Last updated 2026-07-09

TL;DR
OSHA's hazard communication standard (29 CFR 1910.1200) ensures every worker exposed to hazardous chemicals gets three things: a readable label on every container, a safety data sheet with hazard and handling details, and documented training before the job starts. It covers roughly 650,000 chemical products and over 40 million workers in five million workplaces.
What does the hazard communication standard actually do?
The hazard communication standard closes the information gap between chemical manufacturers and the workers who handle their products every day. It lives at 29 CFR 1910.1200 and people call it HazCom or the "Right-to-Know" rule.[1]
Before HazCom, a warehouse worker or machinist had no reliable way to learn what was in the solvent they were pouring, or what would happen if they mixed two common cleaning agents. The rule changed that. It requires the hazard information to follow the chemical through the supply chain, from manufacturer to importer to distributor to employer, all the way to the person on the floor.
The 2012 revision aligned HazCom with the United Nations Globally Harmonized System of Classification and Labelling of Chemicals (GHS).[2] That alignment standardized the format for labels and safety data sheets worldwide. A chemical shipped from overseas now carries the same organized hazard information you'd see on a domestic product. For any small business that imports goods or buys from multinational suppliers, that consistency saves real headaches.
The standard applies to general industry under 29 CFR 1910.1200. Construction has parallel provisions at 29 CFR 1926.59, and maritime falls under 29 CFR 1915.99, but all three point back to the same core requirements.[1] If your workers touch, breathe, or could be exposed to hazardous chemicals, HazCom almost certainly applies to you.
OSHA estimates the rule covers about 650,000 hazardous chemical products and reaches over 40 million workers in five million workplaces.[3] HazCom has been OSHA's most cited standard in general industry for years running.
What are the core components of the hazard communication standard?
HazCom has five components, and you have to satisfy all of them. Miss one and you're out of compliance, even if the other four are spotless.
1. A written hazard communication program
You need a written document describing how your company manages chemical hazards. It names who's responsible for maintaining it, explains your labeling approach, says where SDSs live, and lays out how you train. This isn't a generic template you download and forget. It has to reflect actual conditions at your specific workplace. OSHA requires it to be available to employees and their representatives on request.[1]
2. A chemical inventory
Your written program has to include, or point to, a list of every hazardous chemical in the workplace. Everything else builds on this list. If a chemical isn't on it, you probably don't have a label protocol for it, don't have the SDS, and haven't trained on it. The inventory doesn't need to be elaborate. It needs to be current.
3. Labels and other forms of warning
Every container of a hazardous chemical gets labeled. Under the GHS-aligned standard, labels on shipped containers must carry a product identifier, a signal word ("Danger" or "Warning"), hazard statements, precautionary statements, pictograms, and supplier contact information.[1] Fill a spray bottle from a larger drum and that secondary container needs a label too, though OSHA gives you some format flexibility for in-plant containers.
4. Safety data sheets (SDSs)
You must obtain an SDS from the manufacturer or importer for every hazardous chemical and keep those SDSs accessible to employees throughout their shifts.[1] SDSs follow a standard 16-section format. Section 2 covers hazard identification, Section 8 covers exposure controls and PPE, Section 11 covers toxicological information. For a real example, the hcl safety data sheet for hydrochloric acid runs through all 16 sections and shows exactly what a compliant SDS looks like.
5. Training
Employees must be trained before their first assignment to a job where they could be exposed, and again when a new hazard enters the workplace.[1] Training covers where the written program and SDSs are, how to read labels and SDSs, and the specific hazards of chemicals in their work area. This is not a one-time checkbox. Refresh it when conditions change.
How does HazCom define a "hazardous chemical"?
Under 29 CFR 1910.1200(c), a hazardous chemical is any chemical classified as a physical hazard or a health hazard, plus simple asphyxiants, combustible dust, pyrophoric gas, and hazards not otherwise classified.[1] That's a wide net.
Physical hazards include flammables, explosives, oxidizers, and reactives. Health hazards cover carcinogens, reproductive toxins, respiratory sensitizers, and a long list of other categories. Chemical manufacturers and importers do the classification work, not employers. That's one reason the standard is built the way it is. You're a downstream recipient of somebody else's classification.
Here's a misconception worth killing: "hazardous" does not mean "acutely dangerous." A product can be classified as a health hazard based on chronic effects, like long-term liver damage from repeated low-level exposure, even when a single accidental splash wouldn't send anyone to the hospital. That slow-burn risk is exactly why HazCom requires SDSs to include toxicological data and why training has to cover both acute and long-term effects.
