OSHA requirements for a small cannabis dispensary or grow facility

Last updated 2026-07-11

Does OSHA actually apply to cannabis businesses?

Yes, fully. OSHA's authority comes from the Occupational Safety and Health Act of 1970, which covers private-sector employers in every state where OSHA has jurisdiction ^[1]. Cannabis's federal Schedule I status under the Controlled Substances Act changes nothing here. OSHA enforces workplace safety law, not drug law. One employee and a general industry setting is all it takes to be covered.

There is no cannabis-specific OSHA standard. That makes compliance harder, not easier, because you have to map your own hazards to the existing 29 CFR 1910 standards. A trimming room has different hazards than a retail floor, and both differ from an outdoor cultivation site. Everything starts with a hazard assessment, not a checklist.

About half the states run their own OSHA-approved State Plans ^[2]. California (Cal/OSHA), Colorado, and Michigan each enforce their own programs, with standards at least as strict as federal OSHA and often stricter. Operate in a State Plan state and you read both sets of rules, then default to the more protective one.

Which OSHA standards apply to a cannabis dispensary?

A retail dispensary looks a lot like a small pharmacy or specialty shop, so the hazard load is manageable. These are the standards most likely to hit you:

Hazard Communication (29 CFR 1910.1200): Use any cleaning products, pesticides, or solvents and you need a written HazCom program, Safety Data Sheets for every chemical, and employees trained to read those SDSs. This is the most commonly cited standard in retail ^[3]. Our guide to hazard communication breaks down the full program.

Emergency Action Plan (29 CFR 1910.38): Required once you pass 10 employees. Have one anyway. It covers exit routes, assembly points, and who calls 911.

Electrical safety (29 CFR 1910.303 and 1910.304): High-value product and cash make dispensaries robbery targets, so security systems and lighting upgrades pile up fast. Improperly installed outlets and extension cords get cited regularly.

Walking-working surfaces (29 CFR 1910.22): Clear floors, no slip hazards, enough light. Simple stuff. Slips and falls are a leading cause of non-fatal injuries in retail trade ^[4].

Recordkeeping (29 CFR 1904): Hit 11 or more employees at any point in the prior year and you keep OSHA 300 logs. Smaller employers are partially exempt but still must report any fatality, inpatient hospitalization, amputation, or eye loss within 8 to 24 hours. Our article on incident reports covers what triggers reporting.

Personal Protective Equipment (29 CFR 1910.132): You do a written PPE hazard assessment and provide the PPE at no cost. For dispensary staff, that might be cut-resistant gloves for opening product packaging, or eye protection when someone handles chemical cleaners.

What OSHA standards apply to a cannabis grow facility?

Grow operations are genuinely more dangerous than retail, and the compliance picture gets crowded fast. The standards that matter most:

Respiratory Protection (29 CFR 1910.134): This is the big one. Mold spores, pesticide aerosols, and heavy cannabis dust are real airborne hazards. Require respirators, or even allow voluntary use, and you need a written respiratory protection program, fit testing for tight-fitting respirators, and medical evaluations before anyone straps one on ^[5]. A disposable dust mask does not satisfy this standard unless you have worked through the program requirements. Our PPE programs discussion covers the full assessment.

Hazard Communication (29 CFR 1910.1200): Grow facilities run through far more chemicals than dispensaries: pesticides, fungicides, nutrient solutions, pH adjusters, CO2 systems. Every one needs an SDS on file and reachable by workers on every shift ^[3].

Lockout/Tagout (29 CFR 1910.147): Automated grow systems, conveyors, trimming machines, and HVAC equipment all carry hazardous energy. If employees ever service or clean this gear, you need a written LOTO program and training. A trimming machine that restarts while someone clears a jam can take off fingers. Our lockout tagout article covers what the written program must include.

Forklifts and powered industrial trucks (29 CFR 1910.178): Move large soil bags, grow containers, or finished product with a forklift or pallet jack and operators need documented training plus an evaluation every three years. Forklift certification is not a one-time card. It is an employer-run training and evaluation cycle.

