HSE inspections up 47% - HSE carried out over 13,200 workplace inspections in 2024/25.
A guide to health and safety compliance in the United States for UK businesses with US subsidiaries, offices, or employees. This page covers the Occupational Safety and Health Act of 1970, the 29 CFR standards administered by OSHA, the State Plans that operate in parallel in many states, OSHA training requirements including OSHA 10 and OSHA 30, the current penalty framework, and how Arinite delivers US compliance as part of international health and safety support.
OSHA (the Occupational Safety and Health Administration) is the US federal agency responsible for regulating workplace health and safety. Established under the Occupational Safety and Health Act of 1970 (the OSH Act), it operates as an agency within the US Department of Labor.
OSHA’s remit covers virtually every private-sector employer in the United States, plus certain public-sector employers. Its core functions are setting health and safety standards (codified in Title 29 of the Code of Federal Regulations), conducting workplace inspections, issuing citations and penalties for violations, and providing training, outreach, and education.
OSHA is not the UK Health and Safety Executive. The two agencies have similar missions but operate under different legal frameworks, use different approaches to enforcement, and have different expectations of employers. UK compliance does not satisfy OSHA requirements and vice versa.
Many states operate OSHA-approved State Plans that regulate health and safety within their borders instead of federal OSHA. These State Plans must be at least as effective as the federal framework and often impose additional requirements. California (Cal/OSHA), Michigan (MIOSHA), Washington State, Oregon, and North Carolina are among the most prominent State Plans.
Note: EU-OSHA (European Agency for Safety and Health at Work) is a separate EU body based in Bilbao, Spain. This page covers US OSHA only. For European compliance, see DGUV (Germany), DUERP (France), RI&E (Netherlands), RSPP (Italy), LPRL (Spain), PAPRIPACT (France).
OSHA operates within a layered framework that UK businesses need to understand before designing US compliance arrangements.
The foundational federal statute. Establishes OSHA as an agency, creates the general duty of employers to provide workplaces free from recognised hazards, and authorises OSHA to promulgate binding safety standards. Section 5(a)(1) — the General Duty Clause — is the catch-all provision used to cite employers where no specific standard applies.
OSHA’s specific regulations, codified in Title 29 of the Code of Federal Regulations. 29 CFR Part 1910 (General Industry) applies to most office-based, retail, healthcare, hospitality, and professional services operations. 29 CFR Part 1926 (Construction) applies to construction work specifically. 29 CFR Part 1928 (Agriculture) and Parts 1915–1919 (Maritime) have narrow specialist application.
Approximately 22 states plus several territories operate their own OSHA-approved State Plans covering private-sector employers. State Plans must meet or exceed federal requirements and often impose additional rules. Significant State Plans for UK businesses: California (Cal/OSHA), Michigan (MIOSHA), Washington State (DOSH), Oregon (Oregon OSHA), and North Carolina. Significant non-State-Plan states: New York, Texas, Illinois, Massachusetts, Florida, Pennsylvania, Georgia.
Other federal regulators touch workplace safety: the Environmental Protection Agency (EPA) for chemical safety, the Department of Transportation (DOT) for transport-related safety, the Equal Employment Opportunity Commission (EEOC) for discrimination-related workplace issues, and the National Institute for Occupational Safety and Health (NIOSH) for research and recommendations.
Workers’ compensation insurance is regulated state-by-state, separate from OSHA. Every state except Texas requires employers to carry workers’ comp coverage. Workers’ comp compensates injured workers regardless of fault; OSHA addresses the regulatory compliance that should have prevented the injury. Both regimes apply in parallel after a workplace incident.
OSHA coverage is broad but has specific carve-outs that UK businesses need to understand:
Covered employers: Every private-sector employer with one or more employees engaged in interstate commerce. In practice, this means essentially every private-sector employer in the United States.
State and local government employees: Covered in State Plan states. Not covered by federal OSHA in non-State-Plan states.
Federal government employees: Covered by a separate Federal Employee Occupational Safety and Health Programme under Executive Order 12196.
Self-employed individuals: Not covered.
