29 CFR 1910.119: Process Safety Management’s 14 Elements

29 CFR 1910.119 is OSHA’s Process Safety Management (PSM) standard, and it requires covered employers to run a 14-element safety management program built around one goal: preventing catastrophic releases of highly hazardous chemicals. If your facility stores or processes a chemical listed in the standard’s Appendix A at or above its threshold quantity, or keeps 10,000 pounds or more of a qualifying flammable liquid or gas in one process location, the full standard applies to you. What follows is what coverage looks like, what each of the 14 elements requires, and what noncompliance costs.

Who Has to Comply

Two triggers pull a facility into PSM coverage. The first is any chemical on the standard’s Appendix A list at or above its threshold quantity. Appendix A names 137 toxic and reactive chemicals, with thresholds ranging from 100 pounds (arsine, for example) up to 15,000 pounds (methyl chloride).¹ A single listed chemical at or above the listed weight at any point in time brings the whole standard into play.

The second trigger covers flammables: a Category 1 flammable gas, or a flammable liquid with a flashpoint below 100°F, present on site in one location at 10,000 pounds or more. Two narrow carve-outs sit inside the flammable trigger. Hydrocarbon fuels used solely for workplace consumption (propane for heating, gasoline for vehicle refueling) don’t count, and neither do flammable liquids stored in atmospheric tanks below their normal boiling point without refrigeration.²

Three operations are excluded from the standard entirely: retail facilities, oil or gas well drilling or servicing operations, and normally unoccupied remote facilities.² If none of the triggers apply and none of the exclusions are needed, the standard is not your problem. If a trigger applies, every element below does.

The 14 Required Elements

Employee Participation

The employer must develop a written plan describing how employees will participate in the PSM program. Employers must consult with employees and their representatives on the conduct and development of process hazard analyses and every other PSM element, and employees and their representatives must have access to the hazard analyses and all other information the standard requires the employer to develop.³

Process Safety Information

Before any hazard analysis can happen, the employer has to compile written technical information covering three areas: the chemicals, the technology, and the equipment.

Chemical information includes toxicity data, permissible exposure limits, physical properties, reactivity data, and corrosivity, much of which comes from Safety Data Sheets under the Hazard Communication standard at 29 CFR 1910.1200.⁴ Technology information includes a block flow or simplified process flow diagram, process chemistry, maximum intended inventory, safe upper and lower limits for parameters like temperature and pressure, and an evaluation of the consequences of deviating from those limits. Equipment information includes materials of construction, piping and instrument diagrams, electrical area classifications, relief system design and its basis, ventilation system design, and the design codes used in construction. Equipment must comply with recognized and generally accepted good engineering practices; older equipment built to superseded codes must be documented as still safe for its intended service.²

Process Hazard Analysis

The process hazard analysis (PHA) is the risk assessment at the heart of the standard. It must be performed by a team with expertise in engineering and process operations. At least one team member must have experience and knowledge specific to the process being evaluated, and at least one must know the analysis methodology being used.²

Six methodologies are acceptable, plus any appropriate equivalent: What-If; Checklist; What-If/Checklist; Hazard and Operability Study (HAZOP); Failure Mode and Effects Analysis (FMEA); and Fault Tree Analysis. The PHA must address previous incidents with potential catastrophic consequences, engineering and administrative controls, the consequences of failure of those controls, facility siting, and human factors. When multiple processes are covered, employers must set a priority order for completing PHAs based on the extent of hazards, number of potentially affected employees, age of the process, and operating history.

Findings and recommendations must be addressed promptly on a documented schedule. Each PHA must be updated and revalidated by a qualified team at least every five years, and documentation from all PHAs must be retained for the life of the process.²

Operating Procedures

Written operating procedures must cover each phase of the process: initial startup, normal operations, temporary operations, emergency shutdown (including the conditions requiring one and who is authorized to initiate it), emergency operations, normal shutdown, and startup after a turnaround or emergency shutdown. Operating limits must be defined, along with the consequences of deviation and steps to correct or avoid it. Safety and health considerations must include chemical properties and hazards, precautions to prevent exposure, and steps to take if exposure occurs. Quality control for raw materials and control of hazardous chemical inventory levels also belong in the procedures.²

Procedures must be readily accessible to employees who work in or maintain the process. The employer must certify annually that the procedures are current and accurate.

Training

Every employee involved in operating a covered process must receive initial training in an overview of the process and in the operating procedures, with emphasis on specific safety and health hazards, emergency operations including shutdown, and safe work practices. For employees already operating a process when coverage took effect, the employer may certify in writing that the employee already has the necessary knowledge, skills, and abilities.²

Refresher training is required at least every three years, and more often if the employer and employees together decide it’s appropriate. The employer must verify each employee understood the training and keep records that include the employee’s identity, the date, and the means used to verify comprehension.

Contractors

The contractor provisions apply to contractors performing maintenance, repair, turnaround, major renovation, or specialty work on or adjacent to a covered process. Incidental services such as janitorial, food service, laundry, or deliveries are excluded.²

The host employer must obtain and evaluate the contract employer’s safety performance and programs when selecting a contractor, inform the contractor of the known fire, explosion, or toxic release hazards related to the contractor’s work and the process, explain the applicable provisions of the emergency action plan, develop safe work practices controlling contractor entry into and presence in covered process areas, periodically evaluate contractor performance, and maintain a log of contract employee injuries and illnesses related to work in process areas.