Heat illness (General Duty Clause, Section 5(a)(1)): Grow rooms routinely sit at 80 to 90 degrees Fahrenheit with high humidity. OSHA has no finalized heat standard for general industry (a proposed rule was published in 2024 and has not been finalized as of mid-2026), but you can still be cited under the General Duty Clause if a worker suffers heat illness and OSHA decides the hazard was recognized and fixable ^[6].

Electrical (29 CFR 1910.303-305): High-intensity grow lights, irrigation controls, and CO2 monitors pull serious load. Inspectors look for overloaded circuits, damaged cords, and missing GFCI protection in wet spots.

CO2 enrichment systems: Many grow facilities pump in CO2 to push plant growth. At high concentrations, CO2 displaces oxygen and can drop a worker fast. OSHA's permit-required confined space standard (29 CFR 1910.146) may apply if CO2 can build up in an enclosed space. The OSHA permissible exposure limit for CO2 is 5,000 ppm as an 8-hour time-weighted average ^[7].

Do cannabis extraction and processing operations have additional OSHA requirements?

Yes, and these are the ones that can kill people. Extraction facilities using flammable solvents (butane, propane, ethanol, hydrocarbon blends) face explosion and fire hazards that OSHA treats aggressively.

Process Safety Management (29 CFR 1910.119): PSM applies once you have more than 10,000 pounds of a listed flammable liquid above its normal boiling point, or threshold quantities of specific toxic chemicals ^[8]. Most small operations stay under PSM thresholds, but you have to actually calculate your inventory to know. PSM is one of the most demanding standards OSHA enforces, with 14 distinct program elements.

Flammable liquids storage (29 CFR 1910.106): Even below PSM thresholds, storing and handling ethanol or hydrocarbons means approved containers, grounding and bonding during transfer, real ventilation, and ignition source controls.

Laboratory safety (29 CFR 1910.1450): If your extraction work meets OSHA's definition of a laboratory (hazardous chemicals in quantities small enough not to trigger PSM), you may fall under this standard, which requires a Chemical Hygiene Plan.

An extraction lab that has had a butane explosion draws both OSHA and the fire marshal. This is one area where the point is not the paperwork. It is whether your employees survive the shift.

Does OSHA require a written safety program for cannabis businesses?

Several standards require written programs: HazCom (29 CFR 1910.1200), Respiratory Protection (29 CFR 1910.134), Lockout/Tagout (29 CFR 1910.147), Emergency Action Plans (29 CFR 1910.38), and Bloodborne Pathogens (29 CFR 1910.1030) if staff could be exposed to blood (think injury treatment stations in larger facilities).

You need a written program for each standard that applies. They do not have to run 50 pages. They do have to be real, specific to your workplace, and actually used.

For grow facilities and extraction labs in California, a written Injury and Illness Prevention Program is required by Cal/OSHA (Title 8 CCR 3203) regardless of size, and several other State Plan states require or strongly push similar employer-maintained programs. Even where nothing mandates it, a written program is your main evidence of good faith when OSHA inspects.

Building those programs from scratch eats real time. If you want a faster start, SafetyFolio's safety program generator walks you through your specific hazards and produces the written programs you actually need, usually in about 15 minutes instead of the days most operators lose to Googling and guessing.

For a wider look at what OSHA training obligations look like across industries, that article maps the major standards with training requirements.

What training does OSHA require for cannabis workers?

Training rules live inside each applicable standard, not in one central place. Here is what most cannabis operations end up documenting:

• HazCom training: Before an employee works with or near hazardous chemicals, and again when a new chemical shows up. Must cover reading an SDS, the hazards present, and the right PPE ^[3].
• Respiratory protection: Before wearing a respirator, then annually, including fit testing for tight-fitting respirators ^[5].
• Lockout/Tagout: Before an employee services or maintains energized equipment. Retraining when procedures change or deficiencies turn up ^[9].
• Forklift operation: Before operating a powered industrial truck, with evaluation every three years, or sooner after an observed unsafe move or near-miss ^[10].
• Emergency Action Plan: When the plan is written, when new employees start, and when the plan changes.
• PPE: When PPE is first issued, and again when an employee shows they do not understand it.

