OSHA's Regulations Containing Procedures for the Handling of Retaliation Complaints: What the OMB Extension Means for Your Safety Program

On March 30, 2026, OSHA published Federal Register document 2026-06032 — a notice requesting that the Office of Management and Budget extend its approval of the information collection requirements embedded in OSHA's retaliation complaint procedures under 29 CFR Part 24. If that sentence sounds like regulatory boilerplate, here is what it actually means: OSHA is formally maintaining the infrastructure it uses to investigate worker retaliation complaints filed under seven major environmental and energy statutes. And the numbers behind those complaints — roughly 15,000 respondents, more than 3,000 complaints annually, covering everything from the Clean Air Act to Superfund — tell a story that every EHS manager, safety officer, and ISO 45001-certified organization needs to understand.

This is not a new rule. It does not create new obligations in the traditional sense. But it is a clear signal that OSHA's whistleblower protection apparatus remains active, funded, and positioned for enforcement. If your organization operates in any sector touching environmental compliance, energy production, or chemical management — and especially if you hold ISO 45001 certification — this notice deserves more than a passing read.

---

---

What OSHA Just Published — and Why It Matters

The Paperwork Reduction Act of 1995 requires federal agencies to obtain approval from the Office of Management and Budget before collecting information from the public — and that approval cannot exceed a three-year term without renewal. When the term expires, the agency must seek re-authorization, and doing so triggers a mandatory public comment period. That is exactly what OSHA has done here.

The full title of the Federal Register notice is "Regulations Containing Procedures for the Handling of Retaliation Complaints; Extension of the Office of Management and Budget's (OMB) Approval of Information Collection (Paperwork) Requirements." The OMB Control Number is 1218-0236, and the underlying docket is OSHA-2012-0026. You can access the original notice at the Federal Register: federalregister.gov, Document 2026-06032.

What is being renewed here is the information collection infrastructure that supports OSHA's whistleblower complaint process under 29 CFR Part 24. When a worker files a retaliation complaint with OSHA — whether orally or in writing — a series of procedural steps are triggered: the complaint is recorded, the employer is notified, evidence is gathered, and OSHA conducts an investigation. All of that requires documented information collection, and that collection requires OMB authorization to continue.

The public has until May 29, 2026 to submit comments on the proposed extension at regulations.gov using Docket Number OSHA-2012-0026.

The plain-English translation: OSHA is keeping its retaliation enforcement machinery running. The 60-day public comment window is not a sign of weakness or uncertainty — it is a standard procedural requirement. When this approval is renewed, as it almost certainly will be, the complaint procedures continue with full legal effect.

A Closer Look at the Retaliation Complaint Process

The procedures being renewed under this notice govern retaliation complaints filed under seven federal environmental and energy statutes, all codified at 29 CFR Part 24. The statutes are:

• Safe Drinking Water Act
• Federal Water Pollution Control Act (Clean Water Act)
• Toxic Substances Control Act (TSCA)
• Solid Waste Disposal Act
• Clean Air Act
• Energy Reorganization Act of 1974
• Comprehensive Environmental Response, Compensation and Liability Act (CERCLA/Superfund)

These are not obscure statutes. They cover the full spectrum of environmental compliance obligations for manufacturers, chemical processors, energy producers, utilities, waste handlers, and the contractors who serve them. If your organization operates in any of these spaces and an employee reports a suspected violation to OSHA or another regulatory authority, the anti-retaliation protections of 29 CFR Part 24 apply immediately.

What Constitutes Retaliation Under These Procedures

The regulations are explicit: employers cannot intimidate, threaten, restrain, coerce, blacklist, discharge, or in any other manner discriminate against employees for:

• Reporting alleged violations of the covered statutes
• Refusing to participate in activities they reasonably believe to be unlawful under those statutes
• Testifying in, assisting, or participating in federal or state proceedings related to those statutes

The phrase "in any other manner discriminate" is where organizations frequently underestimate their exposure. It is not just termination. A demotion, a shift change, a negative performance review, a sudden reduction in hours, being passed over for promotion — any adverse employment action taken in close temporal proximity to a protected activity is potential grounds for a retaliation complaint. The causal link does not have to be proven at filing; OSHA investigates to determine whether it exists.

