Hexavalent Chromium (Cr6): OSHA Limits & 2026 Penalties

⚡ In short: OSHA’s hexavalent chromium National Emphasis Program is still active. CPL 02-02-076 sits on OSHA’s live directives list as of August 2026. The PEL is 5 µg/m³ (8-hour TWA) and the action level is 2.5 µg/m³ under 29 CFR 1910.1026, 1926.1126 (construction), and 1915.1026 (shipyards). What changed is the money: no inflation adjustment for 2026, and a July 2025 expansion of penalty reductions for small employers. The case study below is rebuilt on current numbers and mapped to the subsections each citation lands on.

This post has been updated because parts of the original were wrong, and they were the parts a plant manager would catch: a compressed-air prohibition the regulation does not contain, a cement exposure the standard excludes, an aerospace control level applied to the whole aircraft industry, and a penalty total labeled as a minimum when it was a maximum. Everything below was checked against OSHA’s standard-number pages and penalty memoranda on 2026-08-31.

The regulatory spine held up. The PEL, the action level, both citations, the monitoring cadence, the notification split, and the National Emphasis Program all verify. The enforcement economics are what moved.

Who Is Covered by the Hexavalent Chromium Standard

Operations that routinely fall under 1910.1026:

Metal finishing, surface preparation, and electroplating, including hard chrome, decorative chrome, and anodizing
Welding on stainless steel and high-chromium alloys
Spray painting and abrasive blasting of chromate primers and paints
Iron and steel mills, foundries, and molten metal handling
Aircraft and aircraft parts manufacturing
Printing, tanning, leather handling, catalyst production, and chemical mixing
Waste handling downstream of any of the above

The standard has three written scope exclusions, and two of them are worth money to the right facility.

Is there an exposure level below which the Cr(VI) standard does not apply at all?

Yes. 1910.1026(a)(4) exempts operations where the employer holds objective data showing the material or process cannot release hexavalent chromium at or above 0.5 µg/m³ as an 8-hour TWA under any expected condition of use. That is one-tenth of the PEL. The supporting data has to be documented and retained under 1910.1026(m)(3).

That is a real off-ramp. Prove it once, document it, and stop running a monitoring program you do not owe.

Does OSHA’s hexavalent chromium standard apply to portland cement and concrete work?

No. 29 CFR 1910.1026(a)(3) and the parallel scope in the construction standard expressly exclude exposures to portland cement from the Cr(VI) standard. Chromium in cement is handled under hazard communication and general PPE duties instead. An earlier version of this post listed cement work as covered. It is not.

OSHA Inspection Case Study: Three Citations, Three Subsections

A metal finishing client of iSi was already working toward full compliance. iSi ran the quarterly monitoring and the employee notices; the company handled the rest. An employee complaint brought OSHA onsite, and the facility was already on the NEP target list.

The inspection produced three violations, two of them grouped. Here is where each one actually lands in the regulation.

Violation 1, change room separation. Cited under 1910.1026(i)(2). The company had a locker area behind three paint booths, but nothing marked where the booth area ended and the clean area began, and protective clothing shared lockers with street clothes. The regulation requires change rooms with separate storage that prevents cross-contamination. Mixed lockers fail that test on sight.

Violation 2, washing facility access. Cited under 1910.1026(i)(3)(i). The available sink was far enough from the work area that OSHA determined contamination could travel outside the regulated area. The regulation’s test is “readily accessible” washing facilities meeting 29 CFR 1910.141, which is a location test rather than an existence test. Note also (i)(3)(ii), which requires employees to wash hands and face at the end of the work shift, not only before eating.

Violations 1 and 2 were grouped and cited at the serious level for $8,192.

Violation 3, break area contamination. Cited under 1910.1026(i)(4)(i). OSHA has no numeric surface limit for hexavalent chromium. What the regulation requires is that eating and drinking areas be maintained as free as practicable of Cr(VI). Wipe samples in the break room came back low but clearly detectable, and that was enough to support the citation. Serious violation, $5,461.

An earlier version of this post reported that wipe result in µg/m³, an air-concentration unit that cannot describe a wipe. Surface loading is reported in µg/100 cm² or µg/ft². The number is not republished here, because a wipe result without its correct unit and sampled area tells a reader nothing.

The company took an Expedited Informal Settlement Agreement and closed the case above $8,000.

Need quarterly hexavalent chromium monitoring, program buildout, or a regulated-area walkthrough before OSHA arrives? iSi runs the sampling, writes the program, and audits the physical layout. See our industrial hygiene services →

What Those Penalty Numbers Mean in 2026

The original writeup called the $13,653 total “OSHA’s minimum fine amount for any Serious violation.” That is backwards. $13,653 was a statutory maximum for a single serious violation, and the two amounts are gravity fractions of it: $8,192 is 60 percent and $5,461 is 40 percent. Those fractions date the case to an earlier penalty year, well before 2026.