None of these carry a minimum hour requirement. OSHA cares that the training covered the right content, that employees showed they understood it, and that you kept a record. A 20-minute toolbox talk you documented beats a 4-hour class you cannot prove happened.

For supervisors running multi-hazard sites, OSHA 30 training gives a solid grounding in general industry hazard recognition, though it is not a regulatory requirement for most employers.

How does OSHA handle cannabis's federal illegal status during an inspection?

OSHA inspectors are not drug agents, and they do not report cannabis activity to the DEA as a routine matter. Their authority stops at worker safety. In practice OSHA has inspected cannabis facilities in legal states, issued citations, and settled them with no coordination with federal drug enforcement.

There are real tensions, though. Cannabis businesses cannot get federal-level workers' compensation because the plant is Schedule I, and state workers' comp rules split hard: some states cover cannabis workers, others do not. That gap can leave an injured worker with no path to benefits ^[11].

Get a formal complaint from a cannabis worker and OSHA investigates it like any other. Inspectors can enter, inspect, and cite. Being federally illegal does not remove OSHA's jurisdiction. It removes any defense you might have hoped to build on federal illegality.

What are the most common OSHA citations in cannabis facilities?

Published enforcement data specific to cannabis is thin, because OSHA does not carve out citations in a cannabis-specific category. The North American Industry Classification System codes used for cannabis are fairly new (NAICS 111419 for cultivation, 459991 for retail), and OSHA's citation databases are not easy to query by those codes.

Based on the industry's hazard profile and close cousins (agriculture, retail, pharmaceutical manufacturing), the likely citation areas are:

• Hazard Communication violations (missing SDSs, no written program, weak training): consistently the most-cited standard nationally ^[3]
• Respiratory protection deficiencies (no written program, no fit testing, no medical evaluation)
• Electrical hazards in grow rooms (GFCI, damaged wiring, overloaded circuits)
• Lockout/Tagout gaps on trimming and processing equipment
• Recordkeeping failures (no 300 log, late reporting of serious injuries)
• Walking-working surface hazards (wet floors, blocked exits)

For extraction facilities, process safety citations and flammable liquid storage violations carry the largest proposed penalties. OSHA's maximum penalty for a willful or repeated violation was $16,550 per violation as of 2024, adjusted for employer size ^[1]. Employers with 25 or fewer workers can pull significant reductions.

Do state cannabis regulators require safety programs beyond what OSHA needs?

Many do, and you check your state's cannabis licensing rules separately from OSHA. California's cannabis regulators, Colorado's Marijuana Enforcement Division, and similar agencies often require licensees to submit safety plans, pesticide use protocols, and training records at licensing or annual renewal.

These rules sometimes overlap OSHA (both might require chemical safety training) and sometimes go further. California's cannabis regulations address pesticide application safety in ways that complement, not replace, Cal/OSHA requirements. Colorado requires licensees to keep a safety plan covering employee protection from robbery and violence, which overlaps OSHA's General Duty workplace violence obligations.

State cannabis rules also lean on fire codes run by your local fire marshal, not OSHA. For extraction facilities, the International Fire Code and NFPA 1 standards for flammable and combustible liquids may apply right alongside OSHA. Separate compliance tracks, separate inspectors.

The short version: run your compliance list through three lenses. Federal OSHA (or your State Plan OSHA). Your state cannabis licensing agency. Your local fire authority.

What PPE do cannabis workers need?

