General workplace safety: what every employer must know

Last updated 2026-07-09

What is general workplace safety and why does it matter legally?

General workplace safety is the set of employer duties, written programs, and daily habits that keep workers from getting hurt, sick, or killed on the job. In the United States those duties trace back to one law: the Occupational Safety and Health Act of 1970, which created OSHA and gave it power to write enforceable standards. ^[1]

The legal hook that matters most, especially for employers who assume no specific standard applies to them, is Section 5(a)(1) of the OSH Act. People call it the General Duty Clause. It says each employer "shall furnish to each of his employees employment and a place of employment which are free from recognized hazards that are causing or are likely to cause death or serious physical harm to his employees." ^[1] The language is broad on purpose. OSHA uses it to cite hazards no written standard covers yet, including heat illness, workplace violence, and ergonomic injuries.

The business case is simpler than the legal one. The National Safety Council put the total cost of work injuries at $167 billion in 2022, counting wage and productivity losses, medical bills, and administrative costs. ^[2] For a small business, one serious injury can run $40,000 to $150,000 in direct costs, with indirect costs two to ten times higher depending on the cost model you use.

Want a quick orientation to the agency itself? The what does osha stand for article covers the history and structure. For the full scope of employer duties, start with the osha overview.

Which OSHA standards apply to most general industry employers?

OSHA's rules for general industry live at 29 CFR Part 1910. Construction has its own set at 29 CFR Part 1926. If you run a factory, warehouse, store, restaurant, or office, you are almost certainly general industry.

The table below lists the standards OSHA cited most often in general industry during fiscal year 2023, pulled straight from OSHA's annual top-ten violations report. ^[3]

Standard	Topic	FY2023 Federal Citations
29 CFR 1910.1200	Hazard Communication	2,978
29 CFR 1910.212	Machine Guarding	1,541
29 CFR 1910.147	Lockout/Tagout	1,493
29 CFR 1910.178	Powered Industrial Trucks	1,299
29 CFR 1910.134	Respiratory Protection	1,281
29 CFR 1910.303	Electrical: Wiring	1,036
29 CFR 1910.132	PPE General Requirements	982
29 CFR 1910.157	Portable Fire Extinguishers	893

Those eight standards drive most general industry enforcement. If forklifts are in the picture, read forklift certification next. If chemicals are, hazard communication walks through the full SDS and labeling system. For energy control, lockout tagout has the written program details.

Three things apply to nearly every employer no matter the industry. Written hazard communication (1910.1200), an emergency action plan (1910.38), and injury recordkeeping (29 CFR Part 1904). You cannot skip those even running a five-person office.

What are the most common causes of workplace injuries and deaths?

The Bureau of Labor Statistics tracks this closely. In 2022, private-industry employers reported roughly 2.8 million nonfatal injuries and illnesses, and 5,486 workers died on the job. ^[4] The fatal injury rate was 3.7 per 100,000 full-time equivalent workers.

OSHA's "Fatal Four" in construction are falls, struck-by objects, electrocution, and caught-in/between incidents. Together they caused 46.2 percent of construction worker deaths in 2021. ^[5] In general industry the leading nonfatal causes look different: overexertion and bodily reaction (lifting, pushing, repetitive motion), slips and trips and falls, and contact with objects and equipment.

Overexertion is the expensive one. It costs U.S. employers an estimated $12 to $13 billion a year in direct workers compensation costs, per the Liberty Mutual Workplace Safety Index, and that figure moves with healthcare inflation.

Here is why the hazard profile drives program design. Knowing what actually hurts people in your industry lets you spend attention where it pays off. A warehouse should weight its program toward forklift safety, fall prevention, and back injuries. A fabrication shop carries an entirely different risk. Writing one generic program and calling it finished is how employers end up with paperwork that neither protects workers nor survives an inspection.

What written safety programs does OSHA actually require?

This is where owners get tripped up. OSHA does not require a single "safety manual." It requires separate written programs, each triggered by a specific standard, and the list gets long fast.

