Last updated 2026-07-11

TL;DR
OSHA's 2012 memorandum and 2016 anti-retaliation rule (29 CFR 1904.35) make it illegal to discourage workers from reporting injuries, including through incentive programs. Rate-based rewards like "pizza party if nobody gets hurt" are the classic violation. Programs that reward leading indicators, safe behaviors, or participation in safety activities are generally fine and often more effective.
What does OSHA actually say about safety incentive programs?
OSHA does not ban incentive programs. Full stop. That misconception trips up a lot of small business owners who either gut their whole program out of fear or never build one because they assume any reward system is illegal. The real target is narrower: programs that discourage workers from reporting injuries, illnesses, or near-misses.
The legal foundation sits in two places. First, 29 CFR 1904.35(b)(1)(iv), which took effect in January 2017 as part of OSHA's electronic recordkeeping rule, prohibits employers from retaliating against workers for reporting a work-related injury or illness. [1] Second, OSHA's memorandum from March 12, 2012 (often called the "Injury and Illness Prevention Programs" memo) explicitly warned that programs creating "incentives for workers not to report" are unlawful. [2]
The 2016 rule also gave OSHA enforcement teeth it didn't have before. Under 29 CFR 1904.35(b)(1)(i)-(iv), OSHA inspectors can now cite an employer whose incentive program, drug-testing policy, or other practice discourages reporting, even without a specific complaint from a worker. [1]
So the line OSHA draws is about outcomes and likely effect, not about whether you hand out gift cards. A program that rewards workers for zero injuries over 90 days almost certainly discourages reporting. A program that rewards workers for completing safety observations, leading safety meetings, or correcting hazards they found has no such effect and is explicitly supported by OSHA guidance. [2]
Why do rate-based incentive programs violate OSHA rules?
Rate-based programs tie the reward to an outcome: zero lost-time injuries this month, lowest recordable rate on the floor, no OSHA 300 log entries for the quarter. The problem is mechanical. A worker who gets hurt has to choose between reporting the injury and costing their whole team the reward. That's not a hypothetical pressure. It's a structural one baked right into the program design.
OSHA's 2012 memo put it plainly: "If the incentive is great enough, workers may feel pressure to not report an injury or illness." [2] The agency doesn't require you to prove that a specific worker didn't report because of the incentive. The program's design is enough.
This matters for recordkeeping too. If workers are hiding injuries to protect the reward, your OSHA 300 log is inaccurate, which is its own violation under 29 CFR 1904.29. [3] You can end up with two citations from a single bad program design: one for the anti-retaliation rule and one for false recordkeeping.
There's also a practical safety argument against rate-based programs that has nothing to do with OSHA. Near-misses and minor injuries are your early warning system. If workers stop reporting them, you lose the data you need to prevent the serious incident that comes next. The Bureau of Labor Statistics reported 2.6 million nonfatal workplace injuries and illnesses in private industry in 2023. [4] Many of those came with earlier warning signs that went unaddressed. A program that suppresses reporting doesn't reduce injuries. It just hides them until they get worse.
See also: how to fill out an incident report correctly, because accurate reporting is the foundation this whole conversation sits on.
What kinds of incentive programs are OSHA-compliant?
Reward behaviors, not outcomes. That's the whole rule in five words. OSHA guidance supports programs that pay workers for things they control, never for the absence of something they might feel pressure to hide.
Here are the program types OSHA's own guidance describes as generally acceptable:
Leading-indicator rewards. Give rewards for completing safety observations, submitting hazard reports, participating in a job hazard analysis, or correcting identified hazards before an incident happens. These behaviors directly improve safety without creating any pressure to hide injuries.
Training completion rewards. Rewarding workers who complete safety training, earn certifications, or attend voluntary safety meetings is clean. There's no injury-suppression mechanism. If you're building osha training requirements into a reward structure, this is the right shape.
Participation rewards. Rewarding workers who serve on the safety committee, lead toolbox talks, or mentor new employees on safe practices is straightforwardly legal and tends to build the culture you actually want.
Reporting rewards. This one surprises people. You can explicitly reward workers for reporting near-misses, hazards, and injuries. OSHA's 2012 memo specifically mentions this as a positive program feature. [2] A $25 gift card for every near-miss reported does the opposite of what rate-based programs do. It increases your data quality.
Hybrid programs with a specific safeguard. If you want to keep a team-level reward with some outcome component, OSHA has indicated that programs can survive scrutiny if they include a rule that explicitly restores the reward to any worker whose injury caused the team to lose it. That said, this design is harder to administer and easier to mess up, and I'd honestly steer most small businesses away from it.
| Program Type | Ties reward to... | OSHA risk level |
|---|---|---|
| Zero-injury bonuses | Absence of reported injuries | High: likely violation |
| Lowest recordable rate | OSHA 300 log outcomes | High: likely violation |
| Near-miss reporting | A behavior the worker controls | Low: explicitly supported |
| Training completion | A behavior the worker controls | Low: explicitly supported |
| Hazard identification | A behavior the worker controls | Low: explicitly supported |
| Safety committee participation | A behavior the worker controls | Low: explicitly supported |
| Hybrid outcome/behavior (with restore clause) | Mixed | Medium: depends on design |
What does OSHA's anti-retaliation rule (29 CFR 1904.35) require in writing?
If you have a written incentive program, and you should, it needs to be consistent with 29 CFR 1904.35. That regulation requires employers to "inform each employee of how to report work-related injuries and illnesses" and prohibits "discharging or in any manner discriminating against any employee" for reporting. [1]
In practice, your written incentive program document should do three things:
First, include an explicit statement that workers will not lose incentive eligibility, face discipline, or be disadvantaged in any way for reporting a work-related injury, illness, or near-miss. Put this in plain language, not legalese.
Second, describe the reporting process clearly. If workers don't know how to report, they'll default to silence. The written program should name who to report to, what form to use, and how quickly.
Third, document your program's metrics so they're based on behaviors, not outcomes. If an auditor or inspector reads your program document, they should be able to tell immediately what workers are being rewarded for and confirm there's no pressure mechanism pointing toward under-reporting.
A written program also protects you. If a worker later claims they felt pressured not to report, your documented policies showing reporting was required and rewarded are your best defense. OSHA inspectors look at written programs during inspections, and a clear, compliant document is far better than a verbal "we didn't mean it that way."
If you're building or rebuilding your written safety program from scratch, SafetyFolio's safety program generator walks through the incentive program requirements in the same session as your other written program elements, so you get a consistent document rather than a patchwork.
Can you still give rewards after a period with no injuries?
Technically yes, with serious caveats. OSHA's guidance doesn't say you can never acknowledge a low-injury period. The question is whether the program's design creates pressure to hide injuries.
The safest version of this looks like a recognition (not a cash bonus or anything significant) given after a period ends, described as a celebration of how the team worked together rather than a prize that was on the table the whole time. Low stakes, no announced reward structure, informal.
A formal announced program, "$500 bonus to everyone if we hit 90 days without a recordable," is exactly the pattern OSHA's guidance targets. Workers know the reward is on the line every day. That's the structural pressure the rule addresses.
Some employers have tried to thread this needle with a "reinstatement" clause: the team loses the reward if someone gets hurt, but the injured worker gets their share restored once it's confirmed they reported properly. OSHA's 2012 memo acknowledged this design as a possible mitigation. [2] But the administrative complexity is real and the legal protection is incomplete, because the rest of the team still had an incentive not to report. My honest opinion: if you're spending energy on that design, spend it instead on a leading-indicator program that's cleaner and more effective.
The data on this is imperfect, but the research that exists doesn't support the idea that zero-injury programs actually reduce injuries. They reduce reporting. Those are different things.
How should your incentive program handle drug testing after an injury?
This is a section most incentive program guides skip, and it's a real trap. The same 29 CFR 1904.35 rule that covers incentive programs also addresses post-incident drug testing. Blanket drug testing of every worker who reports an injury, regardless of whether impairment could have contributed, is now considered a form of discouraging reporting. [1]
OSHA's preamble to the 2016 rule stated: "The final rule does not ban drug testing of employees who report work-related injuries or illnesses. However, the final rule does prohibit employers from using drug testing (or the threat of drug testing) as a form of retaliation against employees who report injuries or illnesses." [5]
What that means in practice: you can drug test after an incident if you have reasonable grounds to believe impairment was a factor, and if your policy applies consistently (you test after incidents regardless of whether they result in an injury, not only when someone gets hurt and files a report). A blanket policy of "anyone who reports an injury gets drug tested" is the pattern OSHA targets.
Put your drug testing criteria in writing. Specify what triggers a test: observable signs of impairment, the nature of the incident (equipment malfunction vs. slip and fall), or specific safety-sensitive job categories. A written policy with objective criteria is defensible. An unwritten "we always test after injuries" practice is not.
This connects directly to your incentive program because some employers use drug testing as an implicit deterrent to reporting. OSHA treats that as the same problem as a cash incentive that disappears when someone gets hurt.
What should a compliant safety incentive program document actually contain?
Here's the structure I'd use for a written safety incentive program document. This isn't a template you can fill in blindly. Every item needs your actual numbers, your actual reporting chain, and your actual job roles.
1. Purpose statement. One paragraph explaining the program rewards behaviors that prevent injuries, not the absence of reported injuries. Say it explicitly.
2. Anti-retaliation statement. A clear statement that reporting injuries, illnesses, or near-misses will never result in loss of incentive eligibility, discipline, or any adverse employment action. Cite 29 CFR 1904.35 by number. Workers should see this and know it's a legal commitment, not a preference.
3. What behaviors earn rewards. Be specific. "Completing a monthly safety observation" is specific. "Being safe" is not. List each rewarded behavior, how it's tracked, and what it's worth.
4. How rewards are determined and distributed. Who tracks the behaviors? How often are rewards distributed? Who decides if a behavior qualifies? Ambiguity here creates disputes and inconsistency that can look like favoritism.
5. How to report an injury, illness, or near-miss. Include the supervisor name or role, the form to use, and the timeframe. OSHA requires employers to inform workers of the reporting process under 29 CFR 1904.35(b)(1)(i). [1]
6. Near-miss reporting reward (optional but recommended). If you're going to reward near-miss reports, describe it here. This directly counteracts any residual pressure toward under-reporting.
7. Program review schedule. Commit to reviewing the program at least annually and after any serious incident. Programs that don't get reviewed drift toward whatever is easiest to administer, which often means outcome-based metrics that creep back in.
8. Signatures and effective date. Management signature signals commitment. Keep a copy in your safety program binder and make sure workers can access it.
How do you communicate the program to workers without creating pressure to hide injuries?
The way you introduce and talk about a safety incentive program matters almost as much as how you design it. A leading-indicator program that's communicated poorly ("we're doing this so we have fewer injuries") can still create reporting pressure in people's minds.
Talk about the program in terms of what workers can control. "We're rewarding you for doing safety observations because that's the behavior that actually finds hazards" is a different message than "we're rewarding you for keeping our injury numbers down." The first frames the worker as a safety contributor. The second frames them as a liability risk.
When you launch the program, cover the anti-retaliation statement explicitly. Don't just attach it to the document. Say it out loud in the meeting. Supervisors should repeat it. Workers need to hear from their direct manager that reporting an injury will not cost anyone anything.
Document your communication too. Keep a sign-in sheet from the launch meeting, a copy of any email or posting, and notes from any toolbox talk where the program came up. If OSHA ever investigates a retaliation complaint, your documentation of consistent, clear communication is your defense.
Consider whether your supervisors are creating informal pressure even if the written program is clean. A supervisor who sighs loudly when someone reports an injury, or who praises the crew for "keeping the record clean," undermines a compliant written program. Training supervisors on the anti-retaliation rule is part of building a program that actually works. A good osha 30 course covers supervisor responsibilities on this directly.
For your broader hazard communication program, the same principle applies: workers need to believe that raising safety concerns is valued, not penalized.
What are the OSHA penalties if your incentive program violates the rule?
Under the 2016 rule, OSHA can cite employers under 29 CFR 1904.35 for anti-retaliation violations. The penalties depend on the violation type and your history.
As of 2024, OSHA's maximum penalty for a serious violation is $16,550 per violation. A willful or repeated violation can reach $165,514 per violation. [6] OSHA adjusts these figures annually for inflation.
A single incentive program that OSHA determines discourages reporting could result in a serious citation. If workers can show they actually didn't report injuries because of the program, that moves toward willful territory. And if your OSHA 300 log is then found to be inaccurate, you're looking at a separate citation under 29 CFR 1904.29 on top of the 1904.35 citation.
OSHA can also order "make-whole" remedies for workers who were retaliated against, including reinstatement, back pay, and removal of negative records. These remedies come through Section 11(c) of the OSH Act rather than the recordkeeping regulations, but the underlying facts are the same. [7]
For small businesses, the financial penalty is usually less damaging than the inspection itself. An inspection triggered by a retaliation complaint opens your entire workplace to scrutiny, well beyond the incentive program. OSHA inspectors who come in on a complaint can cite any violations they observe during the inspection, related or not.
The practical risk management argument for compliance is straightforward: a compliant program costs you nothing extra to design and eliminates a category of violation that can trigger a full inspection.
How do leading-indicator programs compare to traditional safety incentives in practice?
The research base here is thinner than safety professionals sometimes admit. Nobody has a clean randomized trial comparing compliant leading-indicator programs to rate-based programs on actual injury outcomes, because it's hard to run that experiment in real workplaces.
What we do have: OSHA's own analysis, informed partly by research from the National Institute for Occupational Safety and Health (NIOSH), found that rate-based programs correlate with under-reporting rather than with actual injury reduction. The 2016 rule's preamble cited multiple academic studies supporting this. [5] [11]
Leading-indicator programs are harder to administer than outcome-based ones. Counting safety observations takes more infrastructure than watching whether the OSHA 300 log stays clean. But the behaviors you're rewarding actually contribute to hazard identification and control, which is what prevents injuries.
One real advantage of leading-indicator programs: they generate data you can use. If you're rewarding hazard reports, you're building a log of identified hazards. If you're rewarding near-miss reports, you're building the incident analysis data that lets you fix systemic problems. Rate-based programs generate silence.
For most small businesses without a dedicated safety manager, I'd keep the program simple: one or two rewarded behaviors, a clear tracking method, and a consistent distribution schedule. Complexity is the enemy of consistency, and inconsistency creates both legal risk (favoritism claims) and cultural damage (workers stop trusting the program).
If your business uses forklifts, manufacturing equipment, or other high-hazard machinery, near-miss reporting is especially worth rewarding. A near-miss on a forklift is a serious injury waiting to happen. forklift certification requirements exist because powered industrial trucks are one of the most consistently dangerous equipment categories in private industry.
How do you update an existing incentive program that's currently rate-based?
Most small businesses that have an incentive program at all run some version of the rate-based model, because it's simple to administer. Here's how to transition without blowing up morale or creating confusion.
Step one: stop awarding the rate-based reward before you announce the new program. Don't just let the existing program run out. Active transition signals that leadership is paying attention to the issue.
Step two: communicate to workers that you're making the change and why. You don't have to say "because OSHA told us to." You can say "we found that this structure wasn't working the way we intended, and we want to reward the things that actually make this workplace safer." Most workers respond well to this framing.
Step three: launch the new program with the written document described above. Give workers a clear picture of what behaviors are rewarded and how. If you previously had a team-level reward, think about whether you're shifting to individual rewards, team rewards for behaviors, or both.
Step four: watch for supervisor behavior. The transition period is when informal pressure is most likely to persist. A supervisor who ran the old program for three years has habits. Check in with them specifically about how they're talking to the crew about the new program.
Step five: review after 90 days. Are near-miss reports going up? Are hazard reports being submitted? If leading indicators are working, you'll see more data coming in, not less. A jump in reported near-misses isn't a sign your workplace got more dangerous. It's a sign workers trust the reporting process.
If you want to generate the updated written program document quickly without building it from scratch, the SafetyFolio safety program generator is built specifically for small businesses that need a compliant written program in one working session rather than weeks of drafting.
Are safety incentive programs required by OSHA?
No. OSHA does not require employers to have a safety incentive program. The rules discussed here are about what you can't do if you choose to have one, not a mandate to create one.
That said, OSHA's Injury and Illness Prevention Program (I2P2) guidance, while it has never been finalized as a regulation, consistently recommends incentive programs as a best practice element of a good safety management system. [8] Several OSHA-approved state plans also have their own safety program requirements that go further than federal OSHA. If you're in a state plan state, check your state's requirements separately.
The Voluntary Protection Programs (VPP) that OSHA runs for high-performing worksites specifically look at worker involvement mechanisms, and incentive programs are one way employers demonstrate that. [9] VPP sites have historically had injury rates well below their industry averages, though participation is voluntary and the program is not available to all employers.
For small businesses, the pragmatic question isn't whether OSHA requires a program but whether a well-designed program is worth the administrative cost. For workplaces with significant hazard exposure, the answer is usually yes. The behaviors you reward are the behaviors you get more of, and if those behaviors are safety observations, near-miss reports, and training completion, you're getting more of the inputs that actually prevent incidents.
Frequently asked questions
Can OSHA cite me for my incentive program even if nobody complained?
Yes. The 2016 amendment to 29 CFR 1904.35 allows OSHA to cite employers for incentive programs that discourage reporting even without a worker complaint. If an inspector sees your program documents during an inspection and determines the design creates pressure not to report injuries, that's a citable condition. You don't need a formal retaliation complaint for OSHA to act.
Is a pizza party for no injuries in a month a violation?
Probably yes. A low-value reward doesn't change the analysis. The violation is in the structure, specifically that workers who report injuries cause the team to lose the reward. The dollar value of the pizza party is irrelevant to whether the program creates pressure to hide injuries. OSHA's guidance focuses on whether a "reasonable worker" might feel deterred from reporting, not on the size of the incentive.
Can I reward workers for wearing PPE correctly?
Yes. Rewarding observable safe behaviors like proper PPE use, correct lockout/tagout procedure, or pre-shift equipment inspections is exactly what OSHA guidance supports. These are behaviors workers control, they don't create any incentive to hide injuries, and they're directly tied to hazard reduction. Just make sure the tracking method is consistent and transparent so workers trust the program.
What is a leading indicator in a safety program?
A leading indicator is a proactive safety metric: something you measure before an incident happens. Examples include near-miss reports submitted, safety observations completed, hazards identified and corrected, and training hours completed. These contrast with lagging indicators like injury rates or days away from work, which measure what already happened. OSHA guidance explicitly supports building incentive programs around leading indicators.
Do I need to put the anti-retaliation rule in my written incentive program?
You don't need to quote 29 CFR 1904.35 verbatim, but your written program should clearly state that workers will not face any disadvantage for reporting injuries or near-misses. An explicit anti-retaliation statement in the program document protects you if a complaint is filed and shows OSHA that the program was designed with the rule in mind. Short, plain language is better than legal boilerplate.
How do I track leading-indicator behaviors without a full-time safety manager?
Keep it simple. A shared spreadsheet, a paper log at the worksite, or a basic form submission process can work for most small businesses. Supervisors can log safety observations and near-miss reports as they come in. The key is consistency: the same tracking method for everyone, reviewed on the same schedule. Complexity you can't sustain is worse than a simpler system you actually run.
Can I have both a leading-indicator program and a small recognition for a low-injury period?
You can, but the low-injury recognition needs to be informal and low-stakes. An announced, significant reward tied to a clean OSHA log is the pattern OSHA targets. An end-of-year acknowledgment that mentions the team had a good safety year, in combination with a primary program that rewards behaviors, is generally lower risk. The announced formal reward is where the legal exposure lives.
Does the incentive program rule apply to small businesses with fewer than 10 employees?
Yes. The 29 CFR 1904.35 anti-retaliation rule applies to all employers covered by the OSH Act regardless of size. While employers with 10 or fewer employees are partially exempt from some OSHA recordkeeping requirements under 29 CFR 1904.1, the anti-retaliation provisions are not tied to recordkeeping size exemptions. Any employer with workers covered by OSHA must comply.
What's the difference between an incentive program and a disciplinary program for safety violations?
An incentive program offers rewards for positive behaviors. A disciplinary program imposes consequences for rule violations. Both can create reporting pressure if designed wrong. Disciplining workers specifically because they were injured (as opposed to because they violated a safety rule) is itself a form of retaliation under 29 CFR 1904.35. Discipline for actual safety rule violations, applied consistently, is lawful and separate from the incentive program analysis.
Should I mention OSHA's rules in the incentive program document itself?
Yes, briefly. Citing 29 CFR 1904.35 in the anti-retaliation section signals to workers and to inspectors that the program was designed with the legal requirements in mind. You don't need a long explanation, just a sentence noting that the program is designed to comply with OSHA's anti-retaliation requirements and that reporting injuries will never affect eligibility. That's enough.
Can I use a third-party safety incentive vendor and still comply with OSHA rules?
Yes, but review the vendor's program design carefully before you sign on. Many off-the-shelf safety incentive platforms are built around lagging indicators because that's what's easiest to measure automatically. Ask specifically how their program handles injury reporting and whether it has a rate-based reward structure. The fact that a vendor provided the program doesn't shield you from citation; you're responsible for what your program does.
How does a safety incentive program relate to workers' compensation costs?
A well-designed leading-indicator program can reduce injuries over time, which reduces workers' comp claims. But a rate-based program that suppresses reporting doesn't reduce injuries; it hides them. Unreported injuries often become more serious before they're treated, which actually increases claims costs when they eventually surface. The financial case for compliant program design matches the legal one: you want fewer injuries, not fewer reports.
What should I do if a worker tells me they didn't report an injury because of our bonus program?
First, document the injury now and add it to the OSHA 300 log with the correct date of injury. Delaying recordkeeping after learning of an unreported injury creates its own violation risk. Then review and revise your incentive program immediately. Consider whether the worker needs medical evaluation. Finally, communicate to all workers that the program has changed and that all past reporting was welcome, no penalty. Prompt action reduces your exposure significantly.
Sources
- OSHA, 29 CFR 1904.35 Employer Disclosure and Anti-Retaliation Rule (2016): Prohibits employers from discharging or discriminating against employees for reporting work-related injuries or illnesses; requires employers to inform workers how to report.
- OSHA Memorandum, Injury and Illness Prevention Programs, March 12, 2012: OSHA explicitly warned that incentive programs creating pressure for workers not to report injuries are unlawful, and supported programs rewarding reporting of near-misses and hazards.
- OSHA, 29 CFR 1904.29 Forms for Recording Work-Related Injuries and Illnesses: Requires employers to accurately record work-related injuries and illnesses on OSHA 300 log; inaccurate logs are a separate citable violation.
- Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses, 2023: Private industry employers reported 2.6 million nonfatal workplace injuries and illnesses in 2023.
- OSHA, Improve Tracking of Workplace Injuries and Illnesses Final Rule Preamble, 2016 (81 FR 29624): OSHA stated the final rule does not ban drug testing but prohibits using drug testing as retaliation for reporting injuries; cited academic studies linking rate-based incentive programs to under-reporting.
- OSHA, Civil Penalty Adjustments for Inflation, 2024: OSHA's maximum penalty for a serious violation is $16,550 per violation and $165,514 for willful or repeated violations as of 2024.
- OSHA, Section 11(c) of the Occupational Safety and Health Act of 1970: Section 11(c) of the OSH Act prohibits retaliation against workers for reporting safety concerns and allows OSHA to order reinstatement, back pay, and removal of adverse records.
- OSHA, Recommended Practices for Safety and Health Programs, 2016: OSHA's I2P2 guidance recommends worker participation mechanisms including incentive programs as a best practice element of a safety management system.
- OSHA, Voluntary Protection Programs (VPP): OSHA's VPP evaluates worker involvement mechanisms; participating VPP sites have historically had injury rates well below industry averages.
- OSHA, 29 CFR 1904.1 Partial Exemption for Employers with 10 or Fewer Employees: Employers with 10 or fewer employees are partially exempt from some OSHA recordkeeping requirements, but this exemption does not extend to anti-retaliation provisions.
- National Institute for Occupational Safety and Health (NIOSH), OSHA collaboration on safety incentive research: NIOSH research informed OSHA's finding that rate-based incentive programs correlate with under-reporting rather than actual injury reduction.