Immediate family members on family farms: Not covered.
Some religious organisations: Complex case-by-case coverage.
Independent contractors: Not directly covered as employees of the principal, but complex determinations arise in staffing and gig work arrangements.
For UK businesses: if you have any US-based employees on your payroll (whether working in offices, remotely from home, visiting clients, or otherwise performing services), OSHA applies. This is from the first employee, with no size threshold.
Under 29 CFR Part 1910 (General Industry), the standards most likely to apply to office-based UK businesses operating in the US include:
Slips, trips, falls, ladders, stairways, and working at height. Applies to every workplace.
Emergency evacuation planning, exit route requirements, fire prevention programmes. Critical for every office.
Ventilation, indoor air quality, occupational noise exposure. Relevant to most premises.
PPE provision, hazard assessment, employee training. Particularly relevant where any client-site visits or field work is involved.
Sanitation, first aid, confined spaces. The first aid provisions apply to every workplace.
Medical services and first aid provision requirements.
Fire extinguishers, fire suppression systems, employee fire response training.
Chemical exposure limits including the Hazard Communication Standard (1910.1200), the US equivalent of the UK COSHH framework. Applies to any chemicals in the workplace including routine office cleaning products.
Beyond the specific standards, Section 5(a)(1) of the OSH Act requires every employer to provide a place of employment free from recognised hazards that are causing or likely to cause death or serious physical harm. The General Duty Clause is invoked when a hazard exists but no specific standard covers it. It is a significant compliance risk because it cannot be satisfied simply by following a checklist.
Every US employer must:
Provide a workplace free from recognised hazards (the General Duty Clause, Section 5(a)(1) OSH Act).
Comply with specific 29 CFR standards applicable to the workplace and industry.
Conduct a hazard assessment of the workplace and identify applicable OSHA standards.
Provide required training to employees on applicable OSHA standards.
Provide required PPE at no cost to employees where the hazard assessment indicates it is needed.
Maintain OSHA injury and illness records (Forms 300, 300A, 301) for covered employers.
Report fatalities within 8 hours. Hospitalisations, amputations, and loss of an eye within 24 hours.
Post the OSHA "It’s the Law" poster in a visible workplace location.
Allow OSHA inspections and not retaliate against employees who participate.
Post OSHA citations prominently near the violation for three working days or until corrected.
Not retaliate against employees for exercising OSH Act rights. Retaliation is itself an OSHA violation.
Comply with State Plan requirements where more stringent than federal OSHA.
Failure to comply can result in administrative penalties, criminal prosecution for wilful violations causing death, civil suits, and workers’ compensation exposure.
OSHA conducts roughly 30,000 to 40,000 inspections per year. Understanding how inspections are triggered, what happens during one, and what comes after is critical.
Imminent danger situations, fatalities and catastrophes (three or more hospitalisations), worker complaints and referrals, targeted inspections in high-hazard industries, and follow-up inspections to verify corrections from previous citations.
Most inspections are unannounced. The process involves an opening conference, a walk-around inspection, interviews with employees, a closing conference, and (where violations are identified) issuance of a citation. Employers have a limited right to require a warrant.
Violations are classified by type and penalties issued. Employers have 15 working days to contest the citation (appealing to the Occupational Safety and Health Review Commission) or to pay and abate.
Before formal contest, employers can request an informal conference with the OSHA Area Director. Informal conferences frequently result in penalty reductions of 30-50% in exchange for settlement agreements including structured abatement.
Employees who report safety concerns are protected from retaliation under Section 11(c) of the OSH Act. Retaliation is itself a separate OSHA violation. Terminating or demoting an employee following an OSHA complaint creates significant additional risk.
OSHA penalties are adjusted annually for inflation. The 2026 maximum penalty amounts (effective January 15, 2026) are:
Up to $16,550 per violation.
Up to $16,550 per violation.
Up to $16,550 per day past the abatement deadline, accumulating daily.
Up to $165,514 per violation. Willful means the employer intentionally committed the violation or showed plain indifference to the OSH Act.
Up to $165,514 per violation. Applies where a substantially similar violation has been identified within the previous five years.