Some things sit outside the standard: hazardous waste regulated under RCRA, tobacco products, unprocessed wood and wood products, foods and drugs regulated by the FDA, consumer products used in the same manner and quantities as a normal consumer, and a handful of other categories.[1] If you're unsure whether something at your facility is covered, treat it as covered until you confirm otherwise.
What must a HazCom label include under the GHS system?
Since the 2012 update, a shipped-container label must carry six required elements.[1][2] Here's what each one does:
| Label Element | What it communicates |
|---|---|
| Product identifier | The chemical name or code used on the SDS |
| Signal word | "Danger" (more severe) or "Warning" (less severe) |
| Hazard statement(s) | Standardized phrases describing the nature and degree of hazard |
| Precautionary statement(s) | What to do to minimize or prevent harm |
| Pictogram(s) | GHS symbols in a red diamond border |
| Supplier information | Name, address, phone number of the manufacturer or importer |
There are nine GHS pictograms, each standing for a class of hazard: flame, flame over circle (oxidizer), exclamation mark (general hazard), skull and crossbones (acute toxicity), corrosion, exploding bomb, gas cylinder, environment (not required by OSHA), and health hazard for things like carcinogens.[2]
For workplace containers that never leave your site, OSHA lets you use alternative labeling systems, like color codes or number systems, as long as employees are trained to read them and the information is equivalent.[1] Small shops with an existing system get some room here. Just write it into your program.
Old-style Material Safety Data Sheets (MSDSs) had no consistent structure at all. The move to the standard 16-section SDS was one of the most useful changes the 2012 revision made. Workers and safety staff can now find exposure limits in Section 8 and first-aid steps in Section 4 without hunting through a document organized by nobody's logic.
What training does the hazard communication standard require employers to provide?
Training is where most small employers fall short, because the requirement is more specific than people expect.
The standard sets two trigger points: before initial assignment to a work area where hazardous chemicals are present, and whenever a new physical or health hazard is introduced into that area.[1] "New hazard" means a new category of hazard, more than a new product. If you've always run flammables and you bring in a corrosive, that's a new hazard class and training is required.
The content requirements live at 29 CFR 1910.1200(h). Employees have to know how to detect a chemical's presence or release (odor, color change, monitoring equipment). They need to understand the physical and health hazards of the chemicals in their area. They need to know what protective measures exist, including engineering controls, work practices, and PPE. And they need to know how to use the written program, where the SDSs are, and how to read a label.[1]
OSHA doesn't mandate a specific format, length, or test for HazCom training. It does require the training to be effective. During an inspection, a compliance officer can ask your employees what a signal word means or where to find the SDS for a chemical they use. If they can't answer, you have a training deficiency, even with a sign-in sheet showing they sat through a session.
For how OSHA training rules apply across your whole operation, the guide to osha training covers the general framework HazCom training sits inside.
HazCom doesn't explicitly require training documentation the way some other standards do. Keep records anyway. Every safety professional will tell you the same thing. If OSHA cites you and you have nothing on paper, you have no defense.
How often is hazard communication cited by OSHA, and what are the penalties?
Hazard communication has ranked number one or number two among cited general industry standards for most of the past decade.[4] OSHA issued 3,213 HazCom citations in fiscal year 2023.[4] That puts it ahead of lockout/tagout, respiratory protection, and powered industrial trucks.
Penalties under current OSHA rules run up to $16,550 per serious violation and up to $165,514 per willful or repeated violation.[5] Those caps adjust every year for inflation, so the figures may be a bit higher by the time you read this. OSHA often groups related violations, so one inspection that finds problems with your labels, your SDS management, and your training can generate several citations at once.
OSHA has historically offered small employers penalty reductions based on size (up to 70% for 25 or fewer employees) and good faith (up to 25% for an active safety program).[5] Those reductions cut the dollar amount only. The underlying citation stays on your record and can push future penalties higher if the same violation shows up again.
HazCom gets inspected hard precisely because it's visible. A compliance officer walking your floor can spot an unlabeled container or ask for an SDS on the spot. This is not a standard where the violations hide in a filing cabinet.
What does the written hazard communication program need to say?
The written program is the backbone of your HazCom compliance. OSHA spells out the minimum content at 29 CFR 1910.1200(e).
