OSHA fall protection standard: what every employer must know

Last updated 2026-07-09

What is the OSHA fall protection standard?

The OSHA fall protection standard is not one rule. It is a family of regulations that share a single idea: when a worker can fall far enough to get seriously hurt, you have to protect them before the fall happens, not after.

General industry workplaces answer to 29 CFR 1910.28, which OSHA finalized in 2016 after decades of scattered, surface-by-surface rules. ^[1] Before that update, employers had to cross-reference a tangle of separate standards for portable ladders, scaffolds, fixed ladders, and open-sided floors. The 2016 revision folded most of that into one readable subpart you can actually sit down and understand.

Construction sites run on a different standard, 29 CFR 1926.502, which lives inside Subpart M of the construction regulations. ^[2] Maritime and shipyard work has its own rules under 29 CFR 1915.

The height that triggers the standard depends on your industry. General industry: 4 feet above a lower level. Construction: 6 feet. Scaffolding in construction: 10 feet. These numbers are not interchangeable. A general industry employer cannot glance at the construction standard and decide the higher threshold applies to them.

OSHA built the 2016 rule around one plain goal: preventing falls, which the agency describes as the leading cause of death in general industry. ^[1] That framing tells you how inspectors think. They are not hunting for technicalities. They are asking whether a worker is exposed to a fall and whether something real is in place to stop it.

When does OSHA require fall protection, and at what heights?

The height trigger is the first thing to nail down, because it decides whether you have a legal duty at all. Get it wrong and everything downstream is built on sand.

Industry / Work Type	OSHA Height Trigger	Primary Standard
General industry (walking-working surfaces)	4 feet	29 CFR 1910.28
Construction (leading edges, floor holes, roofs)	6 feet	29 CFR 1926.502
Construction scaffolding	10 feet	29 CFR 1926.451
Shipyard employment	5 feet	29 CFR 1915.073
Longshoring	8 feet	29 CFR 1918.85
Any height over dangerous equipment	No minimum	29 CFR 1910.28(b)(1)

That last row surprises people. If a worker is above machinery, a vat of chemicals, or any surface that poses a serious injury risk, fall protection is required no matter the height. A worker standing 18 inches above an open mixing tank is covered.

Some surfaces trigger protection at any height on their own. Hatchway floor holes need a cover or guardrail even if the drop is only a few inches. Skylight openings need covers rated to hold twice the weight of workers, equipment, and materials. ^[1]

Here is the point small employers miss most. The height trigger is not limited to permanent work locations. Temporary work counts too, including a task that lasts two minutes. If your maintenance tech climbs onto a mezzanine rail to swap a light bulb, that exposure is on the clock.

What are the acceptable fall protection methods under OSHA guidelines?

OSHA recognizes three primary systems, plus a handful of alternatives for spots where the primary methods do not work. Know the three cold, because inspectors expect you to.

Guardrail systems are the go-to for open-sided floors, mezzanines, and elevated platforms. Under 29 CFR 1910.29, a compliant guardrail needs a top rail at 42 inches (plus or minus 3 inches), a midrail at roughly half that height, and enough strength to take at least 200 pounds of force applied in any downward or outward direction. ^[1] The 200-pound figure comes from OSHA's analysis of the forces a stumble or lean produces. Wire rope used as a top rail has to be flagged at intervals no greater than 6 feet.

Safety net systems catch workers after they fall. You see them in construction when guardrails are impractical and personal fall arrest is awkward, like on a large concrete pour deck. Nets go as close as practicable under the walking surface, and no more than 30 feet below it in construction. ^[2] After any fall, the net gets inspected before anyone works above it again.

Personal fall arrest systems (PFAS) are the harness, lanyard, and anchorage combination most people picture. A PFAS has to limit maximum arresting force on the body to 1,800 pounds, stop a fall within 3.5 feet of free fall, and bring the worker to a full stop with at least 1 foot of clearance between the worker and the lower level. ^[2] The clearance math is where most employers slip. You have to account for free fall distance, deceleration distance, D-ring height, and harness stretch. If the numbers do not close, the system fails, even with a brand-new harness and lanyard.

