OSHA hazard communication standard 29 CFR 1910.1200: complete guide

Last updated 2026-07-09

What is the OSHA Hazard Communication Standard (29 CFR 1910.1200)?

The Hazard Communication Standard, codified at 29 CFR 1910.1200, is the federal rule that gives workers the right to know about the hazardous chemicals they handle. OSHA calls it HazCom, or the Right-to-Know rule. The idea is plain: if your employees work with or near chemicals that could hurt them, they need real information before something goes wrong.

OSHA first issued the standard in 1983, and it covered only manufacturing. The agency expanded it to all industries in 1987. The biggest change came in 2012, when OSHA aligned HazCom with the United Nations Globally Harmonized System of Classification and Labelling of Chemicals (GHS). That update fixed a single format for Safety Data Sheets and brought in the pictogram labels most workplaces use now ^[9].

The standard lives in the General Industry section of the CFR (Title 29, Part 1910), but parallel versions exist for construction (29 CFR 1926.59), shipyards (29 CFR 1915.99), and marine terminals (29 CFR 1917.28). The obligations are the same across all of them. Run a construction company and you're covered by 1926.59, not 1910.1200, though what you actually have to do is nearly identical.

HazCom is one of OSHA's most-cited standards year after year. In fiscal year 2023, it ranked second on OSHA's top-10 list with 2,763 violations ^[2]. That's not because the rule is obscure. The paperwork and training are easy to let slide, and inspectors know exactly where to look.

For a wider view of how OSHA's rules fit together, the hazard communication overview on this site is a good place to start.

Who does 29 CFR 1910.1200 apply to?

The standard covers any employer whose workers may be exposed to hazardous chemicals under normal operating conditions or in a foreseeable emergency ^[1]. That wording is wide on purpose. OSHA did not limit HazCom to chemical plants and factories.

A hair salon that uses permanent wave solution is covered. A restaurant that stores industrial degreaser under the sink is covered. An office with a janitorial closet full of bleach-based cleaners is covered for those specific chemicals.

Two groups of employers get reduced obligations. Non-manufacturing employers whose workers only handle chemicals in sealed containers (think a retail store receiving boxed products) have limited SDS and label duties ^[1]. Laboratories under OSHA's laboratory standard (29 CFR 1910.1450) follow that rule instead, though they still owe workers basic hazard information ^[10].

Small businesses get no size exemption. A two-person auto body shop carries the same HazCom duties as a 500-person plant. The volume of chemicals on-site shapes what your written program looks like in practice. It doesn't change whether you need one.

Here's the quick test. Walk your facility and ask whether any product carries a warning label, came with an SDS from the supplier, or shows a signal word like "Danger" or "Warning." If the answer is yes, you're covered for that product.

What are the four main requirements of the HazCom standard?

The standard has four connected parts. Miss any one and you're out of compliance, even if the other three are perfect.

Written Hazard Communication Program. Every covered employer needs a written program describing how the company meets each element of HazCom ^[1]. It has to be site-specific. A generic document pulled off the internet won't satisfy an inspector if it doesn't match what happens in your workplace. The program has to name who maintains SDSs, how new chemicals get added, how labels are handled, and how training runs.

Chemical Inventory (Hazardous Chemicals List). Your written program has to be backed by a list of every hazardous chemical present in the workplace ^[1]. This is usually a simple spreadsheet: chemical name, product identifier, where it's used, SDS location. The list is the spine of the whole system. If a chemical isn't on the list, you probably don't have an SDS for it, and your people probably weren't trained on it.

Safety Data Sheets (SDS). Employers must keep a current SDS for every chemical on the list, and those SDSs have to be accessible to workers at all times during their shift ^[1]. Under the GHS format, every SDS has exactly 16 sections, running from physical properties to first-aid measures to disposal. Store them in binders, on a computer, or through a cloud service, as long as workers can actually reach them without a hassle.

Labels and Other Forms of Warning. Every container of a hazardous chemical has to be labeled. Primary containers (the ones the supplier ships in) need GHS-compliant labels when they arrive. Secondary containers (the ones you fill yourself from a bigger supply) need at least the product identifier and the appropriate hazard warnings ^[1]. There's a narrow exception for a portable container an employee fills for their own immediate use and keeps in hand.

