OSHA Violation: Types, Penalties, and What to Do
The six types of OSHA violation, current penalty amounts, the reductions small employers qualify for, what to do after a citation, and minimum compliance.
This guide gives you the current penalty numbers for OSHA violations, the safety failures cited by the Occupational Safety and Health Administration, and the steps to take after a citation. Most published content on the topic is written by somebody selling training, software, or legal defense, which is fine. But a large share of it carries penalty numbers that were never actually issued, which is not.
The annual inflation adjustment that raises OSHA penalties every January did not happen for 2026. The maximums still sit at the 2025 amounts. Plenty of pages went ahead and published inflated figures anyway, because the increase is normally automatic and nobody checked. If you are budgeting, quoting a number to a partner, or trying to work out what a citation might cost, that matters.
This guide covers the six violation categories, what each actually costs after the reductions a small employer is entitled to, what employers really get cited for, what applies when you have ten or fewer people, and exactly what happens in the fifteen working days after a citation arrives.
I build the training records, policy documents, and employee files that a compliance position is made of at FirstHR. This is general information rather than legal advice, and penalty figures change, so verify current amounts before relying on them.
What Is an OSHA Violation?
An OSHA violation is a documented failure to comply with a workplace safety standard, regulation, or the general duty clause, identified during an inspection and issued to the employer as a citation. The citation states what was violated, how it was classified, what the proposed penalty is, and by when the hazard must be corrected.
The general duty clause deserves a note because it is the mechanism that catches employers who have read every applicable standard and complied with all of them. Where no specific standard covers a recognized hazard, the general duty clause still applies. There is no version of this in which having checked the rule book is a complete answer.
One more point to take in early: the classification often matters more than the hazard. The same unguarded machine can be a serious violation or a willful one depending entirely on what you knew and what you did about it, and the gap between those two outcomes is roughly a factor of ten. That makes this different from most of the employment laws a small business tracks, where compliance is binary.
The Six Types of OSHA Violations
OSHA classifies every violation into one of six categories. The differences are about severity and employer knowledge rather than about which standard was breached.
Two of those categories turn a manageable problem into a business-threatening one, and in both cases what decides the outcome is what you did, not how dangerous the hazard was.
Willful turns on knowledge. If an employee raised a hazard, if a prior inspection flagged it, or if your own records show you were aware, then not acting can push the violation into the willful category. This is why an unanswered complaint is more dangerous than the hazard it describes.
Failure to abate turns on a date. The hazard was cited, you were given a deadline, and the deadline passed. It accrues daily, so the penalty keeps growing while nothing new is happening. It is the purest administrative failure on the list and the most preventable.
What Each Type Costs
According to OSHA, these are the federal maximum penalties by classification for violations assessed after January 15, 2026.
| Classification | Maximum penalty | Accrues daily? | Typical trigger |
|---|---|---|---|
| De minimis | None | No | Technical deviation with no safety impact |
| Other-than-serious | $16,550 | No | Paperwork, posting, and recordkeeping failures |
| Serious | $16,550 | No | A hazard likely to cause serious harm that you knew or should have known about |
| Willful | $165,514 | No | Known hazard left uncorrected, or plain indifference |
| Repeat | $165,514 | No | Substantially similar violation previously cited at any of your sites |
| Failure to abate | $16,550 per day | Yes | Cited hazard still present after the abatement date |
Maximums are not typical outcomes. The proposed penalty is built from a gravity-based amount reflecting how severe the hazard is and how likely the exposure was, then reduced by the factors covered in the reductions section below.
The starting point depends on gravity. According to the OSHA penalty memorandum for 2026, a high gravity serious violation starts at the full $16,550, while a low gravity one starts at $7,093 before any reduction is applied.
Two floors and one ceiling are worth knowing. A willful violation carries a statutory minimum of $11,823 no matter how small the employer, a repeat carries a policy minimum of $4,256, and the total proposed penalty for a failure to abate is normally capped at 30 times the daily amount rather than running indefinitely.
