Let me tell you something that should scare you more than any chemical in your workplace: ignorance.
Not yours, necessarily. But the kind of ignorance that Cal/OSHA sees every single day when they walk into a California business and find employees handling chemicals they know nothing about, labels that say nothing useful, and a "written HazCom program" that's really just a binder collecting dust on a shelf somewhere.
Hazard Communication violations — cited under Title 8, California Code of Regulations, Section 5194 (8 CCR 5194) — are consistently among the most frequently cited standards in the state. Year after year. And the penalties are not trivial. We're talking thousands of dollars per violation, and if Cal/OSHA decides your failures were willful, you're looking at six figures.
Here's the thing: HazCom compliance is not optional. It is not "something we'll get around to." And it is not complicated — if you actually understand what's required.
This guide gives you that understanding. No filler. No legalese dressed up as advice. Just the regulation, what it demands, and what happens when you ignore it.
---
What Is HazCom (8 CCR 5194)?
The Hazard Communication standard — universally called "HazCom" — is the regulation that requires employers to inform and train employees about the hazardous chemicals they're exposed to in the workplace.
California's version lives at 8 CCR 5194. It mirrors the federal OSHA standard (29 CFR 1910.1200) but carries California-specific additions and is enforced by Cal/OSHA, not federal OSHA. That distinction matters because Cal/OSHA is a state-plan state with its own enforcement apparatus, its own inspectors, and — critically — its own penalty structure that frequently exceeds federal minimums.
The standard was overhauled in 2012 to align with the Globally Harmonized System of Classification and Labelling of Chemicals (GHS). This wasn't a suggestion. It was a wholesale restructuring of how chemicals are classified, how labels are formatted, and how Safety Data Sheets are organized.
If you're still running your HazCom program based on pre-GHS standards — using Material Safety Data Sheets (MSDS) instead of Safety Data Sheets (SDS), for example — you are already out of compliance. Full stop.
The Four Pillars of HazCom
The standard rests on four requirements. Miss any one of them and your program fails:
- **A written Hazard Communication program**
- **Safety Data Sheets (SDS) for every hazardous chemical on-site**
- **Labels on every container of hazardous chemicals**
- **Employee training on chemical hazards and protective measures**
That's it. Four things. And yet businesses across California botch them every single day.
---
Who Must Comply?
Every employer in California with even one hazardous chemical in the workplace. Period.
This is not limited to manufacturing plants and chemical facilities. If you have a janitorial closet with bleach, a maintenance shop with WD-40, a break room with industrial cleaning spray — you have hazardous chemicals and you are subject to 8 CCR 5194.
The standard applies across all industries:
- **Construction** (solvents, adhesives, paints, concrete additives)
- **Manufacturing** (raw materials, process chemicals, cleaning agents)
- **Healthcare** (disinfectants, sterilants, chemotherapy drugs, formaldehyde)
- **Agriculture** (pesticides, herbicides, fertilizers)
- **Retail and hospitality** (cleaning products, pool chemicals, kitchen degreasers)
- **Automotive** (brake fluid, refrigerants, battery acid, paint)
- **Office environments** (yes — toner, cleaning chemicals, and correction fluids count)
The only narrow exemptions under 8 CCR 5194(b) are for hazardous waste subject to RCRA regulations, tobacco products, wood and wood products in their manufactured form, consumer products used in the same manner and duration as normal consumer use, and drugs in final form for direct administration to patients. Everything else is covered.
If you employ people and those people can be exposed to hazardous chemicals during the course of their work, you must comply. There is no small business exemption. There is no "we only have a few chemicals" exemption.
---
The Written HazCom Program
Per 8 CCR 5194(e), every employer must develop, implement, and maintain a written hazard communication program. This is not a suggestion to "have something on file." It is a regulatory requirement with specific mandated elements.
What the Written Program Must Include
**1. A chemical inventory (hazardous chemical list)**
A complete, current list of every hazardous chemical known to be present in the workplace. Not "most of them." All of them. This list must correspond to the Safety Data Sheets you have on file. If there's an SDS without a chemical on the inventory, or a chemical on the floor without an SDS, you have a gap — and a citation waiting to happen.
Per 8 CCR 5194(e)(1)(A), the list must be available to employees and their designated representatives.
