Most of what gets written about OSHA inspections is guesswork dressed up as advice. This post isn't, because for once there's a primary source: on May 19, 2026, OSHA put into effect a new inspection directive for the Hazard Communication Standard — OSHA Instruction CPL 02-02-079, Inspection Procedures for the Hazard Communication Standard (HCS 2024). It is the manual a compliance safety and health officer (a CSHO — the inspector) follows when they walk into your shop and ask about chemicals. It replaces the 2015 directive written for the old HCS 2012 rule, and it is the first time OSHA has spelled out, in writing, how the 2024 update to 29 CFR 1910.1200 will be enforced.
It runs 132 pages and is written for inspectors, not employers. But most of it reduces to a short list of things the inspector is instructed to review, ask, and cite — and every one of those is something you can check on yourself before they arrive. Here's what the directive actually says, paragraph by paragraph, for a business with a chemical shelf rather than a chemical plant.
What the Directive Is (and Isn't)
The directive is not a new rule. The rule is the Hazard Communication Standard itself, updated in May 2024 to align with GHS Revision 7. The directive is OSHA's internal instruction on how to inspect against that rule — what documents to request, what the written program must contain to pass review, how to evaluate training, and which paragraph to cite for which failure. It was signed April 30, 2026, took effect May 19, 2026, and cancels the previous HCS 2012 directive (July 9, 2015), which OSHA has now marked as archived.
Two practical notes before the substance. First, as of this writing OSHA's own HazCom landing page still links the old 2012 directive; the current one lives on the enforcement directives page linked above. Second, the directive restates the compliance dates, which are the ones you should already have on your calendar:
| Date | Who | What | |---|---|---| | May 19, 2026 | Manufacturers, importers, distributors | Updated labels and SDSs for substances (passed) | | November 20, 2026 | Employers | Update workplace labels, written program, and training for substances, as necessary | | November 19, 2027 | Manufacturers, importers, distributors | Updated labels and SDSs for mixtures | | May 19, 2028 | Employers | Update workplace labels, program, and training for mixtures, as necessary |
If you only use chemicals, the two employer rows are yours. The November 20, 2026 deadline post walks through what "as necessary" means in practice.
The Transition Rule: 2012, 2024, or Both
The directive's first instruction to inspectors is about the transition period, and it is more forgiving than most employers assume. Until the relevant compliance date, an employer "may comply with the HCS 2012, the HCS 2024, or both," and — quoting the directive's citation guidance — "citations should not be issued unless the entity has not complied with either standard." It is explicitly acceptable during the transition to have HCS 2012 labels alongside HCS 2024 safety data sheets, or the reverse, because your suppliers will update at different times.
After a compliance date passes, only HCS 2024 is cited for that provision. So for a small employer handling substances, November 20, 2026 is the day the inspector's citation authority switches over for workplace labels, the written program, and training. The directive is specific about what that switch actually requires of you: update any alternative workplace labeling for changes related to HCS 2024, update the program, and provide additional training under (h)(3) "for newly identified physical, health, or other hazards." If your suppliers' updated SDSs changed nothing about how a chemical is classified, there may be nothing to retrain — but you only know that if you've read the new sheets against the old ones.
The Written Program Review — and the De Minimis Surprise
The directive tells the CSHO to "review the written program to ascertain whether all applicable requirements of paragraph (e), (f), (g), and (h) are covered and have been implemented in the workplace," in addition to what they observe on the walkaround. It then lists what the program must address. Condensed, your written program passes review if it contains:
- A chemical inventory with a product identifier for each chemical known to be present — one that aligns with the SDS and the label — covering "all chemicals present (even if the chemicals are stored/not in use)." It can be facility-wide or by work area.
- Non-routine tasks and unlabeled pipes — how you inform employees of those hazards.
- Multi-employer provisions, if contractors or temp workers are on site: how other employers get SDS access, learn precautionary measures, and understand your labeling system.