The repeat floor has one exception, set out in the same OSHA memorandum. A repeated other-than-serious item that would otherwise carry no penalty starts from a gravity-based amount of $472 for its first repeat, $1,182 for the second, and $2,364 for the third.
What drives the total is quantity. A single inspection commonly produces several citation items, each with its own proposed penalty, and multi-item citations are how a small business ends up with a five-figure total for hazards it thought were minor. That total sits alongside whatever the incident does to your workers compensation position, which can be the larger number.
Why the Penalty Numbers You Have Seen May Be Wrong
The numbers you have seen may be wrong because the usual January inflation adjustment did not happen for 2026. OSHA penalties are normally adjusted under the Federal Civil Penalties Inflation Adjustment Act, using the Consumer Price Index figure published for the previous October, and before 2026 that had happened reliably every year since the mechanism was modernized.
This is worth more than a footnote for two reasons. First, if you are quoting exposure to an insurer, a general contractor, or a board, a number that was never issued is a number that will be checked.
Second, the error tells you something about the sources you are reading: a page that published a confident increase without verifying it is a page that probably did not verify anything else either.
The practical takeaway is unglamorous. Penalty amounts are a fact with a date attached, and this is a category of fact that is normally reset every January. Treat any dollar figure in any article, including this one, as needing a check against the agency before you rely on it. That habit belongs in the same place as the rest of your compliance calendar.
The Reductions Small Employers Are Owed
This is the section missing from almost every guide on this topic, and it is the one that changes the number a small business actually pays.
Proposed penalties are reduced by four factors, set out in Chapter 6 of the OSHA Field Operations Manual. A revision effective July 14, 2025 widened the small-employer allowances in a way that specifically benefits companies in the 11 to 25 employee range (U.S. Department of Labor).
The good-faith component is the one to prepare for, because it is assessed on evidence rather than intent and it is decided by what already exists when the inspector arrives.
A written safety program, documented hazard assessments, training records with dates and names, and evidence that previously identified problems were corrected are what produce it. All of that is documentation you either have on the day or you do not.
The value of keeping compliance training records is not that a binder prevents an accident. It is that on the day an inspector asks, a company that can produce dated training records and a written program is looking at a materially different assessment than an identical company that cannot.
If you have no written program at all, a health and safety policy is the document that starts it. One page that names the hazards in your workplace and says who is responsible is worth more here than a fifty-page manual nobody adopted.
Nick Anisimov, FirstHR founderWhat Employers Actually Get Cited For
OSHA publishes its most frequently cited standards each fiscal year, and the list is remarkably stable. Fall Protection General Requirements has been number one for sixteen consecutive fiscal years. Each standard’s number in the Code of Federal Regulations (CFR) appears in the third column.
| Rank | Standard | CFR | Citations |
|---|---|---|---|
| 1 | Fall Protection, General Requirements | 1926.501 | 4,041 |
| 2 | Hazard Communication | 1910.1200 | 1,961 |
| 3 | Lockout/Tagout | 1910.147 | 1,863 |
| 4 | Scaffolding | 1926.451 | 1,725 |
| 5 | Ladders | 1926.1053 | 1,659 |
| 6 | Respiratory Protection | 1910.134 | 1,608 |
| 7 | Powered Industrial Trucks | 1910.178 | 1,379 |
| 8 | Fall Protection, Training Requirements | 1926.503 | 1,273 |
| 9 | Eye and Face Protection | 1926.102 | 1,120 |
| 10 | Machine Guarding | 1910.212 | 1,072 |
OSHA announced this preliminary ranking for fiscal year 2026 on September 15, 2026. It covers inspections from October 1, 2025 to August 31, 2026, so the final figures for the full year will differ. The ten standards together account for 17,701 citations, and fall protection alone draws more than twice the citations of the second-place standard.
Read the list for what it tells you about your own exposure rather than as construction trivia. Several of these reach far beyond construction sites, starting with Hazard Communication, which covers any workplace where employees use hazardous chemicals.
Cleaning products fall outside Hazard Communication only under its consumer product exemption, which applies when they are used as intended and exposure is no longer or more frequent than a consumer would have. Restaurants, salons, and clinics often go past that line.