These four parts hold each other up. A thorough inventory makes it easy to confirm you have every SDS. Current SDSs give you the hazard information to write accurate training and check labels. Training teaches workers to use the SDSs and read the labels. The written program ties it together and shows you thought it through.

What must a GHS-compliant hazard communication label include?

Under the 2012 revision to 29 CFR 1910.1200, labels on shipped containers must carry six specific elements ^[9].

1. Product identifier. The chemical name or code that matches the SDS and the inventory. 2. Signal word. Either "Danger" (more severe hazards) or "Warning" (less severe). Only one signal word per label. 3. Hazard statement(s). Standardized phrases describing the hazard, like "Causes serious eye damage" or "Flammable liquid and vapor." 4. Pictogram(s). GHS defined nine standardized pictograms (skull and crossbones, flame, health hazard, and so on) printed in red-bordered diamonds. OSHA adopted eight of the nine for mandatory use ^[9]. 5. Precautionary statement(s). Instructions to reduce or prevent exposure, like "Wear protective gloves" or "Keep away from heat." 6. Name, address, and phone number of the manufacturer or responsible party.

For secondary containers you fill yourself, the minimum is the product identifier and the hazard warnings (words, pictures, or both). You don't have to copy the full manufacturer label onto a small spray bottle you filled from a drum. The people using that bottle just need enough to understand what's in it and what the risk is.

Here's a spot that trips people up. Consumer products used at work the same way, and as often, as a normal consumer uses them don't need full GHS labeling or SDSs. But if employees use those products routinely and in bigger quantities than a household would, HazCom applies. OSHA's letters of interpretation have drawn that boundary several times ^[3].

What does a Safety Data Sheet (SDS) need to include under HazCom?

The 16-section SDS format is the core of the GHS update. Every SDS must follow this structure, in this order ^[1].

Section	Content
1	Identification (product name, supplier contact, recommended use)
2	Hazard identification (classification, signal word, pictograms)
3	Composition / information on ingredients
4	First-aid measures
5	Fire-fighting measures
6	Accidental release measures
7	Handling and storage
8	Exposure controls / personal protection
9	Physical and chemical properties
10	Stability and reactivity
11	Toxicological information
12	Ecological information
13	Disposal considerations
14	Transport information
15	Regulatory information
16	Other information (including preparation date)

Sections 12 through 15 fall outside OSHA's enforcement authority (other agencies govern them), but chemical manufacturers still have to include them ^[1].

Your job as the employer is to get the SDS, keep it current, and make it accessible. You are not on the hook for the accuracy of an SDS your supplier hands you. If a supplier won't provide an SDS, or the one you get is missing required sections, OSHA has a path: contact OSHA directly, and write SDS delivery into your purchase terms so it doesn't happen again.

Access matters more than format. Night-shift workers need the same reach as the day crew. An electronic-only system is fine, but you need a backup for when it goes down, and workers have to actually know how to use it. A binder locked in a cabinet that takes a manager's key doesn't meet the standard.

For chemicals like hydrochloric acid that show up in small shops and labs, the hcl safety data sheet breakdown walks through a real section-by-section example.

What training does OSHA require under the HazCom standard?

Training under 29 CFR 1910.1200(h) is where employers fall short most often. The standard says workers must be trained at the time of initial assignment and whenever a new chemical hazard enters their work area ^[1]. Handing someone an SDS binder and a signature line is not training.

The regulation spells out what workers must know afterward:

• The requirements of the HazCom standard itself.
• Any operations in their work area where hazardous chemicals are present.
• Where the written program, the inventory, and the SDSs live, and how to get them.
• How to detect a release of a hazardous chemical (visual signs, odor, monitoring).
• The physical and health hazards of the chemicals in their work area.
• How to protect themselves (engineering controls, work practices, PPE).
• How to read a label and an SDS.

There's no minimum hour count in the regulation. OSHA judges training on whether it worked, not on whether it ran 30 minutes or three hours. A 10-minute slide deck for people who handle multiple solvents daily will not survive inspector scrutiny.