The programs most general industry employers end up needing:

• Hazard Communication Program (29 CFR 1910.1200(e)): required if any hazardous chemicals are present.
• Energy Control (Lockout/Tagout) Program (29 CFR 1910.147(c)(4)): required if workers service or maintain equipment where unexpected startup could occur.
• Respiratory Protection Program (29 CFR 1910.134(c)): required if respirators are used, mandatory or voluntary.
• Personal Protective Equipment (29 CFR 1910.132): no single written manual required, but written hazard assessments and PPE selections are.
• Emergency Action Plan (29 CFR 1910.38): required for most employers; can be oral only in workplaces with ten or fewer employees.
• Bloodborne Pathogens Exposure Control Plan (29 CFR 1910.1030): required if any employee has occupational exposure to blood or other potentially infectious materials.

Others show up depending on the operation. A written Heat Illness Prevention Plan (required in California under Cal/OSHA Title 8 Section 3395, with a federal rule proposed in 2024), a Hearing Conservation Program (29 CFR 1910.95), and a Confined Space Entry Program (29 CFR 1910.146) if permit-required spaces exist.

Pulling all of this together from scratch takes hours and requires knowing which standards actually apply to you. To skip the blank-page problem, SafetyFolio's safety program generator walks you through your hazard profile and builds the required written programs in about 15 minutes. It does not replace legal review for complex operations, but it handles most small and mid-size employer needs accurately.

For how OSHA's training rules pair with these written programs, osha-training lays it out standard by standard.

How do you do a workplace hazard assessment?

A hazard assessment is the foundation of any safety program. Skip it and you end up writing programs for hazards you imagine instead of the ones on your floor.

OSHA's 29 CFR 1910.132(d) requires you to assess the workplace for hazards that call for PPE, then certify that assessment in writing with the date and the name of the person who did it. ^[6] That is the floor. Good practice goes past it.

A workable process has four steps. First, walk every area with someone who actually does the work, more than a manager. Second, sort hazards by type: physical (struck-by, fall, heat), chemical (vapors, dusts, skin contact), biological (bloodborne pathogens, mold), and ergonomic (repetitive motion, awkward postures, heavy lifting). Third, rate each hazard for likelihood and severity. Even a rough two-by-two matrix beats guessing. Fourth, document controls in the order of the hierarchy: elimination, substitution, engineering controls, administrative controls, then PPE as the last resort.

The hierarchy matters because PPE is the weakest protection you have. A glove fails. A machine guard does not depend on a worker remembering to put anything on. OSHA's standards and NIOSH both build around this order, and inspectors notice whether you thought through the full range or just handed out gloves.

Reassess whenever a new process, chemical, or machine enters the workplace. OSHA sets no mandatory reassessment interval for the general requirement, but an annual review is defensible and easy to keep.

What OSHA training do employees need?

Training rules are scattered across dozens of individual standards, each with its own specifics. No single OSHA rule says "train everyone annually on everything." Each standard names who gets trained, on what, and sometimes how often.

The requirements that apply most broadly:

• Hazard Communication (1910.1200): before initial assignment and whenever a new chemical hazard shows up. Covers reading an SDS, labels, and the specific hazards on site.
• Lockout/Tagout (1910.147): before assignment to energy control tasks; retraining when you spot a deficiency or a procedure changes.
• Emergency Action Plan (1910.38): when the plan is set up, when someone new joins, and when responsibilities change.
• PPE (1910.132): before using any required PPE; covers when and what PPE is needed, how to wear and adjust it, and its limits.
• Powered Industrial Trucks (1910.178): operator training and evaluation before operation; re-evaluation at least every three years.

The OSHA 30-hour course (an OSHA Outreach Program class for supervisors and safety leads) is not required by any federal standard for most industries, but it is money well spent for anyone running a program. The osha-30 article covers what is in it and who should take it.

One rule people miss: OSHA requires training in a language and vocabulary the employee understands. For a crew with limited English, that is a hard compliance obligation, not a courtesy. ^[7]

How does OSHA enforcement and inspection work for small businesses?