The Complaint Process and the 30-Day Window

No particular form is required to file a retaliation complaint under 29 CFR Part 24. A worker can walk into any OSHA office, call the OSHA hotline, or submit a complaint in writing. Oral complaints are reduced to writing by OSHA. That low bar for filing is intentional — the legislative history of these statutes reflects Congress's view that the fear of bureaucratic process should not deter workers from reporting environmental violations.

The complaint must be filed within 30 days of the alleged retaliatory action. That is a short window, and it is easy for workers to miss if they do not know it exists. However, OSHA can apply equitable tolling in circumstances where the worker was not aware of the deadline. The practical implication for employers: there is no "safe harbor" period after taking adverse action. An investigation can begin within weeks of a personnel decision.

Complaints are filed with the OSHA Area Director covering the employee's geographic area. The Area Director's office investigates and makes a determination on whether reasonable cause exists to believe that retaliation occurred. If reasonable cause is found, the matter proceeds to further remediation, including the possibility of reinstatement, back pay, and other relief.

The burden hour figures in this notice reflect that process. The previously approved burden was 17,387 hours. The newly proposed figure is 14,991 hours, matching the projected number of respondents — one hour per complaint, reflecting the time employers and employees spend on the information collection aspects of the complaint procedure itself.

The Numbers Behind Retaliation Complaints

In FY2023, OSHA received 3,243 whistleblower complaints filed under the various statutes it enforces. That figure spans more than 20 federal statutes — not just the seven covered under 29 CFR Part 24 — but it provides the baseline for understanding the volume and distribution of retaliation claims OSHA manages.

The single most important data point in that figure: approximately 71% of all OSHA whistleblower complaints were filed under Section 11(c) of the OSH Act, which covers retaliation for reporting workplace safety and health violations. The remaining 29% span the full spectrum of other statutes, including the seven environmental and energy statutes covered by 29 CFR Part 24.

What does 3,243 annual complaints mean in practice? A few things worth considering:

• OSHA investigates retaliation under more than 20 different federal statutes. The 29 CFR Part 24 statutes represent a meaningful share of the non-OSH Act complaints, particularly in industries with significant environmental compliance exposure.
• More than half of all cases are either dismissed or withdrawn. That does not mean the complaints were baseless — many are withdrawn after the employer and employee reach informal resolution. But it does mean OSHA is actively screening a high volume of complaints and making investigative decisions on each one.
• The complaint volume per industry is not evenly distributed. Manufacturing, chemical production, utilities, and waste management generate a disproportionate share of the 29 CFR Part 24 complaints because these are the industries where the underlying environmental statutes are most directly operative.

If you manage safety and compliance in any of these sectors and you have not reviewed your whistleblower protection procedures recently, the FY2023 complaint volume is a reasonable prompt to do so. At an average of 3,000+ complaints per year across all statutes, OSHA's whistleblower program is not a dormant corner of the regulatory apparatus.

What This Means for Your Business

The renewal of this OMB authorization is not the kind of Federal Register notice that triggers immediate operational changes. But it is a useful occasion to stress-test a few assumptions your organization may be operating under.

What "Adverse Action" Looks Like in Practice

Most managers understand that terminating a worker immediately after they file a safety complaint is a problem. What they do not always recognize is how broadly "adverse action" extends under federal whistleblower protection law. Consider these scenarios:

• An employee reports a suspected Clean Air Act violation to a state environmental agency. Two weeks later, their shift is changed from days to nights. Is that retaliation? OSHA will investigate it as such if the timing and circumstances support the inference.
• A worker refuses to operate equipment they believe will result in an illegal discharge under the Clean Water Act. They are not fired, but they are excluded from a team project and their performance rating drops. That exclusion pattern is exactly the kind of circumstantial evidence that can support a retaliation finding.
• An employee testifies in an OSHA inspection proceeding related to a Superfund site. Their annual bonus is reduced that year. The employer has documentation of performance issues, but the timing raises questions.

These are not hypothetical edge cases. They reflect the actual fact patterns that appear in retaliation investigations. The common thread is temporal proximity between a protected activity and an adverse employment action. Documentation that predates the protected activity matters enormously. Documentation created after is viewed with suspicion.

Documentation Requirements

When OSHA investigates a retaliation complaint, the employer will be asked to produce documentation supporting the adverse employment decision. That means performance reviews, disciplinary records, attendance logs, supervisory notes, and any records showing the legitimate business reason for the action.

