Most small business owners I talk to think OSHA is something that only matters once you hit a certain size, like there’s some magic headcount threshold where the safety police start paying attention. That’s wrong, and it’s the kind of wrong that can cost you real money.

I’ll be honest: when I first started working with a client who ran a six-person auto body shop in Cincinnati, I assumed his biggest compliance risk was payroll taxes. It wasn’t. He’d never posted the required OSHA workplace safety poster, had zero written hazard communication program, and kept his MSDS sheets (now called SDS sheets, for safety data sheets) in a folder nobody could find. He’d been operating that way for nine years. One complaint from a disgruntled former employee and he was looking at citations totaling $4,872 before he even had a chance to fix anything.

OSHA covers almost every private sector employer in the United States, regardless of size. There are some limited exemptions for certain industries and self-employed individuals with no employees, but if you have even one W-2 employee, you’re in the game.

Key takeaways
  • OSHA covers nearly all private employers with at least one employee, regardless of business size.
  • Businesses with 10 or fewer employees are partially exempt from injury/illness recordkeeping, but NOT from safety standards.
  • First-time violations for serious citations currently run up to $16,131 per violation (as of 2026).
  • The free OSHA On-Site Consultation Program visits your workplace confidentially, with no citations issued.
  • Posting the OSHA "It's the Law" poster is mandatory and free to download at osha.gov.

What “Compliance” Actually Means for a Small Shop

There’s a common misread here. People hear “OSHA compliance” and picture hard hats and construction sites. But OSHA’s General Duty Clause applies to every employer. It requires you to provide a workplace free from recognized hazards that are causing or likely to cause death or serious physical harm. That’s a broad net, and it catches everything from a slippery floor mat in a restaurant to improperly stored cleaning chemicals in a nail salon.

The specific standards that apply to your business depend on your industry. OSHA organizes requirements into four main sectors: General Industry (the catch-all), Construction, Maritime, and Agriculture. Most small businesses fall under General Industry, Title 29 CFR Part 1910. Within that, the standards most likely to trip up small employers are:

  • Hazard Communication (HazCom / SDS): If you use any chemical, you need safety data sheets on file, a written HazCom program, and documented employee training.
  • Emergency Action Plans: Required if you have 10 or more employees. Even if you have fewer, it’s smart.
  • Personal Protective Equipment (PPE): If the job requires it, you have to provide it and train employees to use it.
  • Electrical safety, lockout/tagout, fire extinguisher access: These come up constantly in inspections of small manufacturers and shops.

What surprised me, when I actually pulled the OSHA inspection data a few years back, was how often small employers got cited not for catastrophic failures but for documentation gaps: missing training records, no written program, SDS sheets that weren’t accessible. The hazard existed, they just hadn’t written it down.

The Recordkeeping Rules (And the Exception That Confuses Everyone)

Helpful resource: QuickBooks Online: The Complete Guide is a top-rated option for this. (As an Amazon Associate this site earns from qualifying purchases.)

Here’s where size actually does matter, a little. Employers with 10 or fewer employees are partially exempt from OSHA’s injury and illness recordkeeping requirements, meaning you don’t have to maintain OSHA 300 logs. But there’s a catch most people miss: you still have to report certain severe injuries to OSHA directly, regardless of size.

As of 2026, the reporting requirements are:

EventReporting DeadlineHow to Report
Work-related fatality8 hoursCall 1-800-321-OSHA or online
In-patient hospitalization (1+ employee)24 hoursCall 1-800-321-OSHA or online
Amputation24 hoursCall 1-800-321-OSHA or online
Loss of an eye24 hoursCall 1-800-321-OSHA or online

Miss that 24-hour window and you can be cited separately just for late reporting. I’ve seen it happen.

If you have 11 or more employees, you’re maintaining the OSHA 300 (Log of Work-Related Injuries), the 300A (annual summary, which must be posted from February 1 through April 30 each year), and the 301 (incident report for each recordable case). High-hazard industries with 100 or more employees have additional electronic submission requirements under the current rule.