OSHA inspects in a set priority order. Imminent danger comes first, then fatalities and catastrophes (an in-patient hospitalization of three or more workers, an amputation, or loss of an eye), then formal complaints, then referrals from other agencies, then follow-ups, and last, programmed inspections aimed at high-hazard industries. ^[8]

Small employers get some relief. In low-hazard industries, OSHA does not run programmed inspections at sites with ten or fewer employees, and those employers are exempt from routine recordkeeping under 29 CFR Part 1904 (severe-injury reporting deadlines still apply). Businesses with fewer than 250 employees at a location and fewer than 500 company-wide may also qualify for reduced penalties under OSHA's adjustment policy.

As of 2024, penalties run up to $16,131 per serious violation and up to $161,323 for willful or repeated violations. ^[9] Those maximums adjust every year for inflation under the Federal Civil Penalties Inflation Adjustment Act. OSHA cites multiple violations from one inspection, so a serious incident at an unprepared site can produce a citation package well into six figures.

Documentation is the best defense you have. A written program that matches what actually happens on the floor, training records that show completion by name and date, and hazard assessment certifications. An inspector who finds clean records and a cooperative employer almost always settles for fewer citations and lower penalties than one who walks into a bare-walls operation with nothing on paper.

For what to do when an inspector shows up unannounced and how to answer a citation, the incident-report article covers the recordkeeping and reporting side.

What is OSHA's recordkeeping requirement and who has to follow it?

Under 29 CFR Part 1904, employers with more than ten employees in most industries must keep records of work-related injuries and illnesses. ^[10] Three forms do the work: the OSHA 300 Log (a running list of cases), the OSHA 300A (an annual summary you post from February 1 through April 30), and the OSHA 301 Incident Report (a detailed record for each case).

Some industries are partially exempt from routine recordkeeping but still have to report fatalities and severe injuries. That group covers most retail, service, finance, and real estate operations. OSHA publishes the full list of exempt industries by NAICS code on its website. ^[10]

Reporting deadlines are strict. A work-related fatality goes to OSHA within 8 hours. An in-patient hospitalization, amputation, or loss of an eye goes in within 24 hours. ^[10] You report by phone to your local area office, by phone to the OSHA hotline at 1-800-321-OSHA, or online through OSHA's reporting portal.

Miss a required report and that is its own citable violation. In 2022, OSHA issued reporting-failure citations that ran from a few hundred dollars to $15,000 or more, depending on whether the failure was serious or other-than-serious.

What does a basic safety program actually need to include?

Building from scratch? The structure that holds up in both daily practice and inspections has five parts.

First, a safety policy statement signed by ownership or senior leadership. It can be one page. Name who is responsible for safety and make a clear commitment. What it signals is that safety is a management function, not a poster on the wall.

Second, your written programs for each applicable standard. Which ones you need comes straight out of your hazard assessment. A five-person accounting firm probably needs an emergency action plan and a basic PPE assessment. A 30-person metal shop needs lockout/tagout, machine guarding procedures, respiratory protection, hearing conservation, and more.

Third, training records. The training happened; now prove it. Keep a sign-in sheet or completion log with employee name, date, topic, and instructor for every session. Inspectors ask for these by name.

Fourth, hazard inspection records. Regular walkthroughs (weekly, monthly, or quarterly depending on hazard level) with findings and corrective actions written down show the program is alive, not filed away.

Fifth, incident investigation records. Investigate every injury and near-miss for root cause, more than to close out a form. A documented near-miss investigation is one of the clearest signals to an inspector that a company takes safety seriously.

If that list feels like a lot, that is an honest reaction. The SafetyFolio generator exists to turn it into actual documents without starting from a blank page.

Do state OSHA plans have different or stricter requirements?

Yes, and it catches employers who cross state lines or run multiple locations. Twenty-two states and two territories operate their own OSHA-approved State Plans covering private sector employers. ^[11] Six more states have plans covering only state and local government workers.

State Plans must be "at least as effective" as federal OSHA, which means they can be stricter, and several are. California (Cal/OSHA), Washington (L&I), and Michigan (MIOSHA) all exceed federal minimums. California's heat illness standard has applied to outdoor workers since 2005 and indoor workers since 2024, years ahead of any federal rule. Oregon requires a written Accident Prevention Program for most employers, with content requirements that go past federal general duty obligations.

