Defense Package: Automated OSHA Citation & Litigation Evidence Export

When OSHA issues a citation, you have 15 working days to respond — and the quality of your records in those days largely decides the outcome. A defense package is the organized evidence bundle (training records, read-proof confirmations, inspections, permits, corrective actions, each with its date) that documents your compliance, supports the penalty reductions OSHA allows, and gives your attorney a file in timeline order. Miss the 15-working-day window under Section 10(a) of the OSH Act (29 U.S.C. 659(a)) and the citation becomes a final order: no appeal, full penalty. HazComFast assembles that package in minutes instead of the days it takes to dig through filing cabinets and call jobsite foremen.

At a glance: the contest window is 15 working days from receipt of the notice of proposed penalty, postmarked, under 29 CFR 1903.17(a); an informal conference does not stop it (1903.20). Miss it and the citation, the penalty and the abatement dates become a final order. An OSHA citation must be contested in writing within 15 working days of receiving the notice of proposed penalty, under 29 CFR 1903.17(a), and requesting an informal conference does not pause that window, so the records that support a penalty reduction have to exist before the citation arrives.

What a defense package is — and why it matters in 15 days

A defense package is a comprehensive, organized collection of safety records that demonstrates your company's compliance with the cited OSHA standard and supports the largest possible penalty reduction. The clock matters: from the day you receive the notice of proposed penalty you have 15 working days (weekends and federal holidays excluded) to file a written Notice of Contest with the OSHA Area Director, postmarked within that window (29 CFR 1903.17(a)). You can request an informal conference as well, but it does not stop that clock (29 CFR 1903.20). Do nothing, and the citation, the proposed penalty, and the abatement dates all become a final, unreviewable order.

A complete construction defense package typically includes:

• SDS access logs proving chemicals were "readily accessible" to employees each shift (29 CFR 1910.1200(g)(8))
• Training records with dates, topics, trainer, and worker signatures (29 CFR 1926.59 / 1910.1200(h))
• Read-proof confirmations showing workers acknowledged the specific SDSs for chemicals they used
• Chemical inventory with GHS classification data and labels generated/applied
• Inspection records for the cited jobsite, by the competent person (29 CFR 1926.20(b)(2))
• Corrective-action history showing systematic abatement of prior findings
• Near-miss reports demonstrating proactive hazard identification (good-faith evidence)
• Permit records — hot work (29 CFR 1926.352(e)), confined space (1926 Subpart AA), excavation
• Audit logs showing consistent, time-stamped, tamper-evident recordkeeping

The four steps: from citation to export

Step 1 — Citation trigger

Open HazComFast, go to Defense Packages, and enter the citation details: standard cited, date of alleged violation, and jobsite. The system scopes the search to that standard, location, and time window.

Step 2 — Automatic evidence collection

You attach evidence by type, and the types are a declared list rather than a sweep of the database: read-proof confirmations for the chemicals involved, training records for the workers on site, toolbox talks, JHAs, the safety plan and its version history, equipment inspections, corrective actions, discipline records, and the hot work, excavation and confined space permits. Each item carries its date, so the bundle reads as a timeline rather than a folder. What it does not do is decide for you which records matter to the cited standard; that judgment stays with you and your counsel.

Step 3 — Organize by penalty-reduction category

The system maps evidence to the exact serial reductions OSHA applies to the Gravity-Based Penalty under its Field Operations Manual (CPL 02-00-164, Ch. 6) — see the table below.

Step 4 — Export

Generate the package as a PDF report formatted for the OSHA Area Office, an evidence bundle organized by category, a timeline view for chronological context, or an attorney-ready format for counsel review. Every generated PDF carries the "Free template by HazComFast.com — the digital HazCom solution for contractors" footer.

Which evidence reduces which penalty — the exact percentages

OSHA does not negotiate a lump sum. It computes a Gravity-Based Penalty (severity × probability), then applies serial percentage reductions in a fixed order. Each reduction must be earned with documentation. These figures come from OSHA's Field Operations Manual (CPL 02-00-164, Ch. 6); the source-of-truth values are below.

Accuracy note: The size reduction tops out at 70% for employers with 25 or fewer employees (expanded from 10 or fewer in OSHA's July 14, 2025 update; up to 80% for willful-serious violations). Repeated violations receive the size reduction only; good-faith and history do not apply to repeat or willful citations. There are no industry or state multipliers, and no automatic 1.5× repeat multiplier — a repeat is simply bounded by the regulatory cap.

For 2026, the penalty ceilings those reductions apply to are: serious — up to $16,550; other-than-serious — up to $16,550; willful or repeated — up to $165,514; failure-to-abate — up to $16,550 per day. These are unchanged from 2025 (there was no CPI inflation adjustment for 2026), per 29 CFR 1903.15(d). Model your exposure with the Fine Calculator.

Worked example: a HazCom training citation

Citation received: Serious violation of 29 CFR 1910.1200(h), which construction reaches through 1926.59, — "Employer did not provide employee information and training on hazardous chemicals in their work area." Proposed penalty: $12,000 (a Gravity-Based Penalty below the $16,550 serious maximum).

The defense package HazComFast assembles:

• 47 training records from the past 12 months at the cited jobsite, with topics and signatures
• 312 read-proof confirmations covering every chemical on site
• SDS access logs showing 1,247 individual SDS views by workers during the period
• 8 toolbox talks specifically covering chemical hazards, with sign-in sheets
• A corrective-action log showing 3 training gaps identified and closed within days
• Near-miss reports showing active worker engagement with the program

How that maps to the outcome:

1. The training records and read-proofs directly rebut the factual allegation that workers were not trained — the strongest move is contesting the citation itself, not just the penalty. If OSHA cannot prove the violation, there is no penalty to reduce.

