Phosphoric acid safety data sheet: what you actually need to know

Last updated 2026-07-09

What is a phosphoric acid SDS and what law requires it?

A Safety Data Sheet (SDS) for phosphoric acid is the standardized document describing the chemical's hazards, safe handling, PPE, first aid, and emergency response. OSHA requires it under the Hazard Communication Standard, 29 CFR 1910.1200, which adopted the United Nations Globally Harmonized System of Classification and Labelling of Chemicals (GHS) in 2012 ^[1].

If phosphoric acid is anywhere in your workplace, you owe three things. Get a current SDS from the manufacturer or distributor. Keep it accessible to employees during every shift. Train workers to read and use it before they first touch the chemical. That training obligation is not negotiable. OSHA's HazCom standard replaced the older Material Safety Data Sheet (MSDS) format with an SDS that must contain exactly 16 sections in fixed GHS order ^[1].

Phosphoric acid (H3PO4) is one of the most widely used industrial acids. It shows up in food and beverage processing, metal treatment, rust removal, fertilizer production, dental products, and cleaning compounds. Use any of those and there's a solid chance this chemical is already on your shelves, which means the SDS requirement applies to you right now.

Before you dig into chemical-specific rules, it helps to see how hazard communication works across every chemical in your facility.

What are the 16 GHS sections in a phosphoric acid SDS?

OSHA regulation fixes all 16 sections and their order. Here's what each one covers for phosphoric acid, filtered down to what a small business operator actually uses.

Section	Title	Key phosphoric acid content
1	Identification	Product name, supplier, emergency contact, recommended use
2	Hazard identification	GHS pictograms, signal word ("Danger" for concentrated forms), hazard statements (H290, H314, H335)
3	Composition / ingredients	CAS No. 7664-38-2; molecular formula H3PO4
4	First-aid measures	Flush eyes 15-20 minutes, remove contaminated clothing, seek medical attention
5	Firefighting measures	Non-flammable; toxic phosphorus oxide fumes possible at very high heat
6	Accidental release measures	Contain spill, neutralize with soda ash or lime, do not wash to drain
7	Handling and storage	Store in corrosion-resistant containers, away from bases and reactive metals
8	Exposure controls / PPE	OSHA PEL: 1 mg/m³ (8-hour TWA); NIOSH REL: 1 mg/m³ TWA, 3 mg/m³ STEL
9	Physical and chemical properties	Colorless to slightly yellow viscous liquid; density ~1.685 g/mL at 85% concentration
10	Stability and reactivity	Stable under normal conditions; reacts with strong bases, oxidizers, metals
11	Toxicological information	Oral LD50 (rat): 1530 mg/kg; skin and eye corrosion data
12	Ecological information	(Not enforced by OSHA but required by GHS)
13	Disposal considerations	Follow local regulations; neutralize before disposal
14	Transport information	UN No. 1805 (solution); DOT Packing Group III
15	Regulatory information	SARA 313, CERCLA reportable quantities
16	Other information	Revision date, preparer info

Sections 1 through 11 are the ones your workers need in their heads. Train there. Sections 12 through 15 belong to your environmental officer or shipping coordinator ^[1][2].

The signal word tells you a lot at a glance. Concentrated phosphoric acid (above 25% by weight) carries the word "Danger" on GHS labels, flagging higher-severity hazards. Dilute solutions may carry "Warning" instead. Your SDS should state the concentration it covers, and if you stock multiple concentrations, you need an SDS for each ^[2].

How hazardous is phosphoric acid, really?

Phosphoric acid is a moderately strong inorganic acid. It's corrosive, but it isn't the meanest acid on an industrial floor. Next to hydrochloric or sulfuric acid, it's less volatile, so it doesn't throw off much vapor at room temperature and won't suddenly off-gas into your workspace. Calling it safe, though, would get someone hurt.

Above 85%, phosphoric acid burns any tissue it touches on contact. Skin exposure brings pain, redness, and chemical burns within minutes. Concentrated solutions in the eye can cause permanent damage or blindness ^[3]. Breathing mist or fumes, which happens during heated applications or spraying, irritates the airways, and prolonged exposure attacks the mucous membranes.

The GHS hazard statements for concentrated phosphoric acid are H290 (may be corrosive to metals), H314 (causes severe skin burns and eye damage), and H335 (may cause respiratory irritation). Every compliant label prints these, and Section 2 of the SDS repeats them.

