Safety Data Sheets & GHS Compliance: A Definitive Guide

GHS is a classification and labeling framework published by the United Nations and revised roughly every two years. It has no force of law on its own. In the United States the enforceable rule is OSHA's Hazard Communication Standard, 29 CFR 1910.1200, which adopts most of GHS Revision 7 along with selected elements of Revision 8. Other countries adopt different revisions on different schedules, which is why the same product can carry different classifications in different markets.

That distinction is where most hazard communication programs go wrong. Teams talk about "GHS compliance" as though GHS were something OSHA enforces. It is not. GHS is a classification and labeling system published by the United Nations and revised roughly every two years. Each country decides which revision to adopt and how much of it to take. OSHA adopted GHS Revision 3 in 2012 and moved to Revision 7 in 2024. Canada and the European Union adopted different revisions on different schedules. That is why a product from a European supplier can arrive with a safety data sheet that is perfectly correct in Europe and still fails 1910.1200.

This guide covers the program, not the paperwork: what OSHA obligates you to do as an employer, what changed in the 2024 rule, which deadlines are live, and where these programs actually fall apart in an inspection. If you need the document itself explained section by section, start with our guide to what a safety data sheet is and come back here.

How Do HazCom and GHS Fit Together?

The order of events matters, and it is reported backwards constantly.

• November 25, 1983: OSHA promulgates the Hazard Communication Standard (48 FR 53280), covering the chemical manufacturing sector only.

• August 24, 1987: OSHA expands the standard to all industries where employees are exposed to hazardous chemicals (52 FR 31852). Litigation delayed full enforcement in non-manufacturing until 1989.

• 1994: Technical amendments to improve comprehension and compliance (59 FR 6126).

• March 26, 2012: OSHA aligns HazCom with GHS Revision 3 (77 FR 17574). MSDS becomes SDS, and the 16-section format arrives.

• May 20, 2024: OSHA aligns HazCom primarily with GHS Revision 7 (89 FR 44144), effective July 19, 2024.

• January 15, 2026: OSHA extends all four compliance dates by four months (91 FR 1695).

HazCom predates the United States adoption of GHS by nearly three decades. OSHA did not build HazCom around GHS. It built HazCom first, then retrofitted it twice. That history explains the standard's awkward seams, including the fact that OSHA's version is not a verbatim adoption of GHS. OSHA declined to adopt some GHS hazard categories and pulled selected elements from Revision 8 into the 2024 rule.

The practical consequence: "GHS compliant" is not a defensible statement to an inspector. The only question that gets asked is whether your program meets 1910.1200.

What Is the November 20, 2026 HazCom Deadline?

The 2024 rule uses a tiered schedule. Suppliers reclassify first, employers update afterward, so downstream users have time to receive corrected sheets and labels before retraining anyone.

Two conditions attached to that November date get dropped from most summaries:

• The obligation is written "as necessary." You update alternative workplace labeling, the written program, and training for hazards that are newly identified under the revised classification criteria. If nothing in your inventory reclassified, you may have very little to change. You still need to be able to show how you reached that conclusion.

• The transition provision is still in effect. Until your applicable date arrives, you may comply with the 2012 version of the standard, the 2024 version, or a combination of both. After the date, only the current version.

OSHA granted the four-month extension because it had not finished publishing its own guidance materials for the updated standard. Check the agency's hazard communication topic page at: osha.gov/hazcom for current guidance before you finalize your program update.

Because the supplier deadline for substances has passed, reclassified sheets should already be arriving. When a manufacturer or importer revises an SDS, paragraph (g)(6) requires it to be provided with the first shipment after the revision. If a labeled hazardous chemical shows up without one, you obtain it from the manufacturer or importer as soon as possible. Putting that request in writing and keeping the reply is common practice rather than a requirement, and it is the cheapest evidence you will ever collect.

What Does OSHA Actually Require of an Employer?

Four obligations. Only the first is paperwork.

1. A Written Hazard Communication Program

Required at each workplace where employees may be exposed. It has to describe how you meet the labeling, safety data sheet, and training requirements, and it has to include two elements that get left out constantly:

• A list of the hazardous chemicals known to be present, using a product identifier that cross-references the matching safety data sheet. The list can cover the workplace as a whole or individual work areas.

• The methods you will use to inform employees about the hazards of non-routine tasks, and the hazards of chemicals in unlabeled pipes in their work areas. OSHA's own example of a non-routine task is cleaning a reactor vessel.

Multi-employer sites carry three more required elements: how you give other employers on-site access to safety data sheets, how you inform them of precautionary measures, and how you explain your workplace labeling system to them. Construction and contract maintenance programs routinely omit all three.

2. Container Labeling in the Workplace

Shipped containers carry the full six-element label: product identifier, signal word, hazard statement, pictogram, precautionary statement, and the responsible party's name, address, and telephone number. For containers already in your workplace you have two options: reproduce those shipped label elements, or use a product identifier plus words, pictures, or symbols conveying at least general hazard information, provided the rest of your program supplies the specifics (workplace labels don't require the responsible party's contact info).

Here is the exemption people over-apply. A portable container does not require a label only when the chemical was transferred from a labeled container and is intended for the immediate use of the employee who performed the transfer. "Immediate use" is defined in the standard: under the control of and used only by that person, and only within the work shift in which it was transferred. A labeled-by-nobody jar left on a bench overnight is not immediate use, and an inspector walking your floor at shift change knows exactly what to look for.

3. Safety Data Sheet Access

You must have a safety data sheet for each hazardous chemical you use, and those sheets must be readily accessible during each work shift to employees when they are in their work areas. Electronic access is explicitly permitted, but only where it creates no barriers to immediate access. In practice the barriers that get cited are a login nobody on the floor has, a single terminal in an office that locks at 5 p.m., a system that needs a network connection in an area with no signal, and no fallback when the network is down.

Where employees travel between locations during a shift, the sheets may be kept at the primary facility, provided workers can immediately obtain the information in an emergency.

4. Employee Information and Training

This is where the most common error in EHS content lives. HazCom training is not annual. The trigger is written into the standard: at the time of initial assignment, and whenever a new chemical hazard the employees have not previously been trained about is introduced into their work area. Bringing a new product on site with a hazard class your crew has not been trained on triggers training. A calendar flip does not.

Plenty of companies run an annual HazCom refresher anyway, and that is a sound practice. The standard itself triggers training at initial assignment and whenever a new chemical hazard is introduced into the work area, not on a calendar. What turns the annual refresher into an actual obligation is the employer's own written program: once your program commits to annual training, an inspector can hold you to it, because the written program is enforceable as written. Know which of the two you are describing. Telling an inspector the standard mandates annual HazCom training, when what mandates it is your own document, casts doubt on everything else you say.

The required training content is specific, and each item is worth reading literally:

• Methods and observations that may be used to detect the presence or release of a hazardous chemical in the work area, such as employer conducted monitoring, continuous monitoring devices, or the visual appearance or odor of a chemical being released.

• The physical, health, simple asphyxiation, combustible dust, and pyrophoric gas hazards, as well as hazards not otherwise classified, of the chemicals in the work area.

• The measures employees can take to protect themselves, including work practices, emergency procedures, and personal protective equipment.

• The details of your program: how to read a shipped label, how your workplace labeling system works, and how to find and use a safety data sheet, including the order of information on it.

Hazards not otherwise classified, abbreviated HNOC, is a real category and an awkward one to explain. It covers an adverse physical or health effect identified during classification that does not meet the criteria of any hazard class OSHA has adopted. An HNOC hazard has to be disclosed on the safety data sheet, but it does not have to appear on the shipped container label. If your training material was built from label elements alone, that is a gap you can close this week.

What Changed in the 2024 HazCom Update?

The changes below are the ones that reach an employer's program rather than only a chemist's worksheet.

• Flammable gases were subdivided. Category 1 splits into 1A and 1B, with pyrophoric gases and chemically unstable gases falling under 1A. Pyrophoric gases no longer exist as a standalone hazard class (they do still remain a hazardous chemical and were just reclassified as Category 1A flammable gas), and OSHA removed them from the standard’s definition of "hazardous chemical," yet the training paragraph still names pyrophoric gas hazards among the required content. Train on them.

• Aerosols became their own physical hazard class, including a category for non-flammable aerosols that were previously handled as gases under pressure.

• Desensitized explosives were added as a physical hazard class.

• Small container labeling received a workable rule. For containers of 100 mL or less, where pull-out labels, fold-back labels, and tags are not feasible, the container label may carry only the product identifier, pictograms, signal word, manufacturer name and phone number, and a statement that full label information is on the immediate outer package. At 3 mL or less, where a label would interfere with normal use, the product identifier alone is enough. In both cases the outer package carries the full label plus a statement that the small containers must be stored inside it when not in use.

• Released-for-shipment labels gained flexibility. If a product is already packaged, labeled, and awaiting distribution when significant new hazard information surfaces, the supplier may either relabel those containers or provide the updated label for each individual container with each shipment.

• Trade secret concentrations must now be disclosed as ranges. A supplier withholding an exact concentration has to publish one of thirteen prescribed ranges on the safety data sheet, using the narrowest range that applies. The ranges align with Canada's WHMIS ranges, which is the point.

• Classification scope widened. Hazard classification now has to account for hazards arising from a change in the chemical's physical form and from reaction products associated with known or reasonably anticipated uses.

That last one is the sleeper. It is the reason a supplier can hand you a reclassified sheet for a product whose formula never changed. If you are reconciling a wave of new sheets against an unchanged inventory this fall, that is usually why.

Where Does HazCom End and Other Agencies Begin?

A safety data sheet has 16 sections, but OSHA does not enforce all of them. Note 2 to paragraph (g)(2) states plainly that OSHA will not enforce the information requirements in sections 12 through 15, because those subjects are outside its jurisdiction. The headings must still be present, and in order.

• Section 12, ecological information, and Section 13, disposal considerations, point toward EPA territory.

• Section 14, transport information, belongs to the Department of Transportation's hazardous materials regulations at 49 CFR.

• Section 15, regulatory information, spans everything else.

Several exclusions in the standard follow the same jurisdictional logic, and each one has a trigger condition worth knowing:

• Hazardous waste regulated by EPA under the Resource Conservation and Recovery Act sits outside HazCom entirely.

• Pesticides labeled under FIFRA, and substances labeled under the Toxic Substances Control Act, are exempt from HazCom labeling. They are not automatically exempt from the rest of the standard.

• Consumer products are excluded only where the employer can show the product is used for the purpose the manufacturer intended and the duration and frequency of exposure is no greater than a consumer would experience. Running the same aerosol cleaner for eight hours a shift is not consumer use.

• Articles are excluded, but the definition is narrowly applied, and wood that will be subsequently sawed or cut, generating dust, is expressly not exempt. This includes wood or wood products which have been treated with a hazardous chemical covered under the standard AND wood which may be sawed.

Running the other direction, EPA's Tier II inventory reporting under EPCRA draws its hazard categories from OSHA's definitions. That is why an OSHA classification change eventually surfaces in an environmental report, and why the chemical inventory you maintain for HazCom and the one you maintain for Tier II should not be two different spreadsheets.

How Long Do You Have to Keep a Safety Data Sheet?

HazCom itself says nothing about thirty years. It requires a safety data sheet for each hazardous chemical you currently use. The thirty-year figure comes from a different standard: 29 CFR 1910.1020, Access to Employee Exposure and Medical Records, which treats safety data sheets as employee exposure records.

Paragraph (d)(1)(ii)(B) of that standard gives you a choice. You may keep the sheet itself for thirty years, or you may keep a shorter record instead: the identity of the substance, the chemical name if known, where it was used, and when it was used, retained for at least thirty years. Three fields.

What happens when a formulation changes: OSHA addressed this in a 1987 interpretation letter. Where a revised sheet covers the same hazardous chemicals as the original formulation, the employer may discard the superseded sheet. Where the formulation changed, both sheets are exposure records and both fall under the thirty-year retention, unless you use the identity-record alternative instead.

The practical failure is not keeping too little. It is purging the sheet for a discontinued product without first capturing where and when it was used, which is the piece you cannot reconstruct later when a former employee files a claim.

How Do State Plans Change Your HazCom Obligations?

There are currently 22 OSHA-approved State Plans covering both private sector and state and local government workers, and seven covering state and local government workers only. A State Plan has six months from federal promulgation to adopt a comparable standard, or one at least as effective.

Most State Plans adopt the federal HazCom text verbatim, in which case your deadlines are the federal ones above. Some do not. California, Michigan, Oregon, and Washington maintain standards that differ from federal OSHA in places, occasionally by adding requirements rather than changing dates. If you operate across several states, confirm your dates and any state-specific additions with each State Plan agency instead of assuming the federal schedule applies uniformly.

Where Do SDS and Hazard Communication Programs Fail an Inspection?

Hazard Communication ranked second on OSHA's Top 10 most frequently cited standards for fiscal year 2025, behind construction fall protection, and it remains the most frequently cited general industry standard. The failures are rarely exotic.

• The chemical list does not match the shelf. Products get bought outside procurement and the written program's list never catches up. An inspector can walk a storeroom and compare in ten minutes.

• Secondary containers are unlabeled and immediate use is claimed incorrectly. See the definition above. This is the single most common workplace labeling finding.

• Electronic access has a barrier. A password the floor does not have, one terminal behind a locked door, no signal in the yard, no fallback when the network drops.

• Training happened at hire and never re-triggered. A new chemical hazard entered the work area, no training followed, and there is no record either way.

• Contractor access is undocumented. The multi-employer methods have to be in the written program, not in someone's memory of how the last turnaround went.

• The written program describes a process nobody follows. Most citations live in the gap between the document and the practice, which is why reading your own program out loud while walking the floor is a better audit than any checklist.

How Does EHS Insight Support SDS And Hazard Communication Programs?

Software does not make you compliant. Compliance is your obligation, and OSHA cites you, not your vendor. What a platform can do is keep the record straight and get the right sheet into the hand of the person who needs it, on the shift they need it. Here is what EHS Insight does.

Centralize The Library and Put It Where the Work Happens

The Safety Data Sheet Dashboard gives field employees a place to view safety data sheets for the hazardous and non-hazardous materials they encounter at their workplace. A My Location tab shows the sheets for a specific location filtered by Business Entity, so a coatings crew is not scrolling past a chemical list that belongs to another line. A Company Library tab shows every sheet across the organization. From either tab, users open the Material page or preview the sheet directly.

Print Container Labels from the SDS Record

Users can view and print pre-defined container labels and generate an ad-hoc container label for a material directly from the dashboard. That is the workplace labeling obligation, handled at the point where somebody notices the label is missing.

Give the Floor A Way to Report A Gap

From the Company Library, users start an SDS Request asking a coordinator to add a new sheet, change an existing one, or add or delete a chemical or material. Missing sheets get reported by the people who find them first, which is almost never the EHS manager.

Keep the Chemical List and the SDS Library In One System

The Chemical Management module holds a Chemical List with CAS numbers, density, and other base properties, and a Material List with composition, phase, hazardous properties, and linked SDS documents. A "Require SDS Attachment" site setting requires materials in the Material List to include an attached sheet. The Chemical Inventory form tracks what is on site by Business Entity, with a Copy from Previous option for recurring updates, and a Chemical Inventory Tier II Log report displays most of the data needed to complete the EPA Tier II report.

Process Incoming Sheets Faster

With the SDS Managed Service license, SDS Coordinators use SDS Copilot, a guided wizard that uploads a safety data sheet in PDF, automatically extracts product metadata including chemical and manufacturer information, searches the Community Library for a match, and then subscribes to an existing revision, adds a new revision, or creates a new Community Library record when no match is found. Useful in a reclassification wave, which is exactly what the November deadline produces.

Track The Training HazCom Actually Triggers

Training Management lets you define Training Requirements by type, designate them mandatory or recommended, assign them to specific audiences, and set recurring due dates. When a new chemical hazard enters a work area, One-Off Training Assignments cover retraining outside the regular schedule. Training Status and Training Forecast reports show who is missing, overdue, or approaching expiration, so the November update does not come down to a spreadsheet and a hope.

Frequently Asked Questions

Is GHS a law in the United States?

No. GHS is a classification and labeling framework published by the United Nations and revised roughly every two years. It has no force of law on its own. In the United States the enforceable rule is OSHA's Hazard Communication Standard, 29 CFR 1910.1200, which adopts most of GHS Revision 7 along with selected elements of Revision 8. Other countries adopt different revisions on different schedules, which is why the same product can carry different classifications in different markets.

When do employers have to comply with the 2024 HazCom update?

November 20, 2026 for chemical substances, and May 19, 2028 for mixtures. By each date you update alternative workplace labeling, your written hazard communication program, and employee training for hazards newly identified under the revised criteria. Suppliers had to reclassify substances by May 19, 2026 and must reclassify mixtures by November 19, 2027. These dates reflect OSHA's January 15, 2026 final rule, which moved each original deadline back four months.

How often is HazCom training required?

It is event-triggered, not annual. Training is required at the time of an employee's initial assignment and whenever a new chemical hazard they have not previously been trained about is introduced into their work area. Many companies run an annual refresher as a matter of practice, but the standard does not set a calendar frequency.

Can we keep safety data sheets electronically instead of in binders?

Yes. The standard permits electronic access and other alternatives to paper copies, as long as no barriers to immediate employee access are created. A shared login the floor does not have, a single terminal behind a locked door, or a system that fails when the network drops would each count as a barrier.

Do we have to keep a safety data sheet for 30 years?

Not necessarily the sheet itself. HazCom requires a sheet for the hazardous chemicals you currently use. The thirty-year figure comes from 29 CFR 1910.1020, which treats safety data sheets as employee exposure records. Under paragraph (d)(1)(ii)(B) you may keep the sheet for thirty years, or instead keep a record of the substance's identity, where it was used, and when it was used for at least thirty years.

Does OSHA enforce all 16 sections of a safety data sheet?

No. Note 2 to paragraph (g)(2) states that OSHA will not enforce the information requirements in sections 12 through 15, because ecological information, disposal, transport, and regulatory information fall under other agencies, chiefly EPA and the Department of Transportation. Those headings must still appear on the sheet, in order.

Do state OSHA plans have the same HazCom deadlines?

Usually. A State Plan must adopt a standard at least as effective as the federal one within six months of federal promulgation, and most adopt the HazCom text verbatim, which means the federal dates apply. A few, including California, Michigan, Oregon, and Washington, maintain differences. Confirm with your State Plan agency if you operate in one of the 22 states and territories that cover private sector employers.

What is a hazard not otherwise classified?

An HNOC is an adverse physical or health effect identified during hazard classification that does not meet the criteria for any physical or health hazard class OSHA has adopted. It has to be disclosed on the safety data sheet and covered in employee training, but it does not have to appear on the shipped container label. That asymmetry is why training built only from label elements leaves a gap.