In a State Plan state, you answer to that state agency, not federal OSHA, for most private sector matters. Penalties, inspection procedures, and specific standards can all differ. Check your state's requirements with the state agency directly. Do not assume meeting federal OSHA covers your state obligations.

For a current map and links to each plan, OSHA keeps a directory at osha.gov. ^[11]

What does good workplace safety cost versus what injuries cost?

The return on safety spending is well-documented, though exact ratios vary by study and industry. OSHA guidance cites research suggesting every $1 put into workplace safety saves $4 to $6 in direct and indirect injury costs, but the methodology behind that figure is hard to pin down, so treat it as directional, not exact.

The cost of injuries is better documented. The Liberty Mutual Workplace Safety Index, published each year from actual workers compensation data, has found that the most disabling workplace injuries cost U.S. employers more than $58 billion in direct workers compensation in a recent edition. ^[12] That number leaves out productivity losses, overtime to cover the injured worker, hiring and training a replacement, and the management hours that go into investigations and OSHA responses.

For a small business the math is more immediate. One serious back injury needing surgery and six months of recovery can cost $80,000 to $120,000 in direct medical and compensation costs. A forklift fatality triggers a mandatory OSHA inspection, potential willful violation citations up to $161,323 each, and civil liability that can end the business.

A solid written safety program for a small employer, built competently, costs somewhere between a few hundred dollars (DIY with the right tools) and a few thousand (consultant-built). Against a six-figure incident, that comparison is not close.

Frequently asked questions

What is the General Duty Clause and when does OSHA use it?

Section 5(a)(1) of the OSH Act requires employers to provide a workplace free from recognized hazards likely to cause death or serious harm. OSHA uses it to cite hazards no specific standard covers, such as workplace violence, extreme heat, and ergonomic risks. To sustain a citation, OSHA must show the hazard was recognized, the employer knew or should have known, and a feasible fix existed.

How many employees do you need before OSHA rules apply to you?

OSHA's standards apply to nearly all private sector employers regardless of size, with no minimum headcount. The main exception is that employers with ten or fewer workers in low-hazard industries are exempt from routine injury recordkeeping under 29 CFR Part 1904. You still must report fatalities within 8 hours and severe injuries within 24 hours, and every substantive safety standard still applies.

What is a safety data sheet (SDS) and who needs them?

An SDS (formerly the MSDS) is a standardized document describing a chemical's hazards, composition, safe handling, PPE requirements, and emergency response. Under 29 CFR 1910.1200, any employer that uses or stores hazardous chemicals must keep an SDS for each one and make them reachable to employees throughout the shift. The hcl safety data sheet article shows what a real SDS looks like.

What is the most commonly cited OSHA standard?

Across all industries, Fall Protection in construction (29 CFR 1926.501) is the single most-cited OSHA standard and has topped the list for more than a decade. In general industry, Hazard Communication (29 CFR 1910.1200) is the top citation year after year. Both reflect how often employers lack a required written program or fail to train workers on chemical hazards on site.

Can OSHA inspect a workplace without notice?

Yes. Inspectors can enter without advance notice and, in most cases, without a warrant. You can require a warrant, but doing so often signals you have something to hide, and inspectors can obtain one. You have the right to have a company representative walk with the inspector and to join the opening and closing conferences. Refusing entry outright without legal grounds can itself draw a citation.

What is a near-miss and do you have to report it to OSHA?

A near-miss is an unplanned event that caused no injury but easily could have. Federal OSHA does not require you to report near-misses, and they do not go on your OSHA 300 Log. Investigate and document them internally anyway. Near-misses are leading indicators of serious injuries, and a pattern of undocumented ones in a specific area looks terrible after a real incident occurs.

How long do you have to report a workplace fatality to OSHA?

You must report any work-related fatality to OSHA within 8 hours of learning about it. For an in-patient hospitalization, amputation, or loss of an eye, the deadline is 24 hours. Reports go to your local OSHA area office, the hotline at 1-800-321-OSHA, or OSHA's online reporting portal. Missing these windows is its own citable violation, and OSHA takes it seriously.

Does OSHA require a written safety plan for small businesses?