Chronic exposure matters too. Long-term inhalation above the OSHA PEL of 1 mg/m³ is linked to respiratory effects. NIOSH sets a short-term exposure limit (STEL) of 3 mg/m³ over a 15-minute window ^[4]. Running phosphoric acid through a spray application, etching tank, or heated process? Air monitoring is worth doing as basic due diligence, even where no rule forces it.

Here's the hazard people forget. Phosphoric acid reacts with metals like aluminum, zinc, and iron to release hydrogen gas, and hydrogen is flammable. Use it on metal surfaces in an enclosed space and you have a real ignition risk that SDS Section 10 should flag ^[5].

What PPE does OSHA require for phosphoric acid?

SDS Section 8 drives your PPE choices, and you match the gear to the actual task and concentration. OSHA hands you no single universal list. Instead, 29 CFR 1910.132 requires a hazard assessment, and 29 CFR 1910.138 governs hand protection specifically ^[6].

For most phosphoric acid tasks, the standard package looks like this.

Eye and face protection: Chemical splash goggles are the floor. Any risk of splashing (pouring, mixing, spraying) means a full face shield goes over the goggles. Safety glasses alone are not adequate for corrosive acids. That requirement lives in 29 CFR 1910.133 ^[6].

Hand protection: Nitrile gloves give reasonable short-term protection for dilute solutions. For concentrated acid or extended contact, step up to thicker nitrile (at least 8 mil) or neoprene. Natural rubber degrades with acid exposure. Check the glove maker's chemical resistance chart for your exact concentration rather than a generic "acid" rating. Permeation breakthrough time is the number that matters.

Body protection: A chemical-resistant apron or lab coat covers most tasks. Large volumes may call for a full chemical-resistant suit.

Respiratory protection: Routine handling at room temperature with good ventilation usually needs no respirator. But if mist can form (spraying, high-agitation mixing, heated processes), use a NIOSH-approved respirator with an acid gas/P100 combination cartridge. The moment you put a worker in a respirator, 29 CFR 1910.134 kicks in and you owe a full written respiratory protection program ^[6].

Your hazard communication program should point straight at the SDS PPE requirements, so workers have one authoritative source instead of three conflicting ones.

What first-aid steps does the SDS require after phosphoric acid exposure?

Section 4 of the SDS covers first aid, and every step is time-sensitive. With acid burns, speed beats everything else.

Skin contact: strip off contaminated clothing right away and flush the area with large amounts of water for at least 15 to 20 minutes. Get medical attention even if the burn looks minor, because acid keeps damaging tissue after the visible exposure ends. Do not neutralize acid on skin with a base. Baking soda or lime on a chemical burn triggers an exothermic reaction and can make the injury worse.

Eye contact: flush continuously with water for at least 15 to 20 minutes, holding the eyelids open. This is exactly why an eyewash station within 10 seconds of travel time is required under 29 CFR 1910.151 and ANSI Z358.1 wherever phosphoric acid is used ^[7]. Get immediate medical attention after flushing. Corrosive acid in the eye is an ophthalmic emergency.

Inhalation: move the person to fresh air immediately. If breathing is difficult, call for emergency medical help. Nobody re-enters a contaminated area without proper respiratory protection.

Ingestion: do not induce vomiting, because bringing acid back up doubles the tissue damage. Rinse the mouth and give water or milk if the person is conscious and not convulsing. Call Poison Control (1-800-222-1222 in the US) or emergency services immediately ^[8].

Every worker who handles phosphoric acid should recite these steps from memory. That's not a nice-to-have. In a real exposure, there's no time to flip open the SDS. Train on this specifically.

How should you store and handle phosphoric acid to meet OSHA requirements?

Section 7 of the SDS governs storage and handling. For phosphoric acid the rules are simple, and small shops ignore them constantly.

Store phosphoric acid in high-density polyethylene (HDPE), polypropylene, or fiberglass. Keep it out of metal containers, especially aluminum, zinc, and iron, because the reaction makes hydrogen gas. Glass works for small lab quantities but is impractical for bulk ^[5].

Store it away from strong bases (sodium hydroxide, potassium hydroxide, ammonia), oxidizers (bleach, peroxides, nitric acid), and reactive metals. Put a phosphoric acid container and a sodium hydroxide container in the same unlabeled cabinet and you have an incident waiting to happen.

