Walk onto almost any job site in the United States and you will see hard hats, machine guards, posted warning signs, and a yellow poster on the breakroom wall titled Job Safety and Health: It is the Law. Behind all of that sits a single federal agency: the Occupational Safety and Health Administration, better known as OSHA.

The phrase OSHA is shows up in millions of search queries every year because workers, supervisors, students, and employers genuinely want to know what this agency does, who it covers, and what powers it holds when a problem shows up on a job site.

Here is the short answer. OSHA is a federal agency inside the United States Department of Labor. Congress created it in 1970 when it passed the Occupational Safety and Health Act, and President Richard Nixon signed the law on December 29 of that year. Its mission, written into the statute itself, is to assure so far as possible every working man and woman in the Nation safe and healthful working conditions. That single sentence shapes everything OSHA does today, from writing standards on fall protection to inspecting a warehouse after a fatal forklift accident.

OSHA covers roughly 130 million workers across more than 8 million worksites. Federal OSHA enforces standards directly in 28 states, while 22 states plus Puerto Rico and the Virgin Islands run their own state plans that the federal agency reviews and approves. Those state plans must be at least as protective as the federal program, and many push further on issues like heat illness, workplace violence in healthcare, or aerosol transmissible disease control. Cal/OSHA in California is the most well known example, and many of its standards have later been adopted at the federal level.

The agency runs on a fairly simple cycle. It writes standards through a formal rulemaking process, publishes them in 29 CFR (the Code of Federal Regulations), trains workers and employers, conducts inspections, issues citations and penalties when violations are found, and helps small employers improve their programs through a free consultation service. Workers themselves play a central role: they can file confidential complaints, refuse imminent-danger work in narrow circumstances, request copies of their exposure records, and they cannot legally be fired or punished for any of those actions under Section 11(c) of the OSH Act.

This guide walks through every piece of that picture in plain language. You will see what OSHA stands for, how its standards are organized, the differences between federal and state programs, what employers must do under the General Duty Clause, what rights workers actually have on the floor, how an inspection unfolds, what penalties look like in 2024 dollars, and where the popular OSHA 10 and OSHA 30 outreach cards fit into the puzzle.

If you have ever stared at a poster, a permit, or a citation and wondered what OSHA actually is, the next several thousand words should leave you with a real answer.

One of the most common questions about OSHA is whether the federal agency or a state agency has jurisdiction over a particular workplace. The answer depends on which state you are in and sometimes on what kind of employer you work for. Federal OSHA directly covers private-sector workers in 28 states and several territories. The remaining 22 states, plus Puerto Rico and the United States Virgin Islands, operate their own state plans that have been formally approved by the federal agency.

State plans must be at least as effective as the federal program. That phrase, drawn straight from Section 18 of the OSH Act, means the state can match federal standards exactly or go further, but it cannot offer weaker protections. In practice, the strongest state plans have pushed well beyond the federal floor.

California, through Cal/OSHA, adopted heat illness prevention standards more than a decade before federal OSHA began moving on the same topic. Washington and Oregon have detailed agricultural rules that federal OSHA has not matched. Several state plans have aerosol transmissible disease standards that gave them an enforcement framework for healthcare worker protections during the COVID-19 pandemic that federal OSHA lacked.

There is a wrinkle for public-sector workers. Federal OSHA does not cover state and local government employees. In federal-only states, those public employees are not covered by OSHA at all unless the state separately chooses to extend protections. Some state plans, like New York and Illinois, exist specifically to cover public-sector employees while leaving private-sector enforcement to federal OSHA. So a sanitation worker in a federal-state private worksite is covered by federal OSHA, but a sanitation worker employed directly by a federal-state city government may have no OSHA coverage unless the state has its own program.

Federal employees fall under a separate but parallel system. Executive Order 12196 and 29 CFR Part 1960 require federal agencies to maintain occupational safety and health programs that are consistent with the OSH Act. OSHA monitors federal agency programs and can investigate complaints, but it cannot issue monetary penalties against another federal agency. Instead, it issues notices of unsafe or unhealthful working conditions, and the agency is expected to abate them through its own internal management process.

Then there are workplaces that are wholly outside OSHA's reach. Self-employed individuals without employees are not covered. Immediate family members on a family farm are exempt. Workers covered by other federal agencies are also outside OSHA's jurisdiction, including miners under MSHA, most railroad workers under the Federal Railroad Administration, atomic energy workers covered by the Atomic Energy Act, and most commercial flight crew members covered by the FAA. Domestic workers in private homes were historically excluded but several state plans have recently extended coverage to certain categories of household employees.

For workers and employers trying to figure out which authority applies, the OSHA website maintains a state-by-state map. If you live in Arizona, California, Oregon, Washington, North Carolina, Kentucky, Tennessee, Indiana, Iowa, Michigan, Minnesota, Maryland, Virginia, Nevada, New Mexico, South Carolina, Utah, Vermont, Wyoming, Alaska, Hawaii, Puerto Rico, or one of the public-sector-only states, you deal with a state plan rather than federal OSHA directly.

Programs like Cal/OSHA and Oregon OSHA have their own inspectors, their own complaint processes, and sometimes their own additional standards. The federal agency reviews these plans regularly and can withdraw approval if a state stops meeting the at-least-as-effective threshold, though that rarely happens.

One feature of the federal regulatory system that often confuses new compliance officers is the relationship between 1910 and 1926. A construction electrician installing a permanent power feed at a new factory works under 1926.416. The same electrician returning a year later to swap out a panel in the now-occupied facility works under 1910.333 because the facility is no longer a construction project. The standards overlap in spirit but the citations and required practices differ in subtle ways. Employers whose workforce moves across industry lines have to train workers in both standards and document which rules apply on which day.

OSHA standards generally fall into three groups. Specification standards tell you exactly what to do, like the 42-inch top rail height required by 1910.29 for general industry guardrails. Performance standards tell you what outcome to achieve and leave the method to the employer, like the requirement under 1910.132 to assess workplace hazards and select appropriate PPE. Process-based standards combine the two, requiring a written program plus specific elements, like the Hazard Communication Standard or the Process Safety Management standard for highly hazardous chemicals.

Beyond the published standards, the General Duty Clause in Section 5(a)(1) of the OSH Act gives OSHA authority over recognized hazards that have no specific standard. The clause requires every employer to furnish a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm.

OSHA uses 5(a)(1) sparingly, often in cases involving heat illness, workplace violence, ergonomics, or emerging hazards where rulemaking has not yet caught up. To support a 5(a)(1) citation, OSHA must show the hazard was recognized, it was likely to cause serious harm, and a feasible means of abatement existed.

Employers carry the majority of legal duties under the OSH Act. The most fundamental is the General Duty Clause already discussed, which applies to every employer regardless of industry and acts as a backstop where no specific standard exists. Beyond that, the standards in 29 CFR impose dozens of explicit responsibilities depending on the workplace, but a handful of duties cut across nearly every employer.

Every covered employer must provide a workplace free from recognized hazards, comply with all applicable OSHA standards, and ensure workers have and use safe tools and equipment. They must communicate hazards through the required postings, written programs, training, and Safety Data Sheets.

They must establish or update operating procedures, give workers protective equipment at no cost when required by a specific standard, provide medical examinations and surveillance when required (such as for hearing conservation, respirator users, lead-exposed workers, or bloodborne pathogen exposure), and keep records of work-related injuries and illnesses on OSHA Form 300, Form 300A annual summary, and Form 301 incident report.

Specific reporting timelines are non-negotiable. Employers must report any work-related fatality to OSHA within 8 hours of finding out about it. They must report any work-related in-patient hospitalization, amputation, or loss of an eye within 24 hours. These reports go to the local OSHA area office, to the 1-800-321-OSHA hotline, or through the agency's online reporting tool, and they trigger an automatic review that may include an inspection. Failing to report a fatality on time is itself a citable violation that can come with substantial penalties separate from any underlying hazard.

The Hazard Communication Standard, sometimes called HCS or HazCom, is the most frequently cited general industry standard year after year. It requires a written hazard communication program, an inventory of hazardous chemicals on site, properly labeled containers, Safety Data Sheets readily accessible to every worker on every shift, and training that covers chemical hazards before initial assignment and any time a new hazard is introduced. Employers who buy chemicals from a supplier inherit the labels and SDS but they are still responsible for keeping the SDS file current and accessible.

Recordkeeping is another constant duty. Employers in covered industries must maintain the OSHA Form 300 log of work-related injuries and illnesses, post the Form 300A annual summary in the workplace from February 1 through April 30, and keep individual Form 301 incident reports for each recordable case for five years. Certain larger and higher-hazard employers must also submit injury data electronically to OSHA each March through the Injury Tracking Application. Recordkeeping violations are heavily emphasized in targeted enforcement programs and they often lead to expanded inspections when irregularities turn up.

OSHA inspections follow a strict priority list. At the top are imminent danger situations where a hazard could reasonably cause death or serious physical harm immediately. These get same-day or next-day response. Second are fatalities and catastrophes (any incident that hospitalizes three or more workers, although the threshold dropped to one in-patient hospitalization in 2015). Third are worker complaints and referrals from other agencies. Fourth are programmed inspections under national emphasis programs and local emphasis programs, which target specific high-hazard industries each year. Last are follow-up inspections to verify abatement after a prior citation.

An inspection generally proceeds in three stages. First is the opening conference where the compliance officer presents credentials, explains the scope, asks about the employer's safety program, and identifies a management representative and an authorized employee representative who can accompany the walkaround. Second is the walkaround itself, where the compliance officer inspects the work areas, takes photographs and air samples as needed, interviews workers privately, and reviews records like the OSHA 300 log, training records, and written programs. Third is the closing conference where the inspector discusses apparent violations, abatement timelines, and the next steps for citation issuance.

Citations must be issued within six months of the violation. They specify the standard violated, a brief description of the hazard, a proposed penalty, and an abatement deadline. The employer has 15 working days to contest the citation, the penalty, or the abatement date by filing a Notice of Contest with the area director. Contests go to the Occupational Safety and Health Review Commission, which is an independent federal agency separate from OSHA itself. Employers who do not contest within 15 working days lose the right to do so and the citation becomes a final order.

Penalties have specific maximum levels that adjust each year for inflation. In 2024, the maximum penalty for a Serious or Other-than-Serious violation is $16,131 per violation. Failure-to-Abate violations carry a maximum of $16,131 per day beyond the abatement date. Willful and Repeated violations top out at $161,323 per violation. These maxima represent the high end; actual proposed penalties are calculated using a gravity assessment that considers severity, probability, employer size, good faith, and history. Small employers and first-time violators often see significant reductions from the maximum.

The most cited standards remain remarkably consistent across years. Fall Protection in construction (1926.501), Hazard Communication (1910.1200), Respiratory Protection (1910.134), Ladders (1926.1053), Scaffolding (1926.451), Lockout/Tagout (1910.147), Powered Industrial Trucks (1910.178), Fall Protection Training (1926.503), Personal Protective and Lifesaving Equipment (1926.102), and Machine Guarding (1910.212) typically round out the top 10 list that OSHA publishes annually at the National Safety Council conference each fall.

Employers worried about exposure can use the On-Site Consultation Program. Funded by OSHA but operated through state agencies and universities, this program provides free, confidential safety and health surveys to small and medium-sized businesses (typically fewer than 250 workers at the site and fewer than 500 nationally). Consultations cannot result in citations or penalties, and the findings stay confidential. Employers who go through the program and reach exemplary status can earn recognition through the Safety and Health Achievement Recognition Program, which carries a one-year exemption from programmed inspections.

The OSHA Outreach Training Program is the part of the agency that most workers encounter directly. Authorized trainers, certified by completing a one-week OSHA Training Institute course called the 500 (for construction trainers) or 501 (for general industry trainers), deliver standardized curriculum to workers who then receive a Department of Labor card. The most common formats are the 10-hour and 30-hour courses, with 10-hour courses aimed at entry-level workers and 30-hour courses aimed at supervisors and safety personnel.

OSHA 10 cards remain valid indefinitely as a federal credential, but many employers, unions, and state agencies treat them as expiring after three to five years and require refresher training. Several states have laws mandating OSHA 10 for public works construction projects, including New York (Local Law 196 and the broader state construction site safety training law), Connecticut, Massachusetts, Missouri, Nevada, New Hampshire, and Rhode Island.

Workers in these jurisdictions who lack a valid card cannot legally step onto regulated job sites. For background on how the credential works in practice, see our complete OSHA 10 certification overview and the related OSHA 30 certification guide for supervisors.

Beyond Outreach, the OSHA Training Institute and its 27 Education Centers across the country deliver more specialized courses on topics like trenching and excavation, fall protection, cranes and rigging, recordkeeping, machine guarding, and confined space rescue. These courses range from one day to several weeks and serve safety professionals, compliance officers from state plans, and corporate safety departments. The Susan Harwood Training Grant program funds nonprofit organizations to deliver targeted training to vulnerable worker populations including immigrants, temporary workers, and workers in high-hazard low-wage industries.

For everyday workers, the most accessible OSHA resources are the free publications on osha.gov, the regional and area office numbers, and the 1-800-321-OSHA hotline. Workers do not need a lawyer to file a complaint, request an inspection, or report retaliation. OSHA accepts complaints by online form, fax, mail, phone, and in person at any area office. Identifying information is kept confidential unless the worker requests otherwise, although a complaint based on facts unique to one worker can sometimes make confidentiality difficult to preserve in practice.

Looking at the agency in 2024 and beyond, the major active initiatives include the proposed heat injury and illness prevention standard, the renewed enforcement focus on warehousing and last-mile delivery operations under a National Emphasis Program, the expanded electronic recordkeeping reporting requirements, the continued integration of state plans, and a slow rollout of guidance on artificial intelligence and algorithmic management in workplaces. The agency also continues to publish guidance on emerging issues like wildfire smoke exposure, infectious disease beyond COVID-19, and lithium-ion battery hazards in storage and recycling facilities.

When someone says OSHA is something, the honest finish to the sentence depends on the angle. OSHA is a federal agency. OSHA is the entity that writes the rules posted on the lunchroom wall. OSHA is the inspector who shows up after a fatality. OSHA is the trainer who hands a worker the 10-hour card that gets them onto a New York City job site.

OSHA is the whistleblower investigator who orders an employer to rehire a worker fired for reporting a hazard. OSHA is the consultant who helps a 40-person fabrication shop fix machine guarding before a real inspector ever sets foot inside. Most of all, OSHA is the legal backstop that says workers in the United States do not have to choose between a paycheck and going home in one piece at the end of the shift.