OSHA uses a gravity-based calculation considering severity, likelihood, employees exposed, and duration. Adjusted by: employer size reduction (up to 60%), compliance history (up to 20%), good faith (up to 25%), and quick-fix reduction (up to 15%).
Cal/OSHA operates a distinct penalty framework: up to $25,000 for serious violations (higher than federal), $162,851 for willful/repeat, minimum $11,632 for willful. California is the most aggressive enforcement state.
Wilful violations causing employee death carry criminal prosecution: up to six months imprisonment and $500,000 company fines. California has prosecuted employers criminally for workplace deaths.
Separate civil exposure arises from workers’ compensation claims, personal injury lawsuits, and potentially class actions where systemic violations affect multiple employees.
OSHA training is prescriptively required for specific standards and roles. The two most widely recognised voluntary programmes are OSHA 10 and OSHA 30. See our health and safety training service.
Over 100 OSHA standards include specific training requirements. Most frequently applicable: Hazard Communication (1910.1200), PPE (1910.132), Bloodborne Pathogens (1910.1030), Emergency Action Plans (1910.38), and Fire Extinguisher Use (1910.157).
Ten-hour voluntary programme covering general hazard awareness, worker rights, and employer duties. Construction Industry or General Industry variants. Not federally mandated but required by many state laws and employers. OSHA 10 completion cards do not expire federally but are typically treated as current for 3-5 years.
Thirty-hour equivalent for supervisors, safety managers, and dedicated safety personnel. Same Construction/General Industry split. More commonly required as a condition of specific roles.
Several states mandate OSHA 10 or equivalent: New York (NY Labor Law 220-h), Connecticut, Massachusetts, Missouri, and others. Requirements vary significantly by state.
Records of completed training (name, date, trainer, content, duration) must be maintained and produced during OSHA inspections. Training that happened but cannot be documented is treated as training that did not occur.
For UK businesses operating across multiple US states, the compliance landscape varies significantly. Arinite supports clients across the states where UK business presence is most concentrated.
Federal OSHA applies directly (no State Plan). NY Labor Law 220-h requires OSHA 10 for construction. NYC has specific site safety rules. Significant UK business presence in NYC (finance, legal, professional services, tech, creative) makes this the single most common US compliance context for Arinite clients.
Cal/OSHA is the most stringent State Plan in the US, with higher penalty maximums, additional standards including the Injury and Illness Prevention Programme (IIPP, no federal equivalent), and more aggressive enforcement. UK tech and media companies with San Francisco, Los Angeles, and San Diego operations face Cal/OSHA specifically.
Federal OSHA state with no State Plan. Texas is the only US state where workers’ compensation is optional (though consequences of going without are severe). Rapid growth in Austin, Dallas, and Houston for UK tech and financial services.
Both operate under federal OSHA. Massachusetts has state-specific rules around bloodborne pathogens. Illinois has state-level sexual harassment training requirements. Boston is significant UK legal and financial presence; Chicago has growing UK professional services.
Washington State operates DOSH as a State Plan. Oregon operates Oregon OSHA. Both have standards additional to federal OSHA. Seattle has significant UK tech presence; Portland has growing creative and professional services.
Federal OSHA state. Miami (financial services, legal, creative) and Orlando (hospitality-adjacent professional services) are the main UK business locations. Florida has state-level hurricane response rules UK businesses often overlook.
For UK businesses in multiple states, the core challenge is maintaining compliance across the federal-vs-State-Plan split plus state-specific requirements. A generic "OSHA programme" typically does not pass Cal/OSHA scrutiny.
Arinite supports UK businesses across every office-based sector with US operations. Risk profiles and applicable standards vary.
General Duty Clause, Emergency Action Plans, Hazard Communication for office chemicals, and PPE for data centre visits. Remote and hybrid work adds complexity. California has specific home office ergonomic assessment obligations that UK businesses miss.
Banks, investment managers, fintechs. Ergonomic workstations (particularly trading floors), emergency evacuation in high-rise buildings (NYC, Chicago, San Francisco protocols), and mental health/stress management.
