkaround
• You can present documents showing compliance efforts
• You cannot refuse entry (OSHA can obtain an administrative warrant)
• You cannot discriminate against employees who cooperate with the inspection
• You should take detailed notes and photographs of everything the officer examines

---

OSHA Penalty Structure

Penalty Types and Amounts (2026)

Penalty Reduction Factors

OSHA may reduce penalties based on:

• Size of business: Up to 60% reduction for employers with 25 or fewer employees; sliding scale up to 250 employees
• Good faith: Up to 25% reduction for employers who demonstrate genuine commitment to safety (written safety programme, employee training, prompt hazard correction)
• History: Up to 10% reduction for employers with no serious citations in the previous 5 years

Contesting Citations

Employers have 15 working days from receipt of a citation to file a notice of contest with their local OSHA area office. If you contest:

• The case goes to the Occupational Safety and Health Review Commission (OSHRC)
• An informal settlement conference is usually offered first
• The employer can negotiate penalties, abatement dates, and violation classifications
• If settlement fails, a formal hearing is held before an administrative law judge

Important: Do not ignore a citation. Failing to contest within 15 days makes the citation a final order of the OSHRC, and the penalties become legally enforceable.

---

Small Business Exemptions and Resources

Partial Exemptions

• Record-keeping exemption: Employers with 10 or fewer employees are exempt from maintaining OSHA 300 logs (but must still report fatalities and severe injuries)
• Industry-based exemption: Certain low-hazard industries are partially exempt from record-keeping regardless of size
• On-site consultation: OSHA offers free, confidential consultation services to small businesses through state-funded programmes. These consultations are separate from enforcement -- the consultant cannot issue citations or penalties

OSHA On-Site Consultation Programme

This is one of the most underutilised resources available to small businesses:

• Free: No charge for the service
• Confidential: The consultant does not report findings to OSHA enforcement
• Voluntary: The employer requests the visit
• Available in every state: Administered by state agencies or universities under federal cooperative agreements

What the consultation includes:

• Hazard identification and assessment
• Recommendations for corrective action
• Assistance developing a safety and health programme
• Training recommendations

SHARP Programme: Small businesses that undergo a full consultation and correct all identified hazards may qualify for the Safety and Health Achievement Recognition Program (SHARP), which exempts them from OSHA programmed inspections for one to three years.

---

Building a Safety Programme for Your Small Business

OSHA recommends that every employer implement a safety and health programme based on these core elements:

1. Management Leadership

• Assign a designated safety coordinator (can be the owner in a small business)
• Communicate a clear policy that safety is a core business value
• Allocate time and resources for safety activities
• Lead by example -- follow the same safety rules you expect employees to follow

2. Worker Participation

• Encourage employees to report hazards without fear of retaliation
• Include workers in hazard identification and solution development
• Establish a safety committee (required by law in some states for businesses above a certain size)
• Respond promptly to reported hazards

3. Hazard Identification and Assessment

• Conduct regular workplace inspections (weekly or monthly, depending on risk level)
• Review injury and illness records for patterns
• Evaluate new processes, equipment, or materials before introduction
• Investigate all incidents, including near-misses

4. Hazard Prevention and Control

Apply the hierarchy of controls in order of effectiveness:

1. Elimination: Remove the hazard entirely (most effective)
2. Substitution: Replace the hazard with a less dangerous alternative
3. Engineering controls: Isolate people from the hazard (guards, ventilation, barriers)
4. Administrative controls: Change work practices (job rotation, training, signage)
5. Personal Protective Equipment (PPE): Last resort (gloves, goggles, respirators)

5. Education and Training

• Train all employees on hazards specific to their job
• Provide training at hiring, when hazards change, and at regular intervals
• Document all training (date, topic, attendees, instructor)
• Provide training in a language and vocabulary employees understand

6. Programme Evaluation and Improvement

• Review the programme at least annually
• Track leading indicators (hazards corrected, training completed, inspections done) in addition to lagging indicators (injuries, illness)
• Benchmark against industry rates using OSHA's injury/illness incidence rate calculator

---

Industry-Specific OSHA Standards

Beyond the general standards that apply to all employers, OSHA has industry-specific regulations:

Construction (29 CFR 1926)

• Fall protection at 6 feet
• Trench safety and excavation standards
• Crane and derrick standards
• Scaffolding requirements
• Confined space entry
• Silica dust exposure limits

General Industry (29 CFR 1910)

• Machine guarding
• Electrical safety
• Hazardous materials handling
• Permit-required confined spaces
• Walking-working surfaces
• Emergency action plans and fire prevention

Agriculture (29 CFR 1928)

• Roll-over protective structures (ROPS) on tractors
• Field sanitation for hand labourers
• Temporary labour camp standards
• Anhydrous ammonia handling

Maritime (29 CFR 1915-1919)

• Shipyard employment
• Marine terminals
• Longshoring
• Gear certification

Key point for small businesses: Identify which set of standards applies to your operations (most businesses fall under General Industry) and focus your compliance efforts on those standards.

---

How Grove HR Helps

Grove HR supports OSHA compliance for small businesses:

• Training records: Track employee safety training completion with automated reminders for refresher courses
• Incident reporting: Digital incident report forms that capture the information needed for OSHA 300 logs
• Document storage: Centralised storage for Safety Data Sheets, written safety programmes, and inspection records
• Compliance calendar: Automated reminders for OSHA 300A posting (February 1 - April 30), electronic reporting deadlines, and training renewal dates

Get started with Grove HR and build your safety compliance foundation.