At minimum, your written program has to describe:
- How your workplace handles container labeling, including the system you use for in-plant secondary containers
- How you obtain and maintain SDSs and how employees access them
- How you deliver HazCom training
- The list of hazardous chemicals in each work area, or a reference to where that list is kept
- How you handle non-routine tasks involving hazardous chemicals
- How you address chemicals in unlabeled pipes, if that applies
- How you inform contractors about chemicals they may be exposed to[1]
That last point catches a lot of employers off guard. Hire outside HVAC techs, electricians, or a cleaning service and you're required to tell them about the hazardous chemicals they may run into and any protective measures they should take.[1] You also point them to your SDSs. It runs both ways. If a contractor brings their own chemicals onto your site, they have to make that information available to your employees who might be exposed.
Starting from scratch? SafetyFolio's safety program generator produces a HazCom-specific written program in about 15 minutes, structured to match the 29 CFR 1910.1200(e) requirements, instead of you spending hours reverse-engineering what OSHA wants from the raw regulation.
Update the program whenever your inventory changes, when procedures change, or when OSHA issues new guidance. A written program untouched in five years is a red flag in an inspection, even when the underlying practices are fine.
How does HazCom interact with other OSHA standards?
HazCom doesn't work alone. It's the information layer that other OSHA standards build on.
Got chemicals covered by substance-specific standards, like asbestos under 29 CFR 1910.1001, lead under 29 CFR 1910.1025, or benzene under 29 CFR 1910.1028? Those standards carry their own labeling, exposure monitoring, and training rules that go beyond HazCom's general requirements.[1] The HazCom standard says its requirements are "in addition to" the substance-specific standards, not a substitute for them.
PPE selection under 29 CFR 1910.132 depends on chemical hazard information. Without an accurate SDS, you can't run a proper hazard assessment to decide whether nitrile gloves cut it or whether you need chemical-resistant gloves rated for that specific solvent. SDS Section 8 is your starting point.
Lockout/tagout procedures control hazardous energy during equipment servicing, and they cross paths with HazCom when the energy source involves chemicals under pressure or inside a process system. Workers locking out chemical equipment need to understand the chemical hazards involved, which ties straight back to HazCom training.
For workers going through OSHA 30 training, HazCom is a standard topic in the general industry curriculum, exactly because it cuts across everything. Understanding the right-to-know framework makes every chemical-adjacent safety topic easier to grasp.
Does the hazard communication standard apply to small businesses?
Yes, fully. HazCom has no small-employer exemption.
OSHA's general industry standards, HazCom included, apply to any employer with one or more employees, with narrow exceptions for self-employed individuals working alone and certain agricultural employers.[6] A five-person auto body shop is as subject to HazCom as a 500-person chemical plant. The work scales in practice (a shop with three chemicals has a thinner SDS binder and a shorter training session than a plant with 300), but the obligations are identical.
The most common small-business failure is the written program. Plenty of small employers have the chemicals, have the SDSs, and have done some kind of training, but never put a written program on paper. That written document is a standalone citation item under 29 CFR 1910.1200(e)(1).
A close second is SDS accessibility. SDSs must be reachable during the work shift. If yours sit in a binder inside the office manager's locked desk, or live only on a computer someone else is always using, you're not compliant. OSHA has issued letters of interpretation confirming that electronic SDS systems are fine, as long as employees can get to them quickly without barriers and a backup exists for power outages.[7]
For owners who want the broad OSHA picture before tackling HazCom, starting with what does osha stand for gives the regulatory context that makes these requirements click.
What are states' roles in enforcing the hazard communication standard?
Twenty-two states and two territories run their own OSHA-approved state plans, meaning they administer and enforce their own occupational safety and health programs instead of leaning on federal OSHA.[8] Examples include California (Cal/OSHA), Michigan (MIOSHA), and Washington (L&I/WISHA).
State plan states must adopt standards that are "at least as effective" as federal OSHA standards.[8] For HazCom, that means every state plan state has a rule that meets or beats 29 CFR 1910.1200. Some go further. California's Hazard Communication Regulation under 8 CCR 5194 adds requirements for workplace environmental exposure limits beyond the federal minimums.
This matters for multi-state employers. Operate in both federal OSHA territory and a state plan state and you need to check whether the state adds anything HazCom-specific. The practical differences are usually small, but California in particular has unique Prop 65 warning rules that can tangle with your HazCom labeling.
OSHA keeps a current map of state plan states on its website. Federal OSHA covers private-sector employers in the remaining states plus all federal government workplaces nationwide.
What changed when OSHA updated HazCom in 2024?
OSHA published a significant HazCom update in May 2024, with phased compliance deadlines running through 2026.[9] The 2024 revision brought U.S. requirements closer to the seventh revision of the GHS, since the UN standard kept evolving after the 2012 alignment.