2. If the citation stands in part, the documented program earns the reductions — but they apply serially, each to the running balance in a fixed order, not as independent subtractions off the original. With 18 employees the firm takes the 70% size reduction first, then 25% good faith (the written program), then 20% history (clean five-year record):

   $12,000 → ×0.30 (size) = $3,600 → ×0.75 (good faith) = $2,700 → ×0.80 (history) = $2,160.

3. The 3 documented gaps closed within days support a 15% quick-fix, applied last: $2,160 → ×0.85 ≈ $1,836 — roughly an 85% cut, and every percentage point of it is earned by a specific record in the package.

That is why the independent-percentage math people expect ("25% of $12,000 is $3,000 off") overstates the cut — the reductions compound on a shrinking base. The package turns "trust us, we trained them" into a time-stamped, signed, exportable record, and turns a $12,000 proposed penalty into a defensible fraction — or grounds to withdraw it entirely.

The multi-employer wrinkle: proving reasonable care

On most construction sites, more than one employer can be cited for the same hazard under OSHA's Multi-Employer Citation Policy (CPL 02-00-124). If you are cited as a controlling employer for a subcontractor's HazCom violation, you are not held to the same degree of care as the employer who created or was exposed to the hazard — you are held to a reasonable-care / reasonable-diligence standard, confirmed by the Fifth Circuit in Acosta v. Hensel Phelps Construction Co., 909 F.3d 723 (5th Cir. 2018).

That standard is met with documentation: your site safety inspections, the sub's submitted training and SDS records, your corrective-action notices when you spotted a gap, and meeting minutes showing you raised the issue. A defense package that pulls those records together is the difference between "we exercised reasonable diligence" as an assertion and as proof. For the full doctrine, see the multi-employer worksite citation doctrine.

When to generate a defense package

• OSHA citation received — the primary use case, on the 15-working-day clock
• Informal conference — bring organized evidence to negotiate a settlement and penalty reduction
• Notice of Contest — feed the file to counsel for the formal Review Commission proceeding
• Lawsuit or third-party claim — assemble litigation evidence and put records on legal hold
• Insurance / EMR audit — demonstrate program effectiveness to your carrier
• Pre-inspection check — verify documentation is complete before OSHA arrives
• GC / client safety audit — prove your program to the prime contractor

Integrate the legal hold and respect retention rules

The moment a citation lands or litigation is reasonably anticipated, your duty to preserve evidence attaches. When a defense package is generated, HazComFast suggests activating a legal hold on all related records so nothing is altered or deleted during the contest period — spoliation can sink an otherwise winnable case.

Mind the retention clock, too. Most training, inspection, and permit records have no fixed federal retention period, but employee exposure and medical records must be kept for the duration of employment plus 30 years under 29 CFR 1910.1020. See 30-Year Record Retention under 1910.1020 for what counts as an exposure record.

Common mistakes to avoid

• Don't let the 15-working-day clock run while you "gather documents" — file the contest or request the conference first, then build the package.
• Don't delete or "clean up" any record after a citation or claim — that is spoliation. Put records on legal hold immediately.
• Don't assume good-faith and history reductions apply to a repeat or willful citation — they do not.
• Don't quote the old $16,131 serious maximum or assume a 2026 increase — the 2026 ceilings equal 2025 ($16,550 / $165,514).
• Don't hand OSHA your internal root-cause analysis without counsel — what you disclose at the informal conference is generally discoverable.
• Do match each piece of evidence to a specific penalty-reduction category, so the Area Office can apply the reduction without hunting.

What to do next

1. File on time. Calendar the 15-working-day deadline the day the citation arrives; see how to contest an OSHA citation.
2. Generate the package scoped to the cited standard, jobsite, and dates.
3. Activate a legal hold on all related records before anything changes.
4. Estimate exposure with the Fine Calculator and map each reduction you can document.
5. Tighten the source records going forward with the HazCom Audit Checklist, digital training records, and an inspection action plan. Background reading: the OSHA Inspections hub, the 60-second OSHA inspection response plan, and HazCom citations and 1910.1200 penalties. See also the Hazard Communication Standard 1910.1200 overview.

Getting started

The litigation defense package opens from the Starter plan up. See the plans → · Estimate the exposure first →

The single biggest factor in the result is whether the records exist and are contemporaneous. A program documented in real time — signed training, time-stamped SDS access, closed corrective actions — is far more persuasive than anything reconstructed after the citation. No system guarantees dismissal, but complete, organized, real-time documentation is what supports a contest or a penalty reduction.

Sources & verification (verified 2026-07-07): OSH Act §10(a) (29 U.S.C. 659(a)) (15-working-day contest); penalty maximums and serial reductions per 29 CFR 1903.15(d) and OSHA Field Operations Manual CPL 02-00-164, Ch. 6; multi-employer standard per CPL 02-00-124 and Acosta v. Hensel Phelps Construction Co., 909 F.3d 723 (5th Cir. 2018); construction HazCom via 29 CFR 1926.59 (adopts 1910.1200); record retention per 29 CFR 1910.1020. Facts verified against the HazComFast regulatory source of truth (oshaPenalties, standardsCitations), last verified 2026-06-26. This is general guidance, not legal advice; OSHA-approved State Plans may have their own procedures and deadlines — verify your state's rules.*