PPE follows from your hazard assessment, not from a generic list. But some items show up over and over across cannabis workplaces:

Job / Task	Likely PPE Needed	Governing Standard
Trimming / cutting plant material	Cut-resistant gloves (ANSI A2 or higher)	29 CFR 1910.138
Chemical mixing (nutrients, pH)	Chemical splash goggles, nitrile gloves, apron	29 CFR 1910.133, 1910.138
Pesticide application	Gloves, respirator per pesticide label, goggles	29 CFR 1910.1200, 1910.134
Forklift / heavy material handling	Safety-toed footwear, hi-vis vest if near traffic	29 CFR 1910.136
Solvent extraction	Chemical-resistant gloves, face shield, FR clothing	29 CFR 1910.138, 1910.132
Mold remediation	N95 or higher respirator, Tyvek suit, gloves	29 CFR 1910.134

You do a written PPE hazard assessment (29 CFR 1910.132(d)) that names the hazards for each task and specifies the PPE picked. Then you certify that assessment in writing. Inspectors ask for this document. No document, expect a citation even if your people are wearing the right gear.

Employer-required PPE has to be provided at no cost to employees. The 2008 amendment to 29 CFR 1910.132(h) made that plain ^[12].

How should a small cannabis business set up OSHA recordkeeping?

Start by figuring out which recordkeeping rules apply to your size. OSHA's injury and illness recordkeeping (29 CFR 1904) applies to employers with 11 or more employees at any point during the year. Ten or fewer all year and you are partially exempt from the 300 log, but you still report any fatality within 8 hours and any inpatient hospitalization, amputation, or eye loss within 24 hours ^[13].

If you do keep a 300 log, here is the practical setup:

1. Set up an OSHA 300 log (the form is free at osha.gov) and keep it on-site. 2. Complete a 300A annual summary and post it from February 1 to April 30 every year. 3. Keep a separate OSHA 301 Incident Report (or equivalent) for each recordable incident. 4. Retain all three forms for 5 years.

A recordable incident is a work-related injury or illness that results in days away from work, restricted duty, medical treatment beyond first aid, loss of consciousness, or a significant injury or illness diagnosed by a healthcare professional. First aid alone does not make something recordable.

Grow facilities in some states fall under OSHA's agricultural exemptions (29 CFR 1928) if they employ 10 or fewer non-family farm workers and are not subject to a 29 CFR 1904 citation. Most cannabis cultivation will not qualify as a farm under OSHA's definition. They are general industry employers.

For a practical walkthrough of what goes on an incident report, that article covers the full form and decision tree.

What should a cannabis employer do if OSHA shows up for an inspection?

First, ask to see credentials and the reason for the visit. OSHA inspectors carry official identification. An inspection can be triggered by a worker complaint, a reported injury, a programmed (random) inspection, or a referral from another agency.

You have the right to walk along during the inspection. Use it. Take your own notes and photos of everything the inspector photographs. Have your written programs, training records, SDS binder, and 300 logs ready to hand over, because those are the first requests.

In most cases you do not have to let OSHA in without a warrant, but refusing entry escalates things and rarely helps the employer. For most small businesses, cooperating professionally while documenting the inspection is the smart play.

Citations come with a 15-working-day window to contest. You can also request an informal conference with the OSHA Area Director, which often trims penalties or amends citations. Employers with 25 or fewer workers get an automatic 60 percent penalty reduction. Employers with 26 to 100 workers get 40 percent ^[1].

SafetyFolio's written safety programs give you the documented evidence inspectors ask for, which is often the difference between a citation and a verbal reminder.

For a wider overview of how OSHA enforcement works, see our OSHA guide.

Frequently asked questions

Can OSHA fine a cannabis dispensary even though cannabis is federally illegal?

Yes. OSHA's jurisdiction comes from the Occupational Safety and Health Act of 1970, not the Controlled Substances Act. The agency enforces workplace safety regardless of the federal legal status of the product being handled. OSHA has cited cannabis businesses in legal states and collected those penalties. Cannabis employers have no federal-illegality defense against OSHA citations.

