Fall protection program: the complete OSHA compliance guide

Last updated 2026-07-09

What is a fall protection program and who has to have one?

A fall protection program is a written document that lists every fall hazard at your worksite, explains how each one is controlled, and records that your workers were trained on those controls. It is not a poster. It names your actual locations and your actual people.

OSHA does not always package the requirement under one tidy phrase called "fall protection program," but the obligation is real and enforceable. Under 29 CFR 1926.502(k), construction employers must develop and put in place a fall protection plan when conventional systems are infeasible or create a greater hazard. For general industry, 29 CFR 1910.132 requires a written PPE hazard assessment (fall equipment counts), and 29 CFR 1910.28 sets the duty to provide guardrails, personal fall arrest, and safety nets on walking-working surfaces. ^[1][2]

So who needs a program? Any employer whose workers can reach an unprotected edge or opening at 4 feet or more above a lower level in general industry. In construction, the trigger is 6 feet. In shipyards it is 5 feet. Roofing contractors work under the 6-foot construction rule, and residential roofing has its own enforcement policy under OSHA STD 03-11-002. ^[3]

Small businesses get no pass. OSHA enforcement data shows small construction firms with fewer than 10 employees take a disproportionate share of fall citations every year. The standard treats one worker exactly like it treats five hundred.

What are the OSHA fall protection height requirements?

The trigger height changes by industry sector, and mixing them up is one of the most common mistakes employers make. General industry starts at 4 feet. Construction starts at 6. Get that backward and you will either overspend or get cited.

Sector	Trigger height	Primary standard
General industry (walking-working surfaces)	4 feet	29 CFR 1910.28
Construction	6 feet	29 CFR 1926.501
Shipyards	5 feet	29 CFR 1915.73
Longshoring	8 feet	29 CFR 1918.85
Scaffolding (construction)	10 feet	29 CFR 1926.451
Steel erection	15 or 30 feet (column/connector exceptions)	29 CFR 1926.760

Those heights assume a fall to a lower level. OSHA also requires fall protection regardless of height when workers are above dangerous equipment, near a wall opening more than 18 inches wide and 30 inches tall, or working over unguarded holes. ^[1]

Height is not the only variable. The surface matters. Skylights, floor holes, leading edges, and hoist areas each get their own treatment in the standards. Your written program has to catalog each hazard type by name. "Any work above 6 feet" is not a hazard assessment.

One detail trips up general industry employers constantly. The 2017 update to Subpart D (29 CFR 1910.21 through 1910.30) rewrote the walking-working surface rules, adding requirements for rope descent systems, ladder safety systems, and personal fall protection on fixed ladders. If your program predates January 2017, it is almost certainly out of date. ^[1]

How deadly are falls, really? The numbers behind the requirement

Falls are the number one cause of death in construction and a top killer across every industry. The Bureau of Labor Statistics Census of Fatal Occupational Injuries counted 865 fatal falls to a lower level in 2022, out of 5,486 total workplace deaths. ^[4] One hazard category accounts for roughly 16 percent of all worker fatalities.

Non-fatal fall injuries are far more common. BLS Survey of Occupational Injuries and Illnesses data shows hundreds of thousands of fall-related injuries requiring days away from work each year. The money side is brutal. OSHA has cited estimates that a single fall fatality costs employers and insurers over $1 million in direct costs, and indirect costs (hiring, retraining, lost productivity, legal exposure) often run 4 to 10 times the direct figure. ^[5]

Falls from ladders kill more workers than any other fall source, followed by roofs, then scaffolds. That ordering should shape how you rank your program's controls.

OSHA's citation data drives the point home. Fall protection in construction (29 CFR 1926.501) has been the single most-cited OSHA standard every fiscal year for more than a decade. ^[6] Scaffold requirements (1926.451) and fall protection training (1926.503) show up in the top ten year after year. If you run a construction crew and you have not addressed falls specifically and in writing, a federal inspection will find something.

What does a written fall protection program need to include?

There is no single federal template that fits every employer, but a compliant program keeps showing up with the same core parts.

1. Scope and purpose. One paragraph naming which operations and locations the program covers, and stating that it applies to all employees, contractors, and visitors exposed to fall hazards.