**2. Methods for labeling**
Your written program must describe the labeling system you use for containers in the workplace. This includes:
- How incoming manufacturer containers are checked for proper GHS labels
- Your system for workplace labels on secondary containers (more on this below)
- How you handle containers where labels become damaged or illegible
**3. SDS management procedures**
Document how you obtain, maintain, and provide access to Safety Data Sheets. This includes:
- Who is responsible for acquiring SDS for new chemicals
- Where SDS are stored (physical binders, digital systems, or both)
- How employees access them during their shift — including nights, weekends, and emergencies
- Procedures for updating SDS when new versions are issued
**4. Employee training procedures**
Your written program must describe how you train employees — both initial training for new hires and additional training when new hazards are introduced.
**5. Non-routine tasks**
Per 8 CCR 5194(e)(1)(B), you must address how you handle non-routine tasks that involve hazardous chemical exposure. Tank cleaning, equipment maintenance, confined space entry with chemical residues — these must be covered.
**6. Multi-employer workplaces**
If contractors, temporary workers, or other employers' employees work at your site, your written program must describe how you communicate chemical hazard information to those outside employers. Per 8 CCR 5194(e)(2), this includes making SDS available and informing them of your labeling system and precautionary measures.
The Most Common Written Program Failure
The number one problem Cal/OSHA finds? The program exists on paper but nobody follows it. A written program that doesn't reflect your actual operations is worse than no program at all — because it shows you knew what you were supposed to do and didn't do it.
---
Safety Data Sheets (SDS)
The Safety Data Sheet replaced the old MSDS when GHS alignment took effect. If someone in your organization still calls them "MSDS," that's a red flag that your program hasn't been updated.
The 16-Section GHS Format
Under the GHS-aligned standard, every SDS must follow a standardized 16-section format. This is not optional. It is not a "preferred layout." It is mandated by 8 CCR 5194(g)(2). Chemical manufacturers and importers must provide SDS in this exact format.
Here are the 16 sections:
| Section | Content |
|---------|---------|
| 1 | Identification — product identifier, manufacturer contact, recommended use, restrictions |
| 2 | Hazard(s) identification — GHS classification, signal word, hazard statements, pictograms, precautionary statements |
| 3 | Composition/information on ingredients — chemical name, CAS number, concentrations |
| 4 | First-aid measures — symptoms, required treatment by exposure route |
| 5 | Fire-fighting measures — suitable extinguishing media, specific hazards, protective equipment |
| 6 | Accidental release measures — personal precautions, containment, cleanup methods |
| 7 | Handling and storage — safe handling practices, incompatibilities, storage conditions |
| 8 | Exposure controls/personal protection — OELs, PELs, engineering controls, PPE requirements |
| 9 | Physical and chemical properties — appearance, odor, pH, flash point, boiling point, etc. |
| 10 | Stability and reactivity — conditions to avoid, incompatible materials, hazardous decomposition products |
| 11 | Toxicological information — routes of exposure, acute and chronic effects, LD50/LC50 data |
| 12 | Ecological information — environmental fate, aquatic toxicity |
| 13 | Disposal considerations — waste treatment, disposal methods |
| 14 | Transport information — UN number, proper shipping name, hazard class |
| 15 | Regulatory information — applicable regulations (SARA, TSCA, California Prop 65) |
| 16 | Other information — date of preparation, revision dates, abbreviations |
Sections 12 through 15 are not enforced by OSHA (they fall under EPA and DOT jurisdiction), but they must still be present on the SDS.
Access Requirements
This is where a staggering number of employers fail. Per 8 CCR 5194(g)(8), you must ensure that Safety Data Sheets are readily accessible to employees during each work shift.
"Readily accessible" means immediately available. Not "in the HR office that's locked after 5 PM." Not "on a shared drive that half the employees don't have login credentials for." Not "ask your supervisor and they'll get it for you."
Acceptable access methods include:
- **Physical binders** at the work area where chemicals are used, organized and current
- **Electronic access** via computers or tablets at the worksite — but only if employees are trained on how to use the system, have unrestricted access, and a backup exists in case of power failure or system outage
- **Combination systems** with electronic primary access and printed copies as backup
Cal/OSHA has cited employers for electronic-only SDS systems where the computer was in a supervisor's locked office, where the system required a password employees didn't have, and where there was no contingency for system downtime. Don't be that employer.
