OSHA stands for the Occupational Safety and Health Administration, the federal agency responsible for setting and enforcing workplace safety and health standards in the United States. OSHA was created by the Occupational Safety and Health Act of 1970 (the OSH Act), which President Nixon signed on December 29, 1970; the agency itself became operational when the Act took effect on April 28, 1971. OSHA sits within the U.S. Department of Labor.
If you're new to EHS or you've just been handed safety responsibility on top of an operations role, this guide walks through what OSHA actually does, who it covers (and who it doesn't), how federal and state jurisdiction split, and what noncompliance costs. If you've worked in EHS for years, skip ahead to the sections on state plan jurisdiction, the General Duty Clause, and the current FY2025 top-10 cited standards; that's where the details most generic "what does OSHA stand for" content leaves out.
Occupational Safety and Health Administration. It's worth being precise about two related but distinct things people often blur together:
Saying "OSHA regulations law" or "OSHA law regulations" combines two separate things into one redundant phrase. The correct shorthand is either "OSHA standards" (the specific rules OSHA has issued) or "the OSH Act" (the statute itself), not both stacked together.
OSHA's core job is to set enforceable safety and health standards for covered workplaces, inspect those workplaces, and issue citations and penalties when it finds violations. Beyond enforcement, OSHA also runs a free On-Site Consultation Program for small and mid-sized employers who want help identifying hazards before an inspector ever shows up, and it operates a Whistleblower Protection Program for workers who report hazards or refuse unsafe work.
Two distinct legal obligations sit at the center of everything OSHA enforces, and EHS professionals need to keep them separate:
OSHA's coverage is broad but not universal, and the exceptions matter more than most intro-level content admits. Federal OSHA, either directly or through an OSHA-approved state program, covers most private sector employers and their employees in all 50 states, the District of Columbia, and other U.S. jurisdictions.
The OSH Act does not cover:
Note what's not on that exemption list: there's no blanket small-business exemption from OSHA coverage itself. (Recordkeeping requirements are a different matter. Some smaller employers and lower-hazard industries are partially exempt from routine injury and illness recordkeeping, but that's a recordkeeping exemption, not a coverage exemption, and the details of which NAICS codes qualify should be checked against OSHA's current recordkeeping regulation before you rely on it for a specific site.)
Section 18 of the OSH Act lets a state run its own occupational safety and health program instead of federal OSHA's, as long as the state's program is at least as effective as the federal one. As of this writing, OSHA's own state plans page lists 22 State Plans that cover both private-sector and state/local government workers, and 7 additional State Plans that cover public-sector workers only (private employers in those 7 states remain under federal OSHA); see the State Plans FAQ for the full breakdown. California, Michigan, Washington, and North Carolina are examples of full State Plan states; most other states operate under federal OSHA directly.
This matters operationally: a State Plan can adopt standards that are more protective than federal OSHA's (Cal/OSHA's heat illness prevention standard is a well-known example), so "OSHA compliant" in a State Plan state can mean a stricter bar than the federal standard alone. Always confirm which jurisdiction actually applies to a given site before assuming the federal standard is the ceiling.
Section 5(a)(1) of the OSH Act, universally called the General Duty Clause, requires employers to provide a workplace free of recognized hazards likely to cause death or serious physical harm, even when no specific OSHA standard addresses that hazard. It exists because Congress couldn't write a specific standard for every possible workplace hazard in 1970, and new hazards keep emerging.
A few conditions seasoned readers will recognize but that generic content often skips:
Every fall, OSHA publishes its list of the 10 most frequently cited standards from the most recently completed fiscal year (October 1 to September 30). The finalized list for FY2025, as published on OSHA's own site, is:
Fall Protection has topped this list for 15 consecutive fiscal years. Hazard Communication's #2 ranking is worth pausing on: it's frequently a labeling and safety data sheet accessibility problem rather than a lack of a written program. If your team wants a deeper look at where HazCom labeling most often goes wrong, see Common GHS Label Mistakes That Lead to OSHA Citations.
One frequently blurred distinction worth naming directly: Hazard Communication (HazCom, 29 CFR 1910.1200) is OSHA's own standard and predates the Globally Harmonized System of Classification and Labelling of Chemicals (GHS) by decades. GHS is an international framework for classifying and labeling chemical hazards, developed later and adopted by the United Nations. OSHA subsequently aligned HazCom to GHS criteria in a 2012 update. GHS didn't create HazCom, and OSHA didn't build HazCom around GHS from scratch. They're two different things: a U.S. regulation and an international classification system that regulation now incorporates.
OSHA adjusts its maximum civil penalty amounts for inflation every January under the Federal Civil Penalties Inflation Adjustment Act. As of January 15, 2025, OSHA's published maximum penalties are $16,550 per serious or other-than-serious violation and $165,514 per willful or repeated violation. OSHA's own May 2026 memo on annual civil penalty adjustments confirms these amounts carried forward unchanged into 2026, because the Bureau of Labor Statistics was unable to publish the October 2025 CPI data needed to calculate a new adjustment. The annual adjustment, when CPI data allows it, always lands in January; it's worth a quick check of OSHA's current penalty page before citing a dollar figure in a proposal or board presentation, in case a later-year adjustment has since taken effect.
Penalties aren't flat fees. The actual amount OSHA assesses depends on factors like the gravity of the hazard, the size of the business, the employer's good-faith safety efforts, and prior violation history. A single inspection that turns up several serious violations can still add up well past the per-violation maximum, and unaddressed hazards can trigger an additional failure-to-abate penalty for each day past the correction deadline.
Software doesn't make you compliant; your program, your people, and your documented practices do that. What a platform like EHS Insight does is remove the manual tracking that causes obligations to slip through the cracks:
These modules help you track, document, and demonstrate your compliance efforts. They support the work; they don't replace the judgment of your EHS team or guarantee a specific legal outcome. Explore the full EHS Insight platform or browse the EHS Insight blog for more on specific OSHA standards.
What does OSHA stand for? OSHA stands for the Occupational Safety and Health Administration, the U.S. Department of Labor agency that sets and enforces workplace safety and health standards. It was created by the Occupational Safety and Health Act of 1970.
Is OSHA a law or an agency? OSHA is the agency, not the law. The law is the Occupational Safety and Health Act of 1970 (the OSH Act), which Congress passed and which created OSHA within the Department of Labor to write and enforce specific safety and health standards.
Does OSHA apply to every business? No. OSHA covers most private-sector employers, either directly or through an OSHA-approved State Plan, but it does not cover self-employed workers, immediate family members on family farms, workers already regulated by another federal agency (such as MSHA or the FAA), or state and local government employees unless their state runs a State Plan that extends coverage to public-sector workers.
What is the OSHA General Duty Clause? The General Duty Clause, Section 5(a)(1) of the OSH Act, requires employers to keep the workplace free of recognized hazards likely to cause death or serious physical harm, even when no specific OSHA standard covers that hazard. OSHA can only apply it when no specific standard already addresses the hazard in question.
How much can an OSHA violation cost? As of the January 2025 adjustment (unchanged through 2026), OSHA's maximum penalty is $16,550 per serious or other-than-serious violation and $165,514 per willful or repeated violation, with failure-to-abate penalties of up to $16,550 for each day a hazard remains uncorrected past the deadline. Actual amounts depend on the gravity of the hazard, employer size, and violation history.