Organizations that maintain robust documentation systems — integrated into their management system infrastructure — are materially better positioned in these investigations. The documentation was created in the ordinary course of business, it predates the complaint, and it tells a coherent story. Organizations that scramble to reconstruct a paper trail after receiving an OSHA investigation notice are in a fundamentally weaker position.

This is one of the underappreciated practical benefits of an ISO 45001 management system. The standard requires documented information supporting key decisions, and that documentation habit — built into the system, not created on demand — is exactly what an OSHA whistleblower investigation will ask for.

The ISO 45001 Dimension

Here is where this Federal Register notice intersects directly with ISO 45001 certification, and where the stakes get compounded for certified organizations.

Clause 5.4: Worker Participation and the Anti-Retaliation Imperative

ISO 45001 Clause 5.4 requires organizations to establish processes for worker participation and consultation on occupational health and safety matters. The standard is unambiguous about one condition: those processes must operate without fear of reprisal.

The phrase "without fear of reprisal" is not decorative language. It is a substantive certification requirement. An organization that formally complies with ISO 45001's worker participation requirements on paper — holding toolbox talks, maintaining safety committees, posting hazard reporting channels — but whose workers actually fear retaliation for using those channels has a Clause 5.4 nonconformity. The certification auditor's job is to evaluate whether the participation process is real, not just documented.

How do auditors probe this? Through worker interviews during on-site audits. An auditor who asks three workers whether they feel comfortable reporting safety concerns and receives evasive, rehearsed, or fearful answers has just found a potential nonconformity — regardless of how pristine the written procedures look.

The Double Liability Problem

An ISO 45001-certified organization that retaliates against a worker for reporting an environmental or safety violation faces two simultaneous exposures:

1. OSHA regulatory liability under 29 CFR Part 24 (and potentially under Section 11(c) of the OSH Act if the underlying report involved a workplace safety concern)
2. Certification nonconformity under ISO 45001 Clause 5.4, potentially resulting in a major nonconformity finding that places the certification at risk

These two exposures are not independent. An OSHA retaliation investigation finding — even a preliminary one — is exactly the kind of documented evidence an ISO 45001 auditor would ask about during a recertification audit. The organization has now confirmed, through a regulatory proceeding, that its worker participation environment was not "without fear of reprisal."

This compounding risk is one that many compliance teams underestimate, particularly organizations that manage ISO 45001 and environmental compliance through separate silos. The safety management system and the environmental compliance program need to be aligned, not just co-existing.

Clauses 10.2, 7.4, and 9.1.1

The ISO 45001 connections extend beyond Clause 5.4:

• Clause 10.2 (Nonconformity and Corrective Action) requires organizations to investigate incidents and nonconformities and take corrective action. A retaliation complaint is a signal that the nonconformity identification process has failed — someone reported a concern through a regulatory channel rather than through the internal safety management system, which suggests the internal system is not trusted.
• Clause 7.4 (Communication) requires organizations to determine what safety information needs to be communicated, to whom, by what methods, and when. A well-functioning communication process creates the conditions where workers use internal channels first — because those channels are visible, accessible, and demonstrably safe to use.
• Clause 9.1.1 (Monitoring and Measurement) requires organizations to monitor and measure OH&S performance. The rate at which workers use internal versus external reporting channels is a meaningful leading indicator of safety culture health. Organizations that never receive internal near-miss or concern reports but do receive external regulatory complaints have a monitoring gap — and a culture problem.

Expert Analysis: What the Burden Hour Reduction Signals

The most analytically interesting piece of this Federal Register notice is the reduction in projected burden hours: from 17,387 hours under the previous approval to 14,991 hours under the new proposal — a decrease of 2,396 hours, driven by a corresponding reduction in the projected number of respondents.

What might explain this reduction? A few possibilities, and they pull in different directions:

Possibility 1: Genuine improvement in safety and environmental culture. If fewer workers are filing retaliation complaints under these seven statutes, it could mean that employers are doing better — that reporting environments have improved, that environmental compliance programs are more robust, and that retaliatory cultures are less prevalent. This would be the optimistic read.

Possibility 2: Reduced complaint volume due to fear or reduced awareness. The flip side of fewer complaints is that some of those complaints are not being filed. If workers are more hesitant to engage with regulatory processes — due to changes in agency enforcement posture, reduced outreach and education, or economic anxiety about employment — the complaint count drops without any underlying improvement in employer behavior. This is the more concerning interpretation.