OSHA does not require a single "safety plan" document, but it does require several separate written programs triggered by specific hazards: a Hazard Communication Program if chemicals are present, an Emergency Action Plan for most workplaces, and written energy control procedures if lockout/tagout applies. Your required list depends entirely on your hazards. An oral Emergency Action Plan is allowed only in workplaces with ten or fewer employees.

What is the difference between OSHA 10 and OSHA 30 training?

Both are voluntary OSHA Outreach Program courses run by authorized trainers. OSHA 10 is a 10-hour course on basic hazard recognition for entry-level workers. OSHA 30 is a 30-hour course for supervisors and safety leads, covering more standards and hazard controls. Neither satisfies the training rules of specific standards like lockout/tagout or respirator fit-testing; they are supplemental. The osha-30-training article has more.

What injuries have to go on the OSHA 300 Log?

Any work-related injury or illness that results in days away from work, restricted duty, job transfer, medical treatment beyond first aid, loss of consciousness, or a diagnosis of a significant injury by a healthcare professional must be recorded. First-aid-only cases (bandaging, OTC medication at nonprescription doses) do not get recorded. The case must be work-related, meaning the work environment caused or contributed to it.

Do remote workers or home-based employees fall under OSHA rules?

OSHA's standards technically reach home worksites, but the agency said in a 2000 memorandum that it will not inspect home offices and will not hold employers liable for home office conditions. For remote workers, the employer is not responsible for the home office itself but is responsible for company-provided equipment and work-related injuries during work activities. This area stays genuinely unsettled for hybrid arrangements.

How often should workplace safety inspections happen?

OSHA sets no universal frequency for internal safety inspections. Most successful programs use a tiered approach: supervisors run informal daily or shift-level checks of their area, a formal departmental inspection happens monthly, and a full facility audit happens quarterly or annually. High-hazard operations like chemical plants inspect more often. What matters most is that findings get documented and corrective actions get tracked to completion.

What is an employer's responsibility if a staffing agency worker is injured?

The host employer and the staffing agency share OSHA responsibility for temporary workers. Under OSHA's Temporary Worker Initiative, the host employer controls the day-to-day environment and is primarily responsible for site-specific hazard controls and training, while the staffing agency handles general safety training and confirms the host is meeting its obligations. Both can be cited for violations affecting the same worker.

Sources

1. OSHA, OSH Act of 1970 full text: Section 5(a)(1) General Duty Clause text and employer obligations under the OSH Act
2. National Safety Council, Injury Facts 2023: Total cost of workplace injuries estimated at $167 billion in 2022
3. OSHA, Top 10 Most Cited Standards FY2023: Most frequently cited general industry OSHA standards in FY2023 with citation counts
4. Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses 2022: 2.8 million nonfatal workplace injuries and illnesses in private industry; 5,486 fatal work injuries in 2022; fatal injury rate of 3.7 per 100,000 FTE workers
5. OSHA, Construction Fatal Four: Falls, struck-by, electrocution, and caught-in/between accounted for 46.2 percent of construction worker deaths in 2021
6. OSHA, 29 CFR 1910.132 Personal Protective Equipment: Employer required to assess workplace for PPE hazards and certify the assessment in writing with date and assessor name
7. OSHA, Training Requirements in OSHA Standards: OSHA requires training to be conducted in a language and vocabulary the employee understands
8. OSHA, Inspection Detail and Priorities: OSHA inspection priority order: imminent danger, fatalities/catastrophes, complaints, referrals, follow-ups, programmed inspections
9. OSHA, Penalty Amounts 2024: Maximum penalty of $16,131 per serious violation and $161,323 for willful or repeated violations as of 2024
10. OSHA, 29 CFR Part 1904 Recordkeeping Rule: Employers with more than ten employees in non-exempt industries must maintain OSHA 300 Log; fatality reporting within 8 hours; severe injury reporting within 24 hours
11. OSHA, State Plans directory: 22 states and 2 territories operate OSHA-approved State Plans covering private sector employers; state plans must be at least as effective as federal OSHA
12. Liberty Mutual Workplace Safety Index: Most disabling workplace injuries cost U.S. employers more than $58 billion in direct workers compensation in a recent edition