OSHA training requirements for employers

Last reviewed September 29, 2026 against the official sources listed below. A plain-language summary, not legal advice: confirm how the law applies to you with your legal adviser.

At a glance

Who it applies to: Private employers under federal OSHA. 22 OSHA-approved State Plans also cover private-sector workers, and they can set rules of their own²⁴.
Every year: Bloodborne pathogens, respirator users, hearing conservation (85 decibels and up) and portable fire extinguishers^{4, 12, 13, 8}.
Every three years: An evaluation of each forklift operator's driving⁵.
When something changes: Hazard communication, lockout/tagout, personal protective equipment and emergency plans: train again when hazards, duties, equipment or procedures change^{1, 11, 9, 6}.
Online training: Good for the knowledge part, but not enough on its own for most standards: people need a qualified person to ask, and hands-on practice where a standard calls for it^{14, 15}.
Records: Written certification for forklifts and lockout/tagout, and bloodborne pathogens records kept for 3 years. Hazard communication has no training-record rule^{5, 11, 4, 26}.
Penalties in 2026: Up to $16,550 per serious violation and $165,514 per willful or repeated violation, and each untrained employee can count as a separate violation^{20, 21, 19}.

The standards most employers deal with

Training rules appear throughout OSHA's standards. These are the ones general-industry employers meet most often, with who must be trained, when, and what to keep:

Hazard communication (1910.1200(h)): everyone exposed to hazardous chemicals in their work area, at their first assignment and whenever a new chemical hazard is introduced¹. The standard requires no record of the training²⁶.
Bloodborne pathogens (1910.1030(g)(2)): everyone with occupational exposure, at their first assignment and at least every year after, within one year of their previous training, at no cost to them and during working hours. Records are kept for 3 years and list the dates, a summary of the content, the trainers' names and qualifications, and the names and job titles of those trained⁴.
Forklifts (1910.178(l)): each operator, before they drive, through formal instruction, practical training and an evaluation of their driving in the workplace. Refresher training follows unsafe driving, an accident or near miss, a poor evaluation, a different type of truck or a change in the workplace, and every operator is evaluated at least once every three years. The employer certifies each operator's training and evaluation⁵.
Emergency action plans (1910.38): review the plan with each employee when it's developed or they start the job, when their duties under it change, and when the plan changes, and train the people who help others evacuate. Employers with 10 or fewer employees may explain the plan out loud⁶.
Fire prevention plans (1910.39): tell employees about the fire hazards of their job when they start, and review the parts of the plan they need to protect themselves⁷.
Portable fire extinguishers (1910.157(g)): where extinguishers are provided for employees to use, a program on the basics for everyone when they start and every year, and yearly training on the equipment for those designated to use it⁸.
Personal protective equipment (1910.132(f)): before the work, training on when protective equipment is needed, which kind, how to put it on, take it off, adjust and wear it, its limits and its care. Each employee must show they can use it properly, and retraining follows changes⁹.
Lockout/tagout (1910.147(c)(7)): authorized, affected and other employees are trained, and authorized and affected employees are retrained when job assignments, machines, processes or procedures change. The employer certifies each employee's training and inspects each energy control procedure at least once a year¹¹.
Respiratory protection (1910.134(k)): before a respirator is required, and every year, with each user able to show how to inspect, put on, remove, use and seal-check it¹².
Noise (1910.95(k)): everyone in the hearing conservation program, meaning everyone exposed at or above an 8-hour average of 85 decibels, every year¹³.

This is not the full list. Confined spaces, process safety and many construction standards have their own training rules; OSHA's own summary of training requirements lists them all²⁷.

The 2024 hazard communication update

OSHA updated the hazard communication standard in 2024. The training rule itself didn't change, but employers must train employees on newly identified hazards by November 20, 2026 for substances and by May 19, 2028 for mixtures¹. OSHA pushed both dates back by four months in January 2026².

OSHA's 2026 inspection instructions say the duty to update training follows the hazard, not the chemical: a new chemical with a hazard people were already trained on doesn't need new training³.

What online training can and can't cover

Online courses are a practical way to deliver the knowledge part of most standards; the forklift standard even lists interactive computer learning as formal instruction⁵. But OSHA has long said online training on its own usually isn't enough:

Online training alone doesn't satisfy OSHA's training requirements unless it includes interactive and hands-on parts¹⁴, and computer-based training by itself doesn't meet the intent of most of them¹⁵. Whether a particular course is adequate is decided case by case¹⁶.
For bloodborne pathogens, workers must be able to reach a qualified trainer with their questions while the training is happening, not leave a message for later^{17, 4}.
Some parts can only be done in person: a forklift operator's evaluation in the workplace, showing you can use protective equipment, and a respirator fit test^{5, 9, 12}.

OSHA doesn't approve, certify or endorse any trainer or training program²², and the employer, not the training provider, is responsible for making sure people get the training they need²⁵.

Records to keep

Only some standards require a training record:

Written certification: forklifts, with the operator's name, the dates of training and evaluation and who did them⁵, and lockout/tagout, with each employee's name and dates of training¹¹.
Bloodborne pathogens: training records kept for 3 years from the training date⁴.
Respirators: fit test records, kept until the next fit test¹².
Hazard communication: no training record is required²⁶. The training certification the protective-equipment standard once required was removed in 2011¹⁰.

Where a record is required, OSHA's standards generally don't require the employee's signature¹⁴, and records can be kept in any form the employer chooses as long as they're readily accessible¹⁵. Even where a standard doesn't ask for one, OSHA calls keeping a record of all safety and health training a good idea²⁷.

Train in a language people understand

OSHA expects training in a language and vocabulary employees understand, and says that if workers can't read well, telling them to read the materials doesn't meet the obligation¹⁸. The bloodborne pathogens and respirator standards say the same in their own text^{4, 12}.

Penalties

For 2026, the maximum penalty is $16,550 per serious violation and $165,514 per willful or repeated violation²⁰. The amounts weren't raised for 2026, so the 2025 figures still apply²¹.

OSHA can count each employee who wasn't trained as a separate violation¹⁹.

How MyWorkAcademy helps

MyWorkAcademy runs the knowledge part of this training and the records around it:

Assign each topic to the people it covers, such as everyone with occupational exposure to blood or everyone in the warehouse, with each new hire's deadline counted from their start date.
Repeat the yearly topics every year, counted from each person's last completion, with reminders before each deadline and follow-ups after it.
Turn your own safety procedures into a course with the course builder, including the details that make it yours, like where safety data sheets are kept and who to ask.
Keep a dated record of every completion, with the exact course version and the score, and download it whenever an inspector asks.

Online courses don't replace the parts OSHA wants done in person, such as forklift evaluations, protective equipment practice, fit tests, or a qualified person available during bloodborne pathogens training. Keep the records those standards require, like the trainers' names and qualifications for bloodborne pathogens and the forklift and lockout/tagout certifications, with your MyWorkAcademy records.

Questions employers ask

Is online OSHA training enough?

Usually not on its own. OSHA says online training alone doesn't satisfy its training requirements unless it includes interactive and hands-on parts, and it judges each case on its facts^{14, 16}. Use online courses for the knowledge part, with a qualified person available for questions and hands-on practice where the standard requires it.

Does OSHA approve or certify training courses?

No. OSHA says it doesn't approve, certify or endorse individual trainers or training programs²². It's the employer's job to make sure the training meets each standard.

Do OSHA 10-hour and 30-hour cards cover our training duties?

No. OSHA says its Outreach Training Program doesn't fulfill an employer's requirement to provide training under specific OSHA standards²³.

How often does OSHA training have to be repeated?

It depends on the standard: every year for bloodborne pathogens, respirators, hearing conservation and fire extinguishers; an evaluation at least every three years for forklift operators; and whenever something changes for hazard communication, lockout/tagout, protective equipment and emergency plans^{4, 12, 13, 8, 5, 1, 11, 9, 6}.

Do employees have to sign their training records?

Generally not. OSHA says a signature after training is generally not required by its standards, and records can be kept in any readily accessible form^{14, 15}. Forklift and lockout/tagout training must still be certified in writing^{5, 11}.

What language does the training have to be in?

One your employees understand. OSHA expects training in a language and vocabulary workers can understand, and says telling workers who can't read well to read the materials doesn't meet the obligation¹⁸.

OSHA training requirements: what to train, and when