2. Hazard identification. A documented survey of every fall hazard at your site: unprotected edges, holes, floor openings, skylights, ladders, scaffolds, elevated platforms, loading docks. Construction employers update this as the job moves through phases. General industry employers revisit it whenever work areas change.

3. Hierarchy of controls. OSHA prefers, in order: eliminate the hazard, use passive protection like guardrails, then use fall restraint or fall arrest systems. Your program should say how each hazard is controlled and why you picked that control.

4. Equipment selection and inspection. Name which personal fall arrest system (PFAS) components you use, who is authorized to inspect them, and how often. OSHA requires fall arrest equipment to be inspected before each use and pulled from service after any fall event. ^[2]

5. Rescue plan. This is the piece most small employers skip. 29 CFR 1926.502(d)(20) requires employers to "provide for prompt rescue of employees in the event of a fall or shall assure that employees are able to rescue themselves." A worker hanging in a harness can develop suspension trauma within minutes. You need a named rescue procedure, not a sticky note that says call 911. ^[2]

6. Training documentation. Who was trained, by whom, on what date, on which hazards. Construction requires training under 29 CFR 1926.503 by a "competent person." ^[7]

7. Roles and responsibilities. Name the competent person who owns fall protection oversight. In construction that phrase carries a specific legal meaning: someone who can spot fall hazards and has the authority to fix them.

8. Certification and recordkeeping. Date the document, version it, and re-certify after incidents or major changes to the work environment.

Want a faster path? SafetyFolio's safety program generator walks you through each of these sections in about 15 minutes and outputs a document you can actually hand an OSHA inspector.

For how a fall protection program sits inside your larger safety system, see a safety and health program should be for the foundation that applies across every hazard type.

What are the three main types of fall protection systems?

OSHA recognizes three primary systems, and your program has to say which ones you use and when.

Guardrail systems are passive. Workers do nothing and the rail still works. Standard top rail height is 42 inches (plus or minus 3 inches) with a midrail and a toeboard where objects could fall onto people below. ^[1] Guardrails are the preferred control when they are feasible, because they need no worker action and no rescue plan. The top rail has to hold a 200-pound force applied in any outward or downward direction.

Safety net systems are also passive. They are required when workers are more than 25 feet above a lower level and neither guardrails nor personal fall arrest are feasible. ^[2] Nets go as close as practicable under the walking surface and never more than 30 feet below it. They need inspection after any impact loading and at least once a week. See safety net programs for when nets are required and how to document them.

Personal fall arrest systems (PFAS) are active. They pair a full-body harness with a lanyard or self-retracting lifeline (SRL) and an anchor rated to at least 5,000 pounds per attached worker (or engineered by a qualified person to hold a safety factor of at least two). ^[2] The system must be rigged so the worker cannot free fall more than 6 feet or hit a lower level, and it must cap the arresting force on the body at 1,800 pounds.

A fourth option, fall restraint, gets confused with fall arrest all the time. Restraint stops you from reaching the edge. Arrest catches you after you go over. They look alike (both use a harness and anchor), but the anchor strength requirements and rescue obligations differ. Your program should spell out which one applies to each task.

One practical note. SRLs have mostly replaced lanyards in a lot of operations because they give more freedom of movement and shorten the fall. They are not automatically better. On some rooflines, or when you work close to the anchor, an SRL can actually add fall distance compared to a properly rigged short lanyard. Your competent person has to check the geometry for each task.

What training does OSHA require for fall protection?

Training requirements split between general industry and construction, but both are real obligations that come with paperwork. Skip the paper and you have a citation waiting even if the training happened.

In construction, 29 CFR 1926.503 requires the employer to train each employee exposed to fall hazards, and the training must be led by a "competent person." Workers have to understand the nature of the fall hazards in their work area and the right way to erect, maintain, disassemble, and inspect the fall protection systems in use. ^[7]

After training, the employer has to prepare a written certification record. It includes the employee's name, the date of training, and the signature of the person who did the training or the employer. That certification is the first thing an OSHA inspector asks for.

