LAW: Workplace Safety Compliance
Job Hazard Analysis: Legal Requirements,
OSHA Obligations, and Employer Liability
OSHA Obligations, and Employer Liability
OSHA does not mandate a specific JHA format, but it does mandate hazard identification, abatement, and documentation under the General Duty Clause. Employers who skip the JHA process face citations, penalties up to $16,131 per violation, and civil liability when workers are injured by preventable hazards.
$16,131
Per Violation
Maximum OSHA penalty per serious violation under the General Duty Clause as of 2024. Willful or repeat violations reach $161,323.
OSHA, 2024
40%
Of Fatal Incidents
Workplace fatalities involve hazards that a pre-task job hazard analysis would have identified and could have controlled before work began.
BLS, 2023
29 CFR
1910.132 / 1926.20
The OSHA standards most commonly cited alongside General Duty Clause violations where JHA documentation is absent or inadequate.
OSHA 1910.132
Law Summary: The JHA Legal Framework
OSHA has no single standard that says “you must conduct a job hazard analysis.” What OSHA does have is the General Duty Clause (Section 5(a)(1) of the Occupational Safety and Health Act), which requires every employer to provide a workplace free from recognised hazards that are causing or likely to cause death or serious physical harm. The JHA is the primary mechanism for fulfilling that obligation, and its absence is the primary evidence OSHA uses to prove the employer recognised a hazard and failed to act.
Several industry-specific standards reinforce this by explicitly requiring hazard assessments before work begins. Construction’s 29 CFR 1926.20 requires employers to initiate and maintain programs for “frequent and regular inspections” of work sites, materials, and equipment. General industry’s 29 CFR 1910.132 requires a hazard assessment to determine PPE requirements before any task begins. Confined space entry under 29 CFR 1910.146 requires a written permit that functions as a structured JHA. These standards collectively establish the JHA as a legal obligation, not a voluntary best practice.
Who Must Comply
The Four-Step JHA Process
OSHA’s JHA guidance document (OSHA 3071) outlines four steps that form the legal standard of care. Deviating from this process (or skipping it entirely) is what OSHA investigators use to establish employer negligence in post-incident citations.
Step 1: Select the job
Prioritise jobs with the highest injury or illness rates, jobs where near-misses have occurred, new jobs or tasks with no prior exposure history, and jobs where workers have expressed concerns. Frequency of performance does not reduce hazard severity: a routine task performed incorrectly under pressure is as dangerous as an infrequent one.
Step 2: Break the job into steps
Observe the task as it is actually performed, not as the procedure manual says it should be performed. Record each discrete action in sequence. Too few steps miss hazards; too many make the JHA unwieldy. The rule is: one step per action that could introduce a hazard if performed incorrectly, in the wrong sequence, or under adverse conditions.
Step 3: Identify hazards for each step
For each step, ask: what could go wrong, what are the consequences, and how likely is it? Hazard categories include: struck-by, caught-in/between, fall, electrical, chemical exposure, ergonomic, and temperature extremes. Include hazards from adjacent work, equipment failures, and environmental conditions, not just the task itself in isolation.
Step 4: Determine preventive measures
Apply the hierarchy of controls in order: elimination, substitution, engineering controls, administrative controls, PPE. Document the specific control for each hazard: “use PPE” is not sufficient; the specific PPE, standard, and application must be stated. Controls not documented are controls that do not legally exist in post-incident review.
Penalties for Non-Compliance
Source: OSHA Penalty Amounts, 2024
What Triggers a Citation: Common JHA Failures
JHA not completed before work began
OSHA investigators routinely ask when the JHA was completed and compare the date against the incident date. A JHA completed after an injury (or after an inspection was announced) is treated as after-the-fact documentation, not a genuine pre-task analysis. It may be used against the employer as evidence of awareness without action.
Hazard identified but no control documented
A JHA that lists a hazard without a specific control is legally worse than no JHA. It proves the employer had knowledge of the hazard, meeting the “knew or should have known” standard for a General Duty Clause citation, but failed to to implement any control. The absence of controls after documented awareness is the clearest path to a willful violation.
JHA not reviewed after near-miss or incident
OSHA expects JHAs to be living documents reviewed and updated when conditions change, when equipment changes, when a near-miss occurs, and when a new worker is assigned to a task. A static JHA that has not been reviewed in three years (despite three incident reports involving the same task) is strong evidence of a systematic safety failure.
Worker not involved in the JHA process
OSHA’s own JHA guidance states that worker involvement is essential to capturing real-world hazards that supervisors may not observe during an office-based review. JHAs produced solely by management and signed by workers without input are treated with scepticism. Worker signatures on a JHA they did not contribute to do not constitute legal acknowledgment of its adequacy.
Legal Disclaimer
This article provides educational information about OSHA regulations and JHA requirements. It does not constitute legal advice. Requirements vary by industry, jurisdiction, and specific workplace conditions. Consult a qualified safety professional or employment attorney for guidance specific to your workplace.
Employer Responsibilities: Training and Communication
Completing a JHA is only the first obligation. OSHA’s General Duty Clause requires employers to communicate known hazards to affected workers and to train them on the controls in place. A JHA that exists in a supervisor’s filing cabinet but was never shared with the workers performing the task provides no legal protection. The document must be reviewed with workers before the task begins, and workers must have an opportunity to ask questions and raise concerns.
Training obligations specific to JHA implementation include: explaining each identified hazard and why it is dangerous, demonstrating or verifying competency in each control measure, and confirming that PPE selected in the JHA has been fit-tested and that workers know how to inspect, don, doff, and maintain it. For tasks performed by contractors on a host employer’s site, the host employer retains responsibility for communicating site-specific hazards and reviewing the contractor’s JHA against site conditions.
Before the task
Review the JHA with all workers who will perform the task. Confirm each worker understands the hazards and controls. Document the review with worker signatures and the date of the briefing.
When conditions change
If site conditions, equipment, or personnel change during the task, stop work, update the JHA, and re-brief affected workers. Continuing under changed conditions without updating the JHA creates a new uncontrolled hazard exposure.
After the task
Debrief workers on what worked, what was missed, and any near-misses. Update the JHA to reflect lessons learned. File the signed briefing record with the JHA document. This continuous improvement loop is what distinguishes a compliant JHA programme from a paper exercise.
Key Takeaways
No JHA standard, but clear legal obligation
OSHA has no single JHA regulation, but the General Duty Clause and multiple industry-specific standards create a binding obligation to identify, document, and control hazards before work begins. The JHA is the primary mechanism for meeting that obligation.
Documentation is both shield and liability
A complete, current JHA demonstrates due diligence and can reduce penalty severity. An incomplete JHA (one that identifies hazards without controls, or that was completed after the fact) is evidence of employer knowledge and can increase citation severity to willful.
Worker involvement is not optional
OSHA’s own JHA guidance requires worker participation in the analysis process. JHAs produced without worker input miss real-world hazards, fail the reasonableness standard in post-incident review, and expose the employer to a higher citation severity when workers are injured by hazards that would have been identified had they been consulted.
Frequently Asked Questions
Is a Job Hazard Analysis legally required by OSHA?
OSHA has no regulation titled “Job Hazard Analysis,” but the obligation to conduct one flows from the General Duty Clause, 29 CFR 1910.132, 29 CFR 1926.20, and several other standards. Any employer who cannot demonstrate they identified and controlled recognised hazards before a worker was injured faces a serious citation, regardless of whether they used the JHA format specifically.
What is the difference between a JHA and a JSA?
Job Hazard Analysis (JHA) and Job Safety Analysis (JSA) refer to the same process: a step-by-step hazard identification and control document for a specific task. The terms are interchangeable in OSHA guidance and industry practice. Some industries use “Task Hazard Analysis” (THA) or “Activity Hazard Analysis” (AHA) for the same document type. The legal standard applies to the process, not the label.
How often must a JHA be updated?
OSHA does not specify a mandatory review frequency, but expects JHAs to be reviewed whenever the job changes, new equipment is introduced, a near-miss or incident occurs, a new worker is assigned, or when periodic review reveals the document no longer reflects actual conditions. Annual review is a common baseline; high-hazard tasks warrant review before each performance.
Can a generic JHA cover multiple similar tasks?
Only if the tasks are truly identical in steps, equipment, environment, and hazard profile. A JHA for “forklift operation” that does not distinguish between indoor warehouse operation and outdoor loading dock operation is inadequate. OSHA investigators will examine whether the JHA reflects the actual conditions under which the incident occurred: a generic document that does not match the specific task is treated as no JHA for that task.
What records must be retained and for how long?
OSHA’s recordkeeping standard (29 CFR 1904) requires injury and illness records to be retained for five years. JHA documents are not subject to a specific OSHA retention requirement, but employment law and civil litigation standards typically require their retention for the duration of employment plus three to seven years. Retain JHAs indefinitely for tasks where injuries have occurred, as they may be subpoenaed in civil litigation.
Does having a JHA protect an employer from OSHA citations?
A complete, current JHA with implemented controls can reduce citation severity and support an unpreventable employee misconduct defence. However, a JHA alone does not guarantee immunity. If the JHA was completed but hazard controls were not implemented, or if workers were not trained on the controls identified, the JHA may increase citation severity by proving the employer knew of the hazard and failed to act on its own documentation.
Who is qualified to conduct a JHA?
OSHA does not certify JHA authors or require specific credentials, but the person conducting the JHA must have sufficient knowledge of the task and workplace to identify its hazards accurately. Best practice is a joint analysis by the supervisor responsible for the task, the workers who perform it, and a safety professional. For high-hazard tasks involving chemicals, machinery, or confined spaces, a Certified Safety Professional (CSP) or Certified Industrial Hygienist (CIH) review adds defensibility.
Sources
Government and Regulatory Sources
- OSHA 3071: Job Hazard Analysis: OSHA’s official guidance document on the four-step JHA process.
- 29 CFR 1910.132: Personal Protective Equipment: requires written PPE hazard assessment before task performance.
- 29 CFR 1926.20: General Safety and Health Provisions (Construction): requires frequent and regular site hazard inspections.
- OSHA Penalty Amounts 2024: current maximum penalty figures by violation type.
Research and Industry Sources
- Bureau of Labor Statistics: Injuries, Illnesses, and Fatalities (2023): data on workplace fatality rates and causal factors.
- National Safety Council: Workplace Safety Data: supporting analysis on preventable injury patterns.
Related VelSafe Articles
Guides
Hot Work Safety: Permits, Controls and OSHA Compliance
How hot work permits function as a structured JHA for welding, cutting, and open-flame operations under OSHA 1910.252.
Worker Safety
Housekeeping on the Job: Worker Safety Guide
Workplace housekeeping requirements, hazard identification, and the OSHA standards that apply to slip, trip, and fall prevention.
Insights
Hydraulic Safety: Hazards, Regulations, and Insights
Hydraulic system hazards including injection injury, LOTO for stored energy, and what facilities get wrong in pre-task hazard assessment.
WORKPLACE SAFETY COMPLIANCE
Build a JHA Programme That Holds Up Under Inspection
Find more OSHA compliance guides, legal frameworks, and workplace safety resources at VelSafe.
Explore More Law Articles
