Summary. Safety enforcement is one of the few regimes where an inspector can arrive without notice, walk the floor, interview employees privately, and issue penalties based on what a supervisor says in the first ten minutes. This article covers the statutory structure, the general duty clause that reaches hazards no standard addresses, and the standards generating the most citations. It walks recordkeeping and reporting deadlines measured in hours, the anatomy of an inspection, and the citation classifications that drive penalties — then contest procedure, abatement and settlement, multi-employer worksite liability, state plans, criminal exposure, and § 11(c) retaliation.


A maintenance technician at a plastics plant is servicing an extruder. A coworker, not knowing anyone is inside the guard, restarts the line. The technician loses two fingers.

Within four hours the company must report the amputation to OSHA. Within days a compliance safety and health officer arrives. She asks for the lockout/tagout program, the machine-specific energy control procedures, the annual periodic inspection records, and the training documentation for both employees.

The company has a lockout/tagout program. It is a twelve-page document downloaded in 2019, with no machine-specific procedures, no periodic inspections, and training records for eleven of thirty-four affected employees.

The citation that follows will not be about the accident. It will be about the four documents that did not exist before the accident, each of which is a separate violation, and any of which could be classified as willful if the inspector concludes the company knew and did nothing.

Safety enforcement is a documentation regime wearing the clothes of an engineering regime. The hazards are physical; the liability is paper.

The short answer

The Act. The Occupational Safety and Health Act of 1970, 29 U.S.C. §§ 651-678, covers nearly all private-sector employers. It imposes two duties on employers, § 654(a):

  1. Comply with occupational safety and health standards promulgated under the Act.
  2. Furnish a workplace free from recognized hazards likely to cause death or serious physical harm — the general duty clause.

Standards are in 29 C.F.R. part 1910 (general industry), part 1926 (construction), part 1915-1918 (maritime), and part 1928 (agriculture).

Penalties are adjusted annually for inflation, with substantially higher maximums for willful and repeat violations than for serious and other-than-serious violations. Confirm the current figures before advising on exposure.

The three deadlines that cannot be missed: report a fatality within 8 hours; report an in-patient hospitalization, amputation, or loss of an eye within 24 hours; and contest a citation within 15 working days of receipt or it becomes a final order not subject to review.

The general duty clause

Where no standard applies, the general duty clause does. To establish a violation, OSHA must prove four elements:

  1. A condition or activity in the workplace presented a hazard;
  2. The hazard was recognized — by the employer, by the industry, or as a matter of common sense;
  3. The hazard was causing or likely to cause death or serious physical harm; and
  4. A feasible and useful method existed to correct it.

The clause has been used for heat illness, workplace violence in healthcare and late-night retail, ergonomic hazards, combustible dust, and chemical exposures where the permissible exposure limit is outdated. Industry consensus standards, the employer's own program, manufacturer warnings, and prior incidents all supply "recognition."

Two practical implications. First, an employer's own written program can establish recognition of a hazard it then failed to control — which is not a reason to have no program, but is a reason to follow the one you have. Second, compliance with every applicable standard is not a defense if a recognized hazard remains uncontrolled.

The standards that generate the citations

Year after year, the most frequently cited standards concentrate in a small set:

  • Fall protection (1926.501) — the single most cited standard, driven by construction work at height without guardrails, safety nets, or personal fall arrest.
  • Hazard communication (1910.1200) — written program, chemical inventory, safety data sheets, labeling, and training aligned to the Globally Harmonized System.
  • Ladders and scaffolding (1926.1053, 1926.451).
  • Respiratory protection (1910.134) — written program, medical evaluation before fit testing, annual fit testing, and training. The order matters: fit testing an employee who has not had a medical evaluation is itself a violation.
  • Lockout/tagout (1910.147) — energy control program, machine-specific written procedures, authorized-employee training, and an annual periodic inspection by someone other than the person using the procedure.
  • Powered industrial trucks (1910.178) — operator training, evaluation every three years, and daily inspections.
  • Machine guarding (1910.212).
  • Eye and face protection (1926.102) and PPE generally (1910.132), including the hazard assessment that must be written and certified.
  • Electrical wiring methods and general requirements (1910.305, 1910.303).

