For providers

OSHA and the solo office: nothing, then everything at hire one

Summary

Almost nothing, until you hire someone. OSHA's duties run from an employer to its employees, so a genuinely solo practitioner with no employees has essentially no OSHA compliance obligations. The day you hire your first employee, a defined set switches on: the General Duty Clause, the Bloodborne Pathogens standard where occupational exposure exists, Hazard Communication, and injury postings and recordkeeping. Know the trigger, and prepare the plan before hire one.

By Gale Editorial · Updated 2026-07-26. Every figure cited to a dated source. How we write.

Does OSHA apply to a practice with no employees?

For a genuinely solo practitioner, almost nothing — and this is one of the few compliance questions where the honest answer is 'not yet.' OSHA's obligations run from an employer to its employees, so a clinician who employs no one has no workers to protect and therefore no employee-safety duties to meet. The rules that people picture as 'OSHA compliance' are all keyed to having employees — even the injury-recordkeeping regime is framed explicitly around an employer's headcount 1Ref 1Occupational Safety and Health Administration (2026).Recordkeeping.That OSHA duties are framed around an employer's employees, that employers with ten or fewer employees are exempt from routine injury/illness recordkeeping, and that severe-incident reporting still applies regardless of size.. That changes completely at your first W-2 hire. The useful way to hold this is as the h1 puts it: nothing, then everything at hire one. So the real task for a solo office is not to comply today; it is to know precisely what will switch on, and to stage the paperwork before the hire, not after.

What switches on the day you hire employee one

Hiring your first employee flips you from 'not covered' to 'employer,' and a defined bundle of duties attaches at once rather than gradually. The backstop is the General Duty Clause, OSHA's requirement that an employer furnish a workplace free from recognized hazards — the provision OSHA uses to reach hazards, including workplace violence in health care, that no specific standard covers 2Ref 2Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA addresses workplace violence in health care through the General Duty Clause and publishes prevention guidance for health-care settings, applied to a clinician who sees patients alone.. On top of it sit the specific standards that a health office commonly triggers: the Bloodborne Pathogens standard where occupational exposure exists, Hazard Communication where hazardous chemicals are used, and the posting and injury-recordkeeping rules. None of these are optional once you employ someone, but which of the specific standards actually bind you depends on what your practice does, so the next step is a trigger analysis rather than buying a generic binder.

The Bloodborne Pathogens standard: run the trigger analysis first

The single biggest variable for a health office is whether the Bloodborne Pathogens standard applies, because it turns entirely on your actual services. The standard (29 CFR 1910.1030) requires a written exposure control plan where occupational exposure to blood or other potentially infectious materials exists — so the trigger is exposure, not the specialty on your shingle 3Ref 3Occupational Safety and Health Administration (2026).Bloodborne Pathogens and Needlestick Prevention.That the Bloodborne Pathogens standard (29 CFR 1910.1030) requires a written exposure control plan where occupational exposure exists, used as the trigger analysis for whether an outpatient office is covered.. A talk-therapy or telehealth-only practice with employees but no needles, no blood draws, and no wound care typically has no occupational exposure and so falls outside the standard. A practice that gives injections, draws blood, or handles specimens does, and its employer must build the exposure control plan, offer hepatitis B vaccination, and train on exposure procedures. Do the analysis honestly and in writing: 'we determined no occupational exposure exists' is itself the documentation that shows you addressed the standard.

Hazard Communication in miniature

Even a low-tech office usually trips one specific standard the moment it has an employee: Hazard Communication. HazCom requires labeling of hazardous chemicals, access to safety data sheets, and employee training wherever such chemicals are used in the workplace 4Ref 4Occupational Safety and Health Administration (2026).Hazard Communication.That HazCom requires labeling, safety-data-sheet access, and employee training where hazardous chemicals are used, applied to the disinfectants and cleaning agents in an ordinary office.. The trap is assuming 'we don't use chemicals' — the surface disinfectants, alcohol, cleaning agents, and sterilants in an ordinary exam or therapy suite are hazardous chemicals under the rule. This is hazcom in miniature: an inventory of what you keep, the safety data sheet for each item filed where staff can reach it, container labels intact, and a short documented training when someone is hired. It is a genuinely small lift for a solo office, but it is not a zero lift, and it is one of the most commonly cited standards in small workplaces precisely because owners assume it does not reach them.

