Federal OSHA does not require one master written safety program. It requires a specific written program, plan or documented procedure inside about a dozen individual standards, and you only owe the ones whose hazards exist at your site. This is the list, with the paragraph that creates each obligation, so you can check your own binder against the actual rule.
Quick answer: there is no master program
People ask "does OSHA require a written safety program?" expecting a yes or no. The honest answer is that federal OSHA has no standard requiring a general written safety and health program for every employer. What it has is a set of hazard-specific standards, each of which says — in its own words, at its own paragraph — that something must be in writing.
That distinction matters for two reasons. First, it means the question "which programs do we need?" is answered by walking your site, not by downloading a template pack. Second, it means each written program has its own required contents, and a generic document that says the right things in general terms will not satisfy any of them.
Note one exception to the "no master program" rule: several State Plan states do require a general written program. California's Injury and Illness Prevention Program under Title 8 CCR 3203 is the best-known example, and states including Washington, Oregon and Nevada have their own versions. If you operate in a State Plan state, check the state rule before you rely on this article.
General industry: the 29 CFR 1910 written programs
These are the general industry standards that require a written document, with the paragraph and what the document is called in the rule. Each one applies only if the underlying hazard or activity exists at your workplace.
| Standard | Paragraph | What must be in writing |
|---|---|---|
| Emergency action plans | 1910.38(b) | The emergency action plan must be in writing, kept in the workplace and available to employees for review — except that an employer with 10 or fewer employees may communicate it orally. |
| Fire prevention plans | 1910.39(b) | The fire prevention plan must be in writing, kept in the workplace and available for review — same 10-employee oral exception. |
| Process safety management | 1910.119(c)(1), (f)(1) and others | A written plan of action for employee participation, written operating procedures, written mechanical integrity procedures and written management-of-change procedures, among other elements. |
| HAZWOPER | 1910.120(b)(1)(i) | A written safety and health program for employees involved in hazardous waste operations, designed to identify, evaluate and control hazards and provide for emergency response. |
| PPE | 1910.132(d)(2) | A written certification of the workplace hazard assessment identifying the workplace evaluated, the person certifying, the dates, and identifying the document as a certification of hazard assessment. |
| Respiratory protection | 1910.134(c)(1) | A written respiratory protection program with worksite-specific procedures, administered by a suitably trained program administrator and updated as workplace conditions change. |
| Permit-required confined spaces | 1910.146(c)(4) | A written permit space program, available for inspection by employees and their authorized representatives. |
| Lockout/tagout | 1910.147(c)(4)(i) | Energy control procedures developed, documented and utilized — with documentation waived only where all eight conditions in the note exist at once. |
| Bloodborne pathogens | 1910.1030(c)(1)(i) | A written Exposure Control Plan designed to eliminate or minimize employee exposure. |
| Hazard communication | 1910.1200(e)(1) | A written hazard communication program describing how labels, safety data sheets and training requirements will be met, including a list of the hazardous chemicals present. |
| Respirable crystalline silica | 1910.1053(f)(2)(i) | A written exposure control plan, reviewed and evaluated for effectiveness at least annually and updated as necessary. |
| Laboratories | 1910.1450(e)(1) | A written Chemical Hygiene Plan setting out procedures, equipment, PPE and work practices for laboratory use of hazardous chemicals. |
Construction: the 29 CFR 1926 written documents
Construction has fewer written-program requirements than general industry, and they are scattered rather than gathered. The four below are the ones most contractors meet.
| Subject | Paragraph | What must be in writing |
|---|---|---|
| Fall protection plan | 1926.502(k) | Available only for leading edge, precast concrete erection and residential construction work where conventional fall protection is infeasible or creates a greater hazard. It must be prepared by a qualified person, developed specifically for the site, and kept up to date; changes must be approved by a qualified person. |
| Lead in construction | 1926.62(e)(2)(i) | A written compliance program established and implemented before the job starts, providing for frequent and regular inspections of job sites, materials and equipment by a competent person. |
| Respirable crystalline silica | 1926.1153(g)(1) | A written exposure control plan describing the tasks involving silica exposure, the engineering controls, work practices and respiratory protection for each task, and the housekeeping measures. A competent person makes frequent and regular inspections to implement it. |
| Permit-required confined spaces | 1926.1203(d) | A written permit space program complying with 1926.1204, implemented at the construction site and available before and during entry operations. |
Note what is missing from that list. Construction is excluded from the general industry lockout/tagout standard by 1910.147(a)(1)(ii)(A), and its replacements — 1926.417 for tagging de-energized circuits and 1926.702(j) for concrete and masonry equipment — contain no written procedure requirement at all. Many contractors write energy control procedures anyway, both because it is the only complete model available and because a host plant will require it under 1910.147(f)(2) when they work on its equipment. Our machine-specific LOTO procedure generator builds one to the general industry structure.
What "written" actually means
Every one of these standards is failed far more often by a document that exists than by a document that is missing. Lockout/tagout states the test most clearly. 1910.147(c)(4)(i) requires procedures to be "developed, documented and utilized" — three verbs, three separate ways to fall short.
- Developed means somebody looked at your workplace. A vendor template with your company name pasted into the header has not been developed for anything.
- Documented means the required contents are actually in it. Each standard lists them — 1910.1200(e)(1) wants a chemical list; 1926.1153(g)(1) wants tasks, controls, work practices, respiratory protection and housekeeping.
- Utilized means people use it. A binder in an office two buildings from the work is not in use, and several standards make availability explicit: 1910.146(c)(4) and 1926.1203(d) both require the permit space program to be available for inspection.
The second thing to get right is keeping it current. Only some standards state an interval. Both silica standards require the written exposure control plan to be reviewed and evaluated for effectiveness at least annually and updated as necessary (1926.1153(g)(2), 1910.1053(f)(2)(ii)). 1910.134(c)(1) requires the respiratory protection program to be updated as necessary to reflect changes in workplace conditions that affect respirator use. Where no interval is written, the trigger is change — a new process, a new chemical, a new machine, a new exposure.
Two things people think are required and are not
Just as useful as knowing what you owe is knowing what you do not, so that effort goes where the rule actually is. The hot work permit deserves its own section below, because the sources genuinely disagree; these two are simpler.
A written hearing conservation program
1910.95(c)(1) requires a continuing, effective hearing conservation program whenever exposures reach an 8-hour TWA of 85 dBA — but does not say it must be in writing. The only thing 1910.95 requires in writing is the notification of an employee whose annual audiogram shows a standard threshold shift, within 21 days, under 1910.95(g)(8)(i). The standard does require records — audiograms and noise measurements, with retention periods, under 1910.95(m).
A written construction safety program
1926.20(b)(1) requires the employer to initiate and maintain such programs as may be necessary to comply with Part 1926, and (b)(2) requires frequent and regular inspections by competent persons. Neither paragraph says "written." Owners, general contractors and State Plans frequently require one by contract or by state rule, which is why so many contractors have one regardless.
Job hazard analyses belong in the same category. No federal OSHA standard requires a JHA or JSA by that name; OSHA publishes guidance on them in Job Hazard Analysis (OSHA 3071) and they are one of the most effective ways to satisfy the training and hazard-identification duties in 1926.21(b)(2) and 1910.132(d). If you build them, our JHA/JSA builder follows the structure of the sample form in that publication.
The hot work permit: why sources disagree
Ask whether OSHA requires a hot work permit and you will get a confident yes almost everywhere, and a "not exactly" from anyone reading 1910.252 closely. Both camps are quoting something real — they are quoting different paragraphs. Here is every source laid out, so you can see which one applies to your work.
| Source | What it says | Permit mandatory? |
|---|---|---|
| 1910.252(a)(2)(iv) General industry | Before cutting or welding is permitted, the area shall be inspected by the individual responsible for authorizing the operations. That person "shall designate precautions to be followed in granting authorization to proceed preferably in the form of a written permit." | The inspection and the designation of precautions are mandatory. The written permit is a stated preference. |
| 1910.119(k)(1) and (k)(2) PSM | "The employer shall issue a hot work permit for hot work operations conducted on or near a covered process." The permit must document that the fire prevention and protection requirements of 1910.252(a) have been implemented, indicate the authorized dates, identify the object worked on, and be kept on file until the work is complete. | Yes, unambiguously — for hot work on or near a process covered by process safety management. |
| 1910.146(f)(15) Permit spaces | The confined space entry permit must identify "any additional permits, such as for hot work, that have been issued to authorize work in the permit space." 1910.146(b) defines a hot work permit as the employer's written authorization for operations capable of providing a source of ignition. | Not a standalone mandate, but the standard assumes one and requires it to be recorded on the entry permit. |
| 1926.352 Construction | Sets fire prevention duties for welding and cutting — moving or shielding combustibles, fire extinguishing equipment, fire watch under (e) — and contains no permit or authorization requirement. | No. |
| NFPA 51B Consensus standard | 1910.6 incorporates NFPA 51B-1962 by reference, for the introductory text of 1910.252(a)(1) only, as an elaboration of the basic precautions. Current editions of NFPA 51B are built around a hot work permit issued by a permit authorizing individual, and are what most property insurers and owner contracts follow. | Not through 1910.252(a)(2)(iv) — but a permit system frequently becomes mandatory by contract or insurance. |
Our position is the narrow one: the paragraph everyone quotes, 1910.252(a)(2)(iv), does not by itself mandate a written permit — it mandates the inspection and the designation of precautions, and expresses a preference for putting them on a permit. That matters, because a site that has an inspection and no paper is not automatically in violation of that paragraph, while a site with a beautiful permit and no inspection is. If your hot work is on or near a PSM-covered process, none of this nuance applies to you: 1910.119(k)(1) requires the permit outright.
Programs, plans, permits and certifications are four different things
A lot of confusion comes from treating every piece of paper as "the program." The standards distinguish four kinds of document, and each has different required contents.
| Type | What it does | Examples |
|---|---|---|
| Program or plan | Describes how the hazard will be controlled across the site | Written hazard communication program (1910.1200(e)(1)); written permit space program (1910.146(c)(4)); written exposure control plan (1926.1153(g)(1)) |
| Procedure | Tells one person how to do one job on one machine or system | Machine-specific energy control procedure (1910.147(c)(4)(ii)); written operating procedures under PSM (1910.119(f)(1)) |
| Permit | Authorizes a specific job at a specific time, and is cancelled when it ends | Confined space entry permit (1910.146(f)); hot work authorization (1910.252(a)(2)(iv)) |
| Certification or record | Proves something was done, with named fields | PPE hazard assessment certification (1910.132(d)(2)); lockout periodic inspection certification (1910.147(c)(6)(ii)); lockout training certification (1910.147(c)(7)(iv)); forklift operator training and evaluation (1910.178(l)(6)) |
The certification row is the one that trips up otherwise well-run sites, because those paragraphs name the required fields. 1910.132(d)(2) wants the workplace evaluated, the person certifying, the dates of the assessment, and a statement identifying the document as a certification of hazard assessment. 1910.147(c)(6)(ii) wants the machine, the date, the employees included and the person performing the inspection. A signature and a date satisfies neither. Our PPE hazard assessment form and confined space entry permit generator both print the fields their standards name.
Bottom line
- Federal OSHA requires no single master written safety program. It requires specific written documents inside individual standards, and only where the hazard exists at your site.
- In general industry the usual set is hazard communication, respiratory protection, permit spaces, lockout/tagout, emergency action, fire prevention, bloodborne pathogens and any subpart Z substance you handle.
- In construction the written documents are the fall protection plan, the lead compliance program, the silica exposure control plan and the permit space program.
- Each standard names the contents. Write to the paragraph, not to a template.
- Developed, documented and utilized are three separate tests. Availability at the work and currency after change are what turn a document into a program.
- Check your State Plan: a general written program that federal OSHA does not require may be mandatory where you operate.