Why small businesses get hit hardest by OSHA fines
Large corporations have dedicated HSE teams, compliance officers, and annual third-party audits. When a certification expires, someone notices and acts quickly. Small businesses — typically with 5 to 100 employees — often rely on one person to manage everything from payroll to purchasing to compliance. That person has seventeen other things to do. Certification renewals slip.
OSHA does not grade penalties by company size for most violation types. A willful violation at a 20-person construction company carries the same maximum penalty as one at a national contractor: $16,550 per violation for serious violations, up to $156,259 per violation for willful or repeat violations. For a small business, one inspection finding three or four violations can result in a penalty that threatens the business itself.
OSHA inspections are triggered by formal complaints, workplace injuries, planned local emphasis programs, and random selection. You cannot predict when one is coming. The only defence is having your records in order at all times.
The most commonly expired certifications
These are the certifications that consistently appear in OSHA violation records for small businesses:
OSHA 10-Hour (General Industry or Construction)
Renewal: Every 5 years (some employers require more frequent renewal)
Required for entry-level workers in construction and many general industry settings. Often expires quietly because workers completed it during onboarding and nobody tracks the renewal date.
OSHA 30-Hour (Supervisors)
Renewal: Every 5 years
Required for site supervisors, foremen, and safety leads. Higher stakes than OSHA 10 — a supervisor without a valid OSHA 30 running a jobsite is a serious violation waiting to happen.
Forklift Operator Licence
Renewal: Every 3 years (or after any incident or observation of unsafe operation)
One of the most frequently cited OSHA violations. OSHA 29 CFR 1910.178(l) requires formal evaluation and training. Paper-based tracking routinely fails here.
CDL Medical Certificate (DOT Physical)
Renewal: Every 2 years (annually for drivers with certain medical conditions)
Commercial drivers without a valid DOT physical on file are a DOT and OSHA liability simultaneously. The driver cannot legally operate the vehicle — and the employer is liable if they do.
First Aid / CPR Certification
Renewal: Every 2 years for CPR; First Aid varies by provider
OSHA requires designated first aid providers on any site where medical services are not reasonably available. If all your designated first aiders let their certifications lapse, you are out of compliance.
Hazardous Materials (Hazmat) Handling
Renewal: Every 3 years under DOT regulations
Applies to any employee who transports, handles, or is exposed to hazardous materials. Hazmat training records must be retained for 3 years after training completion.
How to verify if a certification is still valid
The expiry date on the card is your primary reference — but it is not always enough. Here is how to verify properly:
Check the physical card or certificate for the expiry date. Never assume a certification is valid because an employee says it is.
For OSHA cards, verify through the issuing training provider. OSHA Outreach cards are issued by authorised trainers — the card should have the trainer's name and OSHA authorisation number.
For forklift licences, check the employer's internal training records — OSHA requires the employer to maintain evaluation records, not just rely on external cards.
For CDL medical certificates, verify the FMCSA Medical Examiner's Certificate (MEC) is on file and within its validity period.
For First Aid/CPR, check the issuing organisation (Red Cross, American Heart Association, etc.) — many allow certificate verification via their online portals.
The hidden cost: what violations actually cost
Other-than-serious violation
Up to $16,550
Serious violation
Up to $16,550
Willful or repeat violation
Up to $156,259
Failure to abate (per day)
Up to $16,550/day
Beyond the direct fines, OSHA violations carry indirect costs: increased workers' compensation premiums, legal fees, mandatory re-training time, potential stop-work orders, and reputational damage with clients and insurers. For a business bidding on government contracts, an OSHA violation record can disqualify you from bidding.
A "willful" finding — where OSHA determines the employer knew about the hazard or lapsed certification and did nothing — is the most serious category. The fact that you were "too busy" to track renewals is not a defence. It is, in fact, evidence of willfulness.
Building a simple system to track renewals
You do not need a complex system — you need a reliable one. Here's the minimum viable compliance tracking setup for a small business:
Assign one person as the compliance owner. It doesn't have to be a full-time role, but someone must own it.
Create a record for every employee listing every certification they hold, with the expiry date clearly noted.
Store a copy of each certification — the physical card, PDF, or photograph — linked to the employee's record.
Set up alerts at least 60 days before any expiry so you have time to schedule renewal training.
Establish a process for employees to notify you when they renew — and upload their new certificate.
Review your full compliance records quarterly, not just when someone reminds you.
Keep records for at least 3 years (some OSHA standards require longer — check the specific standard).