Anchorage points for PFAS have to support at least 5,000 pounds per attached worker, or be designed by a qualified person to keep a safety factor of two. ^[2] Rebar, scaffolding frames, and overhead pipes fail this test all the time. That is not a guess. OSHA letters of interpretation have said so more than once.

Positioning systems and travel restraint systems are not fall arrest. A positioning system (a lineman's belt, say) holds a worker in place on a pole or wall. A travel restraint system keeps the worker from reaching the fall hazard at all. Neither is built to arrest a fall, and OSHA handles them differently in its standards.

For some construction work, OSHA also allows safety monitoring systems (a trained observer watching for hazards) and controlled access zones as alternatives, but only under narrow conditions, and generally only when the primary methods would create bigger hazards. These are not free passes.

How serious is the fall hazard problem? What do the injury numbers show?

Falls are the single biggest killer in American workplaces. In 2022, falls to a lower level killed 865 workers, according to the Bureau of Labor Statistics Census of Fatal Occupational Injuries. ^[3] That count has climbed in recent years, less because worksites got more dangerous and more because the construction workforce grew.

Fatal falls from ladders, roofs, scaffolds, and elevated platforms add up to roughly one in five workplace deaths across all industries. Construction alone accounted for 395 fatal falls in 2022. ^[3]

Nonfatal fall injuries dwarf the deaths. BLS data show falls, slips, and trips caused about 211,640 injuries involving days away from work in 2022 across private industry. ^[3] The median time off for a fall injury is 11 days, so the typical hurt worker loses roughly two work weeks.

On the citation side, fall protection is the most cited OSHA standard year after year. In federal fiscal year 2023, "Fall Protection, General Requirements" (1926.501) was the single most-cited standard for the thirteenth straight year, with 7,271 citations issued. ^[4] The general industry walking-working surfaces standard (1910.28) lands in the top ten regularly too.

The average penalty per citation swings on the violation type and whether OSHA calls it serious, willful, or repeat. Serious violations top out at $16,131 per violation as of 2024. Willful or repeat violations reach $161,323 per violation. ^[5] A site with several unprotected workers at height stacks citations fast.

What specific surfaces and work situations does OSHA fall protection cover?

The 29 CFR 1910.28 standard names specific surfaces and situations. Knowing the list is how you catch the gaps in your own building before an inspector does.

Unprotected sides and edges of any walking-working surface at 4 feet or more need guardrails or a PFAS. That takes in mezzanine edges, loading dock edges, and the edges of elevated storage platforms.

Floor holes and floor openings are covered even when the drop is small. A hole big enough for a person to fall through, or big enough to drop objects onto someone below, needs a cover (secured against accidental displacement and able to hold twice the anticipated load) or a guardrail around the perimeter. ^[1]

Fixed ladders taller than 24 feet need a personal fall arrest system or a ladder safety system. OSHA killed the old cage standard in the 2016 revision after concluding cages do not arrest falls and can make one worse by sending the worker tumbling. Fixed ladders with cages installed before November 18, 2036 are grandfathered for now, but new installations must use a PFAS or ladder safety device. ^[1]

Dockboards and vehicle loading areas need protection where employees could fall into a lower area. Slaughtering and meat processing plants have their own rules around open vats and tanks.

Roofwork in general industry falls under 1910.28 when employees are up there for maintenance or inspection. Construction roofwork (new roofing, tear-off) falls under Subpart M. Know which one applies. If a general industry company hires a roofing contractor, the contractor's crew works under the construction standard, but the host employer still has a duty to protect its own employees in shared areas.

What does a written fall protection plan need to include?

A written fall protection plan is required in two main situations. In construction, 29 CFR 1926.502(k) requires a written plan when an employer uses a controlled decking zone or a leading-edge operation where conventional methods are infeasible. ^[2] General industry has no rule demanding a plan by name, but OSHA's General Duty Clause (Section 5(a)(1) of the OSH Act) creates a plain expectation that employers with recognized fall hazards keep documented procedures for handling them.