Key changes in the 2024 rule:
- New and revised hazard categories, including aerosols, desensitized explosives, and non-flammable gases
- Revised small container labeling rules (the old rules created real problems for tiny containers where a full label wouldn't fit)
- Updated SDS requirements, including a new Section 9 data point for particle size and aerodynamic diameter for airborne exposures
- Clarifications on what counts as a trade secret and what hazard information must be disclosed despite a trade secret claim[9]
The phased timeline matters for small businesses. Chemical manufacturers and importers faced an earlier deadline to revise their labels and SDSs. Distributors and employers get additional time to work through existing inventory and update their written programs and training. Check OSHA's current compliance deadline table for your role in the supply chain, because the dates differ depending on whether you're the manufacturer, the distributor, or the downstream employer.[9]
If you haven't touched your written program or training materials since before 2024, they probably need updates.
How do you build a HazCom program from scratch without a consultant?
You can absolutely do this yourself. Here's a realistic sequence.
Start with a chemical walk-through. Walk every part of your facility and write down every product that contains a chemical. Cleaning supplies, lubricants, paints, adhesives, fuels, process chemicals. Don't skip anything in the supply closet. That's your raw inventory.
Next, get the SDSs. Call your suppliers or search the manufacturer's website. Most manufacturers post SDSs publicly. Third-party databases exist for common chemicals too, though the manufacturer is the most reliable source. Organize the sheets so workers can find them fast, whether that's a physical binder by work area or an electronic system they can actually reach.
Write your program. OSHA's model HazCom written plan is posted on OSHA.gov and gives you a solid starting structure.[3] You fill in the specifics: who's responsible, where SDSs live, what labeling system you use for secondary containers, how training gets delivered. SafetyFolio's program generator speeds this step up if you'd rather answer questions about your operation than stare at a blank page.
Train your people. It doesn't have to be elaborate, but it has to be real. Cover what the pictograms mean, how to read a label, where the SDSs are, and the specific hazards in each work area. Ask a few questions afterward to confirm it stuck. Document it with a sign-in sheet and a short description of what you covered.
Then maintain it. Update the inventory when you add chemicals. Swap SDSs when manufacturers issue revised versions. Retrain when new hazards appear. HazCom compliance isn't an event. It's an ongoing habit that runs maybe an hour a quarter once the initial program is built.
For how HazCom fits inside a complete safety program, the hazard communication overview covers the broader setup.
Frequently asked questions
What is the main purpose of the hazard communication standard?
The main purpose is to make sure workers have the information they need to protect themselves from chemical hazards. The standard, at 29 CFR 1910.1200, requires chemical manufacturers to classify hazards, communicate them through labels and safety data sheets, and requires employers to train workers to understand and use that information before exposure happens.
Who does the hazard communication standard apply to?
It applies to nearly every U.S. employer whose workers may be exposed to hazardous chemicals, across general industry, construction, and maritime. There's no small-employer exemption. Self-employed individuals with no employees are generally excluded. Federal OSHA covers most private-sector employers; state plan states run equivalent rules for employers in their jurisdiction.
What are the five components of the hazard communication standard?
The five components are: (1) a written hazard communication program, (2) a chemical inventory, (3) labels and warnings on containers, (4) safety data sheets for each hazardous chemical, and (5) employee training. An employer must satisfy all five to comply with 29 CFR 1910.1200. Missing even one is a citable violation.
How many sections does a safety data sheet have under HazCom?
Sixteen. The GHS-aligned format from the 2012 HazCom update requires all SDSs to follow the same 16-section structure: product identification, hazard identification, composition, first aid, fire fighting, accidental release, handling and storage, exposure controls and PPE, physical and chemical properties, stability, toxicology, ecological information, disposal, transport, regulatory, and other information.
Does hazard communication training need to be repeated every year?
No annual requirement exists in the standard. Training is required before initial assignment and whenever a new physical or health hazard enters the work area. Many safety professionals still recommend periodic refreshers, and if you change chemicals, procedures, or equipment, a refresher is almost certainly warranted. No fixed interval is mandated by 29 CFR 1910.1200(h).
Can safety data sheets be stored electronically instead of in paper binders?
Yes. OSHA has confirmed in letters of interpretation that electronic SDS systems are acceptable, as long as employees can reach them immediately without barriers and a backup exists for power outages or computer failures. If electronic access means logging into a shared computer that's often in use, that likely fails the immediate-access requirement.
What are the GHS pictograms on chemical labels?
