OSHA Compliance Consultant

OSHA compliance consultant

An OSHA compliance consultant is someone you bring in to build the safety program the law requires, verify in the field that it is actually running, and stand behind it when a compliance officer shows up. M Squared Safety does that work for construction contractors and for general industry employers, with 20 plus years managing contractor safety programs on live job sites behind it. Call 949-954-6581.

What an OSHA compliance consultant actually does

The title covers a wide range of quality, so it is worth being specific. The work divides into four things, and a firm that does only the first is selling paperwork.

• Written programs. The documents a regulator can demand on the day: the Injury and Illness Prevention Program, a heat illness plan, a Code of Safe Practices for construction, hazard communication, emergency action, lockout, respiratory protection, confined space, and the site-specific plans a general contractor wants before you mobilize. Written to your operation, not downloaded and renamed.
• Field verification. Scheduled site or facility inspections with documented findings, photographs and closure tracking. This is where the difference between a program and a binder shows up, and in California the inspection record is itself a required document.
• Training and records. Delivering the instruction the standards require, and keeping the records that prove it happened, in the format the standard specifies.
• Response. Being reachable when a crew hits something nobody planned for, when an injury happens, and when a compliance officer is standing in your yard.

What engaging one actually looks like

Most engagements start the same way, because most employers call for the same handful of reasons: an open citation, an inspection they know is coming, a general contractor demanding documents they do not have, an injury, or a program nobody has touched in three years.

The first phase is a gap assessment. Someone reads what you have, walks the work, talks to the crew or the floor, and produces a list of what is missing and what is wrong, ranked by exposure rather than by how easy it is to fix. That assessment is worth having even if you stop there, because it converts a vague sense of risk into a finite list.

The second phase is writing and implementing. Programs get built or rebuilt to match the work you actually perform. Training gets scheduled around your pours and your production, not around the consultant's calendar. An inspection cadence gets set and the first cycle runs.

The third phase is the part that decides whether any of it survives. Programs drift. Standards move. Crews turn over. Somebody has to carry the training calendar, run the inspections, update the documents when Cal/OSHA changes a rule, and keep the records current. Delivered on a monthly retainer, that is Fractional EHS, which is the safety function without the payroll line.

The federal versus State Plan distinction, which is the whole thing

This is the single most useful thing to understand before you hire anyone, and it is where generic national providers quietly fail their California clients.

Section 18 of the Occupational Safety and Health Act lets states run their own occupational safety and health programs in place of federal OSHA. There are 29 OSHA-approved State Plans: 22 cover private sector employers as well as state and local government, and 7 cover state and local government workers only. A State Plan has to be at least as effective as the federal program.

At least as effective is a floor, not a ceiling. That is the sentence that matters. A State Plan can adopt standards federal OSHA does not have at all, and California has done exactly that, repeatedly. So a written program bought from a national provider and built to the federal baseline is not merely thin in California. It is missing whole standards, and you find out which ones during an inspection.

Which regulator you answer to also changes the mechanics. Reporting deadlines differ. Recordkeeping forms are named differently. Appeal bodies and appeal windows are different. Advice that is correct in Texas can be wrong in California and still sound authoritative. The wider picture is in federal OSHA and state plans, explained.

What California adds that federal OSHA does not have

The IIPP under 8 CCR 3203

Section 3203(a) requires every California employer to establish, implement and maintain an effective Injury and Illness Prevention Program, and the Program shall be in writing. There is no federal general industry equivalent. It is also the most cited standard in the state: 3203 sits at number one on Cal/OSHA's own most frequently cited standards list for every calendar year from 2015 through 2025.

Eight elements are named in subsection (a):

1. Identify the person or persons with authority and responsibility for implementing the Program.
2. A system for ensuring that employees comply with safe and healthy work practices, including recognition of employees who follow safe and healthful work practices, training and retraining programs, and disciplinary actions.
3. A system for communicating with employees in a form readily understandable by all affected employees on matters relating to occupational safety and health.
4. Procedures for identifying and evaluating work place hazards, including scheduled periodic inspections.
5. A procedure to investigate occupational injury or occupational illness.
6. Methods and procedures for correcting unsafe or unhealthy conditions, work practices and work procedures in a timely manner.
7. Training and instruction, including for new employees, employees given a new assignment, and supervisors.
8. Allow employee access to the Program, with provision for copies and electronic access within five business days.

