Regulatory Compliance Checklist

Walk each work center against 29 CFR 1910.147 (LOTO) and 1910.212 (machine guarding). Verify machine-specific LOTO procedures are posted, energy isolation points are labeled, and locks/tags are on the floor — not in a desk drawer. Note any guards removed for setup that were not reinstalled.

Cross-check the chemical inventory against the SDS binder (or digital SDS system). Any chemical introduced since last review needs an SDS on file and targeted HazCom training delivered to exposed operators per HazCom 2012 / GHS.

Deliver chemical-specific HazCom training to all operators in the affected area and capture acknowledgment signatures. Update the SDS binder location index and the NFPA 704 placards on storage areas if hazard ratings changed.

Per 1910.178, certifications are equipment-specific (counterbalance vs. reach truck vs. order picker) and re-evaluated every three years. Pull the training matrix; flag operators whose three-year window expires this quarter.

Form 300A must be posted in a visible employee area Feb 1 – Apr 30 each year, even if zero recordables. Photograph the posted form for the audit file. Sites with 100+ EE also submit electronically via OSHA ITA by March 2.

Exits clear of pallets and WIP, signage lit, eyewash stations weekly-flushed per ANSI Z358.1, fire extinguishers within annual inspection date. Common gotcha: eyewash flush log signed but station blocked by a stacked tote.

Total hazardous waste generated this quarter determines RCRA status (VSQG, SQG, LQG) and accumulation time limits. Review the generator log and confirm e-Manifest copies are filed for each off-site shipment.

Drums labeled with contents and accumulation start date, lids closed except when adding waste, secondary containment intact, weekly inspection log current. SQG/LQG sites have time limits that start ticking when the drum leaves the satellite area.

Reconcile VOC and HAP usage against permit limits per coating, solvent, and cleaning operation. Confirm CEMS calibration is current if applicable. Flag any month tracking above 80% of the rolling 12-month limit so we have runway before exceedance.

Walk oil storage areas (compressors, hydraulic reservoirs, used oil totes) against the SPCC plan; verify secondary containment, drainage valves locked closed, and quarterly inspection signed. NPDES permit holders also walk stormwater outfalls and log visual observations.

Tier II (EPCRA 312) is due March 1; TRI (EPCRA 313) is due July 1. Confirm chemical thresholds against current usage and that the named owner has the next deadline on calendar with two weeks of buffer.

Confirm retention windows for the regulated record classes: OSHA 300 logs (5 years), exposure/medical records (30 years per 1910.1020), quality records per ISO 9001/AS9100/IATF, ITAR technical data, and customer PPAP files. Purge expired records on schedule — keeping them past retention is its own liability.

Confirm controlled technical data lives in the segregated PLM/file share with US-person-only access. Check that no foreign-national contractor has been added to controlled folders since last review and that DDTC registration (if applicable) is current.

Pull the access list from PLM (Windchill, Teamcenter, Arena, SolidWorks PDM) and HR's I-9 records. Anyone on the list whose US-person status can't be confirmed gets removed pending verification. Document the review for the audit file.

Pull active users from NetSuite/Epicor/Plex and the QMS (MasterControl, ETQ, Greenlight Guru). Disable accounts for separated employees, confirm role-based permissions match current job, and revoke admin rights that aren't justified.

Federal posters (FLSA, FMLA, EEO, USERRA, OSHA Job Safety) plus state-specific (workers' comp, minimum wage, paid sick leave, harassment hotline). Posters change annually; the prior-year version is a citation.

I-9 must be completed by day 3 of employment with original document review (or E-Verify equivalent). Common gotcha: Section 2 signed by HR but the document list is incomplete or expired-document-accepted.

States like CA, NY, IL, CT, and WA mandate harassment training on specific cadences (typically every 1-2 years for supervisors and non-supervisors). Confirm completion records are current for the state(s) where employees work — not just where the company is HQ'd.

Employers with 100+ EE file annual EEO-1 with EEOC. Pull HRIS workforce data by job category, race/ethnicity, and gender; reconcile against last filing for material shifts that may need explanation.

Pull the HR complaint log. Any open EEOC charge, internal complaint, or hotline report from this quarter gets a status review with HR director and counsel. Confirm no retaliation has occurred against complainants since filing.

State business registration, local occupancy/business license, sales tax permits in nexus states, foreign qualification where the company has operations. Lapsed registrations create personal liability for officers in some states.

Title V air, NPDES stormwater/wastewater, RCRA generator ID, building/fire occupancy, boiler and pressure vessel certificates, elevator, scale (Weights and Measures). List each permit with expiration date and renewal lead time.

Confirm next surveillance audit date for ISO 9001 / AS9100 / IATF 16949 / ISO 13485 / ISO 14001 as applicable. Confirm internal audit schedule is on track and management review is scheduled before the surveillance window.

Pull contracts with flow-down clauses: conflict minerals (CMRT), REACH/RoHS declarations, AS9100 supplier requirements, NDAs, and quality agreements. Confirm any customer-required certifications (PPAP level, FAI per AS9102) are on file before the next shipment.