Lockout/Tagout catches anyone whose staff clean or service powered equipment. Respiratory Protection catches anyone who requires respirators without a written program, medical evaluation, and fit testing. Powered Industrial Trucks catches anyone with a forklift and no documented operator certification.
What Applies When You Have Ten or Fewer Employees
There is a widely repeated belief that OSHA does not apply to very small businesses. It is wrong, and it is wrong in a specific way worth understanding, because the exemption that generates the myth is real but narrow.
Per 29 CFR 1904.1, an employer with 10 or fewer employees at all times during the previous calendar year does not need to keep OSHA injury and illness records. That is the whole exemption. It covers the 300 log, the 300A summary, and the 301 incident report, and nothing else.
| Obligation | 10 or fewer employees | Notes |
|---|---|---|
| OSHA 300 log, 300A summary, 301 report | Exempt | Partial exemption based on company-wide headcount in the prior calendar year |
| Safety standards themselves | Fully apply | Every applicable standard applies regardless of size |
| General duty clause | Fully applies | Recognized hazards must be addressed even where no standard exists |
| Reporting a work-related fatality | Required within 8 hours | Applies to every employer covered by the Act, with no size exemption |
| Reporting hospitalization, amputation, eye loss | Required within 24 hours | Same, no size exemption |
| Posting the OSHA workplace notice | Required | The Job Safety and Health poster |
| Employee training required by a standard | Required | Training obligations attach to the standard, not to your headcount |
The count is company-wide rather than per location, and it covers the whole previous calendar year: you must stay at 10 or fewer at all times, so hiring an eleventh person for even one month costs you the exemption for the following year.
The size exemption can also be overridden: if OSHA or the Bureau of Labor Statistics writes to you requesting records, you keep them. Whatever you do keep, apply your normal record retention schedule to it.
There is a second partial exemption based on industry rather than headcount, and the two are independent. An employer over the size threshold can still be exempt, and an employer under it can still be pulled in by a records request.
If you do have to keep the log, what makes a case recordable rather than first aid, the certification and posting window on the annual summary, and the electronic submission tiers are all worked through in OSHA form 300.
How an Inspection Starts
According to the OSHA inspections fact sheet, inspections are normally conducted without advance notice, and 29 CFR 1903.6 prohibits giving advance notice outside narrow exceptions. They are prioritized: imminent danger first, then fatalities and catastrophes, then worker complaints and referrals, then programmed inspections (the planned ones that target high-hazard industries), then follow-up inspections.
For a small business the realistic trigger is rarely a random visit. More often it is an employee complaint, a referral from another agency, or a reportable injury that you yourself called in. That is worth sitting with, because two of those doors, a complaint and an injury, are ones you have influence over.
An employee complaint to OSHA often signals that somebody raised something internally and got nowhere, or believed raising it internally was pointless. Retaliating against that employee is a separate violation with its own process, and it converts a safety question into a whistleblower case.
The cheap prevention is an internal route for reporting hazards that visibly produces answers, which is ordinary workplace policy work rather than safety expertise.
The Day a Citation Arrives
When a citation arrives, the sequence is short and the deadlines are unforgiving: post it, decide whether to contest within 15 working days, and fix the hazard by the abatement date.
The informal conference is the single most underused step on that list. It costs nothing, it happens with the Area Director rather than in a hearing, and it is where classifications get reconsidered and penalties get reduced through an informal settlement agreement. Employers who treat a citation as a bill to be paid skip it entirely.
One caveat about the conference matters more than anything else on that list. Under 29 CFR 1903.20, neither the conference nor the request for one operates as a stay (an automatic pause) of the 15 working day contest period, so treating the meeting as an extension can cost you the right to contest at all.
Here is that sequence as a working sheet, with the dates to calculate on the day the envelope arrives and a place to record what you decided on each citation item.
The 15 working days is the item to write on the envelope. Under 29 CFR 1903.17 the notice of intent to contest has to be postmarked within 15 working days of receiving the notice of proposed penalty, and once that passes the citation becomes a final order that is not reviewable regardless of merit. Whatever else you do that week, protect that date.
Kelly KapoorCustomer ServiceUp to Date
Darryl PhilbinWarehouseNeeds Attention
Ryan HowardSalesUp to DateMinimum Viable Compliance
For a business with no safety officer and no HR department, the shortest honest list looks like this. It is not a full safety program and it does not pretend to be. It is the set of things whose absence is most likely to produce a citation.
Step one is also the cheapest: the full set of required workplace safety posters is free from the issuing agencies, and a missing one is easy for an inspector to spot.
Steps two and four are the ones that do double duty: they reduce actual risk and they are the evidence that produces a good-faith reduction if you are ever inspected. Fold them into your existing compliance onboarding rather than running them as a separate program, and they stop being a thing you remember to do.
At larger headcounts the same job gets handed to health and safety software. Below that, an ordinary employee training record and a shared folder cover it, provided somebody owns them.
The Free Inspection That Cannot Cite You
OSHA runs a program that many small employers have never heard of and that sounds implausible when you first describe it: a free, confidential on-site consultation, delivered by trained safety professionals, that is completely separate from enforcement and cannot issue citations or propose penalties.
The On-Site Consultation Program is aimed at small and medium-sized businesses, delivered through state agencies and universities in every state, with priority given to high-hazard worksites. A consultant walks the site with you, identifies hazards, reviews your safety program, and helps you fix things. Your name, your company, and anything found are kept confidential and are not routinely passed to enforcement staff.
The one obligation is real and worth stating plainly: you must agree to correct serious hazards the consultant identifies, within a reasonable time. That is the trade. You get a professional assessment you could not otherwise afford, and you commit to acting on it.
According to OSHA, the program prevents more than 8,700 workplace injuries and saves the United States economy almost $1.5 billion every year. It has been running since 1975, which makes it older than most of the compliance advice written about it.
Where Small Employers Get Caught
Small employers get caught in the same six ways. Believing the size exemption is broader than it is comes first. It covers only three recordkeeping forms. It does not cover the standards, the general duty clause, the poster, training obligations, or the reporting deadlines.
Not answering an internal hazard report is second, and it can lead to both a complaint to OSHA and a willful classification. An unanswered message that ends up as a complaint is also the evidence that you knew.
Missing an abatement date is third. It is the only classification that accrues daily, it requires no new hazard, and it happens because a date sat in an envelope rather than in a calendar.
Treating training as done rather than documented is fourth. Two standards in the top ten are essentially training and documentation failures. The employer usually did the training. They could not show it.
Paying the citation without an informal conference is fifth. It is free, it is where an informal settlement can lower the penalty, and skipping it is an easy way for a small employer to overpay.
And assuming your industry is out of scope is last. Hazard Communication reaches any workplace that uses cleaning chemicals beyond household levels. Lockout/Tagout reaches anyone whose staff clean powered equipment. The top ten looks like a construction list, but five of its standards apply in general industry.
Each of these is cheap to fix before an inspection and costly to fix after one. Start with the poster, a hazard reporting route that answers, and dated training records, put every deadline in a calendar the day it appears, and use the free consultation if you want a professional to check your site.
Frequently Asked Questions
What is an OSHA violation?
An OSHA violation is a finding, made during an inspection and written up in a citation, that an employer broke a workplace safety standard, another regulation, or the general duty clause of the Occupational Safety and Health Act. OSHA places each violation in one of six categories based on severity and what the employer knew: de minimis, other-than-serious, serious, willful, repeat, and failure to abate. Each category has its own penalty range, and the category often matters more than the hazard itself, because willful and repeat classifications raise the maximum penalty roughly tenfold.
What are the 6 types of OSHA violations?
OSHA recognizes six types of violation. De minimis is a technical deviation with no direct relationship to safety, which is documented but produces no citation and no penalty. Other-than-serious relates to safety but is unlikely to cause death or serious harm. Serious means a substantial probability of death or serious physical harm exists and the employer knew or should have known about it. Willful means intentional disregard or plain indifference to the law. Repeat means a substantially similar violation was previously cited at any of the employer’s establishments. Failure to abate means a previously cited hazard remains uncorrected after the abatement date.