A solid plan, required or not, covers these elements:

• Identification of every fall hazard at the worksite, including heights and surface conditions
• The specific protection method chosen for each hazard (guardrail, net, PFAS, or approved alternative)
• Procedures for erecting, maintaining, disassembling, and inspecting the systems
• Training records showing which employees are trained and when
• Procedures for rescuing a worker after a fall arrest event (this one is almost always missing)
• The name of the competent person responsible for running the plan

The rescue piece deserves its own spotlight. OSHA's PFAS standard requires employers to provide for prompt rescue of employees who have been arrested in a fall. ^[2] Suspension trauma (also called harness-induced pathology) can seriously injure or kill a worker who hangs motionless in a harness within minutes. A PFAS without a rescue procedure is a fire extinguisher nobody knows how to work.

Building your safety documentation from scratch is slow. A tool like SafetyFolio's safety program generator can assemble a fall protection plan in a fraction of the time a blank page takes. The plan still has to match your actual site conditions, but having the structure and required elements pre-built saves real hours for a small employer.

For construction, the written plan has to be developed by a qualified person (someone with specific training, knowledge, and experience, a step above the broader "competent person" category). It also has to be kept at the job site.

What are the OSHA training requirements for fall protection?

Both the general industry and construction standards require training, and they diverge on the details. Train workers before they face the hazard, not after.

Under 29 CFR 1910.30, general industry employers must train each employee who might be exposed to fall hazards before they start work. ^[1] Training has to cover the nature of the hazards in the area, how to erect and use the protection systems, how to maintain and inspect the equipment, and the limits of those systems. The standard sets no minimum hours, but the training has to be delivered by a qualified person.

Under 29 CFR 1926.503, construction employers face similar rules: train each exposed employee, cover the same topics, and do it before exposure. ^[2] The trainer has to be a "competent person" under OSHA's definition, meaning someone who can spot existing and predictable fall hazards and has the authority to fix them.

Both standards require retraining when the employer has reason to believe a worker does not fully get the material, or when conditions change enough to make the old training inadequate.

OSHA does not set a required number of training hours for fall protection. That is a common misread. The bar is competency, not seat time. If your records show what was covered, who delivered it, and that the worker showed they understood it, you are in far better shape than the employer who handed out a pamphlet and called it done.

For workers who will use a PFAS, training should include a hands-on demonstration: donning the harness, connecting the lanyard to an anchor, and running the total fall distance calculation. Classroom-only instruction for PFAS does not cut it. See our overview of osha training requirements for how to document this correctly.

Who is a "competent person" for fall protection purposes?

OSHA uses this term throughout both fall protection standards, and it carries a specific legal meaning. A competent person is someone able to identify existing and predictable fall hazards in the surroundings or working conditions, and who has the authority to take prompt corrective measures to get rid of them. ^[2]

Competency is not certification. OSHA does not require a credential or a specific course. What matters is that the person has the knowledge, training, and experience to recognize fall hazards, plus the actual authority in the organization to fix them on the spot.

In plain terms, a competent person for fall protection should be able to inspect PFAS equipment and pull it from service when defective, spot when a guardrail misses its dimensional or strength requirements, recognize a bad anchorage point, and judge whether a proposed alternative (like a controlled access zone) is actually allowed under the relevant standard.

A "qualified person" is a higher bar: someone with a recognized degree, certificate, or professional standing in the field, plus enough experience to solve problems in the subject matter. ^[2] Qualified persons are required for designing engineered fall protection systems and for signing off on written plans in certain construction cases.

Small employers often name a supervisor as the competent person after running them through an OSHA 30-hour construction course. The osha 30 course covers fall protection in depth and is a fair starting point, though the course alone does not automatically make someone a competent person. That designation needs both knowledge and organizational authority.

What equipment inspection and maintenance does OSHA require for fall protection systems?

Equipment that fails at the moment of a fall is worse than no equipment at all, because the worker skipped other precautions believing they were safe. OSHA writes inspection duties straight into the rules.

Personal fall arrest equipment gets inspected before each use by the user, and periodically by a competent person. Neither standard fixes an exact interval beyond "periodic," but most manufacturers recommend formal inspections every 6 to 12 months and want the date logged on the equipment tag. OSHA letters of interpretation confirm that manufacturer inspection intervals count as relevant evidence of what is adequate. ^[9]

Any component that has arrested a fall comes out of service immediately. That is a hard rule in both 1910.140 and 1926.502. A harness that absorbed a fall arrest event can look untouched and still be structurally compromised for any future use. Same story for a self-retracting lanyard that deployed. Pull it, tag it out, replace it.

Guardrail systems should be inspected after any impact (a forklift hit, a heavy object striking the rail) and at regular intervals. The standard requires rails to take 200 pounds of force, but sets no prescribed test interval. Quarterly visual inspection by the competent person is common practice.

Floor and hole covers have to be secured against accidental displacement and marked with the word "HOLE" or "COVER" so workers do not mistake them for solid flooring. ^[1] A cover that slides underfoot, or one with no marking, is a citation waiting to happen.

Safety nets require inspection after each installation, after any fall into them, after any seismic event, and at least weekly during continuous use. ^[2] Debris comes out within two shifts, and any net with tears or other damage goes out of service until it is repaired or replaced.

What are the most common OSHA fall protection violations, and how do inspectors find them?

Understanding how inspectors approach fall protection lets you think like an auditor on your own walkthroughs. Do that once a quarter and most citations never happen.

The common citations cluster around a few repeat problems. Missing protection entirely: open-sided floors, unguarded mezzanine edges, roof work with no guardrails and no PFAS. Inadequate equipment: harnesses not connected to a qualifying anchor, lanyards too long for the clearance available, guardrails below height or missing midrails. Training gaps: no proof employees were trained before exposure, or records that vanish when the inspector asks for them.

Inspectors work these hazards in a rough sequence. They walk the perimeter of elevated surfaces looking for unguarded edges. They check PFAS anchor points by asking the competent person what they are rated for and whether the documentation exists. They ask to see training records and written plans. They look over PFAS equipment for wear, missing parts, or signs of a prior fall arrest.

Employee interviews are a sharp tool for inspectors. If a worker says they were told "use the harness if you want, but it's not required up there," that line goes straight into the case file.

Check your own exposure before an inspector ever arrives. Walk every elevated surface. Ask whether every worker who could reach an unprotected edge is trained and actually wearing (and connecting) a PFAS if that is your chosen method. Paper protection that stays in the truck closes nothing.

The construction standard also carries task-specific rules that get missed. Connectors (ironworkers) have an exception that lets them work up to two floors above the highest permanent floor for brief periods without conventional fall protection, but the conditions are strict and employers stretch the exception too far. ^[2]

How do state OSHA plans handle fall protection differently from federal rules?

Twenty-nine states and territories run their own OSHA-approved safety and health programs under Section 18 of the OSH Act. ^[7] State plans have to be at least as effective as federal OSHA, but they can and do push further.

California's Division of Occupational Safety and Health (Cal/OSHA) is the clearest example. Cal/OSHA requires fall protection in construction at 7.5 feet for most work, not 6 feet, and still requires it at any height above dangerous equipment, matching the federal rule. Cal/OSHA also has roofing requirements more prescriptive than the federal Subpart M. ^[8]

Washington State (L&I/WISHA) has its own chapter of fall protection rules and has long been active on roofing and residential construction enforcement.

If you work in a state plan state, check your state's rules, not the federal CFR. The federal standard is a floor, not a ceiling. OSHA keeps a current list of all state plan states on its website. ^[7]

For multi-state employers, the clean move is to find the strictest rule that applies to any single operation and apply it everywhere. That simplifies training, simplifies equipment buying, and kills the risk of applying the wrong standard to the wrong site.

How do you build a fall protection program for a small business?

Most small employers do not need a consultant to build a working fall protection program. You need a clear-eyed survey of your actual fall hazards and a documented answer to each one.

Start with a hazard survey. Walk every area workers go and note any spot where they are or could be at 4 feet or more above a lower level (or above any dangerous surface at any height). Include rooftop HVAC access, loading docks, fixed ladders, mezzanines, elevated storage, and any temporary work platforms.

For each hazard, write down the control method. Guardrail or cover where feasible. PFAS where a guardrail is not practical. Be specific: which anchor points are approved, what equipment belongs at that location, and what the fall clearance calculation shows.

Write down your training plan. Who gets trained, who delivers it, when it happens, and how you document completion. Keep the records. OSHA can ask for training documentation going back three years.

Write down your equipment inspection schedule and your post-fall rescue procedure. The rescue procedure is the piece most programs skip, and it is also the piece that decides whether an arrested worker lives.

If your program lives in someone's head or a stack of generic forms, put it into a structured format. SafetyFolio's safety program generator walks you through each required element and produces a document you can hand to an inspector or a new supervisor.

Review the program at least once a year and after any fall incident or near-miss. Near-misses are data. A worker who slipped at an unguarded edge and caught a rail just told you where your next serious injury comes from if you do nothing. See also our guide to osha training for how to structure the training component.

Frequently asked questions

What is the OSHA height requirement for fall protection in general industry?

OSHA requires fall protection when general industry workers are exposed to falls of 4 feet or more above a lower level, under 29 CFR 1910.28. There is no minimum height when the fall would land on dangerous equipment or machinery. Construction sites use a 6-foot threshold under 29 CFR 1926.502, and scaffolding in construction uses 10 feet under 29 CFR 1926.451.

What are the three main types of fall protection systems OSHA accepts?

OSHA recognizes guardrail systems, safety net systems, and personal fall arrest systems (PFAS) as the three primary methods. Guardrails need a top rail at 42 inches and must withstand 200 pounds of force. Safety nets have to stop a falling worker with adequate clearance. A PFAS must limit arresting force to 1,800 pounds and use an anchor rated for at least 5,000 pounds per worker.

Does OSHA require a written fall protection plan?

Construction employers must have a written plan when using controlled decking zones or leading-edge operations where conventional protection is infeasible, per 29 CFR 1926.502(k). General industry has no universal written-plan mandate, but OSHA's General Duty Clause creates a plain expectation for employers with recognized fall hazards. In practice, any employer with fall hazards should document its protection methods, training, and rescue procedures.

How often does OSHA cite fall protection violations?

Fall protection in construction (29 CFR 1926.501) has been OSHA's most frequently cited standard for 13 straight years. In federal fiscal year 2023, OSHA issued 7,271 citations under that standard alone. Serious fall protection violations carry penalties up to $16,131 per violation; willful or repeat violations can reach $161,323 per violation as of 2024.

Can I use a safety harness on a fixed ladder instead of a cage?

Yes, and OSHA prefers it. The 2016 revision to 29 CFR 1910.28 eliminated cages as an accepted fall protection method for new fixed ladders taller than 24 feet, because cages do not arrest falls and can worsen fall outcomes. New fixed ladders must use a personal fall arrest system or a ladder safety device. Fixed ladders with cages installed before November 18, 2036 are temporarily grandfathered.

What does OSHA say about fall protection on roofs?

For general industry employers doing maintenance or inspection on existing roofs, 29 CFR 1910.28 applies with its 4-foot trigger. Construction roofing work falls under 29 CFR 1926.502 (Subpart M) with a 6-foot trigger. On low-slope roofs in construction, employers can use guardrails, PFAS, or a safety monitoring system combined with a warning line system. Steep-slope roofs generally require guardrails or PFAS.

What is the difference between a personal fall arrest system and a travel restraint system?

A personal fall arrest system (PFAS) catches a worker after they fall, limiting arrest force to 1,800 pounds. A travel restraint system prevents the worker from reaching the fall hazard at all by limiting lanyard length. Travel restraint does not arrest a fall; it prevents one by geography. OSHA treats them differently, and travel restraint cannot substitute for PFAS when the worker needs to approach the edge.

Does OSHA require fall protection training to be in writing or classroom-based?

OSHA requires training by a qualified person (general industry, 29 CFR 1910.30) or a competent person (construction, 29 CFR 1926.503) before workers are exposed to fall hazards, but does not prescribe a format or minimum hours. Training must cover hazard recognition and equipment use. Employers must certify training in writing, and retraining is required when conditions change or a worker shows insufficient understanding.

What happens if a worker's harness arrests a fall? Can they keep using it?