Cross-cutting requirements that apply almost everywhere: recordkeeping (part 1904), the OSHA poster, emergency action plans (1910.38) where required, fire extinguisher training where employees are expected to use them, bloodborne pathogens (1910.1030) where exposure is anticipated, confined space entry programs (1910.146 and 1926 subpart AA), and walking-working surfaces (subpart D).

Recordkeeping and reporting

The forms, 29 C.F.R. part 1904:

  • Form 300 — Log of Work-Related Injuries and Illnesses.
  • Form 301 — Injury and Illness Incident Report, completed within 7 calendar days of learning of a recordable case.
  • Form 300A — Annual Summary, certified by a company executive, posted from February 1 through April 30, and retained.

Records must be kept for five years following the year they cover.

What is recordable. A work-related injury or illness involving death, days away from work, restricted work or transfer to another job, medical treatment beyond first aid, loss of consciousness, or a significant injury or illness diagnosed by a physician or other licensed health care professional. The first aid list in § 1904.7(b)(5)(ii) is exclusive — anything not on it is medical treatment. Employers over-record and under-record about equally, and both create problems.

Exemptions. Employers with 10 or fewer employees at all times during the previous calendar year are partially exempt, as are establishments in certain low-hazard industries — but the reporting obligations for fatalities and severe injuries apply to everyone, including exempt employers.

Electronic submission. Establishments meeting size and industry criteria must submit Form 300A data electronically each year, and certain larger establishments in designated high-hazard industries must also submit Form 300 and 301 data. The scope of this requirement has changed repeatedly; confirm which tier applies to each establishment.

Reporting deadlines.

  • Fatality: 8 hours from learning of it, if it occurred within 30 days of the work-related incident.
  • In-patient hospitalization, amputation, or loss of an eye: 24 hours, if within 24 hours of the incident.
  • Report by phone to the area office, by the 24-hour hotline, or through the online form.

An amputation includes the loss of a fingertip with bone loss, whether or not it is reattached. This definition catches employers by surprise more than any other.

Anti-retaliation in recordkeeping. Section 1904.35 requires a reasonable procedure for employees to report injuries and prohibits discouraging reporting. Two common practices draw scrutiny: safety incentive programs that reward injury-free periods (which discourage reporting) and automatic post-incident drug testing where there is no reasonable possibility that drug use contributed. Both can be structured lawfully; neither should be run on autopilot.

The inspection

How inspections start, in OSHA's priority order: imminent danger; a fatality or catastrophe; a complaint or referral; programmed inspections under a national or local emphasis program; and follow-up inspections.

Right to insist on a warrant. Under Marshall v. Barlow's, Inc., 436 U.S. 307 (1978), an employer may require an administrative warrant. The probable cause standard for such a warrant is lenient — evidence of a violation, or a neutral administrative plan. Insisting on a warrant buys a day or two and signals a posture; it does not prevent the inspection, and it should be a deliberate decision, not a receptionist's reflex.

The opening conference. The compliance officer presents credentials, states the reason for the inspection, and describes its scope. This is the moment to establish the scope. A complaint-based inspection should be limited to the complaint's subject matter; a compliance officer who wanders into other areas expands the inspection into a wall-to-wall review. Ask what the complaint alleges and confirm the intended scope.

The walkaround. An authorized employee representative may accompany the inspection, § 657(e). Where there is no union, OSHA's rule has permitted employees to designate a third-party representative, which has been the subject of litigation. The employer should also designate a knowledgeable escort — someone who knows the operation, takes parallel photographs of everything the officer photographs, records every measurement the officer takes, notes every question asked, and answers only what is asked.

Interviews. The compliance officer may interview non-managerial employees privately, and the employer may not be present. Management employees may have company counsel present, and the employer may decline to make them available except by subpoena. Employees should be told the truth: cooperation is their choice, they may have a representative, they should answer honestly, and they should not guess.

Document requests. Provide what is required; do not volunteer. Every document produced can generate a citation for a condition the officer never observed. Log what is produced.

The closing conference. The officer describes apparent violations and the abatement expected. Take detailed notes; this is the preview of the citation.

Citations and classification

Citations must be issued within six months of the violation, § 658(c), and describe the violation with particularity, referencing the standard.

