Does OSHA’s Hazard Communication Standard Apply to Small Businesses?

Yes — and there is no employee-count exemption in it. The “10 or fewer employees” exemption almost everyone is thinking of is in a different rule, 29 CFR 1904.1, and it exempts you from keeping injury and illness records. So does the list of “partially exempt industries”. Neither one touches chemical safety. A three-person shop with a drum of solvent has the same hazard communication duties as a plant with four hundred people.

What follows is the exact wording that decides it — who 29 CFR 1910.1200 says it covers, what the 10-employee rule actually exempts you from, and what the standard costs a very small employer to satisfy, using our own citation data.

1. Who the standard says it covers

29 CFR 1910.1200(b) is the scope paragraph. It sets the trigger by chemical, not by headcount:

“This section applies to any chemical which is known to be present in the workplace in such a manner that employees may be exposed under normal conditions of use or in a foreseeable emergency.”

That is the whole test. If a hazardous chemical is present and your people may be exposed to it in normal use or in a foreseeable emergency, the section applies. There is no floor to fall under.

We searched the full text of 1910.1200 on eCFR, appendices included — more than 300,000 characters of it (checked Oct 2026). The phrases “10 or fewer”, “ten or fewer”, “small business”, “small employer” and “number of employees” appear zero times. There is no size threshold in the standard to find.

What the standard does do for a small employer is narrow the job. Paragraph (b)(1) finishes with a parenthetical that most people never read:

“(Employers who do not produce or import chemicals need only focus on those parts of this rule that deal with establishing a workplace program and communicating information to their workers.)”

Classifying hazards, authoring safety data sheets and designing shipped labels are the manufacturer’s and importer’s job. If you buy chemicals and use them, your side is the workplace program, the labels on what you decant, keeping the sheets reachable, and training.

2. What the 10-employee rule really exempts you from

The rule people are remembering is 29 CFR 1904.1, and its own title says what it covers: Partial exemption for employers with 10 or fewer employees. Paragraph (a)(1) reads:

“If your company had 10 or fewer employees at all times during the last calendar year, you do not need to keep OSHA injury and illness records unless OSHA or the Bureau of Labor Statistics informs you in writing that you must keep records”

Injury and illness records. The OSHA 300 log, the 301 incident reports, the 300A summary you post every February. Not safety data sheets, not labels, not training, not a written program. 1904 is the recordkeeping rule; 1910.1200 is a health standard. Being outside one says nothing about the other.

Two details of the size exemption trip people up. It is measured across the whole business, not per location — 1904.1(b)(1) says the exemption is based on the number of employees in the entire company — and it is peak employment during the last calendar year, so a seasonal crew that pushed you to twelve for three weeks ends it. And even inside the exemption, one duty survives:

“all employers covered by the OSH Act must report to OSHA any work-related incident that results in a fatality, the in-patient hospitalization of one or more employees, an employee amputation, or an employee loss of an eye”

3. The “our industry is exempt” version of the same mistake

The other exemption people cite is 29 CFR 1904.2, for establishments in certain industries. Its basic requirement:

“If your business establishment is classified in a specific industry group listed in appendix A to this subpart, you do not need to keep OSHA injury and illness records unless the government asks you to keep the records”

Again: injury and illness records. The appendix lists 82 four-digit NAICS industry groups — retail stores, insurance and banking, professional and technical services, medical and dental offices, schools, religious and civic organisations, restaurants and bars, personal care services. A dental office is on that list. Hazard communication still applies to it, because 1910.1200(b)(2) turns on a hazardous chemical being present in the workplace, not on the industry code. So it still needs a written program under 1910.1200(e). It still needs its decanted containers labelled under 1910.1200(f). It still needs the safety data sheets for its disinfectants accessible under 1910.1200(g). And its staff still need training under 1910.1200(h).

Note the different unit, too: the size exemption is company-wide, while the industry exemption is applied establishment by establishment, so a company can have one location exempt and another not.

4. What it actually takes in a small workplace

Four paragraphs of 1910.1200 do the work for an employer who buys chemicals rather than making them.

5. What small employers actually get cited for

We keep a dataset of 138 federal HazCom citations issued to employers and published in OSHA’s enforcement data. Grouped by which paragraph was cited:

• (e) written program — 52 citations, $86,704. The single most cited item.
• (h) training — 46 citations, $79,043.
• (g) safety data sheets — 26 citations, $11,194.
• (f) labels — 14 citations, $5,979.

Between them, the written program and training account for $165,747 of $182,920 — 91% of all the penalty money in the sample — and they are the two items that cost a small business nothing but an afternoon. The paperwork, not the chemicals, is what gets written up.

The money is not usually ruinous, either: 86 of the 138 citations (62%) carried no penalty at all, and among those that did, the median charge was $2,773 and the largest in the sample was $16,550.

