Last updated 2026-07-09

TL;DR
OSHA's 29 CFR 1910.269 requires two audit clocks: audit each employee's work practices at least once a year, and audit the written electrical safety program at least once every three years. NFPA 70E 2024 uses identical intervals for general industry. Incidents, equipment changes, and new NFPA editions trigger extra reviews.
What does OSHA actually require for electrical safety program audits?
Two clocks run at once. OSHA's 29 CFR 1910.269(a)(2)(iii) requires you to audit the written electrical safety program at least every three years, and to audit each covered employee's work practices at least once a year. [1] The three-year interval is the floor, not the goal. Plenty of employers read "every three years" and stop there. That's a mistake.
Think of the two audits as different jobs. The annual audit watches what people do on the job. The triennial audit checks whether the paperwork still describes reality.
1910.269 is OSHA's standard for electric power generation, transmission, and distribution work. If you're not a utility, it isn't your primary standard, but its schedule is still the one inspectors expect you to hit.
For general industry, the companion rules are 29 CFR 1910.301 through 1910.399 (Subpart S, Electrical). Subpart S sets no audit interval of its own. OSHA expects employers covered only by Subpart S to meet the General Duty Clause (Section 5(a)(1) of the OSH Act) and to treat NFPA 70E as the recognized industry standard for how often to review a program. [2]
NFPA 70E 2024, Section 110.5(M)(3), mirrors 1910.269 almost word for word: program audits at least every three years, field audits of employee compliance at least annually. [3] Follow NFPA 70E in general industry and you meet what an inspector will look for, even where the CFR stays quiet on the interval.
What triggers an unscheduled audit outside the regular cycle?
Four things reset the clock: an incident, an equipment or process change, a big personnel shift, and a new NFPA 70E edition. Any one of them can force a review before your next scheduled date, and skipping that review is how a routine gap becomes a willful violation.
Start with incidents. A shock, arc flash, arc blast, or equipment-related near-miss should trigger an immediate program and practices review. OSHA's recordkeeping rules under 29 CFR 1904 and the General Duty Clause both push in the same direction. [4] If an incident exposes a program gap and you keep working without a review, an inspector has grounds to call it willful.
Equipment and process changes matter too. New electrical equipment, a voltage change, or a modified procedure can make your last audit obsolete. OSHA's interpretation letters on safety programs hold that programs must reflect current conditions. [5] A shop that adds a 480V press line in June can't wait two years to document whether its lockout/tagout and arc flash procedures cover it.
Personnel churn is the third trigger. When qualified electrical workers turn over, or contractors show up to do electrical work, someone has to verify they're inside the program. The annual work-practices audit catches most of this. A big mid-cycle influx of new workers warrants an early check.
Regulatory changes move the line. NFPA 70E updates on a three-year cycle (2018, 2021, 2024). When a new edition drops and your jurisdiction adopts it, your written program has to be measured against the new requirements. That comparison is an unscheduled audit in everything but name.
What does the annual work-practices audit actually cover?
The annual audit watches people do the work. It confirms that each covered employee follows the written procedures in the field: correct arc-rated PPE for the boundary, lockout/tagout steps in order, properly rated tools, testing before touching, and required working distances. [3] The triennial audit reviews documents. The annual audit reviews behavior.
Under 1910.269(a)(2)(iii), a qualified person conducts the annual audit, and it must cover each employee who performs work under the electrical safety program. [1] "Each employee" is literal. You can't audit a representative sample and call it done for the rest of the crew. Twelve electricians means twelve observations inside the calendar year.
Deviations become corrective action items. If the same deviation shows up across the crew, that's not an individual problem, it's a program problem, and it should pull your triennial audit forward.
Documentation carries the weight here. OSHA prescribes no specific form, but an inspector will expect written records showing who was audited, by whom, on what date, what was observed, and what got fixed. Keep those records for at least one full audit cycle. Longer is better. Three years is a sane minimum.
How do lockout/tagout audit requirements compare to electrical safety program audits?
They overlap but don't replace each other. Lockout/tagout carries its own annual audit clock separate from the electrical safety program audit, and small employers get tangled up here constantly.
29 CFR 1910.147(c)(6)(i) requires an annual periodic inspection of each energy control procedure. [6] That inspection must be done by an authorized employee other than the one using the procedure, and it certifies the employee's knowledge. LOTO covers all hazardous energy: electrical, hydraulic, pneumatic, thermal, and the rest. The electrical safety program audit goes deeper on electrical-specific hazards. Both clocks run at the same time.