For workers who speak a language other than English, training has to be in a language they understand. OSHA has cited employers again and again for English-only training given to a workforce that mostly speaks Spanish or another language. This isn't optional, and it isn't expensive to fix. OSHA publishes HazCom materials in Spanish on its website ^[4].

Document everything. Keep a log with the date, the names of attendees, the topics covered, and who ran it. When OSHA asks when you trained your people on HazCom, "last spring" won't protect you. A signed roster with a date will.

For how training duties stack across standards, the osha training guide covers the overlap.

What does a written hazard communication program need to say?

Your written HazCom program proves to OSHA, your employees, and yourself that you run an actual system instead of relying on good intentions. The standard sets the minimum content at 29 CFR 1910.1200(e) ^[1].

At a minimum, the written program has to describe:

• How labels and other warnings get maintained in the workplace.
• How SDSs get obtained, maintained, and made accessible.
• How workers learn about hazards from non-routine tasks (maintenance, cleaning jobs that need unusual chemicals).
• How contractors and other employers in your facility learn about the chemical hazards they may hit.
• The job title of who owns each element.

The contractor piece gets overlooked constantly. Hire a cleaning crew, a painting contractor, or any outside vendor working in your building, and you owe them information about the hazardous chemicals in the areas where they'll work. They owe you the same about anything they bring in. This exchange has to happen before work starts ^[1].

The written program must be available to employees, their designated representatives, and OSHA on request. It doesn't have to be fancy. It does have to describe what actually happens in your workplace, not a template someone else wrote.

If building the program from scratch feels like the hardest part, a tool like SafetyFolio's safety program generator can produce a site-specific document in a fraction of the time. The generator asks the right questions about your workplace and chemicals so the output matches your operations.

One honest note. Even a well-generated program needs your eyes before it's done. Check it against your real inventory and your real training schedule. No tool knows your facility the way you do.

What are the GHS hazard classifications under HazCom?

GHS sorts chemical hazards into two broad buckets: physical hazards and health hazards. OSHA added a third, hazards not otherwise classified (HNOC), for real risks that don't fit the standard categories ^[1].

Physical hazards include flammables, explosives, oxidizers, gases under pressure, self-reactive substances, pyrophorics, and several more. Each category has its own criteria.

Health hazards include acute toxicity, skin corrosion and irritation, serious eye damage and irritation, respiratory and skin sensitization, germ cell mutagenicity, carcinogenicity, reproductive toxicity, specific target organ toxicity (single and repeated exposure), and aspiration hazard.

Each hazard class breaks down further into categories, with Category 1 being the most severe for most classes. The category decides which signal word and hazard statements land on the label and SDS.

Manufacturers classify their products and write the SDSs. Employers don't have to re-classify anything. You do have to make sure the chemicals in your workplace have been classified and that your workers understand what those classifications mean for their safety.

The system matters because it tells you what controls you need. A Category 1 flammable liquid (flash point below 73.4 degrees F) demands very different storage, ventilation, and PPE than a Category 4 flammable liquid (flash point between 140 and 199.4 degrees F). Reading SDS section 8 alongside the classification in section 2 is how you figure out what actually has to change in your shop.

How does OSHA enforce the HazCom standard and what are the penalties?

OSHA enforces HazCom through programmed inspections, referrals, and inspections set off by complaints or incidents. Inspectors typically ask to see your written program, your inventory list, and a sample of SDSs during any general industry inspection.

The violations inspectors cite most: no written program, a written program that doesn't match real practice, missing SDSs for chemicals on hand, unlabeled or badly labeled secondary containers, and employees who can't show they were trained on the chemicals they use.

Penalty caps last changed effective January 2024. Other-than-serious violations run up to $16,131 each. Serious violations also cap at $16,131. Willful and repeat violations can hit $161,323 each ^[5]. OSHA raises these caps every year for inflation under the Federal Civil Penalties Inflation Adjustment Act.

Most HazCom citations land as serious, not willful, and penalty amounts often drop through the informal conference process, especially for small employers who fix deficiencies fast. Getting to zero citations up front still beats negotiating after the fact.

State Plan states run their own OSHA programs and have to keep standards at least as effective as federal OSHA ^[6]. Some, like California (Cal/OSHA) and Washington (L&I), have HazCom provisions that go past the federal floor. If your state runs a State Plan, check the state rule, more than federal 1910.1200.

For how inspections work and what triggers them, the osha overview is worth reading before an inspector shows up.

How do you build a chemical inventory list for HazCom compliance?

A chemical inventory is just a list, but everything else rests on it. Here's how to build one that holds up.

Start by walking every area of your facility. Look in storage rooms, under sinks, in maintenance closets, in equipment that uses hydraulic fluid or coolant, in the break room (some cleaning products count), and anywhere chemicals get used. Bring someone from each department. The floor supervisor almost always knows about three products the office manager never saw.

For each chemical, record the product name (as printed on the container), the chemical name or CAS number if you have it, where it's stored or used, and where the SDS is filed. That's enough for a basic inventory.

Then pull the SDS for every product. If you don't have one, check the manufacturer's website. Most post SDSs in a searchable public library. If you strike out online, call the supplier. Under HazCom, they have to provide one.

With the SDSs in hand, check each against the product label. The product identifier on the SDS should match the label. Find out why before you train anyone on a chemical where they don't.

Update the inventory any time you add a chemical, change suppliers for one you already use (the new SDS can differ a lot), or stop using one. Drop discontinued chemicals from the active list, but keep the old SDS for 30 years if employees were exposed, under OSHA's access to employee exposure records rule at 29 CFR 1910.1020 ^[7].

A simple spreadsheet works fine. Inventory software exists and some larger employers like it, but a well-kept Excel file beats a neglected database every time.

What are the most common HazCom compliance mistakes small businesses make?

Studying the common failures keeps you from repeating them.

Treating the written program as a one-time task. Employers write a program at setup, drop it in a drawer, and never touch it again. Meanwhile they add a dozen chemicals, change suppliers, hire workers who speak different languages, and move to a new building. The program stops describing reality. Inspectors notice.

Missing SDSs for common products. Motor oil, spray lubricants, cleaning solvents, even some adhesives are hazardous chemicals. People skip them because they feel ordinary. A quick walk through any auto shop or maintenance area turns up a few products with no SDS on file.

Unlabeled secondary containers. Someone fills a spray bottle with diluted degreaser and leaves it on a shelf. No label. A month later nobody knows what's in it. This happens constantly, and it's one of the easiest violations for an inspector to spot.

Training that doesn't transfer knowledge. A sign-off sheet proves people sat through a presentation. It doesn't prove they can read an SDS or know what to do after an exposure. If an inspector asks your workers what a signal word means and they can't answer, the training was inadequate no matter what the paperwork says.

Forgetting contractor communication. When outside crews come to paint, clean, or do maintenance, the hazard communication duty runs both ways. It's real, and it's missed often.

Not updating SDSs when suppliers change. A new formulation from a different supplier can carry different hazard classifications and exposure limits. Assume the old SDS still applies and you're wrong.

For equipment-heavy shops where lockout tagout is also in play, chemical hazards during maintenance are a real gap. Workers need to know what they might hit when they open up machinery, and that information has to come from somewhere.

How does HazCom interact with other OSHA standards?

HazCom doesn't stand alone. Several OSHA standards reference or build on it, and a gap in one often exposes a gap in the others.

The Respiratory Protection Standard (29 CFR 1910.134) makes employers use SDS information to judge whether airborne exposures need respirators. The exposure limits in SDS section 8 (OSHA's PELs, ACGIH's TLVs, or a manufacturer's AELs) feed straight into that call ^[8].

OSHA's PPE standards (29 CFR 1910.132 through 1910.138) require a hazard assessment before you pick protective equipment. For chemical hazards, that assessment leans on the SDS. No accurate SDS, no accurate PPE assessment. The two are linked in practice.

Process Safety Management (29 CFR 1910.119) covers highly hazardous chemicals in threshold quantities and demands far deeper hazard analysis, but HazCom still applies to those chemicals as a baseline ^[12].