Retraining kicks in whenever a worker no longer understands or can no longer use the systems properly, or when workplace changes make the earlier training obsolete.

In general industry, 29 CFR 1910.30 requires training before any employee uses fall protection equipment or faces a fall hazard. ^[12] Topics have to cover the fall hazards in the work area, the systems that apply to those hazards, the limitations of the equipment, and what to do after a fall or near miss.

For a framework on structuring and documenting safety training across every program, see workplace safety training.

Here is what small employers get wrong: letting an equipment vendor or a YouTube clip stand in for formal competent-person training. That leaves you with both a documentation gap and a skills gap. Competent person is not a card you buy. It is a determination the employer makes based on the person's knowledge and authority at your specific worksite.

How do you do a fall hazard assessment?

A fall hazard assessment is a physical walkthrough of your workplace, done with your eyes on fall exposures specifically, written down and signed. It is not a general safety inspection with fall stuff folded in.

Start with a site map or floor plan. Walk every area where people work, move through, or perform maintenance. At each spot, ask: can a worker reach an unprotected edge or opening? How high is it? What is below it? Is the lower level a floor, a piece of running equipment, or water?

Write down every hazard. Use a simple form: location, hazard description, height, how often workers are exposed, the current control if any, and the recommended control. Then rank them. A 12-foot unguarded roof edge used daily beats a 5-foot loading dock edge used twice a year for urgency, even though both need attention.

For construction, OSHA expects the assessment to be updated as work progresses. The fall exposures during framing look nothing like the ones during finish work. Your competent person should reassess at every new phase.

For general industry, the walking-working surface standard at 1910.22 requires you to keep floors clean, dry, and free of hazards. ^[1] The PPE hazard assessment under 1910.132 requires you to certify in writing that you did it, name the workplace evaluated, and log the date and the name of the person who performed it.

A credible assessment takes 30 to 90 minutes for most small businesses. It is not complicated. What makes it compliant is writing it down, signing it, and dating it. An undocumented walkthrough buys you nothing in an enforcement action or a lawsuit.

What equipment do you need for a fall protection program?

Equipment flows from the hazard assessment. There is no single required kit. What you buy depends on the hazards you have and which controls are feasible.

For most small construction sites and general industry facilities, the core gear breaks into a few buckets. Prices below are typical retail ranges from major suppliers and move around, so treat them as ballpark.

Guardrails and barriers. Prefabricated guardrail systems, stanchions, and portable warning line systems are stocked by major safety suppliers. A basic stanchion-and-cable warning line for roofwork runs roughly $800 to $2,000 for a 100-foot perimeter. Warning lines are only allowed in roofing work under specific conditions and do not replace guardrails or PFAS in most applications.

Full-body harnesses. Budget $80 to $300 per harness from reputable makers (3M, MSA, Honeywell, Petzl are the big names). Chest and waist belts are not OSHA-compliant for fall arrest. A full-body harness is required for any personal fall arrest system. ^[2]

Lanyards and SRLs. A shock-absorbing lanyard runs $40 to $150. An SRL runs $150 to $700 depending on length and auto-retract rating. Match the SRL length to the fall clearance at your site.

Anchor points. Portable roof anchors, beam clamps, and sleeve anchors run $50 to $300 each. Permanent anchors should be installed by a qualified person. The 5,000-pound-per-person figure is a minimum; an engineered anchor with a 2:1 safety factor and a known maximum arrest force can use a lower rated load. ^[2]

Inspection tags and logs. These cost almost nothing, and they are often what separates a company with a clean paper trail from one staring down a willful citation after an incident.

Before you buy anything, check whether your workers' comp insurer offers equipment discounts or free safety consultations. Plenty do.

What should a fall protection rescue plan include?

The rescue plan is the most underbuilt part of most fall protection programs, and it is the part that turns a survivable arrest into a fatality.

Suspension trauma (orthostatic intolerance from hanging in a harness) can start within minutes. NIOSH has noted that in some individuals unconsciousness can set in within a few minutes, though the timing varies a lot with health status and body position. ^[8] Calling 911 and waiting for the fire department is not a rescue plan when your worker is 30 feet up on a structure.