Office risk profile with attention to lone working (attorneys visiting clients), business travel safety, and coordination when professionals work at client sites.
Bloodborne Pathogens Standard (1910.1030), specific PPE and respiratory protection, sector-specific recordkeeping. Healthcare-specific State Plan provisions in California, Maryland, Minnesota.
Kitchen-specific hazards (burns, cuts, slips, chemical exposure), alcohol service requirements, guest and employee safety coordination, state-specific health code interactions.
Slip and trip prevention, lifting and manual handling for stock, workplace violence prevention programmes (mandated by several states for retail).
UK landlords with US holdings. General Duty Clause for common areas, fire safety under state and local building codes, lead-based paint and asbestos obligations in older properties.
UK businesses with US operations routinely fail OSHA compliance in predictable ways. The most common gaps are:
No OSHA hazard assessment. UK businesses assume UK risk assessments transfer. They do not. An OSHA-compliant hazard assessment must identify applicable 29 CFR standards, document workplace hazards, and drive specific control measures.
No OSHA 10 or OSHA 30 training record. UK internal H&S training is not equivalent to OSHA outreach certification.
No Hazard Communication programme. Every workplace with chemicals (including routine office cleaning supplies) must maintain a written programme under 1910.1200 with Safety Data Sheets and employee training. UK COSHH is not equivalent.
No OSHA poster displayed. The "It’s the Law" poster must be displayed in a visible workplace location.
No OSHA 300/300A/301 recordkeeping. Employers with 11+ employees must maintain injury and illness records. UK accident books are not equivalent.
Failure to report within OSHA timescales. Fatalities: 8 hours. Hospitalisations, amputations, loss of an eye: 24 hours. UK timescales are different.
Misclassification of workers as independent contractors. Incorrect classification exposes the business to OSHA, tax, and employment law action simultaneously.
No consideration of State Plan requirements. Particularly Cal/OSHA’s Injury and Illness Prevention Programme.
No PPE hazard assessment or PPE training. The 29 CFR 1910.132 documented assessment requirement is specifically required.
No emergency action plan. Subpart E requires written emergency action plans for businesses with more than 10 employees.
No retaliation protection in employment policies. UK grievance policies may not protect against Section 11(c) claims.
Workers’ comp coverage gaps. UK insurance does not cover US operations. Workers’ comp is state-regulated and mandatory in every state except Texas.
Arinite’s international health and safety service addresses each of these gaps as part of standard US compliance onboarding.
Arinite provides US compliance as part of our international health and safety service, combining UK-based programme management with US-based OSHA specialists. Coordinated by Chartered consultants.
Our US partners are qualified OSHA compliance professionals operating across federal OSHA and the major State Plans.
OSHA-compliant hazard assessment of each US workplace, identification of applicable 29 CFR standards, and development of required written programmes.
Delivered through authorised OSHA outreach trainers. On-site or online. Training records maintained in Arinite’s health and safety software platform.
Hazard Communication at initial assignment. PPE training where applicable. Bloodborne Pathogens for healthcare. Emergency Action Plan training.
Forms 300, 300A, and 301 maintained, with annual summary posting managed on the correct timescale.
Your US consultant attends OSHA inspections, manages conferences, and supports any informal conference or contest process.
Specific state compliance ensured including Cal/OSHA’s Injury and Illness Prevention Programme.
Your named Chartered consultant at Arinite UK manages the programme. Single UK point of contact for all international compliance activity.
All US compliance activity maintained in Arinite’s health and safety software platform alongside UK and other international operations.
We coordinate with your US insurance broker to ensure OSHA compliance posture matches workers’ comp requirements.
OSHA standards, State Plan requirements, and enforcement priorities evolve. We monitor changes and update your documentation.
US compliance costs vary significantly based on several factors: number of US sites, number of US employees, state mix (especially whether California is in scope), industry sector, scope of training required, and whether ongoing maintenance or one-off setup is required.
Number of US locations. Single office vs multi-state operations.
State Plan footprint. California operations add cost because Cal/OSHA is additional to federal OSHA.