For workplaces with real chemical exposures, OSHA's substance-specific standards (the Z tables and rules for benzene, asbestos, lead, and others) can pile on requirements beyond HazCom, including air monitoring and medical surveillance. HazCom is the floor, not the ceiling.

Seeing how these standards connect is part of what OSHA 30 training teaches supervisors and safety staff. The osha 30 guide covers what the course includes and who should take it.

Frequently asked questions

Does the HazCom standard apply to small businesses with fewer than 10 employees?

Yes. OSHA's Hazard Communication Standard has no small-business exemption based on headcount. A two-person shop using any hazardous chemical carries the same core duties as a large manufacturer: a written program, an SDS for each hazardous chemical, labeled containers, and trained workers. The written program can be simpler when you use only a handful of chemicals, but the obligation stands regardless of size.

How often do Safety Data Sheets need to be updated?

OSHA's HazCom standard sets no mandatory SDS review interval for employers. Your job is to keep the most current SDS from your supplier. When a supplier reformulates a product or changes classification, they should send a revised SDS. In practice, many safety professionals check SDS currency once a year and whenever they change suppliers. Keep old SDSs for 30 years if employees were exposed to the chemical, under 29 CFR 1910.1020.

Can we store Safety Data Sheets electronically instead of in a paper binder?

Yes. OSHA allows electronic SDS storage as long as workers can reach the information immediately during their shift with no barriers. Backup is the key: if the system goes down, workers still need access. An electronic system that needs a manager login, or internet that's often unavailable, will draw a citation. OSHA has confirmed electronic access is acceptable in several letters of interpretation, provided nothing blocks employee access ^[11].

What is the difference between an MSDS and an SDS?

MSDS (Material Safety Data Sheet) was the old format used before OSHA aligned with GHS in 2012. SDS (Safety Data Sheet) is the current GHS-aligned format with a mandatory 16-section structure. The deadline to switch passed in June 2015. If you still have old MSDS documents for chemicals you actively use, replace them with current 16-section SDSs from your supplier. Old MSDSs for discontinued chemicals can be kept as records.

What are the nine GHS pictograms and what do they mean?

The nine GHS pictograms are: flame (flammable), flame over circle (oxidizer), exploding bomb (explosive or reactive), skull and crossbones (acute toxicity), corrosion (skin or eye corrosion), gas cylinder (pressurized gas), health hazard (carcinogen, reproductive hazard, or other serious health effects), exclamation mark (irritant or less severe hazard), and environment (aquatic toxicity). OSHA adopted eight of the nine as mandatory under 29 CFR 1910.1200; the environment pictogram is not required by OSHA but may appear on labels.

Are household cleaning products that employees use at work covered by HazCom?

It depends on use. Consumer products used at work the same way and as often as a typical consumer uses them are exempt from HazCom. But if employees use them routinely, in bigger quantities, or more frequently than a household would, the exemption drops away and HazCom kicks in. OSHA letters of interpretation have drawn this line. When in doubt, get the SDS and train your people.

What do I have to tell contractors who work in my facility about chemical hazards?

Under 29 CFR 1910.1200(e)(2), you must tell outside contractors about hazardous chemicals they may hit in your facility and any precautions they need. You also have to give them access to your SDSs for those chemicals. In return, contractors must tell you about hazardous chemicals they bring in. This exchange should happen before work begins. Missing it is a common HazCom citation.

How long do I need to keep HazCom training records?

The HazCom standard sets no retention period for training records. OSHA's general recordkeeping practices and related standards support keeping them for as long as the employee works there, plus at least three years. For chemical exposure records specifically, 29 CFR 1910.1020 requires retaining employee exposure records for 30 years. Long-term training records protect you in any future inspection or lawsuit.

What happens if I can't get an SDS from my supplier?

First, request the SDS in writing and keep a record of the request. If the supplier still won't provide one, contact OSHA for help; OSHA can compel the manufacturer or importer to produce it. As a practical step, search the manufacturer's website or a public SDS database, since many post them free. If you still come up empty, switch to a supplier who meets their HazCom obligations.

Does HazCom training need to be repeated every year?

The standard requires training at initial assignment and when a new chemical hazard is introduced. There's no mandatory annual retraining in 29 CFR 1910.1200. Still, many safety professionals run an annual refresher because people forget, workplaces change, and it shows good-faith effort. If you change products significantly, add new hazard categories, or have a chemical incident, refresh the training regardless of the calendar.

Are flammable liquids like gasoline and diesel covered by HazCom?

Yes. Flammable and combustible liquids, including gasoline, diesel, and similar fuels, are hazardous chemicals under HazCom. They need SDSs, proper labeling, and employee training. Gasoline in a vehicle's fuel tank during transport is excluded, but fuel stored in containers, used for equipment, or dispensed from tanks falls under HazCom. Some states add requirements for flammable liquid storage beyond federal HazCom.

How does 29 CFR 1910.1200 differ from state OSHA HazCom rules?

Federal OSHA sets the floor. The roughly 25 states and territories with OSHA-approved State Plans must keep hazard communication standards at least as effective as 29 CFR 1910.1200, and they can go further. California's HazCom regulation, for example, adds provisions. If you operate in a State Plan state, check your state's rule. For most states the practical difference is small, but enforcement priorities and penalty structures can vary.

What is the penalty for a willful HazCom violation?

As of January 2024, OSHA can assess up to $161,323 per willful or repeat violation. A willful violation is one where the employer knew the requirement and intentionally disregarded it or showed plain indifference to worker safety. In practice, most HazCom violations are cited as serious, not willful, with penalties up to $16,131 each. Penalty caps adjust every year for inflation under federal law.

Do I need a separate HazCom program for each work site?

Yes, if your operations span multiple physical locations. The standard requires a written program that reflects the chemicals and work practices at a specific site. A single corporate document can serve as the framework, but it has to be adapted to each location with a site-specific chemical inventory, SDS location, training records, and named responsible person. An inspector at Site B won't accept a program that only describes Site A.

Sources

1. OSHA, 29 CFR 1910.1200 Hazard Communication Standard (full regulatory text): Full requirements of the HazCom standard including written program, SDS, labeling, and training obligations
2. OSHA, Top 10 Most Frequently Cited Standards FY2023: Hazard Communication was the second most-cited OSHA standard in FY2023 with 2,763 violations
3. OSHA, Letters of Interpretation: Hazard Communication Standard: OSHA letters of interpretation clarifying consumer product exemption and other HazCom boundary questions
4. OSHA, Hazard Communication (Spanish language resources): OSHA provides HazCom training materials in Spanish for employers with non-English-speaking workforces
5. OSHA, Penalties (current penalty amounts): As of January 2024, OSHA serious and other-than-serious violations carry up to $16,131 per violation; willful and repeat up to $161,323
6. OSHA, State Plans overview: State Plan states must maintain standards at least as effective as federal OSHA; some exceed federal HazCom requirements
7. OSHA, 29 CFR 1910.1020 Access to Employee Exposure and Medical Records: Employee exposure records including SDS for chemicals employees were exposed to must be retained 30 years
8. OSHA, 29 CFR 1910.134 Respiratory Protection Standard: Respiratory protection standard requires use of SDS exposure limit data (PELs, TLVs) to evaluate need for respirators
9. OSHA, Hazard Communication: Final Rule (2012 GHS alignment), 77 Fed. Reg. 17574: 2012 revision aligned HazCom with UN GHS, standardized the 16-section SDS format and GHS pictogram label system
10. OSHA, 29 CFR 1910.1450 Occupational Exposure to Hazardous Chemicals in Laboratories: Laboratories covered by the laboratory standard follow 29 CFR 1910.1450 instead of the full HazCom standard
11. OSHA, Letters of Interpretation: Hazard Communication Standard: OSHA clarification that electronic SDS storage is acceptable provided employees have immediate, barrier-free access
12. OSHA, 29 CFR 1910.119 Process Safety Management of Highly Hazardous Chemicals: PSM standard applies to highly hazardous chemicals in threshold quantities; HazCom applies as baseline regardless