Hexavalent Chromium Regulations: OSHA, EPA, and State Rules

Hexavalent chromium regulations sit across three federal agencies and often a state layer on top. OSHA controls workplace air exposure, personal protective equipment, medical monitoring, and recordkeeping. EPA sets a drinking water limit, controls air emissions from electroplating and anodizing operations, governs hazardous waste disposal, and requires annual toxic release reporting. States can go stricter, particularly on drinking water and consumer warnings. Penalties from any of these tracks reach six figures per violation, and inspectors routinely stack citations when they find one problem.

OSHA Workplace Air Limits

The Permissible Exposure Limit is 5 micrograms of hexavalent chromium per cubic meter of air, calculated as an 8-hour time-weighted average. It applies the same way across general industry, construction, and shipyard employment. No worker may be exposed above that concentration.¹

A lower threshold, the Action Level, sits at 2.5 micrograms per cubic meter. Crossing it does not by itself mean anyone is in immediate danger, but it triggers periodic monitoring, medical surveillance eligibility, and recordkeeping obligations designed to keep exposure from climbing.¹

NIOSH recommends a stricter limit of 1 microgram per cubic meter over a 10-hour shift. That recommendation is not legally enforceable, but safety professionals often use it as a design target for ventilation systems and respiratory protection programs.

Exposure Monitoring

Every employer with workers in hexavalent chromium operations has to determine each employee’s 8-hour exposure. There are two ways.

Scheduled monitoring uses personal breathing zone air samples that characterize full-shift exposure for each job classification, shift, and work area. Representative sampling is allowed, but only if the employer samples the workers expected to have the highest exposure. The performance-oriented alternative lets the employer assemble current air monitoring data, historical data, or objective data such as industry surveys and material composition calculations to characterize exposure.¹

Follow-up frequency depends on where results fall:

At or above the action level: repeat at least every six months.
Above the PEL: repeat at least every three months.
Below the action level on two consecutive samples taken at least seven days apart: periodic monitoring may stop.

Any change to production processes, raw materials, equipment, work practices, or controls that could increase exposure triggers new monitoring, regardless of what the last results said.¹

Controls, PPE, and Regulated Areas

Engineering and work practice controls come first. Employers must use them to bring exposure to or below the PEL before turning to respirators. Only when such controls are demonstrably not feasible, or not sufficient on their own, can respiratory protection fill the gap, and the engineering controls stay in place to reduce exposure as far as they can. Skipping straight to respirators without documenting infeasibility is a routine citation.¹

Where skin or eye contact is possible, employers must provide gloves, coveralls, face shields, and similar protection at no cost to the employee. Required respiratory protection has to comply with OSHA’s general respirator standards and be backed by a written respiratory protection program.

Any zone where airborne concentrations are expected to exceed the PEL must be designated a regulated area, marked with warning signs, and limited to authorized personnel. Employers with regulated areas must also provide change rooms and end-of-shift showers so chromium dust does not migrate home on workers’ clothing.¹

One narrow exception applies to painting aircraft or large aircraft parts. In those operations, engineering controls only need to bring exposure to 25 micrograms per cubic meter, and respiratory protection makes up the difference to the 5-microgram PEL.¹

Medical Surveillance, Training, and Records

Medical surveillance must be offered at no cost to any worker exposed at or above the action level for 30 or more days in a year. Examinations focus on the respiratory system and skin. When a physician identifies adverse effects, the employer must follow the doctor’s recommendations for work restrictions, additional testing, or reassignment.¹

Hexavalent chromium has to be included in the employer’s hazard communication program. Employees must be trained on the contents of the chromium standard and on the purpose and scope of the medical surveillance program, and a copy of the standard must be available to affected employees at no cost.²

Air monitoring and employee exposure records must be kept for at least 30 years. Medical records must be maintained for the duration of employment plus 30 years. Background laboratory worksheets only need to be kept for one year, but sampling results and methodology summaries stay on file for the full 30.³

EPA Drinking Water Limit

The federal drinking water limit for chromium is 0.1 milligrams per liter under the National Primary Drinking Water Regulations. The limit covers total chromium, all forms combined, and there is no separate federal maximum contaminant level for the hexavalent form. Public water systems test on a regular schedule, report results in annual Consumer Confidence Reports, and must issue public notice within 30 days of exceeding the limit.⁴

EPA Air Emissions From Plating and Anodizing

Facilities that operate chromium electroplating or anodizing tanks fall under the National Emission Standards for Hazardous Air Pollutants at 40 CFR Part 63, Subpart N. The rule requires emission controls, typically composite mesh pad systems, packed-bed scrubbers, or chemical fume suppressants, to capture hexavalent chromium mist before it reaches the atmosphere. Operators using wetting agents or fume suppressants have to monitor bath surface tension against the limit set during their initial performance test, and keep records of both the measurements and the dates suppressants are added.⁵

Not every shop faces the same emission limits. A hard chromium electroplating facility with a maximum cumulative rectifier capacity below 60 million ampere-hours per year qualifies as a “small” facility and faces a less stringent limit than large facilities. Decorative chromium tanks running a trivalent chromium bath with a wetting agent get the lightest treatment, exempt from continuous compliance monitoring and work practice requirements, though recordkeeping and reporting still apply. Area sources generally do not need a Part 70 or Part 71 operating permit unless something else triggers one.⁵

Hazardous Waste Classification

Materials contaminated with hexavalent chromium can trigger hazardous waste classification under 40 CFR Part 261. The test is the Toxicity Characteristic Leaching Procedure. If a waste sample leaches chromium at 5.0 milligrams per liter or above, it is hazardous waste and has to be handled, transported, and disposed of at a permitted hazardous waste facility.⁶

Improper disposal, whether dumping contaminated wastewater, landfilling untested sludge, or shipping waste to unpermitted facilities, can lead to criminal prosecution on top of remediation costs.

Toxic Release Inventory Reporting

Facilities that manufacture, process, or otherwise use chromium compounds above annual thresholds have to file Toxic Release Inventory reports under EPCRA Section 313. Chromium compounds are listed as category N090. Hexavalent chromium compounds carry a lower de minimis concentration of 0.1 percent, compared with 1.0 percent for other chromium compounds.⁷

The activity thresholds are 25,000 pounds per year for manufacturing or processing, and 10,000 pounds per year for other uses. For metal compounds like chromium, the threshold is measured on the total weight of the compound, but release calculations use only the weight of the parent metal. Reports are due by July 1 of the year after the reporting year, on EPA Form R or Form A. For 2025 operations, that means a July 1, 2026 deadline.⁸

Federal Penalties

A serious OSHA violation of the hexavalent chromium standard carries a maximum penalty of $16,550. Willful or repeated violations rise to $165,514. A failure-to-abate citation runs $16,550 for every day the hazard continues past the abatement deadline. Actual assessments depend on employer size, good faith, violation history, and gravity, but inspectors who find exposure above the PEL tend to cite every related deficiency at once, and the numbers stack quickly.⁹

On the EPA side, Clean Air Act violations of the electroplating emission standards can draw civil penalties up to $124,426 per day. RCRA hazardous waste violations carry the same daily maximum. Knowing violations open a separate criminal track with potential prison sentences and individual liability for responsible officers.¹⁰

State Rules On Top

Federal standards are the floor. Some states have adopted hexavalent chromium-specific drinking water limits that are stricter than the federal 0.1 mg/L total chromium cap, so a water system meeting federal limits can still be out of compliance locally. Several states also require businesses to warn consumers and workers before exposing them to listed carcinogens, hexavalent chromium included, with civil suits and daily fines for missing warnings. Those obligations apply alongside OSHA and EPA rules, not instead of them. Any facility handling hexavalent chromium should check its state environmental and occupational safety agencies before assuming federal compliance is enough.

1
eCFR. 29 CFR 1910.1026 – Chromium (VI)
2
Occupational Safety and Health Administration. 1910.1026 – Chromium (VI)
3
Occupational Safety and Health Administration. Access to Employee Exposure and Medical Records
4
eCFR. 40 CFR Part 141 – National Primary Drinking Water Regulations
5
eCFR. 40 CFR Part 63 Subpart N
6
eCFR. 40 CFR Part 261 – Identification and Listing of Hazardous Waste
7
Environmental Protection Agency. EPCRA Section 313 Chemical List
8
Environmental Protection Agency. Toxics Release Inventory Reporting Forms and Instructions
9
Occupational Safety and Health Administration. OSHA Penalties
10
eCFR. Adjustment of Civil Monetary Penalties for Inflation