The eighth element is the one most often reported incorrectly, including by sources that ought to know better. It was added in 2020 and it is employee access, not recordkeeping. Recordkeeping lives separately in 3203(b): inspection records identifying the person conducting the inspection, the unsafe conditions and work practices found and the action taken to correct them, and training records showing employee name or other identifier, training dates, type of training and training providers, each kept for at least one year. A program that reads well with no records behind it is a gap an inspector finds in about four minutes. The full obligation is set out in California IIPP requirements: the eight elements of 8 CCR 3203.

Construction adds 8 CCR 1509

Section 1509(a) points construction employers back to 3203 for the IIPP itself. Subsection (b) then requires a written Code of Safe Practices relating to the employer's operations, containing language equivalent to the relevant parts of Plate A-3 of the Appendix. Subsection (c) requires it posted at a conspicuous location at each job site office, or provided to each supervisory employee who shall have it readily available. Subsection (e) requires supervisory employees to conduct toolbox or tailgate safety meetings, or equivalent, with their crews at least every 10 working days.

The failure mode is a Code of Safe Practices pulled from somewhere generic that describes trades you do not perform and omits the ones you do. It reads fine until an inspector matches it against the work in front of them.

Heat illness, outdoors and indoors

Two standards, and most heat plans written before 2024 answer only the first.

8 CCR 3395, the Maria Isabel Vasquez Jimenez heat illness standard, applies to all outdoor places of employment. Potable drinking water has to be provided free of charge at one quart per employee per hour for the entire shift. Shade shall be present when the temperature exceeds 80 degrees Fahrenheit. High-heat procedures apply when the temperature equals or exceeds 95 degrees Fahrenheit, for agriculture, construction, landscaping, oil and gas extraction, and transportation or delivery of heavy materials. An employee newly assigned to a high heat area has to be closely observed by a supervisor or designee for the first 14 days, which is the acclimatization requirement and the one most often missing from an otherwise reasonable plan. The written plan has to be in English and in the language understood by the majority of the employees.

8 CCR 3396 applies to indoor work areas where the temperature equals or exceeds 82 degrees Fahrenheit when employees are present. The full set of provisions engages when the temperature or the heat index equals or exceeds 87 degrees Fahrenheit, or at 82 degrees where employees wear clothing that restricts heat removal or work in a high radiant heat area. Cool-down areas have to be maintained at less than 82 degrees Fahrenheit unless the employer demonstrates that is infeasible. There is a narrow carve-out for incidental exposure at or above 82 and below 95 degrees lasting less than 15 minutes in any 60 minute period. This is the standard that catches unconditioned warehouses, production floors and building interiors that nobody had filed mentally under heat exposure. Both are covered in the California heat illness standards, indoor and outdoor, explained.

Wildfire smoke, 8 CCR 5141.1

The standard applies where the current Air Quality Index for PM2.5 is 151 or greater, regardless of the AQI for other pollutants, and the employer should reasonably anticipate that employees may be exposed to wildfire smoke. Above an AQI of 500, respirator use becomes mandatory under section 5144. In a bad season this is a scheduling and respiratory protection problem rather than a filing problem, and there is no federal equivalent.

Recordkeeping and reporting, which are two different obligations

Employers conflate these constantly, and they run on separate clocks.

Recordkeeping is the running log. In California, Form 300, the annual summary Form 300A and the Form 301 incident reports have to be saved for five years following the end of the calendar year the records cover, under 8 CCR 14300.33. The annual summary is posted no later than February 1 of the year following the year covered, and kept in place until April 30, under 8 CCR 14300.32. The federal rule at 29 CFR 1904.32 sets the same posting window and requires a company executive to certify the summary. Under 8 CCR 14300.1, a company with ten or fewer employees at all times during the last calendar year is partially exempt from keeping these records, though it must still report under 342 and still produce records if the Division asks.

Reporting is the phone call. In California, 8 CCR 342(a) requires any serious injury or illness, or death, of an employee occurring in a place of employment or in connection with any employment to be reported immediately, defined as as soon as practically possible but not longer than 8 hours after the employer knows or with diligent inquiry would have known, extended to 24 hours only where exigent circumstances exist. It is made by telephone or through a specified online mechanism established by the Division. Federal OSHA splits it differently under 29 CFR 1904.39: 8 hours for a fatality, 24 hours for an in-patient hospitalization, an amputation or the loss of an eye.

Separately again, California workers compensation requires a Form 5020 Employer's Report of Occupational Injury or Illness within five days after the employer obtains knowledge of the injury, illness or death, filed with the insurer, or directly with the Division by a self-insured employer, under 8 CCR 14001. Three obligations, three clocks, one incident.

What happens in an inspection, and where employers get cited

A Cal/OSHA compliance officer arrives unannounced. What follows is a paperwork exercise before it is a walk around the site.

