Which is a required aspect of safety inspection programs

Last updated 2026-07-10

What does OSHA actually require in a safety inspection program?

OSHA scatters inspection requirements across many standards on purpose. There is no master inspection regulation. Instead the agency buries the rules inside specific standards: electrical safety, lockout/tagout, fire extinguishers, powered industrial trucks, scaffolding, and more. What ties them together is a short list of common elements that show up in almost every standard and in OSHA's own Safety and Health Program Management Guidelines ^[1].

The four required elements, across nearly every applicable standard, are:

1. Written inspection procedures that describe what gets inspected, how often, and by whom. 2. Qualified or competent personnel who know the specific hazard they are looking for. 3. Documented hazard correction, meaning a record that a found problem got fixed, more than noted. 4. Recordkeeping good enough to show frequency and trend.

OSHA's 1989 guidelines state that an effective program includes "regular site safety and health inspections so that new or previously missed hazards and failures in hazard controls are identified and eliminated or controlled." ^[1] That sentence is not a binding CFR rule, but OSHA has cited it in enforcement actions and letters of interpretation as the agency's baseline expectation for what a program must do.

The general duty clause, Section 5(a)(1) of the OSH Act, fills the gap when no specific standard applies. Run a workplace with recognized hazards and no inspection program, and OSHA can cite you under the general duty clause even though no CFR section says the words "you must inspect." ^[2]

What specific OSHA standards require inspections and how often?

Frequency is where small employers get tripped up. Different standards set different intervals, and "whenever we get around to it" is not an answer OSHA accepts. Here is a table of common standards with their inspection frequency requirements:

OSHA Standard	What Gets Inspected	Required Frequency
29 CFR 1910.157(e)(1)	Portable fire extinguishers	Monthly visual check; annual maintenance
29 CFR 1910.178(q)(1)	Powered industrial trucks (forklifts)	Before each shift
29 CFR 1910.147	Lockout/tagout procedures (periodic)	At least annually per authorized employee
29 CFR 1910.132(d)	PPE hazard assessment	Before initial assignment; when conditions change
29 CFR 1926.451	Scaffolding	Before each work shift and after any event that could affect structural integrity
29 CFR 1910.303	Electrical equipment	Per manufacturer and recognized standards; documented
29 CFR 1910.219	Mechanical power transmission	Inspected at regular intervals
29 CFR 1910.1030	Bloodborne pathogen exposure control	Annual review of written plan

^[3][4][5]

The forklift standard is the most aggressive on the list: every shift, every truck, before anyone drives it. The annual lockout/tagout certification is the one managers miss most, because it needs a second person to watch the authorized employee actually run the procedure on real equipment, then document that the procedure still works as written. That is not a paper exercise. ^[4]

Workplace safety training overlaps with inspections in a way that matters here. If an inspection shows workers are not following a procedure, that finding can trigger mandatory retraining under the same standard.

Who is qualified to conduct a safety inspection?

OSHA uses two terms that sound alike and are not: "qualified person" and "competent person." They are not interchangeable, and mixing them up is a common way to fail an inspection requirement.

A qualified person, defined in several construction standards, holds a recognized degree, certificate, or professional standing plus the knowledge and experience to solve the problem at hand. ^[6] A licensed professional engineer doing a scaffold design review fits here.

A competent person, which shows up far more often in OSHA's construction standards, is someone who can spot existing and predictable hazards and has authority to take prompt corrective measures. ^[6] This is the person you need for most routine inspections. The word that carries the whole definition is authority. A worker who can flag a problem but cannot stop the job or get it fixed does not qualify.

General industry (29 CFR 1910) tends to say "trained" or "knowledgeable" rather than competent person, but the practical bar is the same. Your inspector needs training specific to what they inspect. A general floor walk by the owner every few months probably does not satisfy a standard that calls for someone with real technical knowledge of a hazard.

Document your inspector's qualifications. When OSHA arrives and asks who did the forklift pre-shift inspection last Tuesday, "whoever was driving" is not a documentation system. A name, a date, and a signature or electronic equivalent is the floor. ^[5]

Small employers keep asking whether one person can cover everything. Usually yes, as long as that person has the specific training each standard demands. Sending one ops manager through forklift inspection training, lockout/tagout training, and fire extinguisher maintenance certification is legal and often the practical move.

Does OSHA require written inspection procedures specifically?