There are nine GHS pictograms: a flame (flammable), flame over circle (oxidizer), skull and crossbones (acute toxicity), exclamation mark (irritant or general hazard), health hazard symbol (carcinogen, sensitizer), corrosion (skin or metal corrosive), exploding bomb (explosive), gas cylinder (compressed gas), and environment (aquatic hazard, not required by OSHA). Each sits inside a red diamond border on compliant labels.
What happens if a supplier gives you an incomplete or missing SDS?
Request it immediately. OSHA requires employers to have SDSs for all hazardous chemicals before workers are exposed. If a supplier fails to provide one, document your request in writing. In the meantime you may need to restrict use of the chemical until the SDS arrives. Repeatedly using a chemical without an SDS because the supplier hasn't responded is a compliance risk that sits with the employer.
How does HazCom apply to contractors working at my facility?
You must tell contractors about the hazardous chemicals they may encounter in your workplace, describe any protective measures in place, and point them to your SDSs. Contractors who bring their own chemicals onto your site must make equivalent information available to your employees who could be exposed. This reciprocal requirement is in 29 CFR 1910.1200(e)(2).
What changed in the 2024 HazCom update?
OSHA's 2024 revision aligned HazCom with the seventh revision of the GHS. Key changes include new and revised hazard categories (aerosols, desensitized explosives, non-flammable gases), updated small container labeling rules, revised SDS requirements including new particle size data for Section 9, and clarified trade secret provisions. Compliance deadlines are phased and differ by your role in the supply chain.
Is hazard communication the same as a right-to-know law?
The terms get used interchangeably. OSHA's HazCom standard is the federal right-to-know rule for occupational chemical exposure. Some states also have their own right-to-know laws that may cover additional chemicals or require community notification beyond what OSHA mandates. California's Hazard Communication Regulation under 8 CCR 5194 is the most notable state-level example with added requirements.
How many OSHA citations for hazard communication are issued each year?
OSHA issued 3,213 HazCom citations in fiscal year 2023, one of the top-cited standards in general industry. It has ranked first or second in citation frequency in most recent years. Common reasons include missing or incomplete SDSs, unlabeled secondary containers, inadequate training, and no written hazard communication program.
Do I need a HazCom program if I only use common products like cleaners and lubricants?
Yes, if those products are hazardous chemicals as defined by the standard, and most commercial cleaners and lubricants qualify. OSHA gives no exemption for "everyday" products. Consumer products used in the same manner and quantities as a household consumer are excluded, but workplace use of the same products usually exceeds normal consumer quantities or exposure duration, which brings them back in.
What is the penalty for violating the hazard communication standard?
Serious violations carry penalties up to $16,550 each under current OSHA rules. Willful or repeated violations can reach $165,514 each. These caps adjust annually for inflation. Small employers may earn reductions of up to 70% based on size and up to 25% for good faith, but the citations stay on record and affect future penalty calculations.
Sources
- OSHA, 29 CFR 1910.1200 Hazard Communication Standard (full regulatory text): Requirements for written program, labels, SDSs, training triggers and content, contractor communication, and trade secret provisions
- OSHA, Hazard Communication: GHS alignment overview page: 2012 alignment with UN GHS, nine pictograms, standardized 16-section SDS format
- OSHA, Hazard Communication Standard Overview and Estimated Coverage: Approximately 650,000 hazardous chemical products and over 40 million workers in five million workplaces covered by HazCom
- OSHA, Top 10 Most Cited Standards FY2023: Hazard Communication cited 3,213 times in FY2023, consistently among the top-cited standards in general industry
- OSHA, OSHA Penalties page: Serious violation penalties up to $16,550; willful/repeated up to $165,514; small employer size reductions up to 70%
- OSHA, Employer Responsibilities and Coverage under the OSH Act: OSHA general industry standards apply to employers with one or more employees, with limited exceptions for the self-employed and certain agricultural employers
- OSHA, Letters of Interpretation (electronic access to SDSs): Electronic SDS systems are acceptable if employees can access them without barriers during the work shift and a backup exists for power or computer failures
- OSHA, State Plans page: 22 states and 2 territories operate OSHA-approved state plans; state standards must be at least as effective as federal standards
- OSHA, Hazard Communication Standard 2024 Final Rule: May 2024 update aligned HazCom with GHS Rev. 7; added aerosol, desensitized explosive, non-flammable gas categories; revised small container labeling and SDS Section 9
- United Nations Economic Commission for Europe, GHS Rev. 9 (2021): UN Globally Harmonized System provides the international classification and labelling framework that U.S. HazCom aligns with