- Availability of the program to employees and their representatives on request. The directive ties this to 29 CFR 1910.1020: you have no more than 15 working days to produce it once asked.
- Labels: who is responsible for workplace labeling, a description of the labeling system you use, any alternative to labels for workplace containers, and a procedure to review and update label information.
- Safety data sheets: who is responsible for obtaining and maintaining them; how they're maintained ("available on computer, in notebooks in the work area(s), in a pick-up truck at the jobsite, via third party maintainer"); how employees retrieve them electronically "including back-up systems to be used in the event of failure of the electronic equipment"; what you do if an SDS doesn't arrive with a first shipment; what you do if you suspect an SDS is incomplete; and how you determine an SDS is current.
- Training: who conducts it, how, what it covers, and the procedure for training new employees at initial assignment and everyone when a new hazard is introduced — including how you train people "in a language and at a literacy level they understand."
Then comes the part of the directive that most small employers don't know. The citation guidance draws three lines:
- If you've done nothing — no program, no labels, no SDSs, no training — the inspector is told to cite paragraphs (e)(1), (f)(6), (g)(1), and (h)(2) and (3) "as separate items, with separate penalties."
- If your program exists but is missing an element, the specific element gets cited — for example, (e)(1)(i) when there's no chemical inventory.
- If everything else is in place but the program isn't written down — "where employees are exposed or potentially exposed to a hazardous chemical, and labeling, SDS, chemical inventory, and training requirements are met, but there is no written program" — the directive says a citation for (e)(1) "should not be issued, as it is considered a de minimis violation."
Don't read the de minimis line as permission to skip the written program. It only applies when every other element — inventory, labels, SDS access, and training — is demonstrably met, which is precisely the situation where writing the program down is easiest. In every other case the missing program is grouped with whatever else is wrong and cited as serious. The lesson runs the other way: the program is cheap, and its absence removes your only defense when something else is found.
Paragraph (e)(1) of the standard itself requires you to "develop, implement, and maintain at each workplace, a written hazard communication program." If yours needs writing or rewriting, the written HazCom program guide covers the structure; the seven items above are the checklist the inspector will hold it against.
The Floor Walk: What Gets Checked on Labels
The labeling section of the directive is long, because most of it is aimed at chemical manufacturers. The parts that apply to you as a downstream employer are short. The CSHO is told to determine that:
- Containers are "labeled with the appropriate information," that labels are "legible," and that they are "prominently displayed."
- Labels are in English (other languages may be added).
- The product identifier "can be cross-referenced with the SDS and to the inventory list of hazardous chemicals." This is the single test that ties your whole program together — the name on the bottle must find the right sheet and the right line on your list.
- Your in-house labeling system is effective, evaluated through "review of training, SDS procedures, and employee interviews." A labeling system is effective, in the directive's words, when it "ensures that employees are aware of the hazardous effects of the chemicals to which they are potentially exposed."
The citations that follow are the ones small businesses actually receive. Workplace containers that are "not labeled or . . . missing information such as the product identifier or hazard description" are cited under (f)(6)(ii). If you chose to copy the full shipped-label information onto your workplace containers but got it incomplete or wrong, that's (f)(6)(i). Painting over or removing a supplier's label — "partial covering of the label by paint" is the directive's example — is (f)(9), unless the container is immediately re-marked. The portable-container exemption in (f)(8) still stands: a container filled from a labeled one and "intended only for the immediate use of the employee who performs the transfer" needs no label. Anything that sits, gets shared, or outlasts the shift does. The secondary-container labeling guide covers what a compliant workplace label looks like.
One reassurance from the directive: "Downstream users shall not be cited for deficiencies in manufacturers', importers', or distributors' labeling." If the supplier's label is wrong, the inspector makes a referral to the Area Office with jurisdiction over the manufacturer. Your obligation is to keep the label on the container, not to audit its contents.