For many standards, yes, and the writing requirement is explicit. Lockout/tagout under 29 CFR 1910.147(c)(4) requires a written energy control program. The bloodborne pathogen standard under 29 CFR 1910.1030(c)(1) requires a written exposure control plan reviewed annually and updated. Hazard communication under 29 CFR 1910.1200 requires a written program. ^[3]

For general walkaround inspections not tied to a specific standard, no single CFR sentence says "you must have a written inspection checklist." OSHA's enforcement reality closes that gap anyway. If OSHA cites you under the general duty clause for a hazard a reasonable inspection would have caught, your defense rests on proving you had a systematic process. A written checklist, completed and signed, is that proof. "We walk around sometimes" is not.

A written inspection program should cover, at minimum, the scope (which areas, which equipment), the schedule (daily, weekly, monthly, annual by task), the responsible person, the documentation method, and the corrective action process. That last piece is the one most small business owners skip. Finding a hazard and writing it down accomplishes nothing if no system tracks whether it actually gets fixed.

Want a starting point that does not eat a week? SafetyFolio's safety program generator builds a written inspection program matched to your industry and OSHA standards in about 15 minutes. This is exactly the gap it fills.

What records do you need to keep from safety inspections?

Retention rules vary by standard, but for most inspection records the working floor is three years. Here is what actually matters.

OSHA's recordkeeping rule at 29 CFR 1904 covers injury and illness logs, not inspection records. ^[7] Inspection records live under whatever standard requires the inspection. The lockout/tagout periodic inspection certification must be written and must include the date, equipment inspected, employees involved, and the name of the person who did it. 29 CFR 1910.147 states no explicit retention period, but OSHA's general enforcement window runs six months from the violation (three years for willful violations), and most safety attorneys say keep the records at least three years. ^[4]

Forklift pre-shift inspections sit in the same spot. 29 CFR 1910.178 does not state a retention period for pre-shift checklists. OSHA letters of interpretation confirm records must be maintained but leave the length to the employer's reasonable judgment. Most compliance professionals land on three years here too.

Fire extinguisher annual maintenance records under 29 CFR 1910.157 must be kept for one year after the last entry or the life of the shell, whichever is less. ^[3] That one is explicit.

OSHA 300 injury and illness logs are different. You keep the 300 log, the 300A summary, and the 301 incident reports for five years from the end of the calendar year they cover. ^[7]

Here is the practical call: pick one retention period, say three to five years, apply it to every inspection record, and store the records where an OSHA compliance officer can actually find them. A labeled binder on the maintenance room shelf beats a folder on someone's personal laptop.

What happens when an inspection finds a hazard, and what does correction require?

Finding a hazard is step one. Step two is correction, and OSHA is specific about what that means in some contexts and leaves it to inference in others.

For imminent danger hazards, work stops. That is not a policy preference. It is the expectation built into OSHA's general duty clause and the right of workers to refuse unsafe work. ^[2]

For non-imminent hazards, most general industry standards set no specific timeline, but the phrase "prompt" corrective action runs through agency guidance again and again. When OSHA issues a citation, it sets an abatement deadline that can run from immediately to 90 days or more depending on complexity. Apply the same logic to internal inspections: your fix should happen as fast as the repair reasonably allows.

Document the correction with the same care as the finding. Write down what was found, who found it, when it got reported, what corrective action was taken, who took it, and when it closed. This two-part record, finding plus correction, is what separates a working inspection program from a stack of paper.

When a hazard cannot be fixed on the spot, interim controls matter. OSHA follows a hierarchy of controls: elimination, then substitution, then engineering controls, then administrative controls, then PPE, in that order. ^[8] An inspection program that always lands on "give them gloves" is not meeting the hierarchy, even when the paperwork is clean.

For how a safety and health program should be built around hazard correction cycles, that article covers the wider framework this inspection piece sits inside.

How does employee involvement fit into required inspection programs?

OSHA's 1989 Safety and Health Program Management Guidelines list employee participation as one of the four core elements of an effective safety program, alongside management commitment, worksite analysis, and hazard prevention and control. ^[1] The guidelines are not a binding standard, but OSHA's Voluntary Protection Programs and its enforcement priorities treat employee involvement as a marker of program quality.

Section 11(c) of the OSH Act bars retaliation against workers who report hazards. That matters for inspection programs because workers who get punished, or who fear it, stop reporting. Your program, formal or not, depends on people telling you what they see. ^[2]

Some standards go further. The bloodborne pathogen standard requires employee input into the selection of engineering controls and safer devices, documented in the exposure control plan. ^[3] That is a participation requirement written into a specific inspection-adjacent process.