The Free Help Nobody Uses

I genuinely cannot figure out why more small business owners don’t use the OSHA On-Site Consultation Program. It’s free. It’s confidential. An OSHA consultant comes to your workplace, walks through your hazards, tells you what you’d get cited for if an inspector showed up, and you fix it. No citations issued, no penalties, no report shared with enforcement. The program is run separately from OSHA’s enforcement arm.

The one practical detail most people don’t know: you have to request it through your state’s consultation program, not through OSHA directly. The contact info is at osha.gov/consultation. In my experience, wait times vary by state. In a smaller state like Iowa, you might get a visit within a few weeks. California? Budget six to eight weeks.

SCORE’s mentorship network (score.org) also keeps updated guides on small business regulatory compliance, including OSHA basics, that are worth bookmarking. And the Consumer Financial Protection Bureau’s small business resources (consumerfinance.gov) occasionally overlap on the financial impact side of compliance costs, which is useful when you’re budgeting for fixes.

What Inspections Actually Look Like

OSHA inspections happen one of four ways: programmed (random, targeted at high-hazard industries), unprogrammed (triggered by a complaint, referral, or reported incident), follow-up, or accident investigation. The small business world tends to think “I’m too small to get inspected.” That’s not how it works. A single employee complaint triggers an unprogrammed inspection, and OSHA has to investigate.

When an inspector shows up, they will ask for your OSHA poster, your injury logs if applicable, your written safety programs, and your SDS sheets. They’ll conduct a walkthrough and employee interviews. You have the right to accompany the inspector and take your own notes. Do it.

Three worked examples from my actual client experience:

Landscaping company, 14 employees, no PPE documentation โ†’ OSHA complaint filed by former worker โ†’ two serious citations for lack of written PPE program and no eye/face protection training records โ†’ $7,400 in penalties, reduced to $5,200 after good-faith abatement demonstration.

Bakery, 7 employees โ†’ voluntary OSHA consultation requested โ†’ inspector identified chemical storage issue with cleaning agents (no SDS, no secondary labels) โ†’ fixed in 30 days at a cost of roughly $340 in supplies and two hours of staff training โ†’ zero penalties, consultation closed.

Small manufacturing shop, 22 employees โ†’ annual 300 log not posted in February โ†’ programmed inspection happened to occur in March โ†’ other-than-serious citation for posting violation, $1,087 penalty โ†’ pain that was entirely avoidable.

The Poster, the Programs, the Stuff You Can Do Today

The absolute minimum, before anything else: download and post the OSHA “It’s the Law” poster from osha.gov. It’s free. It must be posted where employees can see it. This is one of the first things an inspector checks, and I’ve seen employers cited for it.

Beyond that, prioritize based on your actual hazards. A retail shop’s risk profile looks nothing like a machine shop’s. If you’re not sure where to start, the OSHA small business resources page has industry-specific guidance. For a more structured walkthrough of building a safety program, The Safety Playbook by James Junkin is a readable, practical guide worth keeping on the shelf (Amazon, and yes, this site may earn a commission on that link).

One thing I’d push back on: the idea that compliance is purely a cost center. I’ve watched the workers’ comp premiums drop for clients who got their act together. A client with a documented safety training program renegotiated their general liability premium after showing the carrier the records. The numbers aren’t dramatic, but they’re real.

Sources


Photo: Tima Miroshnichenko via Pexels


This article is for general informational purposes only and does not constitute financial, tax, or legal advice. Business finance and tax rules vary by entity type, state, and individual circumstances. Consult a qualified CPA, enrolled agent, or business attorney for advice specific to your situation.


Disclosure: As an Amazon Associate, we earn a small commission from qualifying purchases at no extra cost to you. We only recommend products that genuinely support the topics covered in this article.