Safety Data Sheets: "Readily Accessible" and the Backup Rule
Paragraph (g)(8) of the standard requires SDSs to be "readily accessible during each work shift to employees when they are in their work area(s)." The directive turns that phrase into a set of pass/fail conditions, and it adds one that catches employers who have gone digital without thinking it through.
The general rule first: employees "must have unrestricted access to SDSs. This means the employer cannot require workers to ask for the SDS (e.g., stored in a locked office)." The directive also notes that if interviews reveal "workers do not have an understanding of the chemical hazards they work with," that alone can support a citation.
For electronic access — a company website, a tablet, an off-site SDS service — the directive lists what the inspector checks:
- "The employer must not require employees to perform an Internet search to view/obtain the SDS."
- "All employees have adequate computer or facsimile access, with no restrictions."
- "There is a backup procedure or system (e.g., paper, another electronic system) in place in case the computer or fax is not functioning."
- Employees "must be trained on how to access the SDSs (both on the computer and the backup procedure or system)."
- There is a way for employees to "receive a hard copy if so desired and in cases of emergency (which must be transmitted to medical personnel). It is not acceptable to only transmit the information verbally."
And the citation rule that makes the backup non-optional: "Violations of (g)(8) shall also be cited when an employer using electronic access as an integral part of the hazard communication program does not have an adequate backup system to address emergency situations." In other words, (g)(8) is cited two ways — for SDSs that exist but can't be reached, and for electronic-only systems with no plan for the day the network is down. The electronic SDS access post goes into what OSHA has historically accepted as an adequate backup.
Going digital is fully compliant and, for most small shops, the only way to keep SDSs current across a hundred products. The directive just asks you to finish the job: a second path to every sheet that doesn't depend on the first one working. A per-location QR code that any worker's phone opens without a login is the fast path; a printed set for the highest-hazard chemicals — or a second device on a different connection — is the backup. Write both into the SDS section of your program, and make sure the new hire has actually opened a sheet both ways.
The directive also settles a question that comes up constantly during this transition: which version of a sheet do you keep? "Employers must maintain the most recent received version of the SDS. When an HCS 2024-compliant SDS is received, it must replace the HCS 2012-compliant SDS for the corresponding hazardous chemical." But if you're still holding an older SDS for a product you haven't received recently, that is compliant — "even after May 19, 2028" — "unless the manufacturer, importer or distributor has provided an SDS and the employer did not maintain the new SDS." The obligation is to file what arrives, not to hunt down updates for chemicals that stopped shipping to you.
This is the part of an inspection that SafeSheet was built for. Every chemical in your inventory carries its SDS, its revision date, and a per-location QR code that a worker scans to read hazards on their phone — no login, no app — and expiration alerts tell you before a sheet goes stale. The cross-reference test the inspector runs (label, SDS, inventory line all pointing at the same product) is how the system is organized in the first place. It does not, by itself, satisfy the backup requirement; that still needs a second path you've written down and tested.
Training: The Six Questions the Inspector Is Told to Ask
The training section is where the directive is most useful to a small employer, because it publishes the inspector's focus list. The CSHO is told to evaluate training "through program review and interviews with management and employees," and the issues they are instructed to focus on are these six:
- Is a training program in place?
- Have workers been trained in a language and at a literacy level they understand?
- Have workers been trained prior to initial assignment?
- Have workers been trained when a new hazard is introduced?
- Do workers know how to access SDSs? — and the directive adds: "This includes sufficient computer skills to access SDSs stored on a computer."
- Do workers understand the workplace (in-house) labeling system?
Notice what isn't on the list. There is no annual-training check, because the standard has no annual-training requirement — paragraph (h)(1) triggers training "at the time of their initial assignment, and whenever a new chemical hazard the employees have not previously been trained about is introduced into their work area." The directive reinforces that the retraining trigger "is based on the hazard, not the chemical," with an example: adding a second flammable solvent to a work area that already has one requires no new training; introducing a corrosive where there were only flammables does. If your training calendar is built around an annual session, read how often HazCom training is actually required — the annual habit isn't wrong, but it isn't what the inspector is checking.
The directive is also fair about what interviews can prove. "It cannot be expected that employees will recall all information provided in the training and be able to repeat it." What employees must be able to do is know the hazards they're exposed to, know how to obtain and use the information on labels and SDSs, and follow the work practices and protective measures those documents call for. If the inspector "detects a trend in employee responses that indicates training is not being conducted, or is conducted in a cursory fashion," the directive calls for "a closer review of the training program and its implementation."
Three more points from the training section worth knowing:
- Handing out SDSs is not training. "The training provisions of the HCS are not satisfied solely by giving employees safety data sheets to read." Self-paced computer-based training can be part of a program but "by itself would not be sufficient" — employees "must have the opportunity to ask questions and receive responses in a timely manner."
- Understandable means language and literacy. If you have employees who speak different languages or read at different levels, you "may need to create different materials for different groups." An employee who cannot read must be talked through the hazards "in a language they understand."
- Temporary workers are a shared responsibility, and the host employer — the business where the chemicals actually are — "holds the primary responsibility for training since it uses or produces chemicals, creates, and controls the hazards." The training a temp gets "should be identical or equivalent" to what your own employees doing the same work receive. The directive tells inspectors to examine the contract between the staffing agency and the host to see who agreed to do what.
Training citations "shall generally be issued as serious." No training, or training that wasn't understandable, is cited under (h)(1); missing information about the program and operations under (h)(2); missing hazard, protection, and detection content under (h)(3), with the subsections grouped.
What a Citation Costs
The directive says citations for the written program, labeling, and training "shall generally be issued as serious unless otherwise noted." As of OSHA's current penalty schedule — the amounts that may be assessed after January 15, 2026 — a serious or other-than-serious violation carries a maximum of $16,550, a willful or repeated violation $165,514, and failure to abate $16,550 per day past the abatement date. Remember the directive's language for an employer who has done nothing: separate items, separate penalties. A missing inventory, an unlabeled dip tank, an unreachable SDS, and an untrained new hire are four citations, not one.
The flip side is also in the directive. Because inspectors are told to cite the specific deficient element rather than the whole program, every element you fix in advance is a citation that cannot be written. A program that names a responsible person, an inventory that matches the shelves, sheets that open from the work area on two paths, and training documented before the first shift — that is the entire checklist, and none of it costs more than an afternoon and a label printer.
Getting Ready: Six Checks Before November 20
Everything above collapses into a sequence a small employer can run this month.
- Read your written program against the seven items in the directive's list. Missing responsible-person names and missing procedures (SDS not received, SDS suspected incomplete, electronic backup, new-hazard training) are the common gaps. Add what's missing; don't pad what's there.
- Run the cross-reference test. Pick five containers off your shelves — include a spray bottle and something in the back of the cabinet. For each, find the product identifier on the label, the SDS with that identifier, and the line on your inventory. Any break in that chain is what the inspector will find first.
- Test SDS access from the work area, both ways. Have your newest employee open an SDS from where they work, then do it again with the primary system "down." If the second path doesn't exist, that's a (g)(8) citation waiting.
- Answer the six training questions honestly, especially the third: is anyone working around chemicals who was told they'd "get the training at the next session"? Train them now and date the record.
- Check whether your suppliers' updated substance SDSs changed anything. Compare each new sheet's Section 2 against the one it replaced. New hazard class or category means updated training under (h)(3) by November 20, 2026; no change means nothing to retrain — but write down that you checked.
- Run the full walk-through. The HazCom self-audit checklist is the employer's version of the inspection sequence; with the directive's specifics in hand, you now know exactly why each item is on it.
OSHA published the manual. For a small business, that's the best news in the whole HazCom 2024 transition: there is no longer any mystery about what an inspector is looking for, and nothing on their list is something you can't check yourself first.