How much is an OSHA fine?
Federal maximums for 2026 are $16,550 for a serious or other-than-serious violation, $165,514 for a willful or repeated violation, and up to $16,550 per day for failure to abate past the abatement date. These are ceilings rather than typical assessments. The proposed penalty starts from a gravity-based amount reflecting severity and probability, then is cut for size of business, good faith, inspection history, and quick correction of the hazard, with each cut applied to the running total rather than added to the others. Two limits apply as well: a willful violation cannot be proposed below $11,823, and the total for a failure to abate normally stops at 30 times the daily figure.
Did OSHA penalties increase this year?
No. Agencies normally raise civil penalties each January using the previous October’s Consumer Price Index, but the lapse in federal funding in late 2025 left the Bureau of Labor Statistics without an October 2025 figure. The 2015 statute that governs the adjustment has no fallback calculation, so the Office of Management and Budget told every agency, in Memorandum M-26-11, to skip the increase. OSHA’s own memorandum of May 21, 2026 confirms that it keeps applying the 2025 penalty levels through 2026. The $16,550 and $165,514 maximums therefore did not change, and any page listing higher 2026 amounts is quoting numbers that were never issued.
What is the most common OSHA violation?
Fall Protection General Requirements, 29 CFR 1926.501, has been the most frequently cited standard for sixteen consecutive fiscal years. OSHA’s preliminary fiscal year 2026 figures, which run from October 2025 through August 2026, show 4,041 citations under it, just over twice the 1,961 issued under Hazard Communication in second place. Lockout/tagout, scaffolding, ladders, respiratory protection, powered industrial trucks, fall protection training, eye and face protection, and machine guarding complete the top ten. Five of the ten are construction standards, and the other five (hazard communication, lockout/tagout, respiratory protection, powered industrial trucks, and machine guarding) apply in general industry. Final counts for the full fiscal year come out later and will differ.
Do OSHA rules apply to businesses with fewer than 10 employees?
Yes. The confusion comes from a partial exemption that covers recordkeeping only: an employer that never had more than 10 employees at any point in the previous calendar year does not have to keep the OSHA 300 log, the 300A summary, or the 301 incident report. Everything else still applies, including the safety standards themselves, the general duty clause, the workplace poster, any training a standard requires, and, critically, the duty to report a work-related death within 8 hours and an in-patient hospitalization, amputation, or loss of an eye within 24 hours.
What happens when you get an OSHA violation?
A citation arrives listing every alleged violation with its classification, its proposed penalty, and the date by which the hazard must be fixed. Put it up at or near where each violation occurred so employees can read it, and leave it there for three working days or until you correct the hazard, whichever takes longer. The clock that matters is the 15 working days after you receive it: that is your window to contest the citation, the penalty, or the abatement date, and once it closes the citation is a final order that no one can review. An informal conference with the Area Director can end in a settlement that lowers penalties or changes classifications, but requesting one does not pause that clock.
Can OSHA inspect a small business without warning?
Yes. OSHA does not normally warn employers before an inspection, and announcing one in advance is prohibited except in narrow circumstances. When OSHA chooses what to inspect, imminent danger comes first, then fatalities and catastrophes, then worker complaints and referrals, then planned inspections of high-hazard industries, and last, follow-ups on earlier citations. For most small businesses the likelier trigger is an employee complaint or a reportable injury rather than a random visit, which means the two things most likely to bring OSHA to your door are ones you can influence.
Are OSHA violations public?
Yes. OSHA publishes inspection and citation data through its establishment search tool, and several third-party databases republish it in more searchable form. Citations appear with the establishment name, the standards cited, the classification, and the proposed and current penalty amounts. Significant cases are also announced by press release naming the employer. For a small business, the reputational exposure and its effect on customers, insurers, and hiring frequently outweighs the penalty itself.
Make HR the easy part of running your business
Onboarding, e-signatures, training and core HR in one place. Up and running in 5 minutes.
- 7-day free trial
- No credit card required
- Cancel anytime