SDS Management
Maintaining an SDS library is not a one-time project. It's an ongoing obligation.
- **New chemicals:** Every time a new hazardous chemical enters the workplace, you must have the corresponding SDS before employees use it. Per 8 CCR 5194(g)(6), if the manufacturer or distributor fails to provide an SDS, you must request one in writing and document the effort.
- **Updates:** When a manufacturer issues a revised SDS (due to new hazard information or regulatory changes), you should update your files. While the standard primarily places the update obligation on the manufacturer per 8 CCR 5194(g)(5), a prudent employer keeps SDS current.
- **Archival:** Cal/OSHA recommends retaining superseded SDS for at least 30 years as part of employee exposure records under 8 CCR 3204. If an employee later develops a health condition, you'll need those historical records.
---
Container Labeling
Labeling is the most visible part of HazCom — and the most commonly violated. It's also the easiest thing to get right, which makes violations that much more inexcusable.
Manufacturer Labels (Shipped Containers)
Chemical manufacturers, importers, and distributors must label every container of hazardous chemicals before it leaves their facility. Per 8 CCR 5194(f)(1), shipped container labels must include:
- **Product identifier** — matching the identifier on the SDS
- **Signal word** — either "Danger" (more severe) or "Warning" (less severe)
- **Hazard statement(s)** — standardized phrases describing the nature of the hazard (e.g., "Causes severe skin burns and eye damage")
- **Pictogram(s)** — the red-bordered diamond GHS symbols (flame, skull and crossbones, exclamation mark, corrosion, health hazard, environment, exploding bomb, flame over circle, gas cylinder)
- **Precautionary statement(s)** — measures to minimize exposure or respond to exposure
- **Name, address, and phone number** of the manufacturer, importer, or distributor
When a shipped container arrives at your workplace with a proper GHS label, your obligation is simple: don't remove it, don't deface it, and don't cover it up. Per 8 CCR 5194(f)(9), existing labels on incoming containers must not be removed or defaced unless immediately replaced with a label containing the required information.
Workplace Labels (Secondary Containers)
Here's where things get real.
When an employee transfers a chemical from the original manufacturer container into a secondary container — a spray bottle, a bucket, a drum — that secondary container must be labeled. Period. Per 8 CCR 5194(f)(6).
Workplace labels must include at minimum:
- The **product identifier** (matching the SDS)
- Words, pictures, symbols, or a combination that provide **general information regarding the hazards** of the chemical
California does not require workplace labels to have every element of a GHS label (pictograms, signal words, etc.), but the label must convey hazard information that is immediately useful to the employee.
The one exception: per 8 CCR 5194(f)(7), a portable container into which chemicals are transferred does not need a label if the chemical is for the **immediate use** of the employee who performed the transfer and the container remains in the control of that employee during the work shift. The second that container is set down and someone else could pick it up, it must be labeled.
Common Labeling Violations
Cal/OSHA inspectors find these constantly:
- **Unlabeled secondary containers** — the number one labeling citation. Spray bottles with no labels, buckets of diluted chemicals with no identification, jugs of solvents with nothing but a piece of masking tape that says "cleaner."
- **Damaged or illegible labels** — labels that have been smeared by the chemical itself, faded by UV exposure, or worn off from handling. If you can't read it, it doesn't count.
- **Removed manufacturer labels** — employees peeling off or painting over shipped container labels. Sometimes intentional, sometimes from poor handling. Either way, it's a violation.
- **Mismatch between label and contents** — a container labeled "Product A" that actually contains "Product B." This is not just a paperwork issue. This can kill someone.
- **Non-English labels in multilingual workplaces** — California has significant populations of workers who speak Spanish, Mandarin, Vietnamese, Tagalog, and Korean as their primary language. While the standard requires labels in English, Cal/OSHA expects employers to supplement with additional languages where necessary to ensure comprehension.
---
Training Requirements
Training is the linchpin of the entire HazCom standard. You can have a perfect written program, flawless SDS, and immaculate labels — but if your employees don't understand the hazards they face and how to protect themselves, the program has failed.
Initial Training
Per 8 CCR 5194(h)(1), employees must receive effective HazCom training at the time of their initial work assignment whenever they may be exposed to hazardous chemicals. Not "within 30 days." Not "during their first week." At the time of initial assignment.