Possibility 3: Administrative and methodological adjustments. Burden hour estimates in Paperwork Reduction Act renewals are based on projected respondent counts and time-per-response assumptions. Both inputs are subject to methodological revision based on actual prior-period data. A reduction from 17,387 to 14,991 could reflect OSHA updating its baseline using actual FY2023 or FY2024 complaint data, rather than any meaningful signal about underlying behavior.

The honest answer is that we cannot determine from the Federal Register notice alone which of these explanations is driving the change. What is clear is that the number still represents nearly 15,000 employer respondents per year. That is not a small program. For every organization operating in the covered sectors, the statistical probability of encountering a retaliation complaint under one of these seven statutes over a five-year period is non-trivial.

The pragmatic takeaway: do not read the burden hour reduction as a signal that these complaint procedures are losing practical significance. The program remains active, OSHA continues to investigate, and the legal consequences of a retaliation finding under any of these statutes are serious.

Practical Steps EHS Professionals Should Take Now

Whether you submit a public comment or not, the March 30 notice is a reasonable occasion to conduct a quick internal review. Here is what that looks like in practice:

1. Audit Your Adverse Action Documentation Practices

Pull the last 12 months of disciplinary actions, performance improvement plans, terminations, demotions, and schedule changes. For each one, ask: does the documentation predating this action tell a consistent story? If a supervisor's written notes about performance issues only appear after the affected employee made a safety or environmental report, that is a documentation vulnerability. Fix it going forward by training supervisors to document performance concerns in real time.

2. Review Your 29 CFR Part 24 Coverage Exposure

Map your organization's activities against the seven covered statutes. If your operations involve air emissions, water discharges, chemical handling, waste disposal, drinking water systems, or nuclear/energy systems — all of which are common in manufacturing, utilities, and industrial contracting — you have direct exposure under 29 CFR Part 24 whistleblower protections. Make sure your HR and supervisory teams understand this.

3. Test Your Internal Reporting Channels

ISO 45001 Clause 5.4 requires genuine worker participation. The test is not whether the channels exist on paper — it is whether workers actually use them. Survey workers anonymously about their comfort level reporting safety and environmental concerns. If the results show hesitation or fear, you have a culture issue that requires leadership attention, not just a new policy.

4. Train Supervisors on What Retaliation Looks Like in Practice

Most supervisors who retaliate do not think of it as retaliation. They think they are managing performance, or making legitimate business decisions, or responding to an employee who has become "difficult." The gap between how they describe it and how OSHA will characterize it is significant. Specific scenario-based training — using the kinds of fact patterns described earlier in this article — is far more effective than a general anti-retaliation policy statement.

5. Align Your Environmental and Safety Compliance Teams

In many organizations, the ISO 45001 system is managed by the safety team while environmental compliance sits in a separate function. But 29 CFR Part 24 complaints are triggered by environmental reports, and they land in OSHA's whistleblower program — which is adjacent to the safety compliance world. These two teams need to know each other's procedures, reporting channels, and documentation systems.

6. Review Your ISO 45001 Clause 5.4 Evidence

If you are preparing for a recertification audit, Clause 5.4 worker participation evidence deserves a specific review. Can you demonstrate, through objective evidence, that workers participate without fear of reprisal? That means documented participation records, meeting minutes, worker feedback mechanisms, near-miss reports, and — critically — evidence that concerns raised through internal channels were actually acted upon.

7. Note the May 29, 2026 Comment Deadline

If your organization has a perspective on the burden hour estimates, the utility of the complaint procedures, or potential improvements to how the information collection is administered, the comment period is open until May 29, 2026. This is an underused mechanism through which the regulated community can provide OSHA with ground-level data that improves how these programs are administered.

How to Submit Comments

Submitting a public comment on this notice is straightforward. Comments must be received by OSHA by May 29, 2026.

Submit electronically at regulations.gov using Docket Number OSHA-2012-0026. Search for the docket number and follow the instructions to submit a comment electronically. You will receive a confirmation number when the comment is successfully submitted.

