The employer is responsible for conducting a hazard assessment, not the employee. Under OSHA, employers hold the legal duty to identify workplace hazards and keep the workplace safe. They can assign the actual work to a trained employee, safety officer, or outside consultant, but the legal responsibility and accountability always stay with the employer and cannot be transferred. As of 2026, an employer that fails this duty faces OSHA penalties of up to $16,550 per serious violation.
Employer vs Employee: Who Actually Holds the Duty?
The employer holds the duty. When a question asks whether the employee or the employer is responsible for conducting a hazard assessment, the employer is always the correct answer, because safety regulations place the legal obligation on the business, not on individual workers.
Here is the distinction that makes it clear:
Why the answer is the employer
Employees have a role in workplace safety, such as reporting hazards and following procedures, but they are not legally responsible for conducting the assessment itself. That duty belongs to the employer. OSHA requires the employer to assess the workplace, identify hazards, and put protective measures in place. An employee helping with a walkthrough does not shift the legal responsibility onto that employee, so on any test or checklist question, the employer is the right choice.
What the employee’s role actually is
Workers are expected to participate in safety, not own it. They report unsafe conditions, follow the controls the employer puts in place, use provided protective equipment, and take part in training. This shared involvement makes a safety program stronger, but it is support, not legal responsibility. The line is simple: employees participate, and the employer is accountable.
Why Does the Employer Hold Legal Responsibility?
The employer holds legal responsibility because federal law assigns the duty of workplace safety directly to the business through OSHA. Understanding the legal basis explains why the responsibility cannot simply be handed off to a worker or a contractor.
Here is what the law actually says:
What does OSHA require?
Under OSHA’s personal protective equipment standard, 29 CFR 1910.132, the employer must assess the workplace to determine whether hazards are present that require protective equipment, then select the right equipment and train workers on it. OSHA’s General Duty Clause, Section 5(a)(1), adds a broader obligation to keep the workplace free of recognized hazards likely to cause death or serious physical harm. Both point to the same responsible party, the employer, and both apply regardless of business size.
What happens if an employer skips the assessment?
The financial exposure is real and it is rising. As of 2026, OSHA penalties reach up to $16,550 per serious violation, and up to $165,514 per willful or repeat violation, with these maximums adjusted for inflation every January. If a cited hazard is not corrected by the deadline, OSHA can add up to $16,550 per day until it is fixed. A documented hazard assessment is one of the clearest ways to show good faith and reduce that exposure, since OSHA weighs an active safety program when calculating penalties.
Who Actually Performs the Assessment?
The employer holds the responsibility, but the person walking the floor is often someone else. OSHA allows the work to be carried out by a qualified person, usually called a competent person.
Here is who typically does the hands-on work:
What is a competent person?
OSHA often points to a competent person to carry out a hazard assessment. This is someone with the training and experience to spot existing and predictable hazards and the authority to correct them promptly. In practice this is frequently a safety manager, supervisor, or trained team lead. The qualifications matter more than the job title, since the person needs both the knowledge to recognize a hazard and the standing to act on it.
Can you hire an outside professional?
Yes. Smaller businesses without dedicated safety staff often hire an outside consultant to perform the assessment, which is completely allowed and frequently produces a more thorough result. The key point stays the same: hiring a consultant covers the execution, not the accountability. The employer still signs off, keeps the records, and answers for the corrective actions, so the professional works as an extension of the employer’s duty rather than a replacement for it.
How Do You Get a Hazard Assessment Done Right?
You get a hazard assessment done right by using a competent person, documenting it in writing, and reassessing whenever conditions change. A walkthrough that lives in someone’s memory offers no protection during an inspection or a claim.
Here is what a proper assessment includes:
Document it in writing
OSHA’s PPE standard requires written certification that the assessment was performed. That certification has to include four things: the workplace evaluated, the name of the person certifying it, the date it was done, and a clear label identifying it as a hazard assessment certification. Skipping this step is the most common mistake, because an assessment you cannot prove is treated as one that never happened.
