Does OSHA Apply to Small Businesses?
Yes — with narrow exceptions. The OSH Act covers virtually all private-sector employers regardless of size. A business with two employees has the same fundamental obligation to provide a safe workplace as one with 2,000. The exceptions are limited:
- Self-employed individuals with no employees are not covered
- Immediate family members of farm operators are not covered
- Certain workers covered by other federal safety programs (mining, railroads, certain nuclear workers) are exempt
If you have even one employee who is not an immediate family member, OSHA applies to your business.
Your 10 Most Important OSHA Obligations as a Small Employer
1. Provide a safe workplace
This sounds obvious but it's the foundation of everything. Section 5(a)(1) of the OSH Act — the General Duty Clause — requires you to provide a workplace free from recognized hazards likely to cause death or serious physical harm. OSHA can cite you under this clause for any serious hazard even if no specific standard covers it.
2. Post the OSHA notice
The OSHA "Job Safety and Health — It's the Law" poster must be displayed where employees can see it. It's free at OSHA.gov. This is one of the most commonly missed requirements for small businesses, and it's one of the first things an inspector checks.
3. Report severe injuries
All employers — regardless of size — must report worker fatalities within 8 hours and amputations, loss of an eye, or inpatient hospitalization of three or more workers within 24 hours. Call 1-800-321-OSHA. Failure to report is itself a citable violation.
4. Conduct a hazard assessment
Walk your workplace and identify the hazards your employees face. Write them down. This isn't a formal requirement with a specific format — but it's the foundation for everything else you need to do. Without knowing what your hazards are, you can't provide the right training, the right PPE, or the right controls.
5. Write a Hazard Communication program (if you use chemicals)
If you use any hazardous chemicals — cleaning products, solvents, paints, lubricants — you need a written HazCom program, SDS for every chemical, labeled containers, and trained employees. HazCom is the most-cited standard in general industry. See our full HazCom guide.
6. Write an Emergency Action Plan
An Emergency Action Plan (EAP) is required for most employers. It covers emergency procedures, evacuation routes, and how to account for employees after evacuation. For businesses with fewer than 10 employees, it can be communicated orally rather than in writing. For everyone else, it must be written.
7. Provide and document PPE training
If your employees use personal protective equipment — hard hats, safety glasses, gloves, hearing protection — you must provide it at no cost, conduct a written hazard assessment, and document training on proper use. The written certification of the hazard assessment is what inspectors ask for first.
8. Train employees on the hazards they face
Many OSHA standards require specific training. The most universally applicable: hazard communication, PPE, emergency action plan, and fire safety. Document every training session with names, dates, and what was covered.
9. Maintain records (if required)
If you have 11 or more employees and are not in an exempt low-hazard industry, you must keep OSHA injury and illness logs. See our recordkeeping guide for the full requirements.
10. Don't retaliate
It is illegal to discipline, terminate, demote, or otherwise retaliate against any employee for reporting a safety concern, filing an OSHA complaint, or refusing genuinely dangerous work. Retaliation complaints trigger OSHA investigations independent of any inspection, and penalties can include back pay, reinstatement, and additional fines.
Required Written Programs: The Short List for Small Businesses
Not every written program requirement applies to every business. Here's how to determine what you need:
| Written Program | Required When |
|---|---|
| Hazard Communication Program | You use any hazardous chemicals |
| Emergency Action Plan | Almost always required — very few exceptions |
| Fire Prevention Plan | Required in specific situations involving flammable materials or fire hazards |
| PPE Hazard Assessment (written certification) | Any time employees are required to use PPE |
| Lockout/Tagout Energy Control Program | Employees service or maintain machinery |
| Respiratory Protection Program | Employees use respirators of any kind |
| Bloodborne Pathogen Exposure Control Plan | Employees have occupational exposure to blood or OPIM |
| Hearing Conservation Program | Workers exposed to noise at or above 85 dBA |
Required Postings
Every employer must post these in a location where employees can see them:
- OSHA "Job Safety and Health — It's the Law" poster (free from OSHA.gov)
- OSHA 300A Annual Summary — posted February 1 through April 30 (if required to keep records)
- Any OSHA citations received — posted at or near the cited location until corrected or for 3 working days, whichever is longer
Building a Simple Safety Program Without a Safety Department
You don't need a consultant or a dedicated safety manager to get to baseline compliance. You need a clear process and consistent follow-through.
Week 1: Get the basics in place
- Post the OSHA poster
- Walk your facility and write down every hazard you can identify
- Make a list of every chemical product in the building
Week 2: Write the required programs
- Write your Emergency Action Plan — it can be simple, but it must exist
- Write your Hazard Communication Program (template available at OSHA.gov)
- Complete a written PPE hazard assessment and sign it
- Get SDS for every chemical on your inventory list
Week 3: Train your team
- Walk employees through the Emergency Action Plan — show them the exits, the assembly point, and the alarm system
- Conduct HazCom training — show them the SDS binder, explain GHS labels, review the chemicals they work with
- Train employees on any PPE they use
- Document every training session
Ongoing: Review annually and after any incident
- Review and update all written programs at least once a year
- After any injury, near miss, or new hazard is identified — update your programs and retrain as needed
- When you introduce new chemicals, processes, or equipment — update your programs before work begins
Free OSHA Resources Small Businesses Often Don't Know About
OSHA's Free On-Site Consultation Program
This is the most valuable free resource available to small employers and it is severely underused. OSHA funds a free, confidential consultation service specifically for small businesses. A trained safety consultant will visit your workplace, identify hazards, help you understand your compliance obligations, and help you build a safety program — with no citations, no penalties, and no enforcement action. The consultation program is completely separate from OSHA enforcement. Find your state's program at osha.gov/consultation.
Free Written Program Templates
OSHA.gov offers free templates for most required written programs including Emergency Action Plans, Hazard Communication Programs, and more. Download them, customize them to your workplace, and you have the foundation of a compliant program.
OSHA Small Business Resources
OSHA.gov/smallbusiness has guides, tools, and resources specifically designed for small employers — including a small business safety and health handbook and industry-specific quickstart guides.
Common OSHA Mistakes Small Businesses Make
- "We're too small for OSHA to care about us." Size doesn't determine inspection priority — employee complaints, injuries, and referrals from other agencies do. Small businesses get inspected and cited regularly.
- Verbal training with no documentation. From OSHA's perspective, undocumented training didn't happen. Write down who was trained, when, and what was covered.
- Generic SDS from the internet. Your SDS must match the specific product you use. Get them from the manufacturer of the product in your facility.
- Ignoring the OSHA poster requirement. It takes five minutes to print and post. It's one of the first things inspectors look for.
- Treating safety as a one-time project. A written program you created three years ago and never updated doesn't reflect your current workplace and doesn't demonstrate ongoing good faith.