The most effective small-business programs pull workers in directly. A daily checklist the operator fills out before using equipment. A monthly team walkthrough where the crew calls out hazards. A clear way to report problems without fear. None of that needs a committee or a consultant. It needs trust and a system.

Tying employee participation to principles of effective safety incentive programs can help, with one caution: programs that reward low injury rates can quietly discourage reporting. OSHA has been explicit about this in its enforcement memos on anti-retaliation. ^[2]

What is a "competent person" inspection under OSHA construction standards?

Construction earns its own answer because 29 CFR 1926 is far more aggressive about inspection requirements than general industry.

Scaffolding under 29 CFR 1926.451 requires a competent person to inspect before each work shift and after any event that could affect structural integrity: a storm, an impact, a movement. ^[6] That is not optional and not something you hand to an untrained worker.

Excavation and trenching under 29 CFR 1926.651 requires a competent person to classify the soil, inspect the trench daily before work begins, and inspect again after any rainstorm or other event that raises the hazard. Trenches kill workers every year when this gets skipped or treated as a formality. BLS data recorded 22 fatal work injuries in trenching and excavation in 2022. ^[9]

Fall protection under 29 CFR 1926.502 requires a competent person to inspect fall protection systems before each use. A personal fall arrest system that has stopped a fall comes out of service immediately. ^[6]

Authority is the piece that breaks in construction. If your competent person cannot stop the job, they do not meet the definition. Site supervisors under schedule pressure to keep work moving are often stripped of that authority in practice, even when the org chart says otherwise. Put your competent person's authority in writing: in the safety program and in the job description.

How do OSHA inspections of your workplace differ from your own internal inspections?

An OSHA compliance inspection (the one where an officer walks your facility) and your own internal inspection are related but not the same thing.

An OSHA inspection gets triggered by a complaint, a referral, a fatality or severe injury report, a programmed inspection in a high-hazard industry, or a follow-up to a previous citation. The compliance officer can inspect with reasonable notice or without it, depending on the circumstances. They review records, interview employees, and take measurements. ^[10]

Your internal inspection program is what you do before OSHA shows up. It is your chance to find and fix problems on your terms. OSHA officers will ask to see your internal inspection records, and those records either help you or bury you. A well-documented program with evidence of corrective action shows good faith. A pile of checklists full of unresolved findings shows you knew about hazards and ignored them, which is worse than having no records at all.

OSHA targets programmed inspections using injury rate data and industry NAICS codes to prioritize high-hazard workplaces. ^[10] Small employers in construction, logging, roofing, meat processing, and warehousing get targeted more than most. Work in one of those industries with no written inspection program, and that is a real risk, not a theoretical one.

One thing many small business owners miss: you have the right to walk alongside the OSHA compliance officer during the walkaround. Use it. You learn what they look for, and you get to add context on the spot.

What are the most common inspection program failures that lead to OSHA citations?

OSHA's list of the top 10 most frequently cited standards for FY2023 shows exactly where inspection programs fall apart in practice. ^[11]

Fall protection (29 CFR 1926.501) sits at number one for the thirteenth straight year, with 7,271 violations cited in FY2023. Most of these come from not inspecting and not documenting that fall protection equipment exists and works before the job starts.

Hazard communication (29 CFR 1910.1200) stays in the top five. The inspection failure here is not reviewing the written hazard communication program when new chemicals arrive and not verifying that safety data sheets are current and reachable. For more on this standard, see hazardous communication.

Respiratory protection (29 CFR 1910.134) failures usually trace back to skipped medical evaluations and fit tests, which are inspections of the person more than the equipment.

Lockout/tagout (29 CFR 1910.147) citations often come from missing periodic inspections, specifically the annual certification that each procedure actually works when an authorized employee runs it on real equipment.

Scaffolding citations in construction almost always trace to missing competent-person pre-shift inspections.

The pattern holds across all of them. The required inspection existed on paper but never happened, or happened but was never documented, or was documented but the hazards it found never got corrected. Any one of those gaps produces a citation. Stack all three and you get a willful citation, which carries penalties up to $161,323 per violation as of 2024. ^[10]

How should a small business build a safety inspection program from scratch?

Start with your hazards, not a generic checklist. Walk every part of your operation and list the equipment, materials, and tasks that could hurt someone. That hazard inventory drives everything after it.