Your rescue plan has to answer four questions:

1. Who is the designated rescuer for each operation, and are they on site during the work? 2. What equipment is on hand to perform the rescue (ladders, an aerial lift, a second set of ropes and rigging)? 3. What is the communication procedure from the fallen worker to the rescuer? 4. At what point does the plan call for emergency services, and how will they get access?

For most small employers, the workable answer is to position the work so a suspended worker can be reached by a scissor lift or aerial work platform within two to three minutes. If you cannot do that, rethink whether PFAS is the right control for that task, or make sure a second competent worker is present and equipped to run a line descent rescue.

Put the rescue plan in writing as a section of your fall protection program. Drill it at least once a year. A plan nobody has practiced is not a plan.

For operations where working at height is routine, keep a dedicated rescue kit: a Petzl I'D or similar descender, anchor hardware, and a haul system, with documented training for at least two workers on how to use it.

How much do OSHA fall protection violations cost?

OSHA penalty amounts get adjusted for inflation every January. As of 2024, the maximum penalties look like this:

Violation type	Maximum penalty per violation
Serious	$16,131
Other-than-serious	$16,131
Willful or repeated	$161,323
Failure to abate	$16,131 per day

These figures come from OSHA's annual penalty adjustment, last updated in January 2024. ^[9]

In practice, OSHA applies reduction factors for size (employers with 25 or fewer employees get a 60 percent cut), good faith, and history. A small employer with a first violation and no injury might pay $2,000 to $4,000 on a serious fall protection citation. An employer with prior history, stacked violations, or a fatality faces the full willful or repeated numbers, which have topped $100,000 per citation in real enforcement actions.

The penalties are the small number. The real exposure is civil liability. A worker hurt in a preventable fall can sue, and in most states the workers' comp bar breaks down where gross negligence is found. Settlements in construction fall cases routinely reach six figures. A death on an unprotected roof can produce a seven-figure outcome.

The business case for a written program goes past compliance. It is documented proof that you took the hazard seriously, and that matters in every regulatory and legal proceeding that follows an incident.

For how safety incentives can support your program without tripping OSHA's anti-retaliation rules, see principles of effective safety incentive programs.

How do you maintain and update a fall protection program?

A written program that lives in a filing cabinet is a document, not a safety program. Maintenance is what turns paper into practice.

Review the program at least once a year. Make it a real meeting, not a signature on a cover page. Walk the site again. Go through any near misses or incidents from the past year. Confirm every equipment inspection is current and that anything pulled from service after a fall event has been replaced.

Update the program right away when:

• The scope of work changes a lot (a project moves to a new phase, a plant adds an elevated process line)
• Equipment is changed or replaced
• An incident or near miss exposes a gap
• OSHA issues a new standard, letter of interpretation, or enforcement memo that touches your operations
• A new competent person takes over the role

Version control matters. Date every revision, keep the prior version on file, and note what changed and why. If you ever face enforcement or litigation, being able to show that your program was a living document instead of a one-time effort carries real weight.

For construction, 29 CFR 1926.502(k) requires the fall protection plan to be site-specific and updated as conditions change. That is not soft language. ^[2]

Give one person ownership of the update schedule. Without a named owner, reviews slip. That person does not need to be an engineer or a full-time safety pro. They need to recognize fall hazards, have the authority to stop work when a hazard shows up, and actually do the review.

If keeping a compliant program current feels like too much overhead, SafetyFolio lets you regenerate and update your fall protection program in minutes whenever the workplace changes, so the document stays current without dedicated safety staff.

Does OSHA require a fall protection program for general contractors and subcontractors?

Yes, and the multi-employer worksite rule makes this sharper in construction than almost anywhere else.

OSHA's multi-employer citation policy (CPL 02-00-124) says a general contractor can be cited as a "controlling employer" for fall hazards created by or exposing a subcontractor's workers, even when the GC's own crew is nowhere near the hazard. ^[10] You do not have to employ the injured worker to catch the citation.

That is why a sub with a weak or missing fall protection program becomes your problem as the GC. Standard practice: require subs to submit their fall protection programs as part of the subcontract package, audit those programs for basic completeness, and keep a record that you did.