• Opening conference, with employer and employee representatives, covering scope and employee rights.
• Records requested. The IIPP, the injury logs, the employer injury reports, workers compensation carrier information, and confirmation that required posters and notices are displayed.
• Walkaround, with employee participation, photographs taken as the officer goes.
• Employee interviews, conducted separately. This is where a paper program becomes obvious, because the crew is asked what they were trained on and when, and their answers are compared against your records.
• Closing conference, after management review, covering what the officer intends to cite.

Where employers actually get cited is less exotic than most expect. The IIPP itself leads the list every year, and it is usually not because no document exists. It is because the document names an accountable person who left, describes inspections nobody performs, or promises training with no records behind it. The second common pattern is a program that is real but generic: a heat plan with one section when the state has two standards, or a Code of Safe Practices describing trades the company does not perform. There is a longer walkthrough in what to expect during a Cal/OSHA inspection.

An employer has 15 working days from receipt to appeal to the Occupational Safety and Health Appeals Board. You can contest the existence of the violation alleged, the reasonableness of the abatement date, the reasonableness of the changes required, and the amount of any proposed civil penalty.

Is the free Cal/OSHA Consultation Service enough?

It deserves a straight answer, because it exists, it is genuinely free, and a consultant who does not mention it is hiding something from you.

Cal/OSHA Consultation Services provides on-site visits, telephone support and educational assistance free of charge to California employers, and you request it rather than having it imposed. Cal/OSHA states that consultants will not issue citations or propose penalties for violations of regulations, and that Consultation and Enforcement are completely separate programs that do not share information. That last point is the one employers most often disbelieve, and it is stated plainly by the agency.

So use it. For a small employer with one location, a stable crew and somebody willing to own the follow-up, a consultation visit plus the agency's model programs may be all you need, and paying for what the state gives away is a poor use of money.

Here is the honest limit. It is a visit and a written report, not an ongoing function, and Cal/OSHA is explicit that you will have to fix any hazards it identifies. It does not carry your training calendar. It does not hold an inspection cadence across multiple active sites. It does not rewrite your programs when a standard moves. It does not produce the site-specific plan a general contractor wants on Thursday, and it does not answer the phone when a crew is standing in front of a problem. If the report comes back with more findings than you have hours to close, the gap between the list and your capacity to close it is the actual case for paying someone.

How to choose a consultant, and what to ask

The market ranges from experienced practitioners to template resellers, and the two are hard to tell apart from a website. These questions separate them quickly.

• Which regulator do you work under most? If you are in California and the answer is a general federal OSHA background, keep going. Ask them to name a California standard that has no federal counterpart. Anyone working here answers instantly.
• What is the eighth element of 3203? A blunt but effective test for a California employer. The answer is employee access to the Program. A surprising number of published sources still get this wrong, which tells you how they built their content.
• Will you be in the field, and how often? Get a cadence, in writing. A program nobody verifies is a document.
• Who is actually doing the work? The person who sells the engagement is often not the person who shows up. Ask to meet whoever will be walking your sites.
• Are the programs written to my operation? Ask how they handle a scope you perform that a template will not cover. Ask to see a sample with the identifying details removed.
• What happens when something goes wrong? An injury, a citation, an inspection in progress. Find out what the arrangement covers before you need it.
• What do I still own? A good consultant tells you clearly what stays your responsibility. Nobody can transfer employer liability to a vendor.

One more, on credentials. Letters after a name are worth something, but they are not a substitute for having run programs on live sites, and they are not a proxy for whether the person understands your trade. Ask what work they have actually managed, in your industry, under your regulator.

Where our consulting work runs

Consulting and Fractional EHS run in six Southern California counties: Orange, Los Angeles, San Diego, Riverside, San Bernardino and Ventura. The footprint is deliberate, because the model depends on being able to get to your sites regularly. We work from 981 Calle Negocio, Suite 200, San Clemente. See the service area, or the county detail for safety consulting in Orange County.

Three things are not limited to that footprint. Site safety staffing is placed nationwide, on-site training is delivered nationwide, and fall protection equipment and rentals ship nationwide.

If you want one question answered rather than an ongoing relationship, Safety Answers covers a lot of ground at no cost, and the $99 Safety Line puts a real person on the other end of it. The full service list is on the services page.

Talk to us about your operation

Tell us what prompted the inquiry and roughly how big the operation is, and we will come back with what it would take to fix and what it would cost. If the phone is faster, call 949-954-6581, or put it on the calendar and book a call.

OSHA compliance consultant FAQ

What does an OSHA compliance consultant do?