Keep the area cool, dry, and ventilated. Phosphoric acid is hygroscopic, meaning it pulls moisture from the air and dilutes concentrated solutions over time. Keep containers tightly closed when they're not in use.

Secondary containment: store more than small quantities and OSHA and EPA both recommend (and sometimes require) containment that holds at least 110% of the largest container's volume. EPA's SPCC rule codifies this for facilities over the threshold volumes, but below those thresholds it's still smart practice ^[9].

Labeling is non-negotiable. Any container you decant phosphoric acid into, down to a small spray bottle, must carry the product name, hazard pictograms, and signal word under 29 CFR 1910.1200(f) ^[1]. Unlabeled containers are one of OSHA's most frequently cited HazCom violations, and they're the easiest one to fix.

What are the OSHA exposure limits for phosphoric acid?

OSHA's permissible exposure limit (PEL) for phosphoric acid is 1 mg/m³ as an 8-hour time-weighted average (TWA), set in 29 CFR 1910.1000, Table Z-1 ^[4]. NIOSH recommends the same 1 mg/m³ TWA and adds a 15-minute short-term exposure limit (STEL) of 3 mg/m³ ^[4]. The ACGIH threshold limit value (TLV) also sits at 1 mg/m³ TWA with a 3 mg/m³ STEL.

These limits apply to airborne mist or fume, not to liquid on skin. Most standard uses (cleaning, surface treatment, food processing) don't kick up enough airborne mist to approach the limits under normal conditions with decent ventilation. The risk spikes in spray applications, heated tanks, and enclosed spaces.

If you have any reason to think airborne concentrations could near the PEL, get industrial hygiene air sampling instead of relying on the SDS alone. OSHA doesn't require routine air monitoring for phosphoric acid the way it does for regulated carcinogens like asbestos. The general duty clause (Section 5(a)(1) of the OSH Act) can still bite you if you knowingly allow overexposures ^[10].

For context, the OSHA PEL for hydrogen chloride (HCl) is a ceiling of 5 ppm, set far lower than the number suggests given HCl's acute hazards. Run both acids in one facility and the hcl safety data sheet lays the compliance requirements side by side.

How does a phosphoric acid SDS compare to a citric acid SDS?

Citric acid (C6H8O7, CAS No. 77-92-9) covers a lot of the same ground as dilute phosphoric acid: food-grade cleaning, descaling, rust treatment, and beverage processing. Both need a 16-section GHS SDS under 29 CFR 1910.1200. The hazard profiles are not close.

Citric acid rates as a mild irritant at typical working concentrations. It carries no GHS "Danger" signal word for most commercial forms, and its oral LD50 (rat) is roughly 5,940 mg/kg against 1,530 mg/kg for phosphoric acid, so it's about four times less acutely toxic by ingestion ^[11]. Concentrated citric acid solutions or dust can still irritate eyes and skin, but the risk of severe chemical burns is far lower than phosphoric acid at the same concentration.

"Safer" does not mean "unregulated." A citric acid product that causes irritation still triggers full hazard communication: an SDS, a compliant label, and worker training. The PPE runs lighter (safety glasses instead of chemical goggles for most tasks, nitrile gloves for prolonged contact), but you still run the Section 8 hazard assessment.

Switching from phosphoric acid to citric acid for descaling or cleaning? Don't assume the safety program carries over. Pull the specific SDS for your citric acid product, check the concentration and form (anhydrous powder brings a dust inhalation risk that liquid solution doesn't), and update your hazard communication documents to match.

Property	Phosphoric acid (85%)	Citric acid (anhydrous)
GHS signal word	Danger	Warning
Primary hazard	Corrosive, skin/eye burns	Irritant
OSHA PEL	1 mg/m³ (mist)	None established
Oral LD50 (rat)	1,530 mg/kg	~5,940 mg/kg
pH (10% solution)	~1.5	~2.2
Recommended gloves	Nitrile (8 mil+) or neoprene	Nitrile (standard)
Eye protection	Chemical goggles + face shield	Safety glasses minimum

What does OSHA require you to do with the SDS in your facility?

Having the SDS is step one. What you do with it is where most small businesses fall short, and where OSHA citations actually land.

29 CFR 1910.1200(g)(8) requires the SDS to be readily accessible to employees during their shifts in their work area ^[1]. Not locked in a manager's office. Not stuck behind a password on one computer. Not stored off-site. Electronic SDS systems pass muster as long as workers can reach them without barriers during their shift. Paper binders still work fine and often hold up better on a production floor.

When a new shipment of phosphoric acid arrives, check whether the SDS has been updated. Manufacturers revise these documents when new hazard information surfaces. You don't have to hunt for updates on a schedule, but you do have to use the SDS shipped with the product and keep prior versions for at least 30 years if they covered substances your employees were exposed to (under 29 CFR 1910.1020, the access to employee exposure records standard) ^[6].

Your written Hazard Communication Program (also required, under 29 CFR 1910.1200(e)) needs a list of every hazardous chemical on site, cross-referenced to its SDS location. Phosphoric acid belongs on that list. If your written HazCom program isn't in order and an inspection is coming, the SafetyFolio safety program generator builds a compliant program in about 15 minutes.

Training is the other obligation. Workers get trained on the hazards of phosphoric acid and how to use the SDS before first exposure and whenever a new hazard shows up. This is not a one-time checkbox. Bring in a new concentrated form or a new application method, and you retrain ^[1].

What happens if OSHA cites you for a phosphoric acid SDS violation?

HazCom sits in OSHA's top 10 most-cited standards every year. In fiscal year 2023, 29 CFR 1910.1200 (Hazard Communication) ranked as the second most-cited standard, with thousands of violations issued ^[12].

Common phosphoric acid citations: missing or inaccessible SDS, unlabeled containers, no written HazCom program, and thin worker training records. Serious violations (substantial probability of death or serious physical harm) carry penalties up to $16,131 per violation as of 2024 ^[12]. Willful or repeat violations can reach $161,323 per violation.

OSHA inspectors will ask for your SDS binder or electronic system, your HazCom written program, and your training records. If a worker can't say what the SDS is for or where to find it, that reads as inadequate training. The hazards themselves are usually well understood. The paperwork is what sinks most businesses.

Got an inspection notice and want to understand the process? Reading up on what does OSHA stand for and general OSHA requirements is a reasonable first move before your compliance review.

Filing an incident report after a phosphoric acid exposure is required if it meets OSHA's recordkeeping thresholds under 29 CFR 1904. A chemical burn needing medical treatment beyond first aid is recordable. A burn requiring in-patient hospitalization must also be reported to OSHA within 24 hours.

How do you write a phosphoric acid section into your HazCom written program?

Your written HazCom program doesn't need a separate document per chemical. It needs a chemical inventory that includes phosphoric acid, a procedure stating where the SDS lives, and proof that training happened. That's the minimum under 29 CFR 1910.1200(e) ^[1].

For phosphoric acid, the program should also cover four things.

Labeling procedure for transferred containers. If workers ever pour phosphoric acid from the original container into a spray bottle, bucket, or tank, that secondary container gets labeled. Name who's responsible and spell out what the label says.

Emergency response procedures. Point to Section 6 of the SDS for spill response. Say where the spill kit is, which neutralizing agent you stock (soda ash is common), and when to call outside emergency response versus handle it internally.

Eyewash station maintenance. ANSI Z358.1 requires weekly activation of plumbed eyewash stations to check flow and flush stagnant water ^[7]. Log that inspection. A gravity-fed portable unit (not recommended for high-hazard acid areas) needs its fluid replaced on the manufacturer's schedule, typically every 6 months.

Non-routine tasks. For higher-exposure jobs like cleaning an acid tank or unloading bulk shipments, document the specific PPE and procedures each one needs.

Building all this from scratch eats time most operators don't have. The SafetyFolio program generator handles the HazCom written program structure, which is one of the more document-heavy pieces of ongoing OSHA compliance.

Run mobile or powered equipment in the same building? Lockout tagout is another written program that tends to surface in the same inspection as HazCom.

Where can you get a current phosphoric acid SDS?

Start with the manufacturer or distributor of the exact product you bought. A generic phosphoric acid SDS from a chemical database may not match your product's concentration or formulation, and after a worker injury or during an OSHA inspection you want the document that matches what's on your shelves.

