Written safety programs

OSHA Written Safety Program Requirements: Which Programs Must Be in Writing?

OSHA written safety program requirements are not the same for every employer. There is no single federal OSHA rule requiring every company to maintain the same “safety manual”; written plans, programs and procedures are triggered by specific hazards, activities and standards.

Reviewed against primary agency sources · September 28, 20269-minute read

Buying a generic safety manual can create a false sense of security. OSHA requirements are hazard- and activity-specific, and several standards require written programs or procedures only when their applicability criteria are met.

The right question is not “Do I need a safety manual?” It is “Which standards apply to our work, and which of those standards require a written plan, procedure or program?”

What written safety programs does OSHA require?

OSHA does not publish one universal list that applies identically to every company. An employer should first identify its industry, workplace hazards, employee exposures and covered activities, then determine which OSHA standards apply. Those applicable standards determine which written plans, programs, procedures and records are required.

For example, an employer with 60 employees does not automatically need a different set of written programs simply because it has 60 employees. The controlling questions are what work employees perform, what hazards and exposures exist, and which standards apply. Employer size can matter for particular provisions—such as the limited oral emergency-action-plan allowance for employers with 10 or fewer employees—but it does not replace the hazard-by-hazard review.

What written safety programs does OSHA require?

OSHA does not publish one universal list that applies identically to every company. An employer should first identify its industry, workplace hazards, employee exposures and covered activities, then determine which OSHA standards apply. Those applicable standards determine which written plans, programs, procedures and records are required.

For example, an employer with 60 employees does not automatically need a different set of written programs simply because it has 60 employees. The controlling questions are what work employees perform, what hazards and exposures exist, and which standards apply. Employer size can matter for particular provisions—such as the limited oral emergency-action-plan allowance for employers with 10 or fewer employees—but it does not replace the hazard-by-hazard review.

Common federal OSHA written-program triggers

Hazard Communication — 1910.1200Covered employers must develop, implement and maintain a written HazCom program addressing labels, SDSs, training and required chemical information.
Respiratory Protection — 1910.134When respirators are necessary or required by the employer, a written respiratory-protection program with worksite-specific procedures is generally required.
Bloodborne Pathogens — 1910.1030Employers with employees who have occupational exposure must establish a written Exposure Control Plan and review/update it as required.
Hazardous Energy — 1910.147The energy-control program includes procedures, training and periodic inspections. Machine/equipment-specific energy-control procedures are generally documented unless a narrow exception is met.
Emergency Action Plans — 1910.38An EAP is required when another OSHA standard requires one. It is generally written and kept in the workplace, with an oral-plan allowance for employers with 10 or fewer employees.
Permit-Required Confined Spaces — 1910.146Employers whose employees enter permit spaces may need a written permit-space program addressing entry procedures, roles, testing, rescue and other controls.

A written document is only one part of compliance

A compliant written program normally has to connect to real implementation. A respiratory program, for example, is not complete because a document exists; the standard also addresses respirator selection, medical evaluations, fit testing, use, maintenance, training, program evaluation and records.

Likewise, a HazCom program must match the chemicals actually present, the workplace labeling system, SDS availability and employee training. Generic language that does not reflect the workplace can be difficult to defend and even harder for employees to use.

State-plan and industry differences matter

Federal OSHA is not the only possible layer. OSHA-approved state plans can have requirements that are at least as effective as federal OSHA and may differ in important ways. Industry classification also matters: construction, maritime and agriculture use different regulatory structures for many hazards.

A practical way to build the program list

  1. Identify jurisdiction and industry.
  2. List significant hazards, equipment and exposures.
  3. Map each hazard to the current regulation.
  4. Identify written-program, procedure, permit, inspection and recordkeeping requirements.
  5. Assign program owners and review dates.
  6. Link training and field records back to the written program.

Primary sources

Use the current regulation and agency guidance for decisions about your workplace. These links were reviewed when this resource was published.

Important boundary

This resource is general educational information, not a legal determination that a particular OSHA, state-plan, DOT or other requirement applies to your company. Applicability depends on industry, jurisdiction, tasks, exposures, equipment, employee duties and other facts.

Common questions

Frequently asked questions.

What written safety programs does OSHA require for a company?

There is no single list that applies to every company. The required written programs depend on the employer’s industry, hazards, exposures, equipment and activities. Common triggers include Hazard Communication, Respiratory Protection, Bloodborne Pathogens, hazardous-energy control, Emergency Action Plans and permit-required confined spaces when the applicable standard’s criteria are met.

What written safety programs does OSHA require for a company?

There is no single list that applies to every company. The required written programs depend on the employer’s industry, hazards, exposures, equipment and activities. Common triggers include Hazard Communication, Respiratory Protection, Bloodborne Pathogens, hazardous-energy control, Emergency Action Plans and permit-required confined spaces when the applicable standard’s criteria are met.

Does OSHA require every company to have the same safety manual?

No. Federal OSHA uses hazard- and activity-specific standards. The written plans and programs an employer needs depend on which standards apply.

Does a small business still need written safety programs?

Potentially, yes. Company size does not eliminate hazard-specific requirements. Some standards contain limited small-employer provisions, but each standard must be evaluated on its own.

Can I use a safety-program template?

A template can be a starting point, but it should be validated and customized to the actual workplace, hazards, equipment, procedures, responsible roles and jurisdiction.

How often should written programs be reviewed?

Review timing depends on the standard and changes in the workplace. Some rules specify review/update frequencies; others require updates when conditions or procedures change.

SafetyFlow HQ

Move from scattered requirements to managed safety workflows.

See how SafetyFlow HQ brings compliance, field safety, incidents, corrective actions and records together.