Three things, in roughly this order of value. Build the written programs the law requires and an inspector will actually read. Get into the field often enough to know whether those programs are happening. And be reachable when something goes wrong before the crew starts. Everything else, the training calendar, the inspection records, the corrective action tracking, hangs off those three. A consultant who only produces documents has sold you a binder, and 8 CCR 3203 tests implementation rather than the existence of a document.

How much does an OSHA compliance consultant cost?

It is scoped to the hours your operation needs, against one benchmark: the $85,000 to $400,000 a year a qualified in-house safety manager costs in California once salary, burden and turnover are counted. Most clients pay a small fraction of that. An honest number needs your headcount, your trade and how many active sites or facilities you are running, which is a short conversation rather than a price list.

Is Cal/OSHA the same as federal OSHA?

No. Section 18 of the OSH Act lets states run their own programs, and there are 29 OSHA-approved State Plans: 22 covering private sector employers as well as state and local government, and 7 covering state and local government workers only. A State Plan has to be at least as effective as federal OSHA, which is a floor and not a ceiling. California has gone well above it. The mandatory written Injury and Illness Prevention Program under 8 CCR 3203, the indoor heat standard at 8 CCR 3396 and the wildfire smoke standard at 8 CCR 5141.1 have no federal equivalent.

Is the free Cal/OSHA Consultation Service enough on its own?

For some employers it genuinely is, and anyone who tells you otherwise is selling. It is free, it is requested by you rather than imposed, and Cal/OSHA states plainly that consultants will not issue citations or propose penalties for violations of regulations, and that Consultation and Enforcement are completely separate programs that do not share information. What it is not is continuous. It is a visit and a written report, and Cal/OSHA is explicit that you will have to fix any hazards it identifies. It does not carry your training calendar, hold your inspection cadence, update your programs when a standard moves, or answer the phone at six in the morning. Use it. If the report comes back with more findings than you have hours to close, that gap is the case for a retainer.

Do I need an IIPP if I am a small employer?

Yes. 8 CCR 3203 applies to every California employer and requires you to establish, implement and maintain an effective Injury and Illness Prevention Program, in writing. There is no headcount floor. A separate rule does give a break on injury records: under 8 CCR 14300.1, a company with ten or fewer employees at all times during the last calendar year does not have to keep the routine Cal/OSHA injury and illness records, but it still has to report a serious injury, illness or death under 8 CCR 342 and still has to produce records if the Division asks. The recordkeeping exemption is not an IIPP exemption.

What records does Cal/OSHA expect me to produce in an inspection?

The written IIPP itself, and then the paperwork that proves it runs. 8 CCR 3203(b) requires inspection records identifying the person who conducted the inspection, the unsafe conditions and work practices found and the action taken to correct them, and training records showing employee name or other identifier, training dates, types of training and training providers, each kept for at least one year. Injury records sit alongside: Form 300, the annual summary Form 300A and the Form 301 incident reports have to be saved for five years following the end of the calendar year they cover under 8 CCR 14300.33, and the annual summary is posted no later than February 1 and kept up until April 30 under 8 CCR 14300.32. Construction adds a Code of Safe Practices under 8 CCR 1509.

How long do I have to report a serious injury, and how long to appeal a citation?

In California, 8 CCR 342 requires a serious injury or illness or a death to be reported immediately, which the standard defines as as soon as practically possible but not longer than 8 hours after the employer knew or with diligent inquiry would have known, extended to 24 hours only where exigent circumstances exist, made by telephone or through a specified online mechanism established by the Division. Under federal OSHA the split is different: 29 CFR 1904.39 gives 8 hours for a fatality and 24 hours for an in-patient hospitalization, an amputation or the loss of an eye. Separately, an employer has 15 working days from receipt to appeal a citation to the Occupational Safety and Health Appeals Board.

Do you work with general industry employers or only construction?

Both. Contractors are a large share of the work, and concrete, steel, roofing, framing and general contractors bring the construction safety orders with them. Manufacturers, distributors, warehouse operators and service companies carry exactly the same IIPP obligation under 8 CCR 3203 and add machine guarding, lockout, powered industrial trucks, hazard communication and confined space on top of it.

Do you take clients outside California?

For consulting, no. The consulting and Fractional EHS footprint is six Southern California counties, because that model only works if we can get to your sites. Site safety staffing is placed nationwide, on-site training is delivered nationwide, and fall protection equipment ships nationwide. If you are outside California, the honest answer is that your obligations turn on whether your state runs its own State Plan, and you want someone who works in your regulator's rules rather than a firm reading the federal baseline at you.

Book a call or phone 949-954-6581.