The smart move is to fold both into one field observation. A single walk-through can satisfy the 1910.147 annual LOTO inspection and the 1910.269 work-practices audit if the checklist covers both standards. Your documentation just has to cite both.
Watch one detail. The 1910.147 certification has to name the employee, the date, the procedure reviewed, and the person who ran the inspection. [6] That's more specific than what 1910.269 spells out. Match your electrical audit records to the same level of detail and you'll never have a recordkeeping gap when an inspector shows up.
See a safety and health program should be for how OSHA's general program standards tie into specific elements like LOTO and electrical.
Who can conduct an electrical safety program audit?
A "qualified person," and that's a term of art. 1910.269(a)(2)(iii) requires the audit be conducted by a qualified person, defined in 1910.269(x) as someone trained in, and able to demonstrate skills and knowledge in, the construction and operation of electric equipment and installations and the hazards involved. [1] A license alone doesn't make the cut. The qualification is job and hazard specific.
The triennial program audit gives you more room. An internal safety manager with strong electrical knowledge, an outside electrical safety consultant, or a contracted third-party auditor all qualify if they meet the definition. A common split: bring in an NFPA 70E-trained consultant for the triennial review, handle the annual work-practices audits in-house. That works.
The work-practices audit needs a qualified person actually watching the work, which means being present in the field. Video review might satisfy the observation requirement in some settings, but OSHA hasn't issued clear guidance on it, and I'd be cautious leaning on it in a high-hazard environment.
One hard line: nobody audits their own work. Self-certification doesn't count. The person observed and the person auditing have to be two different people. [1]
Does the three-year audit requirement apply to every employer or just utilities?
The explicit three-year clock in 1910.269 applies to utilities and generation facilities. Everyone else gets there through NFPA 70E, which uses the same intervals, so the practical answer for almost any business is yes. This is the single biggest source of confusion on the topic.
29 CFR 1910.269 covers electric power generation, transmission, and distribution work. [1] If your business doesn't do that work, 1910.269 isn't your primary standard.
Most general industry employers fall under Subpart S (29 CFR 1910.301-399), which covers installing and using electrical equipment in the workplace. Subpart S sets no audit interval. Treat NFPA 70E 2024 as your frequency reference, because OSHA consistently recognizes it as the consensus standard for workplace electrical safety. [2]
Construction employers fall under 29 CFR 1926 Subpart K. That subpart also names no audit interval, but 1926.20 requires the general safety and health provisions to be met, which include regular program review. [7]
Run a restaurant, a warehouse, or a machine shop? You're under Subpart S plus NFPA 70E. Use the same three-year and annual framework as 1910.269, document it, and you have a defensible program. OSHA inspectors use NFPA 70E as the benchmark for general industry electrical programs when they write citations. [2]
What should a written electrical safety program audit cover?
A triennial audit does more than confirm the document exists. It verifies that the written program still matches your actual hazards, your equipment, your procedures, and current regulatory requirements. A completed audit with zero corrective actions almost always means the audit wasn't done hard enough.
Here's a working framework by area:
| Audit Area | Key Questions | Reference |
|---|---|---|
| Hazard identification | Have new electrical hazards appeared since the last audit? Does the hazard assessment reflect current voltages and configurations? | NFPA 70E 130.5 [3] |
| Arc flash analysis | Is the arc flash hazard analysis current (updated within 5 years or after system changes)? | NFPA 70E 130.5(G) [3] |
| PPE inventory | Is arc-rated PPE available, in good condition, and matched to the incident energy levels in the analysis? | 29 CFR 1910.335 [8] |
| Training records | Is every employee trained to the level their role requires (qualified vs. unqualified)? Are records current? | 29 CFR 1910.269(a)(2) [1] |
| Written procedures | Do procedures exist for all tasks in the hazard analysis? Are they specific enough to follow in the field? | NFPA 70E 110.5(H) [3] |
| Incident history | Have all electrical incidents and near-misses been reviewed and turned into program updates? | 29 CFR 1904 [4] |
| Contractor management | Are contractor electrical safety requirements documented and enforced? | 1910.269(a)(3) [1] |
Rate each finding (compliant, needs improvement, non-compliant), assign an owner, and set a correction deadline.