Here is the current table:

Violation type	2026 minimum	2026 maximum
Serious	$1,085	$16,550
Other-than-serious	$0	$16,550
Willful	$11,823	$165,514
Repeat	$4,256	$165,514
Failure to abate		$16,550 per day, generally up to 30 days

Gravity-based penalty tiers run $7,093 for low gravity, $9,457 to $14,187 for moderate, and $16,550 for high.

Score the same two citations at the two nearest current tiers, moderate plus low, and you get $9,457 plus $7,093, or $16,550 before any reduction. Now run the other end. A shop with 25 employees, a clean five-year history, and immediate abatement stacks reductions that can bring the same pair down toward OSHA’s derived serious minimum of $1,085 each, roughly $2,170 for the two. That is a spread of more than seven to one on identical findings, decided by employer size, inspection history, and abatement speed.

Did OSHA raise its maximum penalties for 2026?

No. OSHA’s May 21, 2026 memorandum confirms there is no inflation-based increase for 2026, because OMB Memorandum M-26-11 cancelled the adjustment after BLS could not produce the required October 2025 CPI-U during the government shutdown. The 2025 amounts carry forward. Maximums stay at $16,550 and $165,514.

Can a small manufacturer get hexavalent chromium penalties reduced in 2026?

Yes, and by more than before. Effective July 14, 2025, OSHA widened the 70 percent size reduction to employers with 1 to 25 employees, extended the 80 percent serious-willful reduction to 20 or fewer employees, raised the history reduction from 10 percent to 20 percent, and added a new 15 percent reduction for immediate hazard correction plus 20 percent for a clean five-year record.

Read those two answers together. Penalties did not rise this year, and the reductions available to a small metal finisher got materially deeper.

The Enforcement Picture, Honestly

Is OSHA’s hexavalent chromium National Emphasis Program still active in 2026?

Yes. CPL 02-02-076, effective February 23, 2010, is still listed on OSHA’s current NEP directives page as of August 2026, with administrative updates in 2015 and 2017. It carries no published expiration date. It is now one of the two oldest active NEPs, alongside lead.

NEP status is easy to get wrong here. The directive is old enough that assuming it lapsed is a reasonable guess, and it is the wrong guess.

What sits alongside it is a smaller enforcement arm. The DOL FY2026 Congressional Budget Justification puts OSHA Federal Enforcement at 1,124 FTE, down from 1,292, a cut of 168 positions or 13.0 percent. Agency-wide the request drops from 1,810 FTE to 1,587, and Susan Harwood training grants go to zero.

Fewer inspectors does not mean fewer rules. The standard, the NEP, and your liability are unchanged, and a complaint still brings someone to your door. Treat this as expected-value risk management rather than an inspection surge.

OSHA’s public Cr(VI) dataset is a cumulative 2006 to 2022 inspection-sampling profile rather than an annual citation series, so no year-over-year trend is claimed here.

How often does OSHA actually find Cr(VI) over the PEL in manufacturing?

Across OSHA’s personal sampling data from 2006 to 2022, 2,397 manufacturing inspections included Cr(VI) sampling, 1,470 of them (61.3 percent) confirmed airborne Cr(VI), and 261 (10.9 percent) exceeded the PEL. In electroplating, plating, polishing and anodizing the over-PEL rate rises to 12.1 percent. In construction it reaches 20.0 percent.

Six of ten sampled manufacturing facilities have detectable hexavalent chromium in the air, and about one in nine is over the limit. Detection is normal; overexposure is the exception. The likely outcome of sampling is a documented pass, which is what you hand the inspector.

For a named case with a real number, Cleveland Brothers Inc. in Camp Hill, Pennsylvania was cited $280,874 across one willful, 18 serious, and two other-than-serious violations after a complaint-initiated inspection.

The Rules, General Industry: 29 CFR 1910.1026

PEL: 5 µg/m³, 8-hour TWA Action level: 2.5 µg/m³, 8-hour TWA

Exposure Determination and Monitoring

Run an initial exposure determination with enough breathing-zone samples to characterize a full shift. You can use representative sampling for each shift where exposure can occur, taking the employee with the greatest potential exposure, or a scheduled option combining air data, historical data, and performance-oriented sampling.

Periodic frequency:

At or above the action level: every 6 months, per (d)(2)(iii)
Above the PEL: every 3 months, per (d)(2)(iv)

Notify employees in writing within 15 work days of receiving results, per (d)(4)(i). Work days, not business days, and the distinction can matter when a holiday lands inside the window. If results are above the PEL, the notice must describe the corrective action being taken. Rotating job assignments to hold exposures under the PEL is prohibited under (f)(2).

When can a facility legally stop hexavalent chromium monitoring?

Two paths. Under 1910.1026(d)(2)(ii), if initial monitoring shows exposures below the action level, monitoring may be discontinued for the employees represented by that sampling. Under (d)(2)(v), