Stop Work Authority: How to Write a Policy Workers Can Actually Use

After rain, a laborer sees fresh cracks beside a trench. The crew needs specific instructions: stay clear, warn others, notify the foreman and excavation competent person, and prevent entry until needed assessment and precautions are complete.

Stop Work Authority (SWA) is an employer-established way for workers to initiate a safe pause or request a shutdown when they reasonably suspect an uncontrolled hazard. The pause protects workers first; restart follows assessment, verified controls, needed technical decisions and clear instructions about what may resume.

Federal OSHA does not impose a universal requirement for a written document called a “Stop Work Authority Policy.” Its Recommended Practices for Safety and Health Programs: Worker Participation nevertheless recommend letting all workers initiate or request temporary suspension of operations they believe are unsafe. These recommendations are voluntary. Specific OSHA standards can separately call for inspections, removal from hazards, equipment controls or emergency procedures, whether or not an employer uses the SWA label.

Stop-work authority is not the same as a legally protected work refusal

The distinction matters when a supervisor disagrees with a concern or an employee is threatened with discipline.

What OSHA actually says about refusing dangerous work

OSHA explains that federal protection can apply where, with no reasonable alternative, an employee refuses in good faith to face a dangerous condition; a reasonable person would conclude there is a real danger of death or serious injury; there is insufficient time to use ordinary enforcement channels; and, where possible, the employee has asked the employer to correct the condition but could not obtain a correction. The company-policy pause does not require the worker to establish those legal conditions. See 29 CFR 1977.12(b)(2) and OSHA's Right to Refuse Dangerous Work.

OSHA advises employees who believe they qualify to ask for correction or alternate work, tell the employer they will not perform the hazardous task until corrected, and remain at the worksite until directed to leave. Remaining at the worksite does not call for remaining in a hazardous location. An emergency that calls for evacuation takes priority over reporting paperwork.

An employee can file an OSHA safety complaint without first completing an employer's internal reporting process. OSHA also provides a separate whistleblower complaint process for alleged retaliation. The usual federal Section 11(c) filing period is 30 calendar days after the employee is notified of the alleged adverse action; different laws and State Plans may differ. Under 29 CFR 1977.15(d)(3), an internal grievance, pending grievance-arbitration process, or filing with another agency does not ordinarily suspend that federal deadline. Equitable tolling may apply in limited circumstances, but a worker should not assume an extension. A company appeal is never a prerequisite to contacting OSHA. 29 CFR 1904.35(b)(1)(iv) specifically prohibits retaliation for reporting a work-related injury or illness; it is not a general statutory SWA policy.

Imminent danger is not the company's reporting threshold

A worker need not make a legal imminent-danger determination to use an appropriately written company SWA procedure. Concern about a disabled interlock, unexpected vapor, inadequate fall protection, changed ground conditions, or a permit that no longer matches the task is enough to trigger review under the proposed company policy. OSHA's legal imminent-danger terminology is separate from that internal trigger.

The five rules crews need on a pocket card

1. See a possible uncontrolled hazard? Pause the affected task and move clear. Do not wait for proof or a form.
2. Immediate danger? Warn others and activate the designated alarm or emergency stop as the site's instructions permit; never improvise a complex shutdown.
3. Report the exact place and observed facts. Say what is stopped, who could be exposed and whether emergency help is needed.
4. HOLD means no restart of the affected work. A qualified technical review and necessary corrections come before the documented release.
5. Concern not resolved? Use the alternate reviewer or OSHA channel; a company appeal does not extend statutory filing deadlines.

These are employer-policy rules, not an OSHA-issued SWA standard.

Who can call a stop: and who can control equipment?

The proposed policy lets employees, apprentices, temporary workers, and subcontractor personnel raise a concern and safely pause their own work. Host employers and contractors should agree how to coordinate pauses in shared areas; this does not authorize untrained workers to operate another employer's complex equipment. OSHA recommends coordination among employers and staffing agencies; those coordination recommendations do not erase each employer's applicable legal duties. See OSHA's communication guidance.

Who receives federal whistleblower protection is a separate legal question. A host company can extend its contractual or site policy to subcontractor crews, temporary workers and even self-employed visitors; that does not make every participant an “employee” protected by federal OSH Act §11(c). 29 CFR 1977.5 uses the realities of the employment relationship, and a protected employee need not be employed by the person who retaliates. An individual who is genuinely self-employed cannot be assumed covered simply because the site gives them SWA permission. State and local public employees also call for jurisdiction-specific review; federal §11(c) generally does not cover them in the same way. Do not decide legal coverage solely from the worker's badge, payroll company or contract label.

Two limits are essential: A worker's authority to initiate a stop does not automatically confer authority to perform a shutdown; and a manager's authority to release a company hold does not replace inspection or approval needed by law.

Stop-work coordination on a multi-employer site

A general contractor, plant owner, equipment-service company, and labor subcontractor may share the same exposure but have different control over the hazard. Before work starts, identify who receives stop notices, who can restrict the shared area, who is responsible for needed technical corrections, and who needs to be told before a task resumes. Make the arrangements work across shift changes; do not rely on a contract clause alone to warn workers in the field.

Federal OSHA's Multi-Employer Citation Policy, CPL 02-00-124, describes four citation-analysis roles, not four new SWA job titles:

One employer may fill multiple roles; whether a citation is appropriate depends on the facts and the directive's two-step analysis. The directive states that it does not change underlying statutory duties. Its State Plan adoption is not automatic. In practice, a site's restart coordinator should obtain any needed technical decisions and then inform each affected employer of the precise release boundary. The general contractor's “all clear” does not excuse an exposing employer from its own worker-protection obligations. See OSHA CPL 02-00-124 and OSHA's voluntary communication guidance.

When workers should initiate a stop-work review

These are recommended policy triggers, not a federally mandated universal SWA list:

Avoid a policy that says “stop only when you are certain.” The worker reports what they saw, heard, smelled, measured, or could not verify. The response still needs to assess the concern, even if it proves unfounded.

How to stop work without creating another hazard

1. Get clear of the exposure. Move yourself and others to a safe location when possible. Do not stay in a trench, enter a machine danger zone, or approach a release to secure a photograph.

2. Give a short, specific warning. “Stop this conveyor, guard missing at the transfer point.” Identify the operation and affected area. For a shared hazard, alert adjoining crews and the site coordinator; do not assume one trade knows another has stopped.

3. Distinguish immediate emergency actions from technical shutdown. Anyone should alert the crew and use the site's designated emergency alarm or emergency notification method when warranted. Where an accessible emergency-stop device is expressly intended for workers facing immediate danger, follow the site's posted emergency instructions and use it when safe; the policy may not force a worker to await managerial permission merely to raise the alarm. Technical process shutdowns, valve operations, energy isolation, lock application and restoration remain with personnel authorized and trained for those tasks. An unplanned shutdown can create pressure, heat, suspended-load or stored-energy hazards. Under 29 CFR 1910.147(b), push buttons and other control-circuit devices are not energy-isolating devices; an emergency stop does not replace needed lockout/tagout during covered servicing. Train workers on the designated alarm, equipment-specific controls and emergency limitations before exposure.

4. Activate emergency arrangements when indicated. A suspected serious release, fire, structural collapse, or injury is an emergency-response issue, not just an SWA notice. Where an emergency action plan is needed in general industry, 29 CFR 1910.38 specifies its content. In construction, 29 CFR 1926.35 governs emergency action plans needed by another OSHA standard, including applicable escape, alarm, accountability and employee-instruction provisions; it does not independently call for an emergency action plan for every construction employer. For a hazardous-substance release, determine whether the applicable HAZWOPER provisions govern the response: 1910.120 for general industry or 1926.65 for construction. Not every incidental spill is a HAZWOPER emergency. Do not send an untrained worker to investigate or clean up an unknown atmosphere.

5. Preserve the hold. The supervisor or site coordinator marks the exact affected equipment, task, or zone as HOLD, NO RESTART, identifies who controls access, and notifies affected employers. Barricades and tags need to be applied safely. The status stays explicit until a named person records a release.

6. Document only after exposure is controlled. A verbal or radio report can start the process. No photograph, signature or form should delay withdrawal, an alarm or an OSHA complaint.

OSHA recommends selecting controls and checking effectiveness; it is good program practice to treat the stop, assessment, correction, verification, and restart as separate decisions. See OSHA Hazard Prevention and Control.

Reporting flow: the eight decisions that matter

Observe → move to safety / approved safe-state action → warn and notify → place defined task or area on HOLD → assess hazards and applicable rules → correct and verify → independent escalation if disputed → authorize and communicate a limited restart, or maintain HOLD.

Use these operational rules:

1. First contact. Worker notifies [supervisor/site coordinator] by voice, radio, or an accessible reporting channel; urgent hazards call for prompt direct notification. An anonymous channel is an additional option for non-emergency concerns.
2. Alternate contact. If the supervisor is unavailable, dismisses the concern without assessment, or is implicated in retaliation, the worker can reach [site manager/EHS/independent management contact] directly. Emergency response and external OSHA complaints remain available regardless.
3. Receipt and status. The receiving person confirms what work and people are affected, states HOLD, and records the initial report without requiring a reporter signature.
4. Assessment. Assign a person with the task-specific authority and competence needed by any applicable standard; collect relevant evidence, previous inspection results, SDS, permits, equipment information, and worker observations.
5. Correction. Identify what needs to change now and what longer-term preventive work is needed. Assign action owners and verification methods. A missing guard that a standard calls for, or a hazardous excavation, cannot be reopened through a generic risk waiver.
6. Reassessment. Check whether the change introduces a secondary hazard, affects another crew, or changes permit/energy-control requirements.
7. Release or continued hold. Name one accountable company restart authority, without replacing technical approvals. State exactly what work can resume, where and under which conditions; do not issue a vague “all clear.”
8. Feedback. Explain the result to the reporting worker and every affected crew and contractor. Keep the case visible until needed corrections are verified; an absent or dissenting reporter is not a substitute for technical evidence.

What if a supervisor says the work is safe but the reporter disagrees?

Do not turn the dispute into a vote or a test of loyalty. The supervisor should record the observation, assessment basis, evidence, remaining uncertainty, and the worker's unresolved concern. The worker may ask for review by [independent manager/EHS/needed technical specialist] without retracting the report. Maintain the affected hold while material safety or compliance questions remain unresolved. The alternative reviewer should not be the sole manager whose decision is disputed; assign task-qualified technical expertise when the hazard calls for it. If technical assessment demonstrates that the particular operation meets the applicable requirements and controls are effective, the designated authority can make a documented decision; the reporter does not need to sign a legal waiver or personally certify the controls.

If the hazard remains, continue HOLD for the affected activity and assign other safe work. Notify exposed employers of any release. Never close a disputed case merely as “worker refused to cooperate.”

Partial restart: what may resume while a hazard remains?

Differentiate the held scope from unaffected work. For example, a machine may remain locked out while another physically separate production line continues, but only after checking shared utilities, access routes, guarding, and hazards from adjacent work. A trench segment with collapse risk may remain closed while unrelated aboveground work continues outside the affected zone. A partial release needs a clear area/equipment boundary, specific permitted tasks, necessary controls, communication to affected employers, and its own authorized decision. Do not re-label unresolved exposure as acceptable merely to meet a deadline.

Root-cause review and corrective actions

For a small defect that is promptly corrected, document enough to show what failed and what prevents repeat use of the unsafe condition. For serious, recurrent, or cross-employer hazards, examine underlying causes: Was a guard left off after servicing? Did the excavation inspection account for rain? Did work change without a permit review? Was ventilation performance checked? Could a worker reach the correct person after hours? Ask workers who perform the task; avoid treating “operator error” as a complete root cause without evidence.

Record containment, technical findings, corrections and owners, verification evidence, completion dates, and preventive actions. The action register can track several hazards but does not replace needed permits, tests or inspection records. A future action plan does not justify restarting equipment that still lacks a legally needed safeguard. OSHA's incident-investigation guidance supports investigating hazards and underlying causes as good practice.

A general SWA report does not automatically trigger every OSHA incident-investigation rule. But where a separate covered event occurs, its own requirements govern. For example, under 29 CFR 1910.119(m), a PSM-covered employer must investigate a qualifying incident that resulted in, or could reasonably have resulted in, a catastrophic release and initiate that investigation no later than 48 hours. That is a PSM-specific rule, not an SWA-wide deadline. A reportable injury or fatality may independently trigger 29 CFR 1904.39; a mere stop-work notice does not.

Restart: the sign-off needs to reflect evidence

A supervisor's signature cannot make a defective guard legal, validate an unevaluated atmosphere, or override an excavation competent person's needed action. Use the following recommended company checklist, not an OSHA-prescribed restart form:

• Identify the exact task, equipment, zone, and hold number; set boundaries for any partial restart.
• Confirm workers are outside any still-hazardous area and access restrictions remain in place where needed.
• Identify which federal/State Plan standards, permits, manufacturer instructions, and employer procedures apply.
• Record what changed and whether the original hazard and any related hazards were assessed.
• Verify legally needed corrections; confirm any alternative controls are actually permissible and effective.
• Obtain inspections or decisions from the competent, qualified, authorized, or other person needed for the work.
• Confirm necessary tests, guards, protective systems, isolation, ventilation, and permits; reference evidence.
• Recheck adjacent operations, subcontractors, changing conditions, and emergency arrangements.
• Document technical objections or disagreement and route unresolved concerns for independent review.
• Brief affected employees and employers in a language and format they understand.
• Record a new, dated and timed HOLD / RESTRICTED RELEASE / RELEASE entry; exact permitted scope, decision-maker, technical evidence, and conditions.
• Notify the reporting worker of the outcome without demanding a waiver or sign-off as the condition of restart.

If conditions change after release, workers may call another stop. The prior approval is not a blanket clearance for different conditions.

Construction, general industry, and chemical releases: three hypothetical situations

The following scenarios are hypothetical training exercises.

Scenario A: trench cracking and water after rain

A crew is due to enter a trench. A worker notices cracks near the edge and seepage beside the protective system. The worker reports the change and stays out; the foreman prevents entry and contacts the designated excavation competent person. Under 29 CFR 1926.651(k)(1), inspections are required before work starts, as needed during shifts, and after rainstorms or other hazard-increasing occurrences when employee exposure can reasonably be anticipated. Under 1926.651(k)(2), when the competent person finds evidence of specified hazardous conditions, exposed employees must be removed until necessary precautions have been taken. Review water accumulation under 1926.651(h) and the protective-system provisions of 1926.652 as applicable.

Disposition for the training form: HOLD, NO ENTRY. The competent-person assessment, corrective actions, and restart decision remain pending in this example. Related: HazComFast Excavation and Trench Safety.

Scenario B: conveyor guard removed after maintenance

An operator finds an exposed in-running nip point at a conveyor transfer station. The affected machine is stopped by an approved method and restricted from use. A technically appropriate person assesses the guard and the task before repair. In general industry, 29 CFR 1910.212 covers specified machinery guarding hazards; when servicing or maintenance could expose employees to unexpected energization or stored energy, 29 CFR 1910.147 may require hazardous-energy control. An emergency-stop button alone is not a substitute. 1910.147 expressly excludes construction employment; construction employers must assess their applicable construction-specific requirements, including 1926.555(a)(7) for conveyor repairs and hazardous maintenance operations, and 1926.300 where applicable. Under 29 CFR 1926.20(b)(3), machinery, tools, materials or equipment that fail an applicable Part 1926 requirement may not be used; they must be identified as unsafe by tagging or locking the controls to render them inoperable, or physically removed from their place of operation. A company HOLD entry alone does not satisfy that construction-specific duty.

Disposition: HOLD pending guard restoration, applicable energy-control steps, and verification. The example does not authorize a restart. Related: HazComFast Machine Guarding Standard and Machine Guarding Toolbox Talk.

Scenario C: solvent cleaning with a ventilation alarm

A ventilation alarm activates during routine solvent cleaning, and workers report an unusual solvent odor. They leave the affected area and notify the site contact. The response team determines whether emergency arrangements need to be activated and whether an incident is an incidental release or an emergency response within the scope of 1910.120. The assessor reviews the chemical's SDS, process, ventilation, and applicable exposure/respiratory standards. 1910.1200 addresses hazard communication within its scope; it does not replace exposure-control duties. An odor, lack of symptoms, or an unverified alarm reset is not proof that exposure is safe.

Disposition: HOLD pending identification and verification of safe conditions. Do not assume a PEL exceedance or a HAZWOPER incident without evidence. Related: HazComFast Chemical Exposure Limits.

Sample completed stop-work notice (hypothetical training entry)

This illustrative notice is opened before technical findings are available.

An eventual release calls for documented findings, verified precautions and communication to affected crews.

How to implement the policy on a real site

Before issuing it: Identify the person who coordinates shared hazards, the alternate reporting route, the competent/qualified/authorized personnel available for common high-risk jobs, the actual plant shutdown limitations, and the decision-maker for restart. Fill these roles with real names or positions in the site's contact roster. Confirm how temporary workers, off-shift crews, drivers, and subcontractors can make contact.

Construction training requirement versus SWA-specific orientation. 29 CFR 1926.21(b)(2) requires construction employers to instruct each employee on recognition and avoidance of unsafe conditions and regulations applicable to the employee's work environment. This is a mandatory construction training duty, not a universal requirement for a course titled “Stop Work Authority.” For general industry, apply the training provisions that actually govern the task and process; OSHA's worker-participation recommendations are not a substitute for them.

During orientation and toolbox talks: Give workers two plain examples: one requiring immediate retreat and one requiring a controlled shutdown. Have them practice saying the location, hazard observation, affected equipment, safe action, and who was notified. Explain that no form precedes getting clear; reporting is not proof of a violation; and workers can raise concerns again after a disputed closure. Provide instruction in a language and manner understood by the workforce. OSHA's worker-participation recommendations specifically address language barriers and worker feedback.

For contractors and staffing agencies: Agree before mobilization on the shared-area contact, alarm and isolation system, permit coordination, stop-work signal, and restart notifications. Assign an owner for each correcting action and alert the exposing employers. Each employer retains its own applicable duties, including those analyzed under OSHA's multi-employer citation directive. OSHA's communication guidance supplies additional voluntary program practices.

During management review: Look for reports left on HOLD without an owner, repeat hazards, unsigned release decisions, cross-contractor notification gaps, and complaints that a worker was penalized for reporting. Trend corrective-action closure and recurrence, not just the number of stops. High report counts can reflect trust rather than poor safety; a target of “zero stops” is a bad incentive. Check confidentiality and restrict access to personnel or medical information to those with legitimate needs.

Prevent retaliation and preserve employee rights

The company should prohibit threats, punitive shift changes, reduced hours, harassment, disciplinary threats, and other reprisals for good-faith use of its own SWA reporting procedure. Do not dock pay automatically, call for the employee to resume before a technical review, or treat an honest but mistaken report as a disciplinary violation. This company protection is broader than the statutory tests for Section 11(c).

Federal safety-complaint, work-refusal and injury-reporting protections have different coverage and tests, explained above. Check the OSHA State Plans directory and any other law or agreement that applies.

Provide an alternate reporting route. Preserve original reports and supporting evidence, and document reasons for later employment actions without altering the worker's account. Workers do not need company permission to contact OSHA. The federal Section 11(c) 30-day deadline and non-tolling warning described above still apply.

What records should the employer keep?

Maintain a chronological status history. Record the original HOLD opening with date, clock time and time zone or site-local convention. Add a new entry, not an overwrite, each time the scope, decision, restricted access, shift owner, or release status changes. For every HOLD, RESTRICTED RELEASE, or RELEASE decision record the decision date and time, exact task/zone, technical evidence, authorizer, unresolved restrictions and the date and time each affected employer or crew was notified. If a hold crosses midnight or a shift change, the log needs to still show who accepted the handoff. These are company document controls, not a federally prescribed SWA log format.

Link each report to the original observation, hazards, affected employers, technical findings, action owners, evidence, escalation, exact restart scope, authorizer, decision times, worker notifications and follow-up. Include an anonymous option for non-emergency reports.

OSHA does not establish one universal retention period for a generic company SWA notice. Set a company schedule, then check whether the event also creates OSHA injury/illness records, exposure records, PSM records, permit records, contractual documents, or a litigation hold with separate requirements. A SWA report does not substitute for needed OSHA 300/301, PSM or other records. Preserve the original account and append later findings. Related: HazComFast Incident Investigation Guide and Incident Investigation Form.

Free one-page policy and field forms

Download the editable policy and field forms: Stop Work Authority Policy Toolkit (Word).

The companion editable toolkit includes a one-page employer SWA policy, a stop-work notice, a corrective-action and evidence register, a reporting and escalation flow, a restart checklist, and a dated hold/release decision history for multi-shift work. Replace the bracketed contacts and job titles, review State Plan and site-specific requirements, and approve the policy before distributing it. These are original employer-adaptable forms, not OSHA-issued forms. Complete the contacts, emergency arrangements and restart roles before field use.

Implementation test: can a worker actually use the policy?

Before rollout, ask a new worker, a night-shift operator and a subcontractor foreman to demonstrate the following without prompting: the correct emergency alarm; the difference between that alarm and technical equipment isolation; the primary and alternate reporting contacts; the task/zone that stays on HOLD; who conducts needed technical checks; where the correction evidence is filed; and who informs adjoining crews of a limited release. Make the telephone/radio roster available where work happens, including offline or outside office hours.

Include a disputed stop, two employers sharing a work area, and a hold carried into the next shift. Resolve any gaps in handoff or restart authorization before rollout. This exercise is a recommended practice, not an OSHA-mandated SWA drill.

Related HazComFast resources

• Excavation and Trench Safety, competent-person inspections, protective systems.
• 29 CFR 1910.212 Machine Guarding, guarding requirements for general industry.
• Machine Guarding Toolbox Talk, crew training material.
• Workplace Chemical Exposure Limits: PELs, TLVs & RELs, exposure-control context.
• What Goes in an Incident Investigation Report, investigations where another duty applies.
• Incident Investigation Form, investigation aid, not a needed SWA notice.

Primary official sources

1. OSHA, Recommended Practices: Worker Participation (voluntary guidance; worker-initiated pauses and feedback).
2. OSHA, Communication and Coordination (voluntary multiemployer coordination).
3. OSHA, Hazard Prevention and Control (voluntary control selection and verification).
4. OSH Act §11(c); 29 CFR 1977.9 (good-faith safety complaints).
5. 29 CFR 1977.12(b)(2) and OSHA refusal guidance (protected refusal conditions).
6. OSHA, File a Complaint; Whistleblower Complaint Form (external channels and Section 11(c) deadline).
7. 29 CFR 1904.35 and 1904.39 (specific injury reporting obligations).
8. 29 CFR 1926.20(b)(3), 1926.651, 1926.652 (construction equipment restrictions, inspections and excavation duties).
9. 29 CFR 1910.212, 1910.147, 1926.300 (guarding and energy-control boundaries).
10. 29 CFR 1910.38, 1926.35, 1910.120, 1910.1200 (emergency action plans where another standard requires them, emergency response and hazard communication, as applicable).
11. 29 CFR 1910.119 (PSM only when covered).
12. 29 CFR 1926.21(b)(2) (mandatory construction instruction on recognizing and avoiding unsafe conditions; no named SWA-course requirement).
13. OSHA Multi-Employer Citation Policy, CPL 02-00-124 (creating, exposing, correcting and controlling employer roles; enforcement policy rather than a new duty).
14. OSHA, State Plans (jurisdiction-dependent requirements).