Keeping the written program current is exactly the kind of task where a tool like SafetyFolio helps. You can update and reprint specific sections after an audit finding instead of rebuilding the whole document.
What are the OSHA penalties for skipping electrical safety program audits?
There's no standalone fine for missing an audit. The penalty comes from the underlying violation the audit would have caught, and from failing to fix a hazard you knew about. A missing audit makes every related violation worse.
Under 29 CFR 1910.269, a serious violation currently tops out at $16,550 per violation. [9] A willful or repeated violation reaches $165,514 per violation as of 2024. [9] OSHA adjusts both figures every year for inflation under the Federal Civil Penalties Inflation Adjustment Act.
The expensive part is the willful classification. If an inspection finds employees doing energized work without adequate PPE, and you can't produce audit records showing you ever checked, the inspector has strong grounds to call it willful. Willful means you knew or should have known and didn't act. An undocumented program with no audit history is powerful evidence of a "should have known" posture.
The stakes are real. BLS recorded 126 electrical fatalities in private industry in 2022. [10] Electrocution stays in the top four causes of construction deaths (OSHA's "Fatal Four"). Those numbers are why inspectors take electrical program gaps seriously.
Small employers with under 25 employees can earn penalty reductions up to 60%, and documented good-faith efforts (audits, corrective actions) cut penalties further. [9] Your audit records aren't only about compliance. They're your best negotiating tool if an inspection ever lands on your desk.
How do state OSHA plans handle electrical safety audit requirements?
Twenty-nine states and territories run their own OSHA-approved plans. [11] Each must be at least as effective as the federal standard, and each can go further. The annual and triennial cadence is nearly universal because most states have adopted NFPA 70E by reference, but the documentation demands vary.
California (Cal/OSHA) has its own electrical safety standard under Title 8 that references both the federal framework and NFPA 70E. California's High Voltage Safety Orders add inspection and documentation requirements for equipment above 600 volts. [11] Michigan, Washington, and Oregon follow the same pattern: adopt the federal CFR framework as a floor, then bolt on state-specific pieces.
In a state-plan state, look up your state's specific electrical safety standard before you assume the federal CFR is your whole reference. The state OSHA website is the place to start.
See workplace safety training for how state plan training requirements sometimes run past federal minimums, including electrical safety training.
How should you document electrical safety program audits for an OSHA inspection?
If the audit isn't documented so an inspector can follow it, it might as well not have happened. That's where most small employers fall short. The audit occurs; the paper trail doesn't.
At a minimum, each audit record needs: the date, the auditor's name and qualifications, the scope (which employees, tasks, locations), the specific findings, and the corrective actions with target dates. For the annual work-practices audit, the 1910.269 language points to individual-level documentation: you have to show each covered employee was observed. [1]
Store records so they form a clear history. Three years from now, an inspector should pull a folder and see three consecutive annual work-practices audits and one triennial program audit, each with findings and corrective actions. A binder works. A shared drive folder works. A verbal "we always do it" with no paperwork does not.
One format that holds up: a two-part package. Part one is a checklist, one row per standard requirement, one column per audit year, so trends show at a glance. Part two is a corrective action log with columns for finding, responsible person, target date, and close-out date. That structure also makes it easy to show an inspector you found problems and fixed them, which supports a good-faith argument.
For a starting point, SafetyFolio's program generator produces electrical safety program templates with audit tracking sections built in, so you're not designing the documentation structure yourself.
What's the relationship between arc flash analysis and electrical safety program audits?
Now you have three clocks. NFPA 70E requires the arc flash hazard analysis to be reviewed and updated after any major modification to the electrical system, and at intervals not to exceed five years. [3] That's separate from the three-year program audit and the annual work-practices audit.
The clean way to manage it: make the arc flash review a required input to the triennial audit. One checklist item reads, "Is the arc flash analysis current and does it reflect the current system configuration?" If the analysis is more than five years old, that's an automatic finding. If major electrical work happened since the last study, that's another.
Arc flash analysis usually needs an engineer or qualified specialist, because it runs fault current calculations, protective device coordination, and incident energy calculations at every relevant work point. A professional study for a small commercial facility runs roughly $3,000 to $15,000 depending on system complexity, based on typical contractor pricing. That's a real cost. The incident energy labels it produces are what let workers pick the right arc-rated PPE. Without current labels, PPE selection is a guess.
The analysis feeds the written program directly: required PPE per task, the restricted and arc flash boundaries, the energized work permit thresholds. If the study is stale, those program elements are wrong even when the document looks current.