No. Any PFAS component subjected to fall arrest forces must be removed from service immediately, under both 29 CFR 1910.140 and 29 CFR 1926.502. That includes the harness, lanyard, and any self-retracting device that deployed. Even if the gear looks fine, it has been structurally compromised. Tag it out and replace it. Failure to remove post-arrest equipment is a citable violation.

What is suspension trauma, and why does OSHA require a rescue plan?

Suspension trauma (also called harness-induced pathology) happens when a worker hangs motionless in a fall arrest harness after a fall. Blood pools in the legs, cardiac output drops, and unconsciousness or death can follow within minutes to an hour. OSHA requires employers to provide for prompt rescue of arrested workers under 29 CFR 1926.502(d)(20). A rescue plan has to be part of any program that uses PFAS.

Do state OSHA plans have different fall protection height requirements?

Yes. State plans must be at least as effective as federal OSHA but can be stricter. California's Cal/OSHA requires fall protection in most construction work at 7.5 feet, compared to the federal 6-foot threshold. Washington State (WISHA) has its own fall protection chapter with unique requirements. If you operate in a state plan state, check your state's rules; the federal CFR is a minimum, not the final word.

What is the penalty for an OSHA fall protection violation in 2024?

As of 2024, serious fall protection violations carry a maximum penalty of $16,131 per violation. Willful or repeat violations can reach $161,323 per violation. OSHA adjusts these caps annually for inflation. Penalties also turn on the number of employees exposed, the employer's history, and whether the employer acted in good faith. Multiple unprotected workers at height can produce multiple stacked citations.

What are the anchor point requirements for a personal fall arrest system?

Under 29 CFR 1926.502 and 29 CFR 1910.140, PFAS anchor points must support at least 5,000 pounds per attached employee, or be designed by a qualified person to keep a safety factor of at least two. Common improvised anchors like rebar, scaffolding frames, and overhead pipes often fail this standard. The anchor must be independent of any anchorage used to support or suspend platforms.

Sources

1. OSHA, 29 CFR 1910 Subpart D - Walking-Working Surfaces (2016 final rule): OSHA's 2016 revision consolidated general industry fall protection rules; guardrails must have a top rail at 42 inches and withstand 200 pounds of force; fixed ladder cages eliminated for new installations; floor covers must bear twice the anticipated load.
2. OSHA, 29 CFR 1926 Subpart M - Fall Protection (Construction): Construction fall protection required at 6 feet; PFAS must limit arresting force to 1,800 pounds and stop a fall within 3.5 feet; anchor points must support 5,000 pounds per worker; employers must provide for prompt rescue of arrested workers; written fall protection plan required for certain operations.
3. Bureau of Labor Statistics, Census of Fatal Occupational Injuries 2022: Falls to a lower level killed 865 workers in 2022; construction accounted for 395 fatal falls; falls, slips, and trips caused approximately 211,640 nonfatal injuries with days away from work in 2022.
4. OSHA, Top 10 Most Cited Standards FY2023: Fall Protection General Requirements (1926.501) was the most cited OSHA standard for the 13th consecutive year in FY2023, with 7,271 citations issued.
5. OSHA, Penalties (OSHA Penalty Policy): As of 2024, serious violations carry a maximum penalty of $16,131 per violation; willful or repeat violations up to $161,323 per violation.
6. OSHA, State Plans: Twenty-nine states and territories operate OSHA-approved state plans; state plans must be at least as effective as federal OSHA and can be stricter.
7. OSHA, 29 CFR 1910.140 - Personal Fall Protection Systems: Any PFAS component subjected to fall arrest forces must be removed from service immediately; anchor points must support 5,000 pounds per attached worker.
8. OSHA, 29 CFR 1926.503 - Training Requirements (Construction): Construction employers must train each employee on fall hazards before exposure; training must be performed by a competent person; certification of training must be maintained in writing.
9. OSHA, 29 CFR 1910.30 - Training Requirements (General Industry): General industry employers must train employees on fall hazards before they begin work; training must be performed by a qualified person.
10. OSHA, 29 CFR 1926.451 - Scaffolds (Construction): Fall protection on construction scaffolding is required at 10 feet above a lower level.