Workplace violence and the clinician who sees patients alone

Workplace violence is a real OSHA exposure for health-care settings, and it deserves explicit attention from any clinician who sees patients behind a closed door, sometimes after hours, sometimes alone. OSHA addresses workplace violence in health care through the General Duty Clause and publishes prevention guidance specific to health-care settings, so once you have an employee, a recognized violence hazard is something an employer is expected to assess and address 2Ref 2Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA addresses workplace violence in health care through the General Duty Clause and publishes prevention guidance for health-care settings, applied to a clinician who sees patients alone.. Even before hire one, the safety logic applies to you personally: a check-in protocol, a de-escalation plan, an exit path in the room layout, and a way to summon help. When you do hire, the violence-prevention page of your safety program is where this becomes a written employer obligation rather than a personal habit, and it is worth drafting early.

Recordkeeping and postings: what the ten-employee line means

The recordkeeping rules are where the small-practice exemptions live, and they are narrower than clinicians hope. Employers with ten or fewer employees are exempt from routinely maintaining the injury and illness logs, which covers most solo offices even after a first hire — but the exemption is only from routine logging: the duty to report a severe incident such as a fatality or an in-patient hospitalization still applies to every employer regardless of size 1Ref 1Occupational Safety and Health Administration (2026).Recordkeeping.That OSHA duties are framed around an employer's employees, that employers with ten or fewer employees are exempt from routine injury/illness recordkeeping, and that severe-incident reporting still applies regardless of size.. So the 'posters and 300 logs' picture is half-right for a small office: you likely skip the routine 300 log, you do not skip severe-incident reporting, and the required workplace-safety poster still belongs on the wall once you employ someone. Treat the exemption as narrow relief from paperwork, not as a blanket 'OSHA does not apply to me.'

Infection control: the outpatient baseline

Separate from OSHA, an outpatient office that touches patients carries an infection-control baseline worth building in from day one, employees or not. The CDC's core infection prevention practices for outpatient settings — hand hygiene, environmental cleaning, and injection safety where injections are given — are the recognized standard of practice for safe healthcare delivery in any setting 5Ref 5Centers for Disease Control and Prevention (2024).Core Infection Prevention and Control Practices for Safe Healthcare Delivery in All Settings.CDC's core infection-prevention practices for outpatient settings — hand hygiene, environmental cleaning, and injection safety where applicable — cited as the outpatient safety baseline.. For a solo office these are inexpensive habits that also reduce the very occupational-exposure risk that the Bloodborne Pathogens standard governs, so they do double duty. Adopting the CDC core practices now means that when you hire and the OSHA duties attach, your environment already meets the substance of them; you are then documenting practices you already follow rather than inventing them under an employer obligation.

Where this fits: state plans, the ADA, and a solo routine

Two boundary points keep this map accurate. First, several states run their own OSHA-approved plans that can be broader than the federal program, so confirm whether your state operates one and whether it changes the analysis before you hire — and if you share space, weigh the office options for a solo practice against whose employer duties attach to the shared areas. Second, keep separate rails separate: the ADA is not OSHA. Your ADA obligations as a public accommodation — physical access and effective communication for patients — bind your office regardless of whether you have a single employee 6Ref 6U.S. Department of Justice (2026).The Americans with Disabilities Act.That Title III of the ADA binds a private health care office as a public accommodation regardless of employee count, cited to distinguish patient-facing access duties from OSHA's employee-facing ones.. Fold all of this into the same right-sized compliance routine a small practice should keep for every rule it lives under, so the OSHA plan is drafted and ready to activate the week you extend your first offer 7Ref 7HHS Office of Inspector General (2023).General Compliance Program Guidance.OIG's guidance on a right-sized compliance program for a small practice, cited to fold the OSHA readiness steps into a documented compliance routine ready to activate at first hire..

