Osha Requirements For Small Businesses: Where to Start

If you run a small business, OSHA almost certainly applies to you, even if you have only one or two employees. What changes with size is mostly paperwork: some recordkeeping duties are relaxed for small firms, but the obligation to keep people safe is not. This article covers who is covered, the duties every employer carries, the recordkeeping and reporting rules, and where first aid, CPR, and AED readiness fit in. It also lists the mistakes that most often lead to citations and a 90-day plan for getting organized. The rules below are federal. Your state may add to them, so treat this as a map and confirm the details for your location and industry.

Does OSHA Apply to a Business With Only a Few Employees?

Yes, in nearly every case. The Occupational Safety and Health Act of 1970 covers most private-sector employers, with no minimum headcount. Its General Duty Clause requires every covered employer to provide a workplace free of recognized hazards that are causing or likely to cause death or serious physical harm. That duty applies whether you employ three people or three thousand.

The exemptions are narrow:

• Self-employed owners with no employees.
• Immediate family members of farm employers who work on that family farm.
• Hazards that another federal agency regulates by statute, such as certain mining, transportation, or nuclear operations. OSHA still covers other hazards at those sites.

Public-sector employers are handled differently. Federal agencies have their own OSHA-based programs, and state and local government workers are covered only in states that run their own plans.

Federal OSHA or a State Plan?

A State Plan is an OSHA-approved workplace safety program run by a state instead of federal OSHA. Roughly half of states operate one, and they must be at least as effective as the federal program. Many adopt additional rules or stricter requirements, and some cover state and local government employees. Check OSHA's State Plans page to see which system governs you before you assume federal rules are the full picture.

Same Law, Different Standards

Suppose a six-person dental office and a four-person landscaping crew both operate in the same town. Both are covered, and both owe their employees a safe workplace. But the dental office will focus on bloodborne pathogens, infection control, and chemical handling, while the landscaping crew will deal with heat exposure, equipment guarding, noise, and vehicle safety. Industry determines which specific standards you must follow, which is why identifying yours is the first real task.

The Core Duties Every Small Employer Has

Beyond the General Duty Clause, employers must comply with the OSHA standards that apply to their operations. Most small businesses are governed by the general industry standards in 29 CFR Part 1910. Construction work falls under Part 1926, and agriculture and maritime have their own sets. A handful of duties show up in almost every workplace.

Hazard Communication

If employees use or are exposed to hazardous chemicals, including common ones like cleaning products, solvents, or fuels, the Hazard Communication standard applies. You need to keep containers labeled, maintain a Safety Data Sheet (SDS) for each hazardous chemical, make those sheets accessible to employees during their shifts, and train workers on the hazards and protective measures. You also need a written hazard communication program describing how you do all of this.

Personal Protective Equipment

Personal protective equipment (PPE) means gear such as gloves, eye protection, hearing protection, respirators, and hard hats. The process is straightforward: assess the workplace for hazards that require PPE, select appropriate equipment, and train employees on when to wear it, how to use and care for it, and its limits. In most cases you must pay for required PPE. There are limited exceptions, such as ordinary safety-toe footwear or prescription safety eyewear that workers may take off the job site, so check the specific rule before shifting costs to employees.

Worker Rights

Employees have the right to raise safety concerns, request an OSHA inspection, and participate in inspections without retaliation. Firing, demoting, cutting hours, or otherwise punishing a worker for doing so is illegal, and complaints can be filed with OSHA within a short window, so do not assume a retaliation claim will wait. You must also display the OSHA "Job Safety and Health: It's the Law" poster where employees will see it. Some states require their own version, and OSHA provides the poster free of charge.

Recordkeeping and Reporting Rules for Small Firms

This is the area where small size matters most, and also where owners most often misread the rules. The requirements sit in 29 CFR Part 1904.

Who Is Partially Exempt

Employers with 10 or fewer employees at all times during the previous calendar year are generally exempt from routine injury and illness recordkeeping. So are employers in certain low-hazard industries, such as many offices, retail clothing stores, and similar settings, based on the list in Appendix A to Subpart B of Part 1904. That list is tied to industry classification codes and is updated periodically, so verify your industry against OSHA's recordkeeping page rather than relying on memory. Even if you are exempt from routine logs, OSHA or the Bureau of Labor Statistics can select you to submit injury data in a given year.

What Exempt Firms Must Still Report

The recordkeeping exemption is not a reporting exemption. Every covered employer, regardless of size or industry, must report to OSHA:

• Any work-related fatality, within 8 hours of learning about it.
• Any work-related inpatient hospitalization, amputation, or loss of an eye, within 24 hours of learning about it.

Reports can be made by phone to the nearest OSHA area office, through OSHA's toll-free line, or online. State Plan states may have their own reporting procedures.

What Non-Exempt Firms Keep

If you are not exempt, you must record recordable injuries and illnesses, meaning work-related cases that involve death, days away from work, restricted work or job transfer, medical treatment beyond first aid, or loss of consciousness, among other criteria. Three forms apply:

• Form 300: the log of work-related injuries and illnesses.
• Form 301: the incident report for each case.
• Form 300A: the annual summary, which you must post in a visible place from February 1 to April 30 each year.

Records must be retained for five years. Certain establishments must also submit their data electronically, and the size and industry thresholds for that have changed over time. As of 2026, confirm current requirements and deadlines on OSHA's recordkeeping page before assuming you do or do not have to submit.