One honest limit on this data. Every establishment in our sample sits in construction, manufacturing, repair or building services; none is in the recordkeeping-exempt industry groups. That tells you where federal inspections concentrate. It does not tell you who the standard covers, which is settled by the text quoted above, and a complaint or an injury can bring an inspector to any workplace.

6. The cases people ask about

“We have no employees.” The duties in 1910.1200 run to employers with respect to their employees — a genuine sole proprietor with none has nobody to inform or train. That changes the moment you hire, and it does not travel with you onto someone else’s site, where the host employer’s chemicals and your own both have to be communicated.

“We only use ordinary cleaning products.” There is a consumer product exemption at 1910.1200(b)(6)(ix), and it is narrower than it sounds: it applies where the employer can show the product is used for the purpose the chemical manufacturer intended, and the use results in a duration and frequency of exposure no greater than a consumer could reasonably experience. Diluting a commercial disinfectant all shift is not consumer use.

“We are in a state plan state.” State plans have to be at least as effective as the federal standard, so nothing above gets weaker; several states add duties, and some cover public employers that federal OSHA does not. Whether your state has adopted the 2024 update yet: HazCom in State Plan states.

7. A five-minute check

1. Walk the building and write down every chemical product you find. That list is the core of the 1910.1200(e) written program.
2. For each one, can someone on shift produce the safety data sheet without asking you for a key or a password? That is the 1910.1200(g) test.
3. Look at every container that is not in the packaging it arrived in. Is it labelled with the product identifier and the hazards? That is 1910.1200(f).
4. Can each person name the hazards of what they handle and say where the sheets are? That is 1910.1200(h).
5. Write down when each person was last trained, and what on. 1910.1200 does not require this: the word “record” does not appear once in its operative text, and there is no retention period anywhere in the standard. But 1910.1200(h) is the second most cited paragraph in our data, and a dated sign-off sheet is the only practical way to show it was done.

Frequently asked questions

Does OSHA's Hazard Communication Standard apply to small businesses?

Yes. 29 CFR 1910.1200(b)(2) applies the section to any chemical which is known to be present in the workplace in such a manner that employees may be exposed under normal conditions of use or in a foreseeable emergency. The trigger is the chemical, not the headcount, and no employee-count threshold appears anywhere in the section — the phrases “10 or fewer”, “small business” and “number of employees” do not occur in its text at all.

Are employers with fewer than 10 employees exempt from OSHA?

No. The exemption at 29 CFR 1904.1 is titled Partial exemption for employers with 10 or fewer employees, and what it exempts you from is keeping OSHA injury and illness records — the 300 log, the 301 forms and the 300A summary. It is measured on peak employment across the entire company during the last calendar year, and even inside it every employer covered by the OSH Act must still report a fatality, an in-patient hospitalization, an amputation or an employee's loss of an eye.

Our industry is on OSHA's partially exempt list. Do we still need safety data sheets?

Yes. The list in Appendix A to Subpart B of Part 1904 covers 82 four-digit NAICS industry groups, and 29 CFR 1904.2 exempts establishments in them from keeping injury and illness records only. Hazard communication is a separate standard with its own scope, so a dental office, a bank branch or a restaurant that keeps hazardous chemicals still needs the safety data sheets, the labels, the written program and the training.

What does a five-person shop actually have to have?

Four things, from four paragraphs of 29 CFR 1910.1200. A written hazard communication program including a list of the hazardous chemicals known to be present, under paragraph (e). Labels left intact on shipped containers and workplace labels on the containers you decant into, under paragraph (f). A safety data sheet for each hazardous chemical, readily accessible during each work shift to employees when they are in their work areas, under paragraph (g). And information and training at the time of initial assignment and whenever a new chemical hazard is introduced into the work area, under paragraph (h).

How much does a HazCom citation cost a small employer?

In our dataset of 138 federal HazCom citations, 86 of them — 62% — carried no penalty at all. Among those that did, the median charge was $2,773 and the largest was $16,550. The concentration matters more than the average: citations under paragraph (e) and paragraph (h) account for $165,747 of the $182,920 total, which is 91% of the penalty money, and both are fixed with an afternoon of writing rather than with equipment.

Does OSHA require annual HazCom training?

No. 29 CFR 1910.1200(h)(1) requires information and training at the time of their initial assignment, and whenever a new chemical hazard the employees have not previously been trained about is introduced into their work area. The word “annual” does not appear anywhere in the standard, including its appendices.

Related guides

• What a written hazard communication program has to contain
• HazCom training requirements
• The HazCom compliance checklist
• The consumer product exemption, and its limits
• Does OSHA require SDS software?
• What a HazCom violation actually costs
• Do I need an OSHA 300 log? The recordkeeping exemptions
• OSHA required posters: what small employers must post
• Lockout/tagout requirements (29 CFR 1910.147) for small shops