For subcontractors, the obligation is simple. You are responsible for your own workers, full stop. The fact that a GC or property owner never mentioned fall protection does not get you off the hook. OSHA has repeatedly held that the duty to protect employees from fall hazards sits with the employer of those employees, no matter who controls the site.

Owner-operators working alone are not automatically exempt in practice. A sole proprietor with no employees is not covered by OSHA standards, but the moment you have one employee, even part-time, the full standard applies. And if you subcontract onto a job where the GC requires OSHA compliance, your one-person operation still needs a compliant program to get on site.

Frequently asked questions

What is the OSHA fall protection standard number?

For construction, the main standards are 29 CFR 1926.501 (duty to have fall protection) and 1926.502 (systems criteria). For general industry, they are 29 CFR 1910.28 (duty to have fall protection) and 1910.23 (ladders and walking-working surfaces). Training sits at 1926.503 for construction and 1910.30 for general industry. Scaffolds have their own standard at 1926.451.

At what height is fall protection required in construction?

Six feet above a lower level for most construction work under 29 CFR 1926.501. Exceptions include scaffolding (10 feet under 1926.451), steel erection (15 feet for connectors, with a column-jump exception at 30 feet under 1926.760), and residential construction, which has its own OSHA enforcement guidance. When work is above dangerous equipment, protection is required at any height.

Does a small business with fewer than 10 employees need a fall protection program?

Yes. OSHA fall protection standards apply to every employer with at least one employee, regardless of company size. Small employers (25 or fewer) get a 60 percent penalty reduction if cited, but the underlying duty is identical. OSHA's free on-site consultation program (separate from enforcement) is open to small businesses and offers confidential help identifying fall hazards and building a compliant program.

What is a competent person for fall protection?

OSHA defines a competent person as someone able to identify existing and predictable hazards and authorized to take prompt corrective action. For fall protection, this person understands the standards, inspects equipment and work areas, and can stop work when a hazard exists. It is an employer designation, not a certification. You decide who at your company meets the definition. There is no government-issued competent person card.

What anchor strength does OSHA require for fall arrest?

Personal fall arrest anchorages must support at least 5,000 pounds per attached employee under 29 CFR 1926.502(d)(15). Alternatively, a qualified person may design the system to maintain a safety factor of at least two. Anchor selection is one of the most misunderstood requirements; workers routinely clip off to structural members that have never been evaluated for that load.

Can you use a body belt instead of a full-body harness for fall arrest?

No. Body belts are prohibited for fall arrest under 29 CFR 1926.502(d)(17) because they concentrate the arresting force on the abdomen and can cause serious internal injury. A full-body harness is required for any personal fall arrest application. Body belts may still be used for fall restraint (where the worker cannot reach the fall hazard), but never for arrest.

What is suspension trauma and why does it matter for a rescue plan?

Suspension trauma (also called harness-induced pathology) happens when a worker hangs motionless in a harness after a fall arrest. Blood pools in the legs, cutting return to the heart and possibly causing unconsciousness within minutes. NIOSH treats this as a serious hazard. Your program must include a rescue plan that reaches a suspended worker fast; relying on 911 alone is not adequate for elevated work.

How often does fall protection equipment need to be inspected?

OSHA requires the user to inspect personal fall arrest equipment before each use. After any fall event, the equipment must come out of service immediately and be inspected by a competent person before it goes back into use or gets destroyed. Manufacturers typically recommend annual formal inspections by a trained inspector on top of pre-use checks. Guardrails should be inspected whenever conditions change and after any impact.

What is a warning line system and when is it allowed?

A warning line system is a rope, wire, or chain rigged between stanchions at 34 to 39 inches high, set back from an unprotected roof edge. It is only permitted in roofing operations in construction, and only when the work area sits more than 15 feet from the edge during mechanical equipment operation or more than 6 feet otherwise. It does not replace a guardrail or PFAS on most structures.

What fall protection is required for workers on ladders?

Under the updated 29 CFR 1910.23 (general industry) and 29 CFR 1926.1053 (construction), fixed ladders over 24 feet must have a ladder safety system or personal fall arrest system. Cages no longer count as compliant fall protection for new fixed ladder installations after November 2018 in general industry. Portable ladder use requires three points of contact and no carried objects that compromise grip.

