Skip to content
STEELTOETOOLS
Part 510 min

5.2 The written programs OSHA actually requires

There is no such thing as “the OSHA written safety program”. Federal OSHA requires no general written program of any kind. What it requires is a set of specific documents, each triggered by a specific hazard being present at your site — and a separate set of certifications, which are records rather than programs and are constantly confused with them.

1 The general program that does not exist federally

29 CFR 1926.20(b)(1) requires construction employers to “initiate and maintain such programs as may be necessary to comply with this part” — and does not say those programs must be written. General industry has no equivalent general-program standard at all.

Several state plans do require one, and the best known is California's Injury and Illness Prevention Program under 8 CCR 3203(a), which must be in writing and must include, among other elements, the person responsible for implementing it, a system for communicating with employees without fear of reprisal, procedures for identifying and evaluating hazards including scheduled periodic inspections, a procedure to investigate occupational injury or illness, methods for correcting unsafe conditions in a timely manner based on the severity of the hazard, and training at the times (a)(7) lists.

On the job: most contractors write a general safety manual anyway, because customers ask for one. Write it knowing it is a commercial and organizational document rather than a federal requirement — and make sure the specific programs below actually live inside it rather than being referenced and never written.

2 Hazard-triggered: each one applies only if the hazard exists

The general industry written programs are gathered nowhere and scattered across 29 CFR 1910. The shortest accurate summary is a list of paragraph numbers.

Written programs in 29 CFR 1910, by paragraph
SubjectParagraphDocument
Emergency action plans1910.38(b)Written plan, kept in the workplace, available for review — oral permitted for 10 or fewer employees
Fire prevention plans1910.39(b)Same shape, same 10-employee exception
Process safety management1910.119(c)(1), (f)(1) and othersEmployee participation plan, operating procedures, mechanical integrity procedures, management of change
HAZWOPER1910.120(b)(1)(i)Written safety and health program for hazardous waste operations
Respiratory protection1910.134(c)(1)Written program with worksite-specific procedures, and a trained program administrator
Permit-required confined spaces1910.146(c)(4)Written permit space program, available for inspection by employees and their representatives
Lockout/tagout1910.147(c)(4)(i)Energy control procedures developed, documented and used — documentation waived only where all eight conditions of the note apply at once
Bloodborne pathogens1910.1030(c)(1)(i)Written Exposure Control Plan
Hazard communication1910.1200(e)(1)Written program covering labels, safety data sheets and training, with a list of the hazardous chemicals present
Respirable crystalline silica1910.1053(f)(2)(i)Written exposure control plan, reviewed for effectiveness at least annually
Laboratories1910.1450(e)(1)Written Chemical Hygiene Plan

The substance-specific standards in subpart Z — lead, cadmium, hexavalent chromium, asbestos, benzene and the rest — carry their own written compliance program requirements once their action levels or exposure limits are exceeded. If one of those substances is present, read its compliance paragraph directly.

Construction has fewer, and they are scattered too: the fall protection plan of 1926.502(k), available only for leading edge work, precast concrete erection and residential construction where conventional protection is infeasible or creates a greater hazard; the lead compliance program of 1926.62(e)(2)(i); and the silica exposure control plan of 1926.1153(g)(1).

3 Programs and certifications are different animals

A program describes how you will control a hazard. A certification is a record proving something specific was done, and it has required fields. Mixing them up is why so many binders contain a forty-page program and no evidence that anything in it happened.

The certifications, and what each must contain
ParagraphCertificationRequired contents
1910.132(d)(2)PPE hazard assessmentThe workplace evaluated, the person certifying, the date(s), and wording identifying it as a certification of hazard assessment
1910.147(c)(6)(ii)Periodic lockout inspectionThe machine or equipment, the date, the employees included, and the person performing the inspection
1910.147(c)(7)(iv)Lockout trainingEach employee's name and the dates of training
1910.178(l)(6)Forklift operatorThe operator's name, the date of the training, the date of the evaluation, and who performed each
1910.146(g)(4)Confined space trainingEach employee's name, the trainers' signatures or initials, and the dates — available for inspection by employees and their representatives
1926.503(b)(1)Fall protection trainingThe name or other identity of the employee, the date(s), and the signature of the trainer or the employer
Common mistake, and it is the most widespread one in this whole course: believing 29 CFR 1910.132 requires a PPE training record. Read (f): the section requires the training in (f)(1), a demonstration of understanding and ability before the employee does the work in (f)(2), and retraining in (f)(3). It names no training record. The certification it requires is the hazard assessment of (d)(2) — a different document entirely.

4 Training records, where they exist

Only a handful of standards name a training record, and their required contents differ in small ways that matter. Fall protection wants the name, the dates and a signature. Forklifts want two dates — training and evaluation — and the identity of whoever did each. Lockout wants the name and the dates. Confined spaces want the trainers' initials as well. Bloodborne pathogens want the most: under 1910.1030(h)(2), the dates of the sessions, the contents or a summary, the names and qualifications of the trainers and the names and job titles of everyone who attended — kept for three years.

Where no federal record is named, the state rules and the practical reality fill the gap. California's 8 CCR 3203(b)(2) is the version most employers actually work to: documentation of training for each employee with the name or other identifier, the training dates, the type of training and the providers, kept at least one year. Four fields, and they are the right four everywhere.

5 Deciding what you actually need

  1. 1
    List what the site does — the processes, the substances, the equipment and the spaces.
  2. 2
    For each one, find the standard that covers it and read its written-program paragraph.
  3. 3
    Write the program for the hazards you have, and do not write the ones you do not.
  4. 4
    List the certifications separately, with their required fields, and check each is actually being produced.
  5. 5
    Set a review trigger: annually where the standard says so, and on every change of process, chemical or equipment where it does not.

Only some standards set a review interval. Both silica standards require the written exposure control plan to be reviewed and evaluated for effectiveness at least annually and updated as necessary — 1926.1153(g)(2) and 1910.1053(f)(2)(ii). 1910.134(c)(1) requires the respiratory protection program to be updated as necessary to reflect changes in workplace conditions. Where no interval is stated, change is the trigger.

6 The test a program has to pass

A written program is not a document you own; it is a description of what actually happens. Three questions tell you whether yours is real.

  • Is it site-specific? A respiratory protection program that names no contaminant and no work area is a template, and 1910.134(c)(1) asks for worksite-specific procedures.
  • Is it available where the work is? 1910.146(c)(4) requires the permit space program to be available for inspection by employees and their representatives; a program locked in an office is hard to describe as implemented.
  • Does the practice match the paper? If the procedure describes two isolation points and the machine has three, the program is evidence against you rather than for you.
Key takeaways
  • Federal OSHA requires no general written safety program; California and other state plans do
  • Written programs are hazard-triggered: each applies only if that hazard exists at your site
  • A program says how you control a hazard; a certification proves something was done, with required fields
  • 1910.132 requires a PPE hazard assessment certification — and names no PPE training record
  • Training records are named by fall protection, forklifts, lockout, confined spaces and bloodborne pathogens
  • Review annually where the standard says so, and on every change of process, chemical or equipment where it does not

Free educational content — not OSHA-authorized training, no certificate or card issued. Follow your employer's program and the standards cited.