Common questions

Effectively no. OSHA's employee-safety duties attach to employers with respect to their employees, and a solo practitioner with no employees has none of those obligations. The value of knowing this is the flip side: a defined set of duties switches on at your first W-2 hire, so the smart move is to draft the plans before the hire rather than scramble afterward.

Only if occupational exposure to blood or other infectious materials actually exists. A talk-therapy or telehealth-only practice with no needles, blood draws, or wound care typically has no exposure and falls outside the standard. Document that determination in writing. A practice that gives injections or draws blood does trigger it and must build an exposure control plan once it has employees.

Employers with ten or fewer employees are exempt from routinely maintaining the injury and illness logs, which covers most small offices. That exemption does not remove the duty to report a severe incident — a fatality or in-patient hospitalization — which applies to every employer regardless of size, nor the requirement to display the workplace-safety poster once you have employees.

Yes, once you have an employee, because ordinary surface disinfectants, alcohol, and cleaning agents are hazardous chemicals under the rule. HazCom requires an inventory, accessible safety data sheets, intact container labels, and brief employee training. It is a small but non-zero lift and one of the most commonly cited standards in small workplaces, precisely because owners assume it does not reach them.

Run the Bloodborne Pathogens trigger analysis and write down the result; build a HazCom inventory with safety data sheets and labels; draft a workplace-violence prevention approach; and note the recordkeeping and posting duties that attach. Adopting the CDC infection-control core practices now means your environment already meets the substance before the employer obligations switch on at hire.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.Occupational Safety and Health Administration (2026). Recordkeeping. U.S. Occupational Safety and Health Administration. link ✓That OSHA duties are framed around an employer's employees, that employers with ten or fewer employees are exempt from routine injury/illness recordkeeping, and that severe-incident reporting still applies regardless of size.
2.Occupational Safety and Health Administration (2026). Workplace Violence. U.S. Occupational Safety and Health Administration. link ✓That OSHA addresses workplace violence in health care through the General Duty Clause and publishes prevention guidance for health-care settings, applied to a clinician who sees patients alone.
3.Occupational Safety and Health Administration (2026). Bloodborne Pathogens and Needlestick Prevention. U.S. Occupational Safety and Health Administration. link ✓That the Bloodborne Pathogens standard (29 CFR 1910.1030) requires a written exposure control plan where occupational exposure exists, used as the trigger analysis for whether an outpatient office is covered.
4.Occupational Safety and Health Administration (2026). Hazard Communication. U.S. Occupational Safety and Health Administration. link ✓That HazCom requires labeling, safety-data-sheet access, and employee training where hazardous chemicals are used, applied to the disinfectants and cleaning agents in an ordinary office.
5.Centers for Disease Control and Prevention (2024). Core Infection Prevention and Control Practices for Safe Healthcare Delivery in All Settings. Centers for Disease Control and Prevention (CDC). linkCDC's core infection-prevention practices for outpatient settings — hand hygiene, environmental cleaning, and injection safety where applicable — cited as the outpatient safety baseline.
6.U.S. Department of Justice (2026). The Americans with Disabilities Act. U.S. Department of Justice Civil Rights Division. link ✓That Title III of the ADA binds a private health care office as a public accommodation regardless of employee count, cited to distinguish patient-facing access duties from OSHA's employee-facing ones.
7.HHS Office of Inspector General (2023). General Compliance Program Guidance. HHS Office of Inspector General (OIG). link ✓OIG's guidance on a right-sized compliance program for a small practice, cited to fold the OSHA readiness steps into a documented compliance routine ready to activate at first hire.

https://www.gale.care/for-providers/os-osha-applies-solo · 7 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers