California Cal/OSHA requirements that exceed federal OSHA for small business

Last updated 2026-07-11

What is Cal/OSHA and how is it different from federal OSHA?

Cal/OSHA is California's state-run occupational safety agency, operating under a plan approved by federal OSHA pursuant to Section 18 of the Occupational Safety and Health Act and codified at 29 CFR 1902. ^[1] When a state runs an approved plan, it takes over enforcement inside its borders and federal OSHA steps back. The tradeoff: the state plan has to be "at least as effective" as federal OSHA. California has chosen to blow past that floor.

For a small business owner this matters in a practical way. You are not measured against 29 CFR 1910 (federal general industry) or 29 CFR 1926 (federal construction) as your main benchmark. You answer to Title 8 of the California Code of Regulations (Cal. Code Regs., tit. 8), which is longer, more detailed, and more demanding in a lot of places. ^[2]

Cal/OSHA has its own enforcement arm, the Division of Occupational Safety and Health (DOSH), and its own appeals board. Fines follow a California schedule. As of 2024, a serious violation carries a maximum penalty of $25,000, compared to the federal maximum of $16,550 (adjusted annually). ^[3] Repeat or willful violations in California can hit $125,000.

Here is the part people miss. Cal/OSHA covers every private-sector employer in California, no matter how small. There is no small-business exemption from the IIPP requirement or from most other Cal/OSHA standards. One employee is enough. You need a written Injury and Illness Prevention Program.

What is the Injury and Illness Prevention Program (IIPP) requirement, and does federal OSHA require the same thing?

The IIPP is the single biggest structural gap between Cal/OSHA and federal OSHA. California Labor Code Section 6401.7 requires every employer to have a written IIPP. ^[4] Federal OSHA has no general written-program requirement like it. The closest federal analog is the general duty clause (Section 5(a)(1) of the OSH Act), a catch-all for recognized hazards that never mandates a written program.

A compliant California IIPP has to contain eight specific elements: a written policy naming who runs the program, a system for making sure employees follow safe work practices, a hazard identification and assessment system, a procedure for investigating injuries and illnesses, methods to correct unsafe conditions on a timely basis, a health and safety training program, a two-way communication system between management and employees, and a recordkeeping system. ^[8]

Cal/OSHA publishes a model IIPP for employers with fewer than 10 employees, plus a separate model for low-hazard industries. These templates are free and a fair starting point. But they are shells. You still have to fill them with your actual hazards, your actual job tasks, and real corrective timelines. A blank template sitting in a drawer fails an inspection.

If you need to build yours fast, tools like SafetyFolio's safety program generator can structure the required elements for your industry in about 15 minutes, though you still have to check the hazard list against your real work environment.

For more on what a written program covers, the hazard communication article on this site walks through how chemical documentation fits inside a broader IIPP structure.

How do Cal/OSHA heat illness rules differ from federal OSHA standards?

This is where California parts ways with federal OSHA most visibly, and it hits a lot of small businesses: landscapers, restaurant owners, warehouse operators.

Cal/OSHA's Heat Illness Prevention regulation at 8 CCR 3395 applies to all outdoor places of employment. ^[5] Federal OSHA has no permanent heat illness standard at all, just a general duty clause citation used case by case. California's rule is specific and non-negotiable:

• Potable water: at least one quart per employee per hour during high-heat conditions, free of charge
• Shade: employers must provide shade when the temperature tops 80°F, with enough room for everyone on a rest break to sit in a normal posture without touching each other
• Cool-down rest periods: preventive cool-down rests of at least 5 minutes whenever an employee feels the need, plus active monitoring for heat illness symptoms
• High-heat procedures: extra protections kick in at 95°F, including mandatory observation, pre-shift meetings that remind workers of their right to cool-down rest, and effective communication systems
• Acclimatization: a specific acclimatization period is required for new and returning workers during a heat wave

In 2024, Cal/OSHA extended a modified version of these protections to indoor workplaces through 8 CCR 3396, covering indoor worksites where the temperature reaches 82°F. ^[5] Federal OSHA has no indoor heat standard. California's indoor rule requires water, access to cool-down areas, emergency response procedures, and employee training. For warehouses and manufacturing plants without air conditioning, this is a new obligation with real operating cost.

Heat illness citations are among the most common Cal/OSHA violations. They are also among the most preventable deaths. Between 2010 and 2019, California recorded at least 39 workplace heat-related deaths, according to state occupational fatality data. ^[12] The standard exists because people die without it.

Does Cal/OSHA have stricter permissible exposure limits (PELs) for chemicals than federal OSHA?

Yes, and by a wide margin for a lot of substances. Federal OSHA's PELs, published in 29 CFR 1910.1000 (the Z tables), are famously stale. Most were set in 1971 off 1968 ACGIH threshold limit values and have barely budged since. ^[6] Cal/OSHA updates its PELs more often and adopted much of the ACGIH's 2000 TLV list as a baseline, which produced lower (more protective) limits for dozens of chemicals.

A few concrete examples:

Substance	Federal OSHA PEL (8-hr TWA)	Cal/OSHA PEL (8-hr TWA)
Benzene	1 ppm	0.5 ppm
Formaldehyde	0.75 ppm (STEL 2 ppm)	0.75 ppm (ceiling 1 ppm, different action level)
Lead (general industry)	50 μg/m³	50 μg/m³ (same, but with earlier medical removal triggers)
Silica (respirable)	50 μg/m³ (PEL)	50 μg/m³ (PEL), action level 25 μg/m³
Methylene chloride	25 ppm	25 ppm (same)
Coal tar pitch volatiles	0.2 mg/m³	0.1 mg/m³

The table pulls from Cal/OSHA's Title 8 PEL tables and federal 29 CFR 1910.1000. Spot-check your specific substance on the Cal/OSHA website before you rely on any single comparison. ^[2] For chemicals with cancer or reproductive hazard classifications under California Proposition 65, additional warnings and exposure limits can stack on top of the PEL.

Here is the practical version. If you run a shop that uses solvents, adhesives, coatings, or any chemical with an SDS, check the Cal/OSHA PEL table, not the federal one. Understanding hazard communication under both frameworks is the right place to start.

What are California's requirements for workplace safety training, and how do they exceed federal rules?

California requires training in a language workers understand, on paid working hours, for most safety topics. The paid-time requirement shows up explicitly in several Cal/OSHA standards and is reinforced by the IIPP regulation. Federal OSHA is mostly silent on whether training has to be paid, though the Fair Labor Standards Act (FLSA) covers that ground separately.

Some Cal/OSHA training mandates that go past federal:

Supervisor training on heat illness (8 CCR 3395): California requires supervisors to get specific training on heat illness recognition, prevention, and emergency response before they supervise outdoor workers in warm weather. Federal OSHA has no match. ^[5]

Emergency Action Plan training (8 CCR 3220): California's standard mirrors federal 29 CFR 1910.38 in structure but adds that training has to happen in the primary language of employees. A miss here is more than a paperwork problem. It gets cited as a serious violation.

Forklift/powered industrial truck training (8 CCR 3668): California's standard is substantively similar to federal 29 CFR 1910.178, but inspectors apply it harder to informal operations. ^[11] Small warehouses running untrained operators for years get caught here. The forklift certification piece covers both federal and California obligations in detail.

Lockout/tagout (8 CCR 3314): California requires an annual inspection of energy control procedures by an authorized employee, just like federal 29 CFR 1910.147. What California adds is an explicit documentation requirement that an inspector will hunt for as a standalone record, separate from the written program. See the lockout tagout article for the full checklist.

For the wider view on how training programs stack up, the osha training article lays out the federal baselines you can then compare against the California-specific additions here.

How do California's recordkeeping requirements differ from federal OSHA's?

Federal OSHA recordkeeping under 29 CFR 1904 applies to employers with more than 10 employees in most industries, with partial exemptions for low-hazard sectors. Cal/OSHA's rules track the federal structure but apply to California-covered employers, and California enforces recordkeeping violations more aggressively.

One real difference: California requires employers to give employees and their representatives access to the OSHA 300 log and 301 forms. Federal OSHA requires this too (29 CFR 1904.35), but California's Labor Code gives workers broader rights to safety information, and California unions and employee reps have historically been more active in requesting the records.

Another practical one: California requires the annual OSHA 300A summary posted from February 1 through April 30, identical to federal rules. But Cal/OSHA's electronic submission requirements and the list of covered employers can differ from the federal ITA portal. Check the Cal/OSHA website for the current electronic reporting threshold, because it has changed in recent years. ^[3]

For injuries serious enough to require an incident report, California has its own mandatory reporting timeline. Cal/OSHA requires employers to report any serious injury, illness, or death to the nearest district office by phone or email within 24 hours of learning about it (8 CCR 342). ^[9] Federal OSHA requires fatality reporting within 8 hours and inpatient hospitalization of one or more employees within 24 hours. The California rule applies even when only one employee is hospitalized, a lower threshold than the pre-2015 federal rule many small businesses still remember.

What are California's requirements for personal protective equipment (PPE) that go beyond federal standards?

Federal OSHA's PPE standards under 29 CFR 1910 Subpart I require hazard assessments and appropriate PPE selection. Cal/OSHA meets or beats those requirements and adds California-specific rules in several spots.

The clearest addition is high-visibility clothing for road construction and outdoor work near traffic. California's standard in 8 CCR 1598 is more prescriptive than federal OSHA's guidance and matches CalTrans requirements. So a small landscaping company working along a roadway has specific garment specs to meet, not a general obligation to protect workers.

For respiratory protection, California follows the federal 29 CFR 1910.134 framework but has historically enforced it harder. California requires employers to provide NIOSH-certified respirators at no cost and to keep a written respiratory protection program even for voluntary respirator use. That last part is the same as the federal rule, and it is a common gap for small employers who hand out N95s informally.

One area where California is clearly stricter: the lead standard (8 CCR 1532.1 for construction, 8 CCR 5198 for general industry). California requires medical surveillance and biological monitoring at lower blood-lead action levels, with mandatory medical removal protections that trigger earlier than the federal standard. Renovation contractors doing pre-1978 building work need to know this cold.

Does Cal/OSHA have any requirements specific to small businesses or low-hazard employers?

There are a few accommodations, but the word "small" does not buy you much in California's framework.

Cal/OSHA offers a simplified IIPP template for employers with fewer than 10 employees and for state-designated low-hazard industries. Using it is optional, but it is recognized as sufficient for those employers if completed accurately. The Cal/OSHA Consultation Service, a free program through the DIR, sends someone to your site to help identify hazards and build compliant programs with no enforcement risk. ^[3] This service is genuinely useful and badly underused.

The penalty structure has a small-employer adjustment too. Inspectors can weigh employer size when calculating penalties, and employers with fewer than 25 workers may get a reduction. The reduction is discretionary, not automatic, and it does not touch willful or repeat violations.

That said, there is no general industry exemption for small businesses from the IIPP, heat illness rules, PEL compliance, or recordkeeping. A sole proprietor with two employees doing outdoor landscaping in the Central Valley owes the same heat illness protections as a company with 500 workers. The standard is the same. The odds of an inspection are lower. The legal obligation is identical.

What are Cal/OSHA's rules on employee rights to refuse unsafe work?

California goes well past federal OSHA here.

California Labor Code Section 6311 gives employees the right to refuse work they reasonably believe presents a real and apparent hazard to their health and safety, without fear of discharge or retaliation. ^[4] Federal OSHA's protection under Section 11(c) of the OSH Act is similar on paper but harder to enforce, and the federal right-to-refuse doctrine requires the hazard to be imminent and the employee to have raised it with the employer first.

California's anti-retaliation protections are stronger. An employee disciplined for raising a safety concern can file a complaint with the Labor Commissioner as well as with Cal/OSHA, and California courts have generally been receptive to these claims. For small employers, that means how you handle an employee who complains about a safety condition matters as much as the underlying condition itself.

California also has a separate whistleblower protection under Labor Code Section 1102.5 that covers safety complaints. ^[10] It is broader than the federal Section 11(c) protection and has been applied in cases involving complaints to both internal management and outside agencies.

What happens during a Cal/OSHA inspection, and how is it different from a federal OSHA inspection?

The basic structure mirrors federal OSHA: opening conference, walkaround, document review, closing conference, citations. But several differences matter to a small business owner.

Cal/OSHA inspectors work for the Division of Occupational Safety and Health (DOSH) and are not federal OSHA inspectors. They are trained on California's Title 8 standards, which run longer than 29 CFR. An inspector who cites you for a heat illness violation is citing 8 CCR 3395, not a federal standard, and the appeal goes to the California Occupational Safety and Health Appeals Board, not a federal ALJ.

Cal/OSHA has a higher inspection rate per covered employer than federal OSHA in recent years, partly because California has more inspectors relative to its workforce and partly because the state has targeted high-hazard industries including agriculture, construction, food processing, and warehousing. The DIR's annual report publishes inspection statistics by industry. ^[3]

During an inspection, the inspector will almost certainly ask for your IIPP. Not having one is an immediate serious citation. They will also ask for your 300 log, your written hazard communication program, and your training records. Having those organized and accessible does not guarantee a clean inspection, but it signals good faith and often shapes how an inspector characterizes borderline findings.

One practical note. Cal/OSHA accepts complaints anonymously, and complaint-driven inspections are common in California. A single disgruntled employee can trigger an inspection that covers your whole facility. That is not unique to California, but the frequency is higher than in a lot of states.

How do Cal/OSHA requirements apply to remote workers and home offices in California?

This question has no clean answer, and anyone who gives you one without caveats is oversimplifying.

Cal/OSHA's general position, consistent with federal OSHA's 2000 letter of interpretation on home-based worksites, is that employers are responsible for the safety of the work itself, not the physical home. Cal/OSHA has not inspected home offices the way it inspects commercial worksites. ^[7] But the legal obligation under the IIPP regulation and Labor Code 6400 does not explicitly exclude home offices.

The practical standard most California employment attorneys recommend: your IIPP should address remote and home-based work, including ergonomic risks, electrical safety, and any chemical or equipment hazards an employee might have at home. Provide training on those topics. Set up a reporting mechanism for home-office injuries.

The reporting obligation is clearer. If a remote employee suffers a work-related injury at home, it is recordable and reportable under the same rules as an in-office injury. Cal/OSHA has cited employers for failing to record home-office injuries that met the recording criteria.

For most small office-based businesses with remote staff, the real exposure is ergonomic injury and the IIPP documentation gap. For businesses where employees handle chemicals, run equipment, or do physical work at home, the exposure is wider.

What are the most common Cal/OSHA violations small businesses get cited for?

Cal/OSHA publishes annual enforcement data, and the pattern holds year after year. The most frequently cited standards for small general industry employers are:

1. IIPP missing or inadequate (8 CCR 3203): The top citation across almost every industry. No written program, a program that ignores actual workplace hazards, or one that was never implemented are all citable.

2. Heat illness prevention (8 CCR 3395): Missing water, shade, or training documentation, especially in agriculture, construction, and outdoor services.

3. Hazard communication (8 CCR 5194): Missing SDSs, bad container labeling, or no employee training on chemical hazards.

4. Electrical safety (8 CCR 2500 et seq.): Extension cord misuse, missing GFCI protection, open electrical panels.

5. Emergency Action Plan (8 CCR 3220): Missing or untested plans, especially in small retail and food service.

6. Forklift/powered industrial truck (8 CCR 3668): Untrained operators, missing pre-shift inspections, no written program.

See the pattern. Most of these are documentation and training failures, not equipment failures. A small business with written programs, documented training, and proof of corrective action on identified hazards will survive an inspection far better than one with safe equipment and no paper trail. Cal/OSHA inspectors look for the program first, then walk the floor.

For broader context on what OSHA enforcement looks like, the osha overview is a good place to start before you get into California-specific rules.

How can a California small business build a Cal/OSHA compliant program without hiring a consultant?

The free Cal/OSHA Consultation Service is the best first call for a small business that has never had a formal safety program. It is funded by Cal/OSHA but runs separately from enforcement. A consultant visits your site, identifies hazards, recommends fixes, and hands you a written report, with no penalty risk. ^[3] The catch is wait times, sometimes several months, and you still have to do the implementing yourself.

Beyond that, the Cal/OSHA website publishes model programs, guidance documents, and industry-specific checklists for everything from agriculture to healthcare to retail. They are free, they are written by people who know what inspectors look for, and they are a fair starting point for your IIPP and supporting programs.

For small businesses that need to move faster and want a structured program covering the Cal/OSHA-specific pieces (IIPP, heat illness, hazcom, emergency action), SafetyFolio's safety program generator handles those elements in about 15 minutes. You still have to verify your hazard list against your real operation and review your IIPP periodically, but it gets you from blank page to documented program fast.

The honest truth: the IIPP is not that hard to write for most small businesses. The hardest part is the hazard identification section, because you have to actually walk your facility and think honestly about what could hurt someone. Every other section flows from that. Do the hazard walk first. Write down what you find. Build the program around the real hazards, not a generic template.

Frequently asked questions

Does Cal/OSHA apply to employers with fewer than 10 employees?

Yes. Cal/OSHA applies to all California private-sector employers with at least one employee, regardless of size. There is no small-business exemption from the IIPP requirement, heat illness rules, or most other standards. Employers with fewer than 10 employees can use a simplified IIPP template, and penalty calculations may account for size, but the underlying legal obligation is the same as for large employers.

What is the penalty for not having an IIPP in California?

A missing or inadequate Injury and Illness Prevention Program is typically cited as a serious violation under 8 CCR 3203, which carries a maximum penalty of $25,000 per violation as of 2024. First-time violations for smaller employers often end up lower if corrected promptly, but the citation itself is serious and creates legal exposure. Repeat violations face penalties up to $125,000.

Is federal OSHA's hazard communication standard the same as Cal/OSHA's?

The structure is the same. Cal/OSHA's hazard communication standard at 8 CCR 5194 mirrors federal 29 CFR 1910.1200, and both follow GHS. The difference is enforcement intensity and how hazcom fits within the broader IIPP requirement. California inspectors commonly cite hazcom violations alongside IIPP violations as a package. Missing an SDS for any chemical you use is a citable condition.

Does California require safety training to be conducted in Spanish or other languages?

Yes. Cal/OSHA requires training in a language and vocabulary employees can understand. 8 CCR 3203 (IIPP) and several specific standards such as the heat illness regulation at 8 CCR 3395 state this explicitly. If your workforce is primarily Spanish-speaking, English-only training does not satisfy the requirement and is commonly cited during inspections.

How soon must a California employer report a serious workplace injury to Cal/OSHA?

Within 24 hours of learning of the incident, using the Cal/OSHA 24-hour hotline or by contacting the nearest district office. This covers any serious injury or illness (requiring hospitalization beyond emergency room treatment), catastrophic injury, or death. The threshold is lower than the pre-2015 federal rule and applies even when only one employee is hospitalized, not a group.

Does California have an indoor heat illness standard?

Yes. Cal/OSHA adopted an indoor heat illness standard at 8 CCR 3396, which took effect in 2024. It applies when indoor temperatures reach 82°F and requires employers to provide water, cool-down areas, and emergency response procedures. Federal OSHA has no equivalent indoor heat standard. Warehouses, commercial kitchens, and manufacturing facilities without full climate control are the most affected.

Are California PELs lower than federal OSHA PELs for most chemicals?

For many substances, yes. California updated its PEL tables more recently than federal OSHA, which last set most limits in 1971. For substances like benzene (0.5 ppm vs. federal 1 ppm) and coal tar pitch volatiles (0.1 mg/m³ vs. federal 0.2 mg/m³), California's limits are more protective. Always check the current Cal/OSHA Title 8 PEL table for your specific chemical rather than relying on federal CFR tables.

Can a Cal/OSHA inspector enter my business without advance notice?

Yes. Like federal OSHA, Cal/OSHA inspectors can conduct unannounced inspections. They must present credentials, and you have the right to accompany the inspector during the walkaround. You can request a brief delay to locate the appropriate representative, but you cannot refuse entry without risking a warrant and a worse inspection relationship. Complaint-driven inspections are common in California and are not announced in advance.

Does California's Cal/OSHA cover agricultural workers differently from federal OSHA?

Yes. California's agricultural safety standards under Title 8 and the California Labor Code are more protective than federal OSHA's field sanitation and agricultural standards. California requires toilets, handwashing facilities, and drinking water for farm workers at lower employee thresholds than federal rules, and California's heat illness standard has applied to agricultural workers since 2005, years before any federal rulemaking on the topic.

What is the Cal/OSHA Consultation Service and is it really free?

Yes, it is genuinely free. The Cal/OSHA Consultation Service is a no-cost, confidential program operated by the California Department of Industrial Relations, funded separately from enforcement. Consultants visit your site, identify hazards, and provide written recommendations without triggering citations. The service is designed for small and medium-sized employers. The main downside is scheduling delays, which can run several months in busy periods.

Does California require employers to have a written heat illness prevention plan?

Yes. 8 CCR 3395 requires employers with outdoor workers to have a written Heat Illness Prevention Plan as part of or a supplement to their IIPP. The plan must cover water and shade procedures, high-heat procedures, acclimatization procedures, and emergency response. Federal OSHA has no equivalent written plan requirement for heat illness because it has no permanent heat standard.

How does Cal/OSHA's construction standard differ from federal OSHA's 29 CFR 1926?

California has its own construction safety orders under Title 8, covering topics federal 1926 does not, including specific requirements for utility work, underground construction, and excavation that are more prescriptive than federal rules. Cal/OSHA's fall protection requirements for residential construction also differ from the federal rule. Small contractors working in California must check Title 8 construction orders, more than 29 CFR 1926, for compliance.

What records does a California employer need to keep for safety training?

Your IIPP must include a recordkeeping component, and training records are part of that. At minimum, keep records showing the date, topics covered, trainer identity, and names of employees trained. Several specific standards (forklift, hazcom, lockout/tagout, respiratory protection) require their own training records. California inspectors commonly ask for training records during inspections, and the absence of records is treated as evidence that training did not happen.

Sources

1. Federal OSHA, State Plans page: California operates an OSHA-approved state plan under 29 CFR 1902 covering all private-sector employers in the state
2. California Department of Industrial Relations, Title 8 California Code of Regulations: Cal/OSHA standards are published in Title 8 of the California Code of Regulations and supersede federal 29 CFR standards for California employers
3. California Department of Industrial Relations, Division of Occupational Safety and Health: Cal/OSHA maximum penalty for a serious violation is $25,000; repeat or willful violations can reach $125,000; Cal/OSHA Consultation Service is free to small employers
4. California Labor Code, Section 6401.7 (IIPP requirement) and Section 6311 (right to refuse unsafe work): California Labor Code 6401.7 mandates a written IIPP for every employer; Labor Code 6311 provides employee right to refuse hazardous work
5. Cal/OSHA, Heat Illness Prevention standard, 8 CCR 3395 and 8 CCR 3396 (indoor heat): 8 CCR 3395 requires outdoor employers to provide water, shade, and cool-down rest periods; 8 CCR 3396 (2024) extends modified protections to indoor workplaces at 82°F; federal OSHA has no equivalent permanent standard
6. Federal OSHA, Permissible Exposure Limits, 29 CFR 1910.1000 Z tables: Federal OSHA PELs were largely set in 1971 and are considered outdated; Cal/OSHA has adopted lower limits for numerous substances including benzene (0.5 ppm vs federal 1 ppm)
7. Federal OSHA, Home-Based Worksites interpretation and small business resources: Federal OSHA's position on home-based worksites holds employers responsible for the work itself, not the physical home; Cal/OSHA follows a similar approach
8. Cal/OSHA, Injury and Illness Prevention Program standard, 8 CCR 3203: 8 CCR 3203 requires eight specific elements in a written IIPP; simplified templates are available for employers with fewer than 10 employees and low-hazard industries
9. Federal OSHA, Recordkeeping rule, 29 CFR 1904: Federal recordkeeping under 29 CFR 1904 requires fatality reporting within 8 hours and inpatient hospitalization of one or more employees within 24 hours; California requires any serious injury report within 24 hours under 8 CCR 342
10. California Labor Code, Section 1102.5 (whistleblower protection): California Labor Code 1102.5 provides broader anti-retaliation protections for safety complaints than federal OSHA Section 11(c)
11. Federal OSHA, Powered Industrial Trucks standard, 29 CFR 1910.178: Federal forklift standard at 29 CFR 1910.178 requires operator training and evaluation; California's equivalent at 8 CCR 3668 is substantively similar but actively enforced against small warehouse operations
12. Bureau of Labor Statistics, Census of Fatal Occupational Injuries, California data: BLS state occupational fatality data supports the context for California-specific heat and construction standards, including heat-related workplace deaths