Major suppliers like Sigma-Aldrich (Merck), Univar Solutions, and Thermo Fisher Scientific keep publicly accessible SDS libraries on their sites. If you bought a cleaning product that lists phosphoric acid as an ingredient rather than a pure acid, the SDS should have shipped with the product. Under 29 CFR 1910.1200(g)(6), manufacturers must provide an SDS with the first shipment of a hazardous chemical and with the first shipment after any revision ^[1].

Can't find your SDS? Contact your supplier. They're legally required to provide it. As a backup, OSHA's hazard communication resources and the NIOSH chemical database both carry reference SDS documents, though these supplement the product-specific document from your vendor rather than replace it ^[4].

One check on any SDS you receive: look at the revision date in Section 16 and confirm it's a GHS-compliant 16-section document. Older MSDS documents in the 8 or 9-section format fail current OSHA requirements and need to go.

Frequently asked questions

Is phosphoric acid considered a hazardous chemical under OSHA?

Yes. Phosphoric acid meets OSHA's definition of a hazardous chemical under 29 CFR 1910.1200 because it presents physical and health hazards, specifically corrosivity and respiratory irritation. That means it requires a compliant SDS, a GHS-format label on every container, worker training, and a spot on your written Hazard Communication Program's chemical inventory.

What GHS hazard pictograms appear on a phosphoric acid label?

Concentrated phosphoric acid (above 25%) typically carries the corrosion pictogram (GHS05, a liquid damaging a surface and a hand) and sometimes the exclamation mark (GHS07) for lower-concentration irritant forms. The corrosion pictogram signals severe skin burns, eye damage, and metal corrosion. Dilute food-grade solutions may carry only the exclamation mark.

What is the OSHA PEL for phosphoric acid?

OSHA's permissible exposure limit for phosphoric acid is 1 mg/m³ as an 8-hour time-weighted average, listed in 29 CFR 1910.1000, Table Z-1. NIOSH recommends the same 1 mg/m³ TWA and adds a 15-minute short-term exposure limit of 3 mg/m³. These limits apply to airborne mist or fume, not to skin contact with the liquid.

Do I need an SDS for dilute phosphoric acid, like food-grade or cola-concentration solutions?

Yes, if the product meets OSHA's hazard definition at the concentration you're using. Many food-grade phosphoric acid solutions are still classified as irritants or mild corrosives at working concentrations. If a product ships with an SDS, treat it as a hazardous chemical under HazCom. If a supplier says no SDS is needed, ask for that in writing and verify the concentration.

How long do I need to keep an SDS for phosphoric acid on file?

You must keep SDS records for the duration of employment plus 30 years for any substance employees were exposed to, under OSHA's access to employee exposure and medical records standard, 29 CFR 1910.1020. Even after you stop using phosphoric acid, retain the SDS if workers were exposed. Electronic storage is fine as long as records stay retrievable.

Can I store phosphoric acid in a metal container?

No. Phosphoric acid reacts with common metals including aluminum, zinc, and iron to produce hydrogen gas, which is flammable and creates an explosion hazard. Use high-density polyethylene (HDPE), polypropylene, or fiberglass. Section 7 and Section 10 of the SDS specify compatible container materials for your exact formulation.

What should I do if a worker gets phosphoric acid in their eyes?

Flush the affected eye immediately with clean water for at least 15 to 20 minutes, holding the eyelids open throughout. This is a medical emergency. Call 911 or send the worker to an emergency room right after flushing. An ANSI Z358.1-compliant eyewash station must sit within 10 seconds of travel from any phosphoric acid work area. Do not apply any neutralizing agent to the eye.

What is the difference between an SDS and an MSDS for phosphoric acid?

An MSDS (Material Safety Data Sheet) is the older, pre-2012 format with no standardized section structure. An SDS (Safety Data Sheet) follows the GHS 16-section format required by OSHA's updated HazCom standard, finalized in 2012 with a compliance deadline of June 2016. Old MSDS documents are not OSHA-compliant today. You need the 16-section SDS from your current supplier.

Does phosphoric acid require a written emergency response plan?

If your facility falls under OSHA's Emergency Action Plan standard (29 CFR 1910.38, which applies to most employers with 10 or more employees), your plan must address chemical spill scenarios. For phosphoric acid, your HazCom written program should document spill response consistent with SDS Section 6, including neutralization procedures and who contacts emergency services.

What training do workers need before handling phosphoric acid?

Under 29 CFR 1910.1200(h), workers must be trained before first exposure on the hazards of phosphoric acid, how to read the SDS and label, required PPE, and emergency procedures including eyewash location and first-aid steps. Document the training with employee names, the date, and the content covered. Retraining is required when new hazard information is introduced.

Is phosphoric acid in food products covered by OSHA HazCom?

Consumer products used the same way and at the same frequency as a household consumer are exempt from OSHA HazCom under the consumer product exemption in 29 CFR 1910.1200(b)(6)(ix). But if workers handle commercial quantities of food-grade phosphoric acid for longer durations or in ways that exceed normal consumer use, the exemption does not apply and full HazCom compliance kicks in.

What neutralizing agent should I have on hand for a phosphoric acid spill?

Soda ash (sodium carbonate) or lime (calcium hydroxide) are commonly recommended for neutralizing phosphoric acid spills, as noted in SDS Section 6 for most products. Avoid water alone on large concentrated spills, since the exothermic dilution reaction can splash acid. Verify the specific neutralizing agent against your product's SDS, and train workers on the spill kit contents and procedures.

How is phosphoric acid regulated for environmental disposal?

Phosphoric acid waste is regulated under EPA rules. Dilute solutions below certain concentrations may be acceptable for drain disposal in some jurisdictions after neutralization, but concentrated waste usually requires a licensed hazardous waste contractor. Check EPA's Resource Conservation and Recovery Act (RCRA) requirements and your local publicly owned treatment works (POTW) discharge limits before disposing of any quantity.

Sources

1. OSHA, Hazard Communication Standard, 29 CFR 1910.1200: HazCom requires a 16-section GHS SDS, accessible to employees, with labeling under (f), a written program under (e), and training under (h); manufacturers must supply an SDS with first shipment and after revision
2. OSHA, Hazard Communication Standard Final Rule (GHS alignment), 2012: GHS signal words: 'Danger' for higher-severity hazards (concentrated phosphoric acid above 25%), 'Warning' for lower severity; SDS should state concentration covered
3. CDC / NIOSH, NIOSH Pocket Guide to Chemical Hazards, Phosphoric Acid: Eye contact with concentrated phosphoric acid can cause permanent damage; skin contact causes burns
4. CDC / NIOSH, NIOSH Pocket Guide to Chemical Hazards, Phosphoric Acid occupational exposure limits: OSHA PEL 1 mg/m³ TWA; NIOSH REL 1 mg/m³ TWA and 3 mg/m³ STEL (15-minute)
5. CDC / NIOSH, NIOSH Pocket Guide to Chemical Hazards, Phosphoric Acid reactivity: Phosphoric acid reacts with aluminum, zinc, and iron to release flammable hydrogen gas; store in HDPE, polypropylene, or fiberglass, not metal
6. OSHA, Personal Protective Equipment (29 CFR 1910 Subpart I) and Access to Employee Exposure and Medical Records (29 CFR 1910.1020): 29 CFR 1910.132 requires hazard assessment; 1910.138 governs hand protection; 1910.133 governs eye protection; 1910.134 governs respirators; 1910.1020 requires 30-year record retention
7. OSHA, Medical Services and First Aid (29 CFR 1910.151); ANSI Z358.1 Eyewash Standards: Eyewash station required within 10 seconds travel time where corrosives are used; ANSI Z358.1 requires weekly activation of plumbed units
8. HRSA, Poison Help: Poison Control contact 1-800-222-1222; for acid ingestion, do not induce vomiting, rinse mouth, seek emergency care
9. EPA, Oil Spills Prevention and Preparedness Regulations (SPCC Rule): Secondary containment capable of holding 110% of the largest container volume recommended or required for bulk chemical storage
10. OSHA, OSH Act Section 5(a)(1) General Duty Clause: General duty clause applies when employers knowingly allow exposures above recognized hazard thresholds even absent a specific standard
11. National Library of Medicine, PubChem, Citric Acid (CID 311): Citric acid oral LD50 (rat) approximately 5,940 mg/kg; classified as mild irritant, lower acute toxicity than phosphoric acid
12. OSHA, Top 10 Most Frequently Cited Standards: Hazard Communication (29 CFR 1910.1200) ranked 2nd most cited in general industry FY2023; serious violation penalties up to $16,131 per violation in 2024, willful/repeat up to $161,323