Hazard Communication Program Setup: A Safety Manager's Checklist

Hazard communication program setup is the process of building the OSHA-required system for identifying chemical hazards, labeling containers correctly, maintaining accessible Safety Data Sheets, and training employees under 29 CFR 1910.1200. Any workplace that stores or uses hazardous chemicals needs one, and it needs to hold up on the day an inspector asks to see it.

This checklist covers the five required components, a six-step process for building or repairing a program, and what's changing under the GHS Revision 7 rollout through 2026.

What Is an OSHA Hazard Communication Program and Why Is It Required?

A Hazard Communication Program, often shortened to HazCom, is the system an employer uses to tell workers what chemicals are in their workplace, how those chemicals can hurt them, and what to do about it. It's built on a simple premise: workers have a right to know what they're handling.

OSHA's Hazard Communication Standard, 29 CFR 1910.1200, turns that premise into concrete obligations. Labels have to follow a standardized format, and Safety Data Sheets have to sit within reach on the floor, not locked in an office down the hall. Workers get trained on the hazards they'll actually encounter, not handed a binder and a signature line.

The requirement isn't theoretical. Hazard Communication has ranked among OSHA's two most frequently cited standards nationwide every year since 2022, according to OSHA's own enforcement data, trailing only fall protection violations in construction. That volume reflects how often the basics — inventory, labeling, training — slip once a facility gets busy.

There's also a paper-trail dimension. When a worker ends up in urgent care after handling an unlabeled chemical, insurers and regulators check whether the program existed before that visit, not whether one got assembled the following week.

Which Employers Must Have a Hazard Communication Program?

If a workplace has hazardous chemicals present, in any quantity, it needs a program. That covers manufacturing plants and warehouses, but it also covers auto shops, laboratories, schools, hospitals, and offices that keep cleaning supplies under the sink.

There's no size exemption. A five-person shop with a cabinet of solvents carries the same basic obligation as a 500-person facility — the program's scale shifts with headcount, but the obligation to have one doesn't move.

Retail and office environments sometimes assume they're exempt because the workplace doesn't feel "industrial." It doesn't work that way — a stockroom with degreaser, a nail salon with acetone, a school supply closet with lab chemicals all count the same way. The standard cares about what's present in the building, not what industry the building is zoned for.

HazCom's citation volume isn't evenly distributed across standards — some show up on OSHA's enforcement list far more often than others. For a wider view of how hazard communication compares to fall protection and lockout/tagout, our breakdown of the top 10 OSHA violations walks through the full ranking. The five requirements below are where most of that pattern starts.

What Are the 5 Required Components of an OSHA-Compliant Hazard Communication Program?

OSHA's standard breaks down into five pieces. Miss one, and the whole program is incomplete — even if the other four are done well.

1. Maintain a Complete Chemical Inventory

Every hazardous chemical on-site needs a place on the list — including whatever a contractor or a maintenance crew brought in without going through a purchase order.

An inventory that hasn't been checked against what's physically in the building is a liability, not a document.

2. Ensure OSHA-Compliant GHS Labeling

Every container needs a label with the product identifier, a signal word, pictograms, hazard statements, precautionary statements, and the name, address, and telephone number of the manufacturer, importer, or other responsible party — six elements in total, per 29 CFR 1910.1200(f)(1). Secondary containers — the spray bottle someone filled from the drum — need labeling too, unless a narrow set of exceptions applies.

3. Keep Accessible 16-Section Safety Data Sheets (SDSs)

SDSs aren't a filing exercise tucked away in a supervisor's office. Workers need to reach them mid-shift, without tracking down whoever holds the key to the cabinet. When an SDS's Section 8 calls for a respirator as an exposure control, that's a separate compliance trigger — see our guide to OSHA Respiratory Protection Plan requirements for what a compliant written program needs to include.

4. Develop a Written Hazard Communication Program

This is the document that ties everything together: how labeling is handled, how SDSs are maintained, how new chemicals get added, and how contractors are informed of hazards.

5. Train Employees on Chemical Hazards

Training has to happen before a worker's first exposure, and again whenever a new hazard is introduced — not fifteen minutes signing an acknowledgment form during new-hire orientation.

What Documents Should Be Included in a Hazard Communication Program?

A complete program file typically includes the written HazCom plan itself, the current chemical inventory, SDSs for every listed chemical, label examples or a labeling procedure, training records with dates and topics covered, and a list of who's responsible for keeping it all current.

If an inspector asked for this file tomorrow, could someone hand it over completely? That's the test.

What Does Hazard Communication Program Setup Look Like in 6 Steps?

Building a program from scratch, or repairing one that's drifted out of date, follows a fairly consistent sequence.

Step 1: Assign Program Ownership and Define Facility Scope

Someone has to own this. Not a committee — a person. That person also needs to know the physical boundaries of what they're responsible for: one building, one floor, or a multi-site operation.