Reassess when conditions change
A hazard assessment is not a one-time task. Reassess whenever the workplace materially changes, including these common triggers:
- New equipment or processes that introduce hazards the original assessment never covered
- Facility or layout changes that alter how people move through the space
- A near-miss or injury that reveals a hazard in practice
- New regulations that change what must be evaluated
Strong safety programs treat the assessment as an ongoing habit and update the certification each time, rather than filing it once and forgetting it.
Where Does a Security Risk Assessment Fit In?
A security risk assessment covers workplace threats that an OSHA hazard assessment does not, namely theft, trespass, and violence. The two evaluations protect the same people from different kinds of harm and work best together.
Here is how they connect:
Safety hazards and security threats are different jobs
A safety hazard assessment asks whether a worker needs gloves or fall protection. A security risk assessment asks about access control, vulnerable entry points, lighting, and the likelihood of crime at the site. Both protect people, but they draw on different expertise. Treating a safety assessment as if it also covers security leaves a real gap, especially for businesses handling cash, valuable inventory, or heavy foot traffic.
How a professional security assessment supports your duty of care
Just as a safety consultant handles the OSHA side, a security partner handles the threat side. A professional security risk assessment evaluates a property for vulnerabilities and recommends concrete measures like officer coverage and access procedures. For businesses in South Florida, pairing that with an OSHA hazard assessment gives a fuller picture of workplace risk. Almond Tree Security Services offers this through its commercial security services, staffed by licensed Class D and Class G officers, with the option of armed or unarmed coverage depending on the site.
Frequently Asked Questions
Can an employer delegate the hazard assessment to someone else?
Yes, the employer can assign the actual work to a competent person on staff or an outside consultant. Delegation covers the execution only. The employer still holds legal accountability, keeps the written certification, and remains responsible for correcting any hazards that are found.
What is a competent person in a hazard assessment?
A competent person is someone with the training and experience to identify existing and predictable workplace hazards, plus the authority to take prompt corrective action. This is often a safety manager, supervisor, or trained team lead. The qualifications matter more than the specific job title.
Does a hazard assessment need to be documented?
Yes. OSHA’s PPE standard requires written certification identifying the workplace evaluated, the person who certified it, the date it was performed, and a clear label identifying it as a hazard assessment. An undocumented assessment provides no compliance protection and is treated as if it never occurred.
What is the penalty for not conducting a hazard assessment?
As of 2026, OSHA can issue penalties up to $16,550 per serious violation and up to $165,514 per willful or repeat violation, adjusted for inflation each January. Failure to correct a cited hazard by the deadline can add up to $16,550 per day. A documented assessment helps demonstrate good faith and reduce penalties.
How often should a hazard assessment be conducted?
There is no single fixed interval. An assessment should be updated whenever conditions change, including new equipment, new processes, facility changes, near-misses, or injuries. Many strong safety programs review hazards continually rather than treating the assessment as a once-a-year task.
Is a hazard assessment the same as a risk assessment?
The terms overlap and are often used interchangeably. Both identify hazards, evaluate the likelihood and severity of harm, and determine controls. In practice, a hazard assessment tends to focus on identifying workplace hazards under OSHA, while a risk assessment more broadly scores and prioritizes those hazards by likelihood and impact.
Bringing Safety and Security Together
The employer is responsible for conducting a hazard assessment, and while the walkthrough can be delegated, the accountability cannot. Getting it right means using a competent person, documenting the assessment in writing, and reassessing whenever the workplace changes. Handling the safety side well is only part of protecting a workplace, since security threats sit outside the scope of an OSHA hazard assessment.
Almond Tree Security Services helps South Florida businesses close that gap, evaluating properties across Miami-Dade, Broward, and Monroe County for security vulnerabilities and providing licensed officers to address them. If you want a clear read on where your site is exposed, reach out whenever you like. No pressure either way.