Is a cannabis grow operation considered agriculture or general industry under OSHA?

Almost always general industry. OSHA's agricultural standards (29 CFR 1928) apply to traditional farming operations. Most indoor and greenhouse cannabis cultivation does not meet OSHA's definition of a farm and falls under 29 CFR 1910 general industry standards. If your classification is unclear, you can submit a written inquiry to your OSHA area office.

Do small cannabis businesses with fewer than 10 employees need to follow OSHA?

Yes, OSHA's safety standards apply regardless of employee count. Very small employers (10 or fewer employees all year) are exempt from routine programmed inspections and from keeping the 300 injury log, but they must still comply with all safety standards and report any fatality, hospitalization, amputation, or eye loss to OSHA within the required timeframes.

What is the General Duty Clause and how does it apply to cannabis workplaces?

Section 5(a)(1) of the OSH Act requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm, even when no specific standard covers the hazard. OSHA uses this clause for cannabis hazards like CO2 enrichment exposure and heat illness in grow rooms. A recognized hazard is one the employer knew or should have known about.

Does cannabis dust or pollen count as a respiratory hazard under OSHA?

Potentially yes. Workers who handle large quantities of dry plant material, process trim, or work in dusty areas can be exposed to particulates that may cause respiratory sensitization. OSHA has no cannabis-specific PEL, but the general industry PEL for particulates not otherwise regulated is 15 mg/m3 for total dust and 5 mg/m3 for the respirable fraction under 29 CFR 1910.1000 Table Z-1.

Are pesticides used in cannabis cultivation regulated by OSHA?

Yes, under the Hazard Communication standard (29 CFR 1910.1200). Every pesticide must have an SDS accessible to workers, and employees who apply or work near pesticides must be trained on the hazards. The EPA's Worker Protection Standard (40 CFR 170) also applies to agricultural pesticide use and carries its own training and re-entry interval requirements that run parallel to OSHA.

What are OSHA's requirements for CO2 enrichment systems in grow rooms?

OSHA has no CO2-specific standard for grow operations, but the PEL for CO2 is 5,000 ppm as an 8-hour time-weighted average (29 CFR 1910.1000 Table Z-1). If CO2 can build to dangerous levels in an enclosed space, that space may qualify as a permit-required confined space under 29 CFR 1910.146, requiring a written program, atmospheric testing, and entry permits before workers go in.

Does OSHA require security training for dispensary employees?

There is no OSHA standard specifically covering dispensary robbery. But the General Duty Clause and OSHA's voluntary workplace violence prevention guidelines treat retail robbery as a recognized hazard in cash-intensive businesses. If a dispensary employee is hurt in a robbery and OSHA finds the employer had no prevention measures, a General Duty citation is possible. Practical controls include panic buttons, cash management procedures, and de-escalation training.

What records does a cannabis employer need to keep for OSHA compliance?

Employers with 11 or more employees keep OSHA 300, 300A, and 301 forms for 5 years. All employers retain training records (content, date, attendees) for the period each standard requires, typically 1 to 3 years. Written programs like HazCom, Respiratory Protection, and LOTO must stay current and available for inspection at all times. SDS records must be kept for 30 years after the chemical was last in use.

Can a cannabis employer use OSHA's free On-Site Consultation program?

Yes. OSHA's free On-Site Consultation Program, separate from enforcement, is open to small and medium employers, including cannabis businesses. Consultants identify hazards and help build programs without issuing citations or sharing findings with enforcement. In exchange, employers must correct identified serious hazards. State agencies run the program under an OSHA cooperative agreement.

Do cannabis delivery drivers face OSHA requirements?

OSHA's general industry standards technically apply to in-transit work, but motor carrier employees driving commercial vehicles may fall under DOT rather than OSHA for some hazards. For cannabis delivery drivers, the relevant OSHA obligations are HazCom training (for any chemical products carried), workplace violence prevention (robbery risk), and ergonomics guidance for repeated lifting. Check your state's cannabis delivery regulations too.