Classification determines everything:

  • Other-than-serious — a violation with a direct relationship to safety and health but unlikely to cause death or serious physical harm.
  • Serious — a substantial probability that death or serious physical harm could result, and the employer knew or with the exercise of reasonable diligence could have known of the hazard. Note what is not required: the standard is not the probability of an accident, but the seriousness of the harm if one occurs. Most citations are serious.
  • Willful — intentional disregard of, or plain indifference to, the Act's requirements. Prior knowledge of the requirement plus inaction is the usual proof. Penalties are an order of magnitude higher.
  • Repeat — a substantially similar violation cited within the applicable look-back period at any of the employer's establishments, subject to how corporate-wide application is analyzed.
  • Failure to abate — a daily penalty for each day past the abatement date.

Instance-by-instance citations. OSHA has expanded the practice of citing each instance separately in high-gravity situations — each unguarded machine, each untrained employee, each missing record — which multiplies exposure dramatically.

Penalty calculation starts from the gravity-based penalty and applies adjustments for size, good faith, and history. Severe Violator Enforcement Program designation brings follow-up inspections, inspections of related establishments, and enhanced settlement terms.

Responding to a citation

The 15-working-day clock starts on receipt. Within that period the employer may:

  1. Accept the citation, pay the penalty, and abate.
  2. Request an informal conference with the area director. This does not extend the contest period — a point that has cost employers their appeal rights. Informal conferences resolve a large share of citations, often with reclassification (willful to serious, serious to other-than-serious), penalty reduction, grouping of items, or extended abatement dates.
  3. Contest in writing — the entire citation, specific items, the classification, the penalty, or the abatement date.

A timely notice of contest sends the case to the Occupational Safety and Health Review Commission, an independent adjudicatory agency. An administrative law judge hears the case, and the Commission may review. Judicial review lies in a court of appeals.

Failure to contest within 15 working days makes the citation a final order not subject to review by any court or agency, § 659(a). There is no reasonable cause extension in the ordinary case.

Abatement. Correct the hazard by the abatement date and certify it. Where correction takes longer, file a petition for modification of abatement date before the deadline, describing interim protective measures. Employers must also post citations at or near the location of the violation for three days or until corrected, whichever is longer, and must inform affected employees of abatement.

Affirmative defenses worth knowing:

  • Unpreventable employee misconduct — the employer had a work rule designed to prevent the violation, adequately communicated it, took steps to discover violations, and effectively enforced it when discovered. The last element is where this defense usually fails: an employer that cannot produce records of prior discipline for the same conduct cannot carry it.
  • Infeasibility — compliance was technologically or economically infeasible, and alternative measures were used or were unavailable.
  • Greater hazard — compliance would create a greater hazard, alternatives were unavailable, and a variance was sought or would be inappropriate.
  • Lack of employer knowledge — actual or constructive. Supervisor knowledge is generally imputed to the employer, and a supervisor's own misconduct is imputed unless the employer establishes the misconduct defense.

Multi-employer worksites

On construction and other shared sites, OSHA applies a multi-employer citation policy identifying four roles:

  • Creating employer — created the hazard.
  • Exposing employer — its employees were exposed.
  • Correcting employer — responsible for correcting the hazard.
  • Controlling employer — general supervisory authority over the site, including the power to correct or require correction.

A general contractor can be cited as a controlling employer for a subcontractor's hazard even though none of its own employees were exposed. The controlling employer's duty is one of reasonable care, which is less than the duty owed to its own employees, and is evaluated by the frequency of inspections, the reasonableness of the inspection system, and the response to identified hazards.

Some circuits have questioned aspects of the policy, and its application varies. Practically, general contractors should conduct and document periodic site inspections, require subcontractor safety programs and reporting, and escalate uncorrected hazards in writing.

State plans

Roughly half the states operate their own OSHA-approved state plans, which must be at least as effective as federal OSHA and may be more stringent. Several have standards with no federal counterpart — California's heat illness, ergonomics, injury and illness prevention program, and workplace violence prevention requirements are the most prominent examples, and other states have adopted their own heat and violence prevention rules.

Some state plans cover only public employees. Employers operating across state lines should not assume the federal standard is the operative one, and should confirm reporting timelines and contest deadlines, which vary.

Whistleblower protection and criminal exposure

Section 11(c), 29 U.S.C. § 660(c), prohibits discharge or discrimination against an employee for filing a complaint, instituting a proceeding, testifying, or exercising any right under the Act — including refusing to work in the face of a reasonable apprehension of death or serious injury where there is no reasonable alternative, under the regulation upheld in Whirlpool Corp. v. Marshall, 445 U.S. 1 (1980).

The complaint must be filed with OSHA within 30 days — a notably short period — and there is no private right of action under § 11(c); the Secretary decides whether to sue. Employees therefore often plead state-law wrongful discharge in violation of public policy alongside or instead.

OSHA also administers whistleblower provisions of more than twenty other statutes, including Sarbanes-Oxley, the Surface Transportation Assistance Act, the Federal Railroad Safety Act, and the Consumer Financial Protection Act, several of which have far longer filing periods and private rights of action after administrative exhaustion.

Criminal exposure. A willful violation causing the death of an employee is a misdemeanor under § 666(e), punishable by fine and up to six months' imprisonment — a penalty widely criticized as inadequate. Prosecutors have supplemented it with charges under general federal statutes (false statements, obstruction, conspiracy, environmental crimes) and with state manslaughter prosecutions, which are not preempted where the state proceeds under generally applicable criminal law.

A worked example

Return to the plastics plant.

Hour 0. The amputation occurs at 2:10 p.m. Hour 3. The plant manager reports to OSHA by telephone, well inside the 24-hour window, and documents the call. Day 2. A compliance officer arrives. The company escorts her, photographs everything she photographs, and logs every question and document request. Counsel is engaged that morning. Day 2. Employee interviews occur privately. The company informs employees in a neutral written notice that OSHA may wish to speak with them, that participation is voluntary, that they may have a representative, and that they should answer truthfully and not speculate. Day 9. OSHA requests the energy control program, machine-specific procedures, periodic inspection records, and training records. The company produces what exists and does not create anything after the fact — backdating records is a federal crime and is detected routinely.

Day 74. Citations issue:

  • Serious — 1910.147(c)(4)(ii), no machine-specific energy control procedures.
  • Serious — 1910.147(c)(6)(i), no annual periodic inspection.
  • Serious — 1910.147(c)(7)(i), inadequate training of authorized and affected employees.
  • Other-than-serious — 1904 recordkeeping deficiencies for two prior cases.

Day 12 after receipt. The company requests an informal conference and files a notice of contest on day 14 to preserve rights, because the informal conference does not toll the deadline.

Day 40 after receipt. Settlement: the training item is grouped with the procedures item, the penalty is reduced for good-faith abatement already completed, abatement dates are extended for the periodic inspection program, and the company agrees to a third-party program audit. No willful classification, and no Severe Violator designation.

What made the difference. Reporting on time. Engaging counsel on day one. Not producing documents beyond the request. Not creating records after the fact. Preserving the contest right on day 14 rather than waiting for the informal conference. And abating immediately, which is the single most persuasive fact in any penalty negotiation.

A safety program checklist

Written programs — have them, and follow them:

  • Hazard communication, with a current chemical inventory and accessible safety data sheets.
  • Lockout/tagout, with machine-specific procedures and annual periodic inspections.
  • Respiratory protection, with medical evaluations preceding fit tests.
  • PPE hazard assessment, written and certified.
  • Emergency action and fire prevention plans.
  • Confined space entry, with permits.
  • Bloodborne pathogens, where exposure is anticipated.
  • Powered industrial truck training and three-year evaluations.
  • Fall protection plans for work at height.
  • Heat illness and workplace violence programs where the state requires them, and as a general duty matter where the hazard is recognized.

Training — documented by name, date, topic, trainer, and method, with retraining on change and on observed deficiency.

Inspection and correction — routine documented self-inspections, a corrective action log with owners and dates, and evidence that identified hazards were actually fixed.

Discipline — a progressive safety discipline system that is used, because it is the foundation of the unpreventable employee misconduct defense.

Recordkeeping — accurate 300 logs, 301 forms within 7 days, 300A certified by an executive and posted February through April, electronic submission where required, five-year retention.