OSHA is specifically soliciting input on four questions, which should guide the structure of any comment you submit:

1. Whether the proposed information collection is necessary for OSHA's performance of its functions
2. The accuracy of OSHA's estimate of the burden (hours and cost) — this is where employers with direct experience of the complaint process can add value
3. Whether there are ways to enhance the quality, utility, and clarity of the information collected
4. Whether there are ways to minimize the burden on respondents, including through automated or electronic collection methods

You do not need an attorney to submit a public comment. A concise, factual statement — "Based on our experience responding to [X] OSHA retaliation complaints over the past three years, the actual time per response is [Y], not the one hour estimated by OSHA" — is more useful to OSHA than a lengthy legal brief. Be specific, be factual, and cite your own operational experience where possible.

Building a Safety Culture That Makes Retaliation Complaints Unnecessary

The deepest implication of this Federal Register notice is not about regulatory mechanics. It is about the kind of workplace where retaliation complaints arise in the first place.

A retaliation complaint under 29 CFR Part 24 is, at its core, a signal that something failed before the complaint was filed. A worker believed they faced professional consequences for doing something the law expressly protects. That belief — whether or not it results in a sustained OSHA finding — reflects an environment where the incentives around safety and environmental reporting are misaligned.

ISO 45001 certification is built on the premise that organizations can design those incentives correctly. Clause 5.4's requirement for worker participation "without fear of reprisal" is not just a certification checkbox — it is the structural condition that makes the entire safety management system function. When workers freely report hazards, near-misses, and compliance concerns through internal channels, the system learns and improves. When they fear doing so, the system goes blind.

The 3,243 whistleblower complaints OSHA received in FY2023 represent workers who concluded that the external regulatory channel was safer than the internal one. Some of those conclusions were correct. Some were not. But every one of them represents an organization where the ISO 45001 ideal of genuine worker participation fell short in practice.

The OMB renewal of OSHA's retaliation complaint procedures means those external channels remain open. The more important question for any organization serious about safety is whether the internal channels are working well enough that workers never feel the need to use them.

---

Frequently Asked Questions

Does this OMB extension create new obligations for employers?

No. OSHA is proposing to extend the existing OMB approval without substantive change. The retaliation complaint procedures under 29 CFR Part 24 remain in effect as they currently exist. No new reporting, recordkeeping, or compliance requirements are being introduced. However, the renewal reaffirms that the information collection infrastructure supporting these procedures is active and will continue to be used for enforcement purposes.

Which industries have the most exposure under 29 CFR Part 24?

The seven covered statutes — Clean Air Act, Clean Water Act, TSCA, Solid Waste Disposal Act, Safe Drinking Water Act, Energy Reorganization Act, and CERCLA — cover a broad industrial footprint. Manufacturing, chemical processing, utilities and power generation, nuclear energy, waste management, water treatment, and petroleum refining all have significant direct exposure. So do contractors serving these industries, including environmental remediation firms, industrial service contractors, and engineering companies that assist with environmental compliance.

How does a retaliation complaint affect ISO 45001 certification?

A confirmed or even alleged retaliation complaint is a significant flag for an ISO 45001 certification auditor. Clause 5.4 requires worker participation without fear of reprisal. Evidence that a worker felt compelled to file an external retaliation complaint — rather than use internal reporting channels — suggests that the internal participation environment is not functioning as the standard requires. A major nonconformity finding on Clause 5.4 can place certification status at risk. Organizations should treat any retaliation complaint as requiring both a regulatory response and an internal management system review.

What if a worker files a complaint that is later dismissed?

A complaint that is dismissed by OSHA — either because no reasonable cause was found or because it was withdrawn — does not automatically resolve the underlying management issue. The fact that the complaint was filed tells you something about the worker's perception of the reporting environment, and that perception matters for ISO 45001 Clause 5.4 purposes regardless of the regulatory outcome. Treat every complaint, even dismissed ones, as an opportunity to investigate and improve internal reporting culture.

How do I submit a public comment on this notice?

Submit comments electronically at regulations.gov using Docket Number OSHA-2012-0026 by May 29, 2026. OSHA is seeking input on the necessity of the information collection, the accuracy of the burden hour estimates, and opportunities to reduce respondent burden or improve collection methods. Comments do not need to be formal or lengthy to be considered.

---

Source: Federal Register, Vol. 91, March 30, 2026 — OSHA Notice, Document No. 2026-06032. Available at: federalregister.gov.

For questions about ISO 45001 implementation, worker participation program development, or OSHA compliance readiness, contact Jared Clark at Certify Consulting.

---

Last updated: 2026-04-07