What OSHA training is required before an employee can use a respirator at a cannabis facility?

Under 29 CFR 1910.134, employees must complete a medical evaluation (OSHA Appendix C questionnaire, reviewed by a licensed healthcare professional) before wearing a respirator. They must get fit testing for any tight-fitting facepiece before initial use and annually after. They must also receive training on when to use a respirator, fit-check procedures, limitations, maintenance, and symptoms that warrant removing it.

Are there OSHA ergonomics requirements for cannabis trimming workers?

OSHA has no specific ergonomics standard for general industry (the proposed rule was withdrawn in 2001). But the General Duty Clause can be used to cite egregious ergonomic hazards. Repetitive motion injuries from hand trimming are a real risk. Practical controls include job rotation, padded workstations, anti-fatigue mats, and scissors built for extended use. Some state OSHA plans publish ergonomics guidance that goes further than federal OSHA.

How do I find out if my state has its own cannabis-specific safety requirements beyond OSHA?

Check three sources: your State Plan OSHA website (linked from osha.gov/stateplans), your state cannabis licensing agency's regulations and license conditions, and your local fire marshal's office for extraction or chemical storage rules. California, Colorado, Michigan, Illinois, and Nevada all have state cannabis agencies that publish compliance guidance. Reading your license conditions closely often reveals safety obligations you will not find in OSHA's CFR.

Sources

1. OSHA, OSH Act of 1970 and Penalty Structure: OSHA covers private-sector employers under the OSH Act of 1970; maximum penalty for willful or repeated violation was $16,550 per violation as of 2024; small employers receive automatic penalty reductions
2. OSHA, State Plans overview: Approximately half the states operate OSHA-approved State Plans with standards at least as protective as federal OSHA
3. OSHA, Top 10 Most Frequently Cited Standards (annual list): Hazard Communication (29 CFR 1910.1200) is consistently among the most-cited OSHA standards nationally
4. Bureau of Labor Statistics, Injuries, Illnesses, and Fatalities, Retail Trade: Slips and falls are a leading cause of non-fatal injuries in retail trade settings
5. OSHA, Respiratory Protection standard 29 CFR 1910.134: Employers requiring respirator use must have a written program, conduct medical evaluations, and perform fit testing before initial use and annually
6. OSHA, Heat Illness Prevention (General Duty Clause enforcement guidance): In the absence of a finalized heat standard, OSHA cites heat illness hazards under the General Duty Clause, Section 5(a)(1) of the OSH Act
7. OSHA, 29 CFR 1910.1000 Table Z-1 Air Contaminants: OSHA's permissible exposure limit for CO2 is 5,000 ppm as an 8-hour time-weighted average
8. OSHA, Process Safety Management standard 29 CFR 1910.119: PSM applies when flammable liquids are present above threshold quantities, including 10,000 pounds of a flammable liquid above its normal boiling point
9. OSHA, Lockout/Tagout standard 29 CFR 1910.147: Lockout/tagout training is required before employees perform service or maintenance on energized equipment, with retraining when deficiencies are observed
10. OSHA, Powered Industrial Trucks standard 29 CFR 1910.178: Forklift operator training and evaluation is required before operation and must be repeated at least every three years
11. National Conference of State Legislatures, Workers' Compensation for Cannabis Employees: State workers' compensation coverage for cannabis workers varies; some states cover cannabis employees, others do not, creating gaps for injured workers
12. OSHA, PPE standard 29 CFR 1910.132, employer payment requirement: The 2008 amendment to 29 CFR 1910.132(h) requires employers to provide most required PPE at no cost to employees
13. OSHA, Recordkeeping standard 29 CFR 1904 overview: Employers with 11 or more employees must maintain OSHA 300 logs; all employers must report fatalities within 8 hours and hospitalizations, amputations, or eye losses within 24 hours