For each hazard, find the applicable OSHA standard. 29 CFR 1910 for general industry, 29 CFR 1926 for construction. Read the frequency the standard requires. Write that frequency straight into your schedule.

Assign a specific named person to each inspection task. "The supervisor" is not a person. "Maria Chen, operations manager" is. Put her name on the form and make sure she has the training the standard demands for that task.

Build corrective action tracking into the same system as your inspection records. A plain spreadsheet works: date found, description, responsible person, target date, date completed. Review open items every week until they close.

Review the whole program at least once a year. Standards change. Your operation changes. A program written in 2021 may say nothing about equipment you added in 2023.

If building it alone feels like too much, SafetyFolio generates a written safety program with inspection procedures matched to your industry and OSHA requirements in about 15 minutes. The output is yours to edit and use.

For the wider framework this program lives inside, the article on a safety and health program should be covers how inspections connect to training, hazard control, and recordkeeping as one system instead of separate chores.

Frequently asked questions

Is a written safety inspection program required by OSHA for all employers?

No single OSHA rule requires every employer to keep a written inspection program by that name. But specific standards, including lockout/tagout, bloodborne pathogens, and hazard communication, require written programs with inspection components. The general duty clause covers the rest: a workplace with recognized hazards needs a systematic process for finding and fixing them. In practice, "written" is the only defensible version of that process.

How often does OSHA require safety inspections to be done?

It depends entirely on the standard. Forklift pre-shift inspections happen before every shift. Fire extinguisher visual checks happen monthly. Lockout/tagout procedure reviews happen at least annually. Scaffold inspections happen before each work shift. PPE hazard assessments happen before initial assignment and when conditions change. There is no one-size answer. Check the specific CFR section for each piece of equipment or hazard in your workplace.

What records must be kept from safety inspections?

Retention periods vary by standard. Fire extinguisher annual maintenance records must be kept one year under 29 CFR 1910.157. OSHA 300 injury logs must be kept five years under 29 CFR 1904. Lockout/tagout certifications have no stated retention period, but OSHA's enforcement window runs up to three years for willful violations, so keeping records three to five years is standard practice. Date, inspector name, findings, and corrective actions taken are the minimum content.

Who qualifies to conduct a safety inspection under OSHA rules?

OSHA uses two terms. A "competent person" can identify hazards and has authority to fix them, required for most construction inspections. A "qualified person" holds formal credentials in the relevant technical field. For general industry, OSHA typically requires that inspectors be trained in the specific hazard they evaluate. The inspector must have real authority to take corrective action. Training without authority does not satisfy most standards.

What is the penalty for not having a safety inspection program?

OSHA penalties as of 2024 run up to $16,131 per serious violation and up to $161,323 per willful or repeated violation. A missing or weak inspection program usually generates citations under the specific standard that required the inspection, not under a single catch-all rule. Multiple missing inspections across several standards can mean multiple citations. Willful violations, where OSHA shows you knew about the hazard and ignored it, carry the maximum penalties.

Can a small business owner conduct their own OSHA safety inspections?

Yes, if the owner has the training the relevant standard requires. In a small retail or office setting, an owner who has gone through basic safety inspection training can handle most routine inspections. For specialized hazards like electrical systems, confined spaces, or scaffolding, the competent or qualified person requirements may demand more specific credentials. The key is documented training, not a title or a license, unless the standard specifically requires one.

Does OSHA require employee participation in safety inspections?

OSHA's Safety and Health Program Management Guidelines strongly recommend it, and the bloodborne pathogen standard explicitly requires employee input in selecting safer devices as part of the annual exposure control plan review. Section 11(c) of the OSH Act protects workers who report hazards from retaliation. No single standard forces hourly workers to run walkaround inspections, but programs that include workers consistently beat management-only programs at finding hazards.

What is the difference between a safety audit and a safety inspection?

OSHA uses the word "inspection" most often. An inspection is usually a periodic physical check of equipment, conditions, or procedures against a known standard. An audit is a broader review of whether a program works as designed, often done annually, covering documentation, training records, and trends more than physical conditions. Both are useful. OSHA's standards most commonly require inspections. Audits are a management tool layered on top.

What must a safety inspection checklist include to satisfy OSHA?

OSHA does not prescribe a checklist format, but the content must cover what the applicable standard requires you to check. At minimum, a compliant checklist includes the date, the location or equipment inspected, the specific items checked against the standard's requirements, findings (pass or deficiency noted), and the inspector's name. A corrective action column with target dates and completion dates turns the checklist into a closed-loop system instead of a paper exercise.