How do OSHA fall protection rules apply to residential roofing?

Residential roofing falls under construction fall protection at 29 CFR 1926.501, with a 6-foot trigger. OSHA issued STD 03-11-002, which rescinded an earlier directive that gave residential roofers more flexibility. Residential roofing contractors must use conventional fall protection (guardrails, PFAS, or safety nets) or, where infeasible, follow a written alternative fall protection plan. OSHA inspects residential roofing sites and cites violations.

What records do you need to keep for a fall protection program?

At minimum: the written hazard assessment (dated and signed), a training certification for each employee (name, date, trainer signature), equipment inspection logs, and the written program itself. For construction, 29 CFR 1926.503(b) specifically requires a written training certification. Keep records at least three years; many employers keep them indefinitely given how long litigation trails a serious injury.

Is fall protection required on aerial lifts and scissor lifts?

Yes. Workers on aerial work platforms (boom lifts) must wear a full-body harness and lanyard attached to the manufacturer's designated anchor inside the basket under 29 CFR 1926.453. Scissor lifts count as elevated platforms; OSHA requires fall protection when the platform is raised and workers face the edge, usually through guardrails that meet the standard height and strength requirements. Workers should never sit or climb on the rails.

What is the difference between fall restraint and fall arrest?

Fall restraint keeps a worker from reaching the fall hazard. Fall arrest catches a worker after a fall happens. Restraint uses shorter lanyards rigged so the worker physically cannot reach the edge. Arrest systems must limit free fall to 6 feet or less and arresting force to 1,800 pounds. Both use a full-body harness, but anchor strength and post-use inspection obligations differ. Your program should say which one applies to each task.

Sources

1. OSHA, 29 CFR 1910 Subpart D (Walking-Working Surfaces), OSHA.gov: General industry fall protection trigger is 4 feet above a lower level; walking-working surfaces standard updated 2017
2. OSHA, 29 CFR 1926.502 (Fall Protection Systems Criteria and Practices), OSHA.gov: Construction anchorage must support 5,000 lbs per worker; system must limit free fall to 6 feet; body belts prohibited for fall arrest; prompt rescue required
3. OSHA, STD 03-11-002, Compliance Guidance for Residential Construction, OSHA.gov: Residential roofing contractors must use conventional fall protection or a documented alternative fall protection plan
4. Bureau of Labor Statistics, Census of Fatal Occupational Injuries Summary, 2022, BLS.gov: 865 fatal falls to a lower level occurred in 2022 out of 5,486 total workplace fatalities
5. OSHA, Falls: The Facts / Stop Falls campaign, OSHA.gov: Direct and indirect costs of a fall fatality estimated at over $1 million; indirect costs may run 4-10 times direct costs
6. OSHA, Top 10 Most Frequently Cited Standards, OSHA.gov: Fall protection in construction (29 CFR 1926.501) has been the most-cited OSHA standard for more than a decade
7. OSHA, 29 CFR 1926.503 (Training Requirements for Fall Protection), OSHA.gov: Construction training must be conducted by a competent person and documented with written certification including employee name, date, and trainer signature
8. NIOSH, Preventing Falls in Construction, CDC.gov: Suspension trauma can cause unconsciousness in minutes; rescue must be prompt
9. OSHA, Penalties, OSHA.gov: As of 2024, maximum serious violation penalty is $16,131 per violation; willful/repeated maximum is $161,323 per violation
10. OSHA, CPL 02-00-124, Multi-Employer Citation Policy, OSHA.gov: General contractors can be cited as controlling employers for fall hazards exposing subcontractor workers, even when GC employees are not at risk
11. OSHA, 29 CFR 1926.501 (Duty to Have Fall Protection), OSHA.gov: Construction fall protection trigger is 6 feet above a lower level
12. OSHA, 29 CFR 1910.30 (Training Requirements, Walking-Working Surfaces), OSHA.gov: General industry employers must train workers on fall hazards before exposure; training must cover specific topics including equipment limitations