Workforce size. Training delivery and recordkeeping scale with employee count.
Sector. Healthcare, hospitality, and retail face more prescriptive standards.
Training scope. OSHA 10, OSHA 30, and standards-required training stack.
Ongoing vs project. Initial setup is a one-time project; maintenance is ongoing.
Project-based: one-off US compliance establishment including hazard assessment, written programmes, initial training, and recordkeeping setup.
Ongoing retainer: US compliance maintained as part of a Done For You international package including annual review, training refresh, and inspection response.
Hybrid: initial project establishment followed by ongoing light-touch maintenance coordinated through your UK Arinite consultant.
Rather than publish generic rates, Arinite provides a tailored quote after a brief discovery call. A free international gap analysis call with one of our Chartered consultants will give you a clear estimate for your specific situation.
Opening US operations is often the compliance moment where UK businesses realise their European frameworks don’t transfer. Whether you’re setting up your first US office, scaling across multiple states, or dealing with an existing OSHA inspection, Arinite delivers locally qualified US compliance coordinated from the UK.
Book a free international gap analysis call. In 30 minutes, one of our Chartered consultants will review your US arrangements, identify the gaps that matter, and recommend the right approach.
From Reactive Firefighting to Proactive Health & Safety Compliance
No formal HSE systems in place. Everything is reactive, waiting for something to go wrong. Documentation is missing or outdated.
This isn't just "non-compliant." It's criminally negligent. Directors face personal prosecution.
Basic HSE documentation is in place. Minimum legal requirements met. You can pass a basic audit.
Compliance is where most consultants get you, then leave. You're legal, but you're not optimised.
Systems run proactively, preventing problems before they occur. Compliance is distributed, not dependent on one person.
That's why 95%+ of clients renew year after year.

Robert Winsloe
Managing Director, Arinite
“We work with you to deliver peace of mind. We tailor our service provision to your business to provide proactive, pragmatic health and safety advice and that helps reduce costs by ensuring compliance with relevant health and safety legislation.”
Other Consultants
Get you to Stage 2 (Compliant) and disappear.
Arinite
Gets you to Stage 3 (Proactive) and keeps you there.
That's why we call it transformation, not just compliance.

Compliance
Traditional consultancies audit, report and leave. You get a document and the job of implementing it.
Control
Software companies give you dashboards and workflows without the knowledge to use them.
Coverage
Global businesses need consultants who know compliance in every jurisdiction.
Arinite
We are not a consultancy that adds external software. We are not a software company that recommends consultants.
We are the place where those two things finally become one.
50+ Countries. Global Safety. Local Trust.
Headquartered in London, UK, with Chartered health and safety consultants in 50+ countries. Whether you need a health and safety audit in Manchester, a fire risk assessment in Birmingham, or outsourced workplace health and safety compliance in Singapore, we have consultants near you.
We're expanding globally

Operations Director, Arinite
I have been in the health and safety business for 35+ years. In that time, I have had one consistent experience across every sector and every country I have worked in.
Every business we speak to already knows, somewhere, that their workplace health and safety compliance has not kept pace with their growth. It is not ignorance. It is busyness. It is the assumption that because nothing has gone wrong yet, the gaps are probably manageable.
What stops most businesses from doing something about it is not the cost of outsourcing health and safety support. It is the fear of finding out how significant the gaps are.
The Free Gap Analysis Call exists for exactly that moment.
You get the full picture of your workplace health and safety position in 30 minutes.
“In 35+ years, I have not once had someone tell us they wished they had stayed in the dark.”
No video testimonials available at the moment.
Join 1,500+ organisations that trust Arinite as their health and safety consultants.
Common questions about OSHA compliance for UK businesses with US operations
Our IOSH Chartered health and safety consultants are here to help with any queries about workplace safety, compliance, or our services.
Download our comprehensive library of expert guides, checklists, and templates.
Browse LibraryHave a question or need expert advice? We're here to help.
Fill out the form below and our team will get back to you within 24 hours.
Headquarters
29 Throgmorton St
London EC2N 2AT