What's a realistic audit schedule for a small business with limited resources?
Most audit guidance is written for utilities and large plants. A small manufacturer with two electricians and 200 amps of service faces different constraints than a transmission company, so here's a schedule scaled to a small employer.
Q1 (January): Review the written program against NFPA 70E 2024. Confirm the arc flash analysis is current. Update PPE requirements if the analysis changed. This is your desk audit of the document. Budget two to four hours.
Q2 (April): Observe work practices for every qualified electrical worker. Schedule it during real electrical maintenance so you watch actual tasks, not staged ones. Document the observation, findings, and corrective actions. Budget one to three hours per worker.
Q3 (July): Review any electrical incidents or near-misses from the first half of the year. Confirm the Q2 corrective actions are closed. Check PPE condition and certification dates.
Q4 (October): Refresh training for anyone with expired electrical safety training. Confirm new equipment installed during the year is covered by existing procedures. Update the audit log.
Triennial (every third year, aligned to NFPA 70E edition cycles when possible): Run a full top-to-bottom program audit. Check NFPA 70E edition changes, re-verify the arc flash analysis, and review three years of corrective action history.
This hits both the 1910.269 annual and triennial requirements and the NFPA 70E framework without a full-time safety manager. Consistency and documentation are the whole game. A small business that audits honestly and fixes what it finds sits in a far stronger position than one holding a perfect-looking program it never reviews.
Frequently asked questions
Does OSHA require electrical safety program audits for every employer, more than utilities?
The explicit three-year and annual audit requirement in 29 CFR 1910.269 applies to electric power generation, transmission, and distribution employers. General industry employers under Subpart S are expected to follow NFPA 70E 2024, which uses the same intervals. OSHA inspectors regularly cite NFPA 70E as the recognized standard for general industry electrical programs, so the practical answer is yes: any employer with an electrical safety program should audit it on the same schedule.
How often do you have to audit employee electrical work practices specifically?
At least once per calendar year, per 29 CFR 1910.269(a)(2)(iii) and NFPA 70E 2024 Section 110.5(M)(3). The audit must cover each individual employee who does work under the electrical safety program. You can't audit a sample and skip the rest. A qualified person who is not the employee being observed must conduct the audit and document the findings.
Can we combine the electrical safety audit with our lockout/tagout annual inspection?
Yes, and it's efficient. A single field observation session can generate documentation for both the 29 CFR 1910.147(c)(6)(i) LOTO annual inspection and the 1910.269 work-practices audit. Your audit form just needs to reference both standards and capture what each requires. For LOTO, that means naming the employee, date, procedure reviewed, and inspector. Keep both record sets.
What qualifies someone to conduct an electrical safety program audit?
OSHA requires a "qualified person" as defined in 29 CFR 1910.269(x): someone with training and demonstrated skills in the construction, operation, and hazards of electrical equipment. That's more than a licensed electrician. The person must understand the specific hazards in your work environment. An internal safety manager with documented electrical training, or an outside NFPA 70E-trained consultant, can both qualify depending on their background.
How long do we need to keep electrical safety audit records?
OSHA doesn't set a retention period specifically for electrical safety program audit records. A defensible minimum is one full audit cycle beyond the current one, meaning at least six years (two triennial cycles). Longer is generally better. During an inspection, showing a consistent audit history over several years is far stronger than having only the most recent audit on file.
Does an arc flash analysis count as an electrical safety program audit?
No. An arc flash hazard analysis required by NFPA 70E 130.5 is a specialized engineering assessment of incident energy levels and PPE requirements. It's an input to your program, not a review of the program itself. NFPA 70E requires arc flash analyses to be reviewed at least every five years or after system changes. That's separate from the program audit (every three years) and work-practices audit (annually).
What OSHA penalties apply if we skip electrical safety program audits?
OSHA doesn't fine you just for missing an audit, but a missing audit makes every related violation worse. If an inspection finds electrical hazards and no audit history, OSHA can classify violations as willful, which carries maximum penalties of $165,514 per violation as of 2024. Documented audits showing you found and corrected problems support a good-faith reduction. Employers with under 25 employees can also receive reductions up to 60% under OSHA's size adjustment policy.
What should we do if our electrical safety audit finds violations?