Incident response — a written protocol covering the reporting deadlines, scene preservation, root cause analysis conducted under counsel where appropriate, and the inspection playbook.

Contractor management — safety prequalification, contractual safety obligations, documented site inspections, and an escalation path.

Frequently asked questions

Do we have to let the inspector in? You may require a warrant. Consider whether the delay helps; the warrant standard is easily met, and refusal can affect the tone of the entire inspection.

Can we sit in on employee interviews? Not for non-managerial employees. You may be present for management interviews and may have counsel there.

Is an informal conference an appeal? No. It is a settlement discussion, and it does not extend the 15-working-day contest deadline.

We fixed the hazard immediately. Does that help? Substantially, on penalty. It does not eliminate the citation, because the violation is judged as of the time of the inspection.

Is a fingertip amputation reportable? If there is bone loss, yes — within 24 hours, even if the tip is reattached.

Are we covered if we have five employees? Yes. The partial exemption for employers with 10 or fewer employees applies to routine recordkeeping, not to the standards, the general duty clause, or the reporting requirements.

Can OSHA cite us for a subcontractor's hazard? Yes, as a controlling employer under the multi-employer policy, if you had the authority to correct or require correction and did not exercise reasonable care.

An employee refused to do a task they said was unsafe. Can we discipline them? Be very careful. A good-faith refusal in the face of a reasonable apprehension of serious injury, with no reasonable alternative and no time to seek redress, is protected. Investigate the hazard first; discipline last, if at all.

Conclusion

Two facts explain most OSHA outcomes.

The first is that citations are written from documents. The hazard brings the inspector; the missing written procedure, the untrained employee, and the uncertified hazard assessment write the citation. A company with the same equipment and the same accident, but with machine-specific procedures, current training records, and annual inspections in the file, receives a materially different citation.

The second is that the 15-working-day deadline is real and unforgiving, and the informal conference does not toll it. More employers lose their appeal rights to that misunderstanding than to any substantive defect in their defense.

Everything else — classification, penalty, abatement dates, settlement terms — is negotiable by an employer that reported on time, abated immediately, and can show the program existed before the injury rather than after it.

Workers' compensation, tort claims, and where OSHA fits

An OSHA citation is not a lawsuit, and an injured employee's remedy is usually not a lawsuit either. Understanding how the three systems interact prevents a great deal of confused advice.

Workers' compensation is the exclusive remedy. In every state, an employee injured in the course and scope of employment recovers medical benefits and wage replacement through the workers' compensation system, without proving fault — and in exchange gives up the right to sue the employer in tort. That bargain is the foundation of American workplace injury law.

The exceptions to exclusivity are narrow and state-specific. Most states recognize an exception for an employer's intentional injury, and a minority extend it to conduct that is substantially certain to cause injury. Some states permit a claim where the employer removed a machine guard deliberately, or where it fraudulently concealed a known injury. And exclusivity does not protect an employer that failed to carry the required coverage — in most states an uninsured employer faces a tort suit with common-law defenses abolished, plus penalties.

Third-party actions. Exclusivity protects the employer, not everyone. An injured employee may sue the machine manufacturer, the maintenance contractor, the premises owner, or a co-contractor on the site. Those defendants frequently seek contribution or contractual indemnity from the employer, which is where the employer's contracts — and its insurance — determine whether exclusivity is worth anything in practice.

Is a citation admissible in the civil case? It varies. Some courts admit OSHA standards as evidence of the standard of care and treat a violation as evidence of negligence; a few treat it as negligence per se for a member of the protected class; others exclude the citation itself under the rules on subsequent remedial measures and unfair prejudice while admitting the underlying standard. Section 653(b)(4) of the Act provides that nothing in it enlarges or diminishes common-law rights and duties, which courts have read as barring a private cause of action under the Act while permitting use of its standards in state-law negligence claims.

The practical consequence. Because the citation may follow the company into a third-party action, the decision to contest is not only about the penalty. Accepting a willful classification to close a matter quickly can be extraordinarily expensive later, when a plaintiff reads the classification to a jury. Reclassification is frequently worth more than penalty reduction, and it should be the first ask in any settlement discussion.