The contract employer must train each worker in the safe work practices needed for the job, instruct workers in the known hazards of the process and the emergency plan, document that training and how comprehension was verified, ensure workers follow the facility’s safety rules, and advise the host employer of any unique hazards the contractor’s work creates.

Pre-Startup Safety Review

Before highly hazardous chemicals are introduced into a new or modified facility, the employer must perform a pre-startup safety review confirming that construction and equipment match the design specifications; that safety, operating, maintenance, and emergency procedures are in place and adequate; that a PHA has been performed and its recommendations resolved for new facilities (or the management-of-change requirements met for modified ones); and that training for each employee involved in operating the process has been completed.⁵

Mechanical Integrity

Mechanical integrity covers pressure vessels and storage tanks, piping systems (including components like valves), relief and vent systems and devices, emergency shutdown systems, controls (including monitoring devices and sensors, alarms, and interlocks), and pumps. The employer must establish and implement written procedures to maintain the ongoing integrity of this equipment, following recognized and generally accepted good engineering practices.²

Inspection and testing frequency must be consistent with manufacturers’ recommendations and prior operating experience. Any deficiency outside acceptable limits must be corrected before the equipment is returned to service. Each inspection and test must be documented with the date, the person’s name, an identifier for the equipment, a description of the work performed, and the results.

Hot Work Permits

A hot work permit is required for any welding, cutting, brazing, or similar spark-producing operation performed on or near a covered process. The permit must document that the fire prevention and protection requirements in 29 CFR 1910.252(a) have been met, indicate the dates authorized for the hot work, and identify the object on which the work will be performed. The permit must be kept on file until the hot work is completed.²

Management of Change

Written management-of-change procedures must be established for any change to process chemicals, technology, equipment, procedures, or facilities affecting a covered process. Replacements in kind are the only exception. Before a change takes effect, the procedures must address the technical basis for the proposed change, its impact on safety and health, any needed modifications to operating procedures, the time period necessary for the change, and authorization requirements.⁵

Employees affected by the change must be informed of and trained on the change before startup of the modified process. Process safety information and operating procedures must be updated to reflect the change.

Incident Investigation

Each incident that resulted in, or could reasonably have resulted in, a catastrophic release of a highly hazardous chemical must be investigated. Near misses are covered along with actual releases. The investigation must be initiated no later than 48 hours after the incident. The team must include at least one person knowledgeable in the process involved, and if the incident involved contractor work, a contract employee.²

The investigation report must include the date of the incident, the date the investigation began, a description of what happened, the factors that contributed, and recommendations. Findings must be addressed and resolved through a documented system. The report must be reviewed with all affected personnel whose job tasks are relevant to the findings, and records must be retained for five years.

Emergency Planning and Response

An emergency action plan for the entire plant must be established and implemented in accordance with 29 CFR 1910.38, and it must include procedures for handling small releases as well as major ones. Facilities covered by PSM may also be subject to the hazardous waste and emergency response requirements in 29 CFR 1910.120.⁵

Compliance Audits

The employer must certify at least every three years that it has evaluated compliance with the standard. Audits must be conducted by at least one person knowledgeable in the process. A written report of findings must be produced, and the employer must promptly determine and document an appropriate response to each finding and confirm that deficiencies have been corrected. The two most recent compliance audit reports must be retained.²

Trade Secrets

Trade secret status doesn’t override PSM disclosure. Employers must make all information necessary to comply with the standard available to those compiling process safety information, assisting with PHAs, developing operating procedures, performing incident investigations, planning emergency response, and conducting compliance audits, regardless of any trade secret claim. Employers may require confidentiality agreements from recipients, and employees and their representatives keep the access rights to trade secret information in PHAs and other PSM documents provided under the Hazard Communication standard.⁵

Recordkeeping Timelines at a Glance

The retention rules differ by element, and mixing them up is a common source of citations. Process hazard analyses (including updates and revalidations) must be kept for the life of the process. Incident investigation reports must be kept for five years. Only the two most recent compliance audit reports are required to be retained. Hot work permits must be kept on file until the hot work is completed. Operating procedures must be certified annually as current and accurate. Refresher training runs on a three-year minimum cycle; PHA revalidation and compliance audits both run on five-year and three-year cycles respectively.

Penalties for Noncompliance

PSM violations can produce substantial fines. Under the annual penalty adjustment effective January 15, 2025, a serious violation carries a maximum penalty of $16,550 per occurrence, and willful or repeated violations can reach $165,514 per violation.⁶ These amounts are adjusted annually for inflation. Criminal prosecution is also possible when a willful violation results in a worker’s death.⁷

Because the standard has 14 distinct elements and each deficiency can be cited separately, a single inspection at a facility that has let several elements slip can produce aggregate penalties well into six or seven figures. Compliance is not a one-time build; it is an ongoing operating commitment that runs across engineering, maintenance, operations, training, procurement, and HR.

1
Occupational Safety and Health Administration. 29 CFR 1910.119 App A – List of Highly Hazardous Chemicals, Toxics and Reactives (Mandatory)
2
eCFR. 29 CFR 1910.119 – Process Safety Management of Highly Hazardous Chemicals
3
Occupational Safety and Health Administration. 29 CFR 1910.119 – Process Safety Management of Highly Hazardous Chemicals
4
Occupational Safety and Health Administration. 29 CFR 1910.1200 App D – Safety Data Sheets (Mandatory)
5
eCFR. 29 CFR 1910.119 – Process Safety Management of Highly Hazardous Chemicals
6
Occupational Safety and Health Administration. OSHA Penalties
7
Occupational Safety and Health Administration. 2025 Annual Adjustments to OSHA Civil Penalties