Emergency Preparedness: First Aid, CPR, and AED Expectations

Emergency readiness is where regulations, guidance, and practical judgment overlap, and it is worth separating what is required from what is smart.

What the Standards Require

OSHA's medical services and first aid standard, 29 CFR 1910.151, requires employers to ensure medical personnel are available for advice and consultation on workplace health. When no infirmary, clinic, or hospital is in near proximity to the workplace, the employer must ensure someone is adequately trained to render first aid. Adequate first aid supplies must be readily available. OSHA does not define "near proximity" by a fixed number of minutes in the standard itself, but its interpretations indicate that emergency care for serious injuries should be reachable within a few minutes, which makes remote and rural sites the clearest cases. Where there is a risk of life-threatening injuries, responders need to be on site, not just an ambulance away.

Where AEDs Fit

A common misconception is that OSHA requires an AED in every workplace. It does not generally mandate them. OSHA does, however, encourage employers to consider AEDs as part of a first aid program and provides guidance on placement and maintenance. Some states and localities add their own rules for certain building types or industries, so check your state's requirements. Even where no law applies, sudden cardiac arrest does not wait for a regulator, and survival depends heavily on how quickly CPR starts and a shock is delivered.

Bloodborne Pathogens

The bloodborne pathogens standard, 29 CFR 1910.1030, applies to workers with reasonable anticipated occupational exposure to blood or other potentially infectious materials. That includes employees in healthcare and dental settings, and it can include designated first aid responders. Covered employers need an exposure control plan, training, protective equipment, and hepatitis B vaccination offered to exposed workers.

A Practical Setup

• Stocked first aid kits sized to your workforce and hazards, checked on a schedule.
• Tourniquets and bleeding control supplies in settings with a risk of severe injury, such as equipment, tools, or vehicles.
• An AED placed where someone can reach it and return within a few minutes, with staff who know where it is.
• Employees certified in CPR and BLS. Training from providers such as 360 Safety also builds the confidence to act under pressure.

Common Mistakes That Lead to Citations

Small firms are rarely cited for exotic violations. Most problems are basic gaps that were easy to prevent.

Assuming size is an exemption. A small headcount relaxes some recordkeeping, not your obligation to follow standards that apply to your work. Inspectors do not skip small shops, and some of the most serious incidents happen in them.

Missing written programs and training records. Several standards require a written plan, including hazard communication, bloodborne pathogens exposure control, and, where applicable, an emergency action plan. Training that happened but was never documented is hard to prove. Keep dates, topics, and attendee names.

Neglected emergency supplies. First aid kits with expired or depleted contents are a frequent finding in practice, and the same goes for AEDs. A device with a dead battery or expired electrode pads may fail when it is needed. Most AEDs show a status indicator, but someone must be assigned to check it, along with pad and battery expiration dates.

Misreading the recordkeeping exemption. Owners sometimes conclude that being exempt from logs means they never have to tell OSHA about anything. A fatality or a qualifying hospitalization, amputation, or loss of an eye must still be reported within the required timeframes, and failing to do so can bring its own penalty.

Ignoring the cost of getting it wrong. OSHA adjusts its maximum penalties for inflation every year, with separate amounts for serious violations and for willful or repeated ones. Rather than rely on remembered figures, check OSHA's penalties page for the amounts in effect as of 2026. State Plan states set their own penalty schedules, and they can differ from the federal numbers.

A Practical Compliance Checklist for the First 90 Days

You do not need to do everything at once. A staged approach keeps the work manageable and puts the highest-risk items first.

Week 1: Find Out What Applies

• Identify your industry and the OSHA standards that govern it.
• Determine whether federal OSHA or a State Plan covers you, and note any state-specific rules.
• Confirm whether you are exempt from routine recordkeeping.
• Post the OSHA workplace poster.

Weeks 2 to 4: Walk the Site and Write It Down

• Walk every work area and list hazards: chemicals, machinery, electrical, slips and falls, heat, noise, vehicles.
• Ask employees what worries them. They often know where the problems are.
• Write the programs your operations require, such as hazard communication, PPE assessment, exposure control, and emergency action.
• Assemble Safety Data Sheets and make them easy to reach.

Month 2: Train and Document

• Train employees on the hazards, programs, and PPE that apply to their jobs, and keep sign-in records.
• Schedule CPR and BLS certification for designated responders and as many staff as practical.

Month 3: Equip and Verify

• Stock first aid kits, add tourniquets where injury risk warrants them, and place an AED where it can be reached quickly.
• Set a monthly inspection schedule for kits and AEDs, with a named owner and a log.
• Consider OSHA's free On-Site Consultation Program, which helps small and medium-sized businesses find hazards and fix them. It is run separately from enforcement, and it does not result in citations or penalties, though you must correct serious hazards that are identified.

Start With a Walkthrough, Then Build Your Emergency Readiness

Small size reduces some paperwork, but it does not reduce your core responsibility for the people who work for you. The most useful first step costs nothing: walk your workplace, list what could hurt someone, and decide what you would do if it did. From there, the rest of the checklist follows.

Ready to put safety into action? Whether you need CPR certification, workplace safety training, or guidance on selecting and maintaining life-saving equipment such as AEDs, tourniquets, and first aid products, we're here to help. Our training programs and safety solutions are designed to help individuals and organizations respond confidently when every second counts. Schedule your training today and take the next step toward creating a safer, more prepared workplace and community.