Building a program that survives an inspection

Programs fail in predictable ways. These are the failures worth designing against.

The downloaded template. A generic program with no machine-specific procedures, no site-specific hazard assessment, and no reference to the employer's actual equipment is worse than nothing, because it establishes recognition of the hazard while proving no control. Every written program should be walked through the facility and edited against what is physically there.

Training without records. Training that occurred but was never documented did not occur, as far as an inspection is concerned. Records should capture the employee's name and signature, the date, the topic, the trainer, the method, and any competency demonstration.

Assessment without correction. A self-inspection log full of findings and empty of corrective actions is the single most damaging document an employer can hand to a compliance officer. It proves knowledge. Either close findings or record why a finding was reclassified, and never leave an open item without an owner and a date.

Rules without enforcement. The unpreventable employee misconduct defense requires proof that the employer effectively enforced its rules — meaning documented discipline of employees who violated them before the accident. An employer with a hard-hat rule and no record of ever disciplining anyone for not wearing one cannot use the defense.

Supervisors as the weak link. A supervisor's knowledge of a hazard is imputed to the employer, and a supervisor working unsafely is both a violation and evidence that the program is not real. Supervisor accountability — safety metrics in performance reviews, authority to stop work, discipline for tolerating violations — is what converts a paper program into a functioning one.

No incident protocol. The first two hours after a serious injury determine the next two years. A written protocol should name who calls OSHA and by when, who preserves the scene and the equipment, who photographs conditions, who notifies counsel and the carrier, who conducts the root cause analysis and under whose direction, and who speaks to employees and to the family. Deciding those questions in the moment produces missed deadlines, destroyed evidence, and statements nobody intended to make.

Contractor blind spots. Most serious incidents at multi-employer sites involve someone the host company does not employ. Prequalification, contractual safety requirements, documented site walks, and a written escalation path are the controlling employer's reasonable-care record.

No annual review. Standards change, equipment changes, and people leave. An annual program review — with a documented gap analysis, updates, and re-training where needed — is cheap and is the difference between a program that reflects the workplace and one that reflects the year it was downloaded.

Variances, consultation, and voluntary programs

Not every interaction with the agency is adversarial, and the cooperative programs are underused by exactly the employers who would benefit most.

Variances. Where a standard cannot be met as written, § 655(d) permits a permanent variance on a showing that the employer's alternative provides employment as safe and healthful as the standard requires. Temporary variances are available where an employer cannot comply by the effective date because of unavailable personnel, materials, or equipment, and is taking all available steps to protect employees in the meantime. Applications are public, and competitors may participate. Variances are rare, slow, and worth pursuing only where the alternative is a recurring citation.

On-site consultation. OSHA funds a free, confidential consultation service, delivered through state agencies and separate from enforcement. A consultant walks the site, identifies hazards, and helps build programs. Findings are not reported to the enforcement side and do not result in citations, provided the employer corrects serious hazards within an agreed timeframe. The service is targeted at smaller employers in high-hazard industries and is the single best value in the entire system for a company that knows its program is thin.

SHARP. Employers completing a consultation visit, correcting identified hazards, and implementing an effective safety and health management system may qualify for the Safety and Health Achievement Recognition Program, which carries an exemption from programmed inspections for the recognition period.

VPP. The Voluntary Protection Programs recognize employers with comprehensive systems and injury rates below industry averages, and participants are removed from programmed inspection lists. Qualification is demanding and the application process is long, but for a company competing for work where safety performance is scored, the designation has commercial as well as regulatory value.

Alliances and partnerships. OSHA enters formal cooperative agreements with trade associations and with individual employers on specific hazards, which can provide training resources and, in some partnership agreements, defined enforcement expectations.

None of these programs immunizes an employer from a complaint-driven or accident-driven inspection. What they do is remove the company from the programmed-inspection pool, build the record that the employer took hazards seriously, and — in the case of consultation — produce a candid gap list without a citation attached to it.


Related articles

This article is provided for general informational purposes and does not constitute legal advice. Penalty amounts adjust annually, electronic submission requirements have changed repeatedly, and state plans impose additional obligations. Consult qualified counsel immediately upon a reportable event or the arrival of a compliance officer.