Training must cover:
- **The requirements of 8 CCR 5194** — employees must know this standard exists and what it requires
- **Location and availability of the written HazCom program** — including the chemical inventory and SDS
- **Operations where hazardous chemicals are present** — specific to their work area and job function
- **How to detect the presence or release of hazardous chemicals** — visual appearance, odor, monitoring devices
- **Physical and health hazards** of chemicals in their work area
- **Protective measures** — engineering controls, work practices, PPE, and emergency procedures
- **How to read labels and SDS** — employees must understand the GHS label elements (pictograms, signal words, hazard statements) and how to find information on the 16-section SDS
This is not a checkbox exercise where you show a 20-minute video and collect signatures. Per 8 CCR 5194(h)(1), training must be "effective" — meaning employees must actually understand the material. Cal/OSHA inspectors verify this by interviewing employees on the floor. If your workers can't explain the basics of the chemicals they handle, your training was not effective, regardless of what your training records say.
New Chemical or New Hazard Training
Per 8 CCR 5194(h)(2), additional training is required whenever a new chemical hazard is introduced into the work area. This doesn't mean retraining the entire program — it means providing specific information about the new hazard.
But here's the catch: if you bring in a new chemical that falls within a hazard category employees were already trained on (e.g., another flammable solvent when they've already been trained on flammable solvents), you may satisfy this requirement by ensuring the new SDS is available and the employee is informed. If it's a genuinely new hazard category, full training on that hazard is required.
Bilingual and Multilingual Training
California's workforce is among the most linguistically diverse in the nation. While 8 CCR 5194 requires training to be "effective," Cal/OSHA interprets this to mean training must be delivered in a language the employee understands.
Under the California Labor Code Section 6401.7 and Cal/OSHA's Injury and Illness Prevention Program (IIPP) standard at 8 CCR 3203, employers must communicate safety information in a language employees understand. This extends directly to HazCom training.
If you have Spanish-speaking employees, your HazCom training must be delivered in Spanish — or at minimum with qualified bilingual interpretation. Written training materials, quick-reference cards at chemical storage areas, and emergency instructions should also be available in the languages spoken by your workforce.
Employers who conduct English-only training for non-English-speaking employees are practically begging for a citation. And if a chemical incident occurs and the affected employee didn't understand the training because it wasn't in their language, you're looking at far worse than a citation.
Training Documentation
Document everything. Every training session should be recorded with:
- Date and duration of training
- Topics covered
- Name and qualifications of the trainer
- Names and signatures of attendees
- Method of training (classroom, hands-on, video supplement)
Keep these records for the duration of each employee's employment, at minimum. When Cal/OSHA shows up and asks for training records, "we trained them but didn't write it down" is indistinguishable from "we didn't train them."
---
Enforcement and Penalties
Cal/OSHA does not issue warnings for HazCom violations. They issue citations with penalties.
How Inspections Happen
Cal/OSHA conducts HazCom inspections through:
- **Programmed inspections** — targeted by industry and injury rates
- **Complaint-driven inspections** — initiated by employee complaints (which can be anonymous)
- **Accident investigations** — following workplace injuries or chemical exposure incidents
- **Referrals** — from other agencies, hospitals, or fire departments
During a HazCom inspection, expect the inspector to:
- Ask to see your written HazCom program
- Compare your chemical inventory against actual chemicals on-site
- Verify SDS availability and accessibility
- Walk the floor checking container labels
- Interview employees about their training and knowledge of chemical hazards
Top 5 HazCom Citation Triggers
Based on Cal/OSHA enforcement data, these are the violations that generate the most citations:
**1. No written HazCom program or an inadequate program — 8 CCR 5194(e)**
Either the program doesn't exist, or it exists but doesn't include the required elements (chemical list, labeling methods, SDS management, training procedures, non-routine tasks, multi-employer provisions).
**2. Missing or inaccessible Safety Data Sheets — 8 CCR 5194(g)**
SDS not available for chemicals on-site. SDS locked in an office employees can't access. Electronic systems with no backup. SDS that haven't been updated since 2005.
**3. Unlabeled or improperly labeled containers — 8 CCR 5194(f)**
Secondary containers without labels. Manufacturer labels removed or defaced. Labels that don't include required GHS elements.
**4. Inadequate or no employee training — 8 CCR 5194(h)**
No training provided. Training provided but not documented. Training conducted only in English for non-English-speaking employees. Employees who can't demonstrate basic understanding of chemical hazards when interviewed by inspectors.
**5. No chemical inventory or incomplete inventory — 8 CCR 5194(e)(1)(A)**
The chemical list doesn't match what's actually on-site. New chemicals brought in without updating the inventory. Chemicals in storage areas that nobody put on the list.
Penalty Structure
Cal/OSHA penalty calculations under California Labor Code Sections 6427-6430:
| Classification | Per Violation |
|---------------|---------------|
| **Regulatory (non-serious)** | Up to $7,000 per violation |
| **General (serious)** | Up to $25,000 per violation |
| **Willful or repeat** | Up to $70,000 minimum; up to $156,259 per violation |
| **Failure to abate** | Up to $15,000 per day the violation continues |
These are per-violation penalties. If you have 15 unlabeled containers, that's potentially 15 separate violations. If you failed to train 20 employees, that's 20 instances. The math gets ugly fast.
And here's what most employers don't realize: Cal/OSHA considers the gravity of the violation (severity + probability) and the employer's size, good faith, and history when calculating penalties. A small employer with no prior violations will pay less than a repeat offender — but "less" is still thousands of dollars.
Beyond financial penalties, serious or willful violations can result in:
- **Criminal prosecution** under California Labor Code Section 6423 for willful violations causing death or serious injury
- **Workers' compensation premium increases** as your experience modification rate climbs
- **Increased insurance costs** across all business lines
- **Civil liability** in personal injury lawsuits where HazCom failures contributed to exposure
- **Business reputation damage** — Cal/OSHA enforcement actions are public record
---
What Protekon Delivers
You just read roughly 3,000 words on a single compliance standard. One standard out of the dozens that apply to your business. And we haven't even touched the nuances — the Cal/OSHA interpretation letters, the Appeals Board decisions that shape how inspectors evaluate your program, the industry-specific applications that change the game depending on whether you're running a construction site or a medical clinic.
That's the problem with compliance: it's not one thing. It's everything, all the time, constantly changing.
Protekon exists because California SMBs shouldn't have to become regulatory scholars to avoid getting buried by Cal/OSHA.
Here's what Protekon provides for HazCom — and every other standard that applies to your operation:
**Written program development and maintenance.** We don't hand you a template and wish you luck. We build your written HazCom program to match your actual operations — your chemicals, your processes, your workforce, your facility. And we update it when things change, because things always change.
**SDS management.** We implement and maintain your SDS library — acquisition, organization, accessibility verification, and ongoing updates. Whether you need physical binders, digital access, or a hybrid system, we build it and keep it current.
**Labeling system design and audits.** We establish your workplace labeling protocols and conduct periodic audits to catch unlabeled or improperly labeled containers before Cal/OSHA does.
**Training program development and delivery.** Initial training for new hires, new-chemical training when your inventory changes, bilingual delivery for your workforce. Documented, defensible, and actually effective — meaning your employees can demonstrate knowledge when it counts.
**Chemical inventory management.** We maintain your hazardous chemical list and reconcile it against what's actually on your floor. New chemicals get added before they're in use, not after an inspector finds them.
**Regulatory monitoring.** When Cal/OSHA updates interpretation guidance, amends the standard, or shifts enforcement priorities, we know about it and we adjust your program accordingly. You don't read the California Regulatory Notice Register. We do.
**Inspection readiness.** If Cal/OSHA shows up tomorrow, is your program ready? We make sure the answer is always yes. Written program current. SDS accessible. Labels in place. Training documented. Inventory accurate. No surprises.
The bottom line is this: HazCom compliance is not difficult if you actually commit to doing it right. The problem is that most California SMBs don't have the time, the expertise, or the bandwidth to build and maintain a compliant program while running their actual business.
That's what Protekon is for. We handle the compliance so you can handle the business.
---
*Protekon is a managed compliance-as-a-service platform for California small and mid-sized businesses. We monitor, build, and maintain your compliance programs across Cal/OSHA, SB 553, and every workplace safety standard that applies to your industry. No templates. No self-service portals. Managed compliance — done for you, kept current, inspection-ready.*