For multi-site organizations, ownership can be centralized or distributed, but it has to be explicit either way. A program that's "everyone's responsibility" tends to become no one's responsibility the moment a delivery driver drops off a drum nobody remembers ordering.

Step 2: Conduct a Complete Chemical Inventory

Walk the facility. Check storage rooms, maintenance closets, and areas where chemicals show up that nobody thinks to mention — the break room disinfectant, the printer toner, the pesticide in the loading dock. Cross-reference against purchasing records to catch anything missed on the walkthrough.

Step 3: Establish an OSHA-Compliant SDS Management System

Decide where SDSs live — a physical binder, a digital system, or both — and confirm every employee, on every shift, knows how to access them without delay.

Step 4: Verify GHS Label Compliance

Check every container against current GHS criteria. This step is where most programs find gaps, usually because a product's classification changed and the label on the shelf didn't.

Step 5: Create and Implement the Written Hazard Communication Program

Draft the plan, assign responsibilities within it, and set a review cycle. A written program that's never revisited becomes outdated the moment a new chemical enters the building.

Step 6: Deliver Employee Training and Maintain Compliance Records

Train workers on the hazards specific to their role, not a generic overview. Document who was trained, when, and on what. That record is often the first thing an inspector asks to see.

Digital vs. Paper SDS Management: How to Pass an On-Site OSHA Inspection

Transitioning from traditional 3-ring paper binders to digital Safety Data Sheet (SDS) software is one of the most effective ways to streamline HazCom management. However, digitizing your chemical safety program does not grant automatic OSHA compliance. When an inspector steps onto your shop floor, they are not testing whether you own a software subscription—they are testing whether a floor worker can access a critical SDS in an emergency.

OSHA’s 4 Hard Rules for Digital SDS Compliance

Under 29 CFR 1910.1200(g)(8), employers may maintain SDSs electronically, provided the system meets four strict criteria:

1. Immediate Access Without Barriers: Workers must be able to view SDSs during their work shift without asking a supervisor for a password, unlocking a locked office, or navigating complex paywalls.

2. Offline Redundancy: You must have an operational backup system in place for power outages, internet downtime, or network failures (such as offline mobile caching or secondary hard drives).

3. Emergency Provisions: In a medical emergency, employees and first responders must be able to obtain hard copies or immediate digital printouts to hand to emergency medical personnel.

4. Comprehensive Training: Employees must be fully trained on how to navigate the electronic system, search by product name or manufacturer, and retrieve emergency procedures.

Digital vs. Paper Binders: A Direct Comparison

The "3-Click Rule" Inspection Strategy

During an audit, OSHA compliance officers frequently conduct spot-checks by walking up to a machine operator and asking to see the SDS for a specific solvent or lubricant. If the employee takes longer than a few minutes or fails to navigate the computer terminal, OSHA can issue an other-than-serious or serious citation for barrier-to-access violations.

To ensure your digital setup passes inspectability tests:

• Implement QR Codes on Secondary Containers: Print weather-resistant labels featuring QR codes that link directly to that specific chemical’s SDS on mobile devices.

• Setup Dedicated Kiosks: Place non-locking, touch-screen terminals directly in high-chemical-use areas like wash bays, mixing rooms, and maintenance shops.

• Keep One Hard-Copy Master Binder: Maintain a centralized, physical binder in the EHS office or main breakroom as your primary offline backup.

What Are the GHS Revision 7 Updates and 2026 Compliance Deadlines?

In May 2024, OSHA finalized a rule aligning the Hazard Communication Standard with the seventh revision of the Globally Harmonized System, according to the Department of Labor's announcement. It was the first realignment with GHS since the original 2012 standard.

On January 15, 2026, OSHA pushed every deadline back by four months, citing incomplete compliance guidance. The requirements didn't change. The clock did.

Compliance Timeline for Pure Substances and Chemical Mixtures

For pure substances, chemical manufacturers, importers, and distributors now have until May 19, 2026 to update classifications, SDSs, and labels. Employers handling those substances have until November 20, 2026 to update workplace labels, written programs, and training.

Mixtures run on a longer clock. Manufacturers and importers have until November 19, 2027, and employers have until May 19, 2028 to catch up on the workplace side.

Until each deadline arrives, OSHA allows compliance with the 2012 standard, the updated 2024 standard, or a combination of both. That flexibility disappears once the applicable date passes.

New Labeling and Hazard Classification Changes

Rev. 7 brings a handful of concrete changes: new small-package labeling rules for containers as small as 3 mL, modified trade secret provisions requiring prescribed concentration ranges rather than vague disclosures, and adjustments to several hazard classification categories. None of these changes rewrite the standard from the ground up — they tighten details that were already in place.

How Should Employers Manage Hazard Communication on Multi-Employer Worksites?

Construction sites, shared industrial parks, and any location where multiple employers' workers cross paths create a specific problem: whose job is it to communicate hazards to someone else's employee?

The general answer is shared responsibility. A host employer typically needs to inform contractors of hazards present on-site, and contractors need to inform the host of hazards they're bringing in. Neither side gets to assume the other has it covered. Written agreements that spell out who provides what — SDS access, labeling, emergency procedures — prevent the gap from becoming a citation.

This matters most during short-term projects, where a contractor is on-site for days rather than months. A flooring subcontractor who shows up with an adhesive no one else on-site recognizes creates exposure for both companies, not just the one that brought it in. Pre-project hazard briefings, even brief ones, close most of that gap before work starts.

How to Audit Your HazCom Program: A Step-by-Step Internal Inspection Checklist

A written HazCom plan is a living document. Over time, facilities add new cleaning agents, switch suppliers, reorganize storage areas, and experience staff turnover. Performing a structured internal audit every 6 to 12 months ensures your program holds up when an OSHA inspector arrives.

The 4-Part HazCom Self-Audit Checklist

Use this structured internal inspection framework to audit your plant floor, documentation, and staff readiness:

Employee Interview Spot-Checks

OSHA inspectors do not just audit paperwork; they interview floor employees. During your internal audit, select 3 to 5 workers at random and ask these standard inspector questions:

1. "Where do you find the SDS for the chemical you are using right now?"

2. "What does a red diamond with a flame pictogram mean on this label?"

3. "What specific steps do you take if this chemical splashes into your eyes or on your skin?"

If an employee hesitates or cannot demonstrate access to an SDS, log it as an audit finding and schedule targeted refresher training immediately.

What Does OSHA Inspect During a Hazard Communication Audit?

Once those responsibilities are settled on paper, the real test comes when an inspector walks the floor and checks the written program against what's actually happening — comparing the chemical inventory to physical containers, checking labels for GHS compliance, confirming SDS accessibility, and reviewing training records for completeness and specificity.

Gaps between the paper and the plant floor are what turn a routine inspection into a citation.

What Common Hazard Communication Violations Lead to OSHA Citations?

That #2 ranking isn't random. The same handful of gaps show up in citation after citation:

• Missing or outdated written hazard communication programs

• Incomplete chemical inventories that don't match what's physically on-site

• Unlabeled or improperly labeled secondary containers

• SDSs that are missing, outdated, or inaccessible to workers

• Training that's generic, undocumented, or skipped for new hires

Most of these aren't the product of neglect. They're the product of a program built once and never revisited. A warehouse that swaps out its floor-cleaning contractor every year, but hasn't touched its written HazCom plan since the last inspection, is carrying risk it doesn't know about yet.

A single inspection can also generate more than one citation. Unlabeled containers, missing SDSs, and outdated training each stand as separate findings, so small gaps in different parts of the program tend to compound rather than cancel out.

The Real Cost of Non-Compliance: OSHA Penalty Structures & Cumulative Citation Risks

Failing to maintain a HazCom program creates severe financial and legal liabilities. Hazard Communication consistently ranks as OSHA's #2 most cited standard overall (and #1 in General Industry). Understanding how citations compound helps EHS professionals justify safety management budgets to executive leadership.

Enforceable Maximum Civil Penalties

OSHA civil penalties carry substantial statutory maximum limits:

The Danger of "Stacked" Violations

A common myth among facility managers is that an inspection gap results in a single fine. In reality, OSHA compliance officers routinely issue stacked citations from a single chemical safety breakdown during one walkthrough.

Case Study: The $66,000 Single-Chemical Finding

Imagine an inspector finds a line worker using an unlabeled 1-gallon jug of toxic solvent:

1. Citation 1 (Item 1a): Missing workplace label on a secondary container ($16,550).

2. Citation 2 (Item 1b): Failure to maintain an accessible Safety Data Sheet for the solvent ($16,550).

3. Citation 3 (Item 1c): Failure to train the employee on the health hazards of that solvent ($16,550).

4. Citation 4 (Item 1d): Missing or incomplete master written HazCom plan ($16,550).

What started as a single unlabeled jug quickly compounds into $66,200 in proposed penalties.

Indirect Financial Impact

Direct penalties are only a portion of the financial loss. Non-compliance triggers exponential hidden costs:

• Increased Workers' Compensation Premiums: Workplace chemical injuries elevate your Experience Modification Rate (EMR).

• Mandatory Operational Downtime: Halting operations to perform emergency inventory reconciliations and staff training.

• Reputational & Contractual Loss: OSHA citations are published publicly. Severe or willful findings can disqualify your business from bidding on enterprise municipal or corporate contracts.

How Can Employers Keep Their Hazard Communication Program Compliant?

Treat the program as a living document, not a filing cabinet exercise — reassess the chemical inventory whenever purchasing patterns change, spot-check labels quarterly, and revisit training content when hazard classifications shift rather than only when a calendar reminder fires.

The employers who avoid citations aren't the ones with the most paperwork. They're the ones whose paperwork is current.

If you're responsible for hazard communication in your organization, structured training is the most reliable way to reduce risk and build staff confidence. Our Workplace Safety & OSHA Compliance Training walks staff through real classification, labeling, and SDS scenarios — in a format built for busy safety teams.