Document the finding, assign a responsible person, set a correction deadline, and verify the fix is completed. Then update the written program if the finding reveals a gap in the procedures themselves. If the finding involves immediate danger, correct it before work resumes. Keep corrective action records attached to the original audit documentation. An audit that finds and fixes problems is what OSHA wants to see; finding problems and ignoring them is what turns a violation willful.
Does NFPA 70E 2024 change the audit frequency compared to the 2021 edition?
No. NFPA 70E Section 110.5(M)(3) has required annual work-practices audits and triennial program audits since at least the 2018 edition, and the 2024 edition kept that structure. The 2024 updates focused on other areas including arc-in-a-box hazards and PPE labeling. If your program referenced the 2021 edition, the audit cadence language is essentially unchanged, but compare the other sections against the 2024 updates.
Do contractors performing electrical work on our site need to be included in our electrical safety audit?
Yes. 29 CFR 1910.269(a)(3) requires host employers to coordinate electrical safety programs with contractors and to make sure contractor employees are instructed in the hazards of the work environment. Your annual work-practices audit should include contractor employees doing covered electrical work on your site, or you should require contractors to provide audit documentation showing their own employees were assessed. Assuming a contractor handled it isn't enough.
How does a state plan state like California affect electrical safety audit requirements?
State plan states must meet or exceed federal OSHA standards. California's Cal/OSHA follows the same general audit framework but adds requirements under its High Voltage Safety Orders for work above 600 volts. Employers in any of the 29 state-plan states should verify their state's specific electrical safety standard. The three-year and annual cadence is nearly universal, but additional documentation or inspection requirements may apply in your state.
Is there an OSHA requirement to audit electrical safety programs in construction?
29 CFR 1926 Subpart K governs electrical safety in construction and doesn't set a specific audit interval the way 1910.269 does. But the General Duty Clause and 29 CFR 1926.20(b)(1) require programs to be supervised and regularly reviewed. NFPA 70E applies to construction work on electrical systems. Construction employers should use the same three-year and annual audit framework as the NFPA 70E standard and document their reviews accordingly.
What's the difference between an electrical safety inspection and an electrical safety program audit?
An electrical safety inspection examines physical equipment and installations for hazardous conditions: damaged wiring, overloaded circuits, missing covers, and similar defects. A program audit reviews whether the written program, procedures, training, and work practices meet regulatory and standard requirements. You need both. Equipment inspections happen continuously and at fixed intervals. Program audits happen annually (work practices) and every three years (written program). They're complementary, not interchangeable.
Sources
- OSHA, 29 CFR 1910.269 Electric power generation, transmission, and distribution: Requires electrical safety program audits at least every three years and work-practices audits for each employee at least annually; defines qualified person
- OSHA, Electrical Standards (Subpart S) overview: OSHA recognizes NFPA 70E as the authoritative consensus standard for electrical safety in general industry workplaces
- NFPA 70E Standard for Electrical Safety in the Workplace, 2024 edition: Section 110.5(M)(3) requires triennial program audits and annual field audits of employee compliance; Section 130.5 requires arc flash risk assessment reviewed at least every 5 years or after system changes
- OSHA, 29 CFR 1904 Recording and Reporting Occupational Injuries and Illnesses: Incident investigation and recordkeeping requirements that create implicit obligation to review safety programs after electrical incidents
- OSHA, Standard Interpretations (letters of interpretation) library: OSHA interpretation guidance holds that written safety programs must reflect current workplace conditions
- OSHA, 29 CFR 1910.147 The control of hazardous energy (lockout/tagout): 1910.147(c)(6)(i) requires annual periodic inspection of each energy control procedure, with certification naming the employee, date, procedure reviewed, and inspector
- OSHA, 29 CFR 1926.20 General safety and health provisions (construction): Requires construction employers to supervise and regularly review safety programs under the general safety and health provisions
- OSHA, 29 CFR 1910.335 Safeguards for personnel protection: Requires appropriate PPE including arc-rated equipment for electrical work; PPE inventory and condition are audit items
- OSHA, Penalties: Maximum serious violation penalty is $16,550 per violation; willful/repeated maximum is $165,514 per violation as of 2024 federal inflation adjustment
- Bureau of Labor Statistics, Census of Fatal Occupational Injuries: Electrical injuries caused 126 workplace fatalities in private industry in 2022
- OSHA, State Plans: Twenty-nine states and territories operate OSHA-approved state plans that must be at least as effective as federal standards; California has additional High Voltage Safety Orders