The osha 100 employees vaccine rule is one of the most searched and most misunderstood topics in workplace safety. In November 2021, the Occupational Safety and Health Administration issued an emergency temporary standard that would have required employers with 100 or more workers to make sure staff were vaccinated against COVID-19 or tested weekly. Many people still believe that rule is in force today. It is not, and understanding why matters for every employer, supervisor, and safety student.
The osha 100 employees vaccine rule is one of the most searched and most misunderstood topics in workplace safety. In November 2021, the Occupational Safety and Health Administration issued an emergency temporary standard that would have required employers with 100 or more workers to make sure staff were vaccinated against COVID-19 or tested weekly. Many people still believe that rule is in force today. It is not, and understanding why matters for every employer, supervisor, and safety student. Practice with the free OSHA Safety Certificate practice test on PracticeTestGeeks (21 questions with answer explanations).
This guide separates history from current law. You will learn what the standard actually required, how the 100-employee threshold was counted, why courts blocked it, and what OSHA did afterward. Just as important, you will see which OSHA duties never went away, such as the General Duty Clause, injury recording, and whistleblower protection. Those continuing obligations show up on safety exams and in real inspections far more often than the vaccine rule ever did.
If you are studying for an OSHA 10-hour or 30-hour course, this topic is a useful case study in how federal safety rules are created. Standards normally go through lengthy notice-and-comment rulemaking. The emergency route, which OSHA used here, allows a much faster process, but only when the agency can show workers face a grave danger and that the rule is necessary. That high bar is exactly where the vaccine standard ran into trouble, as later sections explain.
Our guide to osha regulations general topics and the 10-hour and 30-hour classes explains how those programs introduce these ideas to construction and general industry workers. Use that resource alongside this article if you want a completion card and not just background knowledge. Here we focus on the vaccine rule, its aftermath, and the practical decisions employers still face when a workforce of 100 or more people raises questions about vaccination, testing, and illness at work.
Here is the short version. The federal vaccine-or-test rule for large private employers was stayed by the U.S. Supreme Court on January 13, 2022, and OSHA withdrew it as an enforceable standard later that month. No federal OSHA regulation currently requires private employers with 100 or more employees to mandate vaccines or weekly testing. However, employers may still choose to adopt such policies, subject to state law, anti-discrimination rules, and any collective bargaining obligations that apply.
That short version hides several nuances. Healthcare employers faced a separate vaccination requirement through the Centers for Medicare and Medicaid Services, which the Supreme Court allowed to proceed. Federal contractors faced yet another set of mandates that were litigated separately and later rescinded. Several states also passed laws restricting employer vaccine mandates. So whether your workplace can require a vaccine depends on industry, location, contracts, and the specific policy you decide to write.
Throughout this article, treat the numbers and dates as a reference point, not legal advice. Regulations change, and agencies update guidance without much warning. Before acting on any policy question, confirm current rules at osha.gov, check your state plan if you operate in a state-run program, and speak with qualified employment counsel. With that foundation in place, let us look at the numbers and then walk through the timeline of events that made the 100-employee threshold famous.
Interactive OSHA Safety Certificate resources on PracticeTestGeeks, free to start:
OSHA issues a separate COVID-19 emergency temporary standard for healthcare settings. It covered patient care areas and is distinct from the later rule aimed at large employers across all industries.
OSHA publishes the vaccination and testing standard for private employers with 100 or more employees. It requires a vaccination policy, weekly testing for unvaccinated staff, masks, and paid time for vaccination.
The Fifth Circuit Court of Appeals pauses enforcement, citing serious statutory and constitutional concerns. OSHA states it will suspend implementation while the litigation continues.
After the cases are consolidated in the Sixth Circuit, a panel lifts the stay 2–1. Employers face compliance deadlines only weeks away, and OSHA later announces a good-faith enforcement window.
In NFIB v. Department of Labor, a 6–3 majority stays the standard, reasoning that OSHA may regulate workplace hazards but not impose a broad public health mandate on tens of millions of workers.
OSHA withdraws the vaccination and testing standard as an enforceable emergency rule. Employers may keep, change, or end their programs, subject to state law and other federal requirements.
The emergency temporary standard, published in the Federal Register on November 5, 2021, applied to private employers with 100 or more employees in total. The count was firm-wide, not per site. A company with ten locations of fifteen workers each, for a total of 150 people, would have been covered. Part-time and remote employees counted toward the threshold, which surprised many small business owners who assumed their individual shops fell below the line.
Covered employers had to establish a written policy. One option was a mandatory vaccination policy. The other allowed workers to choose between vaccination and weekly testing plus face coverings. Employers also had to determine each employee's vaccination status, collect acceptable proof, maintain a roster, and support vaccination by providing up to four hours of paid time to get vaccinated and reasonable paid sick leave to recover from side effects.
Unvaccinated workers who stayed on the testing path had to be tested at least every seven days when they were in the workplace and provide the results to the employer. Anyone who tested positive or was diagnosed with COVID-19 had to be removed from the workplace immediately and could not return until meeting return-to-work criteria. Unvaccinated employees also had to wear face coverings indoors and when sharing a vehicle for work. Employers were not required to pay for testing or masks.
Employers also had to inform workers about the requirements, workplace policies and procedures, vaccine safety and efficacy, protection against retaliation, and the criminal penalties for knowingly supplying false documentation. They had to report work-related COVID-19 fatalities to OSHA within eight hours and work-related in-patient hospitalizations within 24 hours. Those reporting rules were part of the standard itself, separate from the ordinary injury and illness recordkeeping duties under Part 1904.
Compliance dates mattered. OSHA originally set December 5, 2021 for most requirements and January 4, 2022 for testing. After the Sixth Circuit allowed the rule to proceed, OSHA said it would not cite employers for most requirements before January 10, 2022, or for testing before February 9, 2022, provided they were making good-faith efforts. Because the Supreme Court halted the rule days later, those deadlines never became enforceable for most employers.
The standard did not apply to employees who worked alone, from home, or exclusively outdoors. Workplaces already covered by the healthcare emergency standard, and settings covered by federal contractor guidance, were excluded as well. Employers still had to consider reasonable accommodations for workers with medical conditions or sincerely held religious beliefs under the Americans with Disabilities Act and Title VII, which operate independently of OSHA and continue to apply today.
Enforcement would have followed OSHA's normal citation process. Serious violations carry maximum penalties above $16,000 per violation, and willful or repeat violations exceed $160,000, with amounts adjusted for inflation each year. Exam tip: an emergency temporary standard takes effect immediately on publication, remains in force for up to six months, and serves as a proposed permanent rule under Section 6(c) of the OSH Act. Questions about that structure appear often.
For most private employers, including those with 100 or more employees, no federal OSHA rule currently requires vaccination or weekly testing. The January 2022 withdrawal means the original emergency standard cannot be enforced. Employers remain free to adopt their own policies, and some do so because of customer contracts, insurance considerations, or workforce preferences. Any policy must still comply with the ADA, Title VII, the National Labor Relations Act, and state law.
If you do adopt a vaccination or testing policy, treat it like any other safety program. Write it down, explain the business reason, train supervisors, and apply it consistently. Unionized workplaces may need to bargain over the policy first. Keep medical records confidential and separate from personnel files. A well-documented program reduces legal risk and also demonstrates good faith if a worker later files a complaint with a state or federal agency.
Healthcare employers followed a different path. The Supreme Court allowed the CMS staff vaccination requirement to take effect in Biden v. Missouri, reasoning that Congress gave HHS broad authority over conditions of participation in Medicare and Medicaid. CMS later repealed that requirement in 2023, so it no longer applies. OSHA's separate healthcare emergency standard was also largely withdrawn in December 2021, leaving only limited recordkeeping provisions for a time.
Some vaccine duties remain in healthcare because they were never tied to COVID-19. Under the Bloodborne Pathogens standard, employers must offer the hepatitis B vaccination series, free of charge, to employees with occupational exposure to blood or other potentially infectious materials. Workers may decline in writing and change their minds later. Facilities should also follow state health department rules, accreditation standards, and their own infection-control plans for influenza and other illnesses.
State law now matters more than federal law on this topic. Some states prohibit employers from requiring vaccination or restrict how they can ask about it, while others require extra exemptions beyond federal minimums. A handful of cities have adopted their own requirements for specific industries such as restaurants or entertainment venues. Employers with sites in several states may need a patchwork of policies rather than one national document.
About two dozen states and territories operate OSHA-approved state plans, and these programs may enforce standards stricter than federal OSHA. California's Cal/OSHA, for example, adopted its own COVID-19 rules during the pandemic. Before you finalize any policy, check your state plan's website, review recent legislative changes, and confirm whether your jurisdiction regulates vaccine mandates, medical questioning, or paid leave for vaccination and recovery.
| Pros | Cons |
|---|---|
| May reduce illness-related absences and staffing disruptions | Requires accommodation processes for medical and religious exemptions |
| Can satisfy customer, client, or contract requirements | Some states restrict or prohibit employer mandates |
| Supports a stronger overall infection-control program | Can cause morale problems or turnover in a tight labor market |
| Gives clear rules that supervisors can apply consistently | Creates administrative work for records and confidentiality |
| May help in settings with medically vulnerable people | May trigger bargaining duties in unionized workplaces |
| Shows leadership commitment to worker health and safety | Adverse reaction claims may raise workers' compensation questions |
Even without a federal vaccine-or-test rule, employers with 100 or more workers must still follow the General Duty Clause, injury recording, reporting, and whistleblower laws. The Bloodborne Pathogens standard also requires offering hepatitis B vaccination to exposed workers at no cost.
Legal challenges arrived within hours of publication. On November 6, 2021, the Fifth Circuit Court of Appeals paused enforcement, citing serious statutory and constitutional concerns. Challenges filed across the country were then consolidated by lottery in the Sixth Circuit, which on December 17, 2021 dissolved the stay and allowed the rule to proceed. Employers suddenly faced compliance dates only weeks away, and many scrambled to draft policies, collect vaccination proof, and arrange weekly testing programs.
Emergency applications then went to the Supreme Court, which heard oral argument on January 7, 2022. In NFIB v. Department of Labor, decided January 13, 2022, a 6–3 majority stayed the standard while litigation continued. The Court reasoned that the Occupational Safety and Health Act authorizes OSHA to regulate occupational hazards, meaning dangers that arise from work itself, not to impose a sweeping public health measure on tens of millions of workers.
The majority noted that COVID-19 is a risk people face at home, at school, and in public, not only at work. In its view, a vaccine mandate looked more like a broad public health regulation than a workplace safety rule. The Court also pointed out that OSHA had never before imposed a comparable mandate in its roughly fifty-year history, and it highlighted the agency's own estimate that the rule would reach about 84 million workers.
The Court did leave room for narrower rules. It observed that where particular occupations carry unique risks, such as researchers working with the live virus or workers in crowded, enclosed conditions, a targeted standard might be permissible. This distinction between universal risk and workplace-specific risk is the heart of the decision. It also explains why healthcare facilities were treated differently from general industry in the rulings issued on the same day.
That same day, in Biden v. Missouri, the justices ruled 5–4 that the Department of Health and Human Services could require vaccination of staff at facilities participating in Medicare and Medicaid. The reasoning differed because Congress has given HHS broad authority over conditions of participation in those programs. Healthcare workers therefore faced a federal vaccine requirement while most other private employees did not, although CMS later repealed that mandate in 2023.
After the stay, OSHA announced on January 25, 2022 that it was withdrawing the vaccination and testing standard as an enforceable emergency rule, effective the next day. The agency made clear that it would not enforce the standard, leaving employers free to keep, modify, or end the programs they had already built, subject to other laws. OSHA continued to encourage workers to get vaccinated and to follow public health guidance.
For students, the lesson is straightforward. An emergency temporary standard is a powerful tool but also a legally vulnerable one, because it bypasses normal rulemaking. It survives only if OSHA proves workers face a grave danger from exposure to a substance or agent in the workplace and shows the rule is necessary to protect them. The vaccine litigation changed how many lawyers read that language and made future emergency standards harder to defend in court.
Losing the vaccine standard did not remove OSHA from the picture. Section 5(a)(1) of the OSH Act, known as the General Duty Clause, still requires every covered employer to provide a workplace free from recognized hazards that cause or are likely to cause death or serious physical harm. OSHA has used it for infectious disease hazards before, though the agency must prove a recognized hazard and a feasible method to reduce it.
Recordkeeping is another continuing duty. Employers with more than ten employees generally must maintain the OSHA 300 log, 300A annual summary, and 301 incident report unless their industry is on the partially exempt list. A COVID-19 case is recordable only if it is confirmed, work-related, and meets the general recording criteria, such as days away from work or medical treatment beyond first aid. The 300A summary must be posted each year from February 1 through April 30.
Size can change your obligations. Establishments with 100 or more employees in certain designated high-hazard industries must electronically submit detailed injury and illness data, including the 300 log and 301 forms, to OSHA each year. Smaller establishments in designated industries submit the 300A summary. The industry lists appear in appendices to the recordkeeping regulation, and OSHA has revised them in recent rulemakings, so always check the current versions before assuming you are exempt.
Reporting duties apply to every employer, including those otherwise exempt from routine recordkeeping. You must report a work-related fatality to OSHA within eight hours, and any in-patient hospitalization, amputation, or loss of an eye within 24 hours. These rules are separate from the log. A single outbreak that results in a worker's hospitalization could trigger a report if the illness is work-related, so supervisors need to know who to call and how.
Existing vaccine-related duties show that OSHA has long addressed immunization in specific contexts. The Bloodborne Pathogens standard, 29 CFR 1910.1030, requires employers to offer the hepatitis B vaccination series at no cost to employees with occupational exposure to blood or other potentially infectious materials. The offer must be made within ten working days of assignment, and employees who refuse must sign a declination statement. This targeted, hazard-specific approach is the kind of rule courts accept.
Anti-retaliation protection remains important. Section 11(c) of the OSH Act prohibits employers from discriminating against workers who raise safety concerns, report injuries, or refuse unsafe work under narrow conditions. A worker generally has 30 days to file a complaint with OSHA, though other laws may provide different deadlines. Disciplining someone for asking about COVID-19 precautions or reporting an illness can create liability that is completely independent of any vaccine policy.
Finally, do not forget state plans. About two dozen states and territories run OSHA-approved programs, and those plans must be at least as effective as federal OSHA. Many adopt federal standards unchanged, but some add stricter rules or their own COVID-19 requirements. Employers with locations in several states should check each plan separately, because a policy that satisfies federal OSHA may still fall short of a state's added requirements or deadlines.
Start with a clear decision about whether you want a vaccination policy at all. Federal law does not require one for most private employers, so the choice rests on your industry, customer contracts, insurance, and workforce. Document the business reason, such as serving medically vulnerable clients or visiting sites with their own entry requirements. A written rationale helps if the policy is later challenged by an employee, a union, or a state agency.
Check state law before drafting anything. Some states restrict or ban employer vaccine mandates, others require exemptions beyond federal minimums, and a few limit how employers can ask about vaccination status. If your operation crosses state lines, you may need different policies by location. Have counsel review the final language, and revisit it at least once a year, because case law and state legislation have continued to shift since 2022.
Build accommodations into the process. Under Title VII, employers must consider reasonable accommodation for sincerely held religious beliefs unless it creates undue hardship, and under the ADA they must do the same for medical conditions. Create a simple request form, designate one trained decision-maker, respond promptly, and record the interactive discussion. Alternatives such as masks, distancing, reassignment, remote work, or periodic testing may fit depending on the job and the risk involved.
Protect medical information. Vaccination status is confidential medical information under the ADA when an employer collects it. Keep proof of vaccination in a separate file from personnel records, limit access to people who truly need it, and never post a list of vaccinated or unvaccinated workers. Train supervisors that casual questions about why someone is absent or wearing a mask can create exposure, and remind managers that gossip about health status can become a complaint.
Communicate often and keep it short. A ten-minute toolbox talk covering ventilation, hand hygiene, staying home when ill, and how to report symptoms can reach every shift more effectively than a long memo. Encourage questions and share current guidance from CDC and OSHA. Involve employees in hazard assessments, because workers often spot problems such as crowded break rooms or poor airflow before management does, and their input builds trust in the program.
If you are preparing for an OSHA course or exam, focus on durable concepts rather than pandemic-era details. Know the difference between a standard, the General Duty Clause, and an emergency temporary standard. Memorize key numbers: eight hours for fatality reports, 24 hours for hospitalizations, 30 days for Section 11(c) complaints, ten employees for routine recordkeeping, and 100 employees for the vaccine rule and electronic data submission. Then test yourself with timed practice questions.
Finally, build a habit of checking primary sources. OSHA's website, the Federal Register, and your state plan's page are more reliable than social media summaries. Set a calendar reminder to review your policies every year and after any major court decision. Review the explanations for every practice question you miss, since understanding why an answer is wrong is often the fastest way to lock in the rule for test day and for real work.
Try these questions from our free OSHA Safety Certificate practice tests. The correct answer and an explanation follow each question.
A landscaping company has hired several new workers who will be operating noisy equipment like lawnmowers and leaf blowers, requiring the use of hearing protection. Which of the following is NOT a required topic for the employer to cover in PPE training for these employees?
Answer: C. The specific decibel reduction rating of each brand of equipment.
According to OSHA 29 CFR 1910.132(f), employee training must cover when PPE is necessary, what PPE is necessary, how to properly use it, the limitations of the PPE, and its proper care and maintenance. While understanding that the PPE is adequate for the noise level is important, training on the specific decibel rating of every brand is not a mandated training element, but rather part of the employer's hazard assessment and PPE selection process.
An employer provides all required PPE to their employees at no cost. However, an employee loses their company-issued safety gloves. According to OSHA's rules on payment for PPE, what is the employer's obligation for replacement?
Answer: B. The employer is not required to pay for replacement PPE if the employee lost it.
OSHA's standard on payment for protective equipment [29 CFR 1910.132(h)] requires employers to pay for replacement PPE, *except* when the employee has lost or intentionally damaged the PPE.
A maintenance worker needs to access a fixed ladder that extends 30 feet above the lower level. What is required on this ladder according to the final rule on Walking-Working Surfaces?
Answer: B. A personal fall arrest system or a ladder safety system.
For fixed ladders that extend more than 24 feet above a lower level, OSHA's final rule requires employers to install a personal fall arrest system or a ladder safety system.
Under OSHA regulations, at what voltage level must employers implement electrical safety work practices for employees?
Answer: A. 50 volts and above
OSHA considers 50 volts as the threshold above which electrical energy poses a significant risk of injury, requiring safety work practices.