How does OSHA know if a required inspection was missed?

They ask for records. During a walkaround inspection, an OSHA compliance officer requests inspection logs, maintenance records, and training certifications. A gap in forklift pre-shift logs, a missing lockout/tagout annual certification, or an undated fire extinguisher tag is the physical evidence of a missed inspection. They also interview workers, who usually know whether inspections actually happen or just get signed off on paper.

Are safety inspection programs required in state-plan states differently than federal OSHA?

State OSHA plans must be at least as effective as federal OSHA and often go further. California (Cal/OSHA) requires an Injury and Illness Prevention Program under California Labor Code Section 6401.7, which explicitly mandates regular workplace inspections as a program element. That is more prescriptive than federal OSHA's approach. Michigan, Washington, and about 20 other state-plan states have similar requirements. Always check your state plan if you operate in a state-plan state.

What is the hierarchy of controls and how does it apply to inspection findings?

OSHA's hierarchy of controls, referenced in standards like 29 CFR 1910.132 for PPE and across agency guidance, ranks corrective actions: eliminate the hazard first, then substitute, then engineer controls, then administrative controls, then PPE as the last resort. When your inspection finds a hazard, the corrective action should work down this list rather than jumping straight to PPE. Compliance officers read programs that default to PPE as a sign of weak hazard management.

How does a safety inspection program connect to OSHA's recordkeeping requirements?

They are separate systems that must work together. Your internal inspection records (checklists, corrective actions) are not the same as your OSHA 300 injury log. But a well-run inspection program should prevent many of the incidents that generate 300 log entries. If OSHA compares your injury log to your inspection records and sees a hazard appeared in an inspection before an injury occurred, that gap becomes evidence of a willful violation rather than an unforeseeable accident.

Sources

1. OSHA, Safety and Health Program Management Guidelines (1989): OSHA guidelines state that an effective program includes regular site safety and health inspections to identify new or missed hazards and failures in hazard controls
2. OSHA, OSH Act of 1970 General Duty Clause Section 5(a)(1): The general duty clause requires employers to provide a workplace free from recognized hazards likely to cause death or serious harm; Section 11(c) prohibits retaliation for reporting hazards
3. OSHA, 29 CFR 1910 General Industry Standards: 29 CFR 1910.157 requires monthly visual fire extinguisher checks and annual maintenance with one-year recordkeeping; 29 CFR 1910.1030 requires annual written exposure control plan review; 29 CFR 1910.1200 requires a written hazard communication program
4. OSHA, 29 CFR 1910.147 - The Control of Hazardous Energy (Lockout/Tagout): 29 CFR 1910.147(c)(6) requires at least annual periodic inspections of energy control procedures by an authorized employee, with a written certification including date, equipment, employees involved, and inspector name
5. OSHA, 29 CFR 1910.178 - Powered Industrial Trucks: 29 CFR 1910.178(q)(1) requires powered industrial trucks to be inspected before each shift and removed from service if defects are found
6. OSHA, 29 CFR 1926 Construction Industry Standards: 29 CFR 1926.32 defines competent person as one who can identify hazardous conditions and has authority to take corrective measures; 29 CFR 1926.451 requires competent person scaffold inspection before each work shift; 29 CFR 1926.502 requires competent person inspection of fall protection systems before each use
7. OSHA, 29 CFR 1904 - Recordkeeping Requirements: 29 CFR 1904 requires employers to retain OSHA 300 logs, 300A summaries, and 301 incident reports for five years from the end of the calendar year they cover
8. OSHA, Hierarchy of Controls guidance and 29 CFR 1910.132: OSHA ranks corrective actions in a hierarchy of controls: elimination, substitution, engineering controls, administrative controls, then PPE as the last resort; 29 CFR 1910.132 governs PPE hazard assessment
9. Bureau of Labor Statistics, Census of Fatal Occupational Injuries 2022: BLS data shows 22 fatal work injuries in trenching and excavation in 2022
10. OSHA, Enforcement Penalties and Inspection Procedures: OSHA maximum penalty for willful or repeated violations is $161,323 per violation as of 2024; serious violations carry penalties up to $16,131 per violation
11. OSHA, Top 10 Most Frequently Cited Standards FY2023: Fall protection (29 CFR 1926.501) was the most frequently cited OSHA standard for the thirteenth consecutive year in FY2023 with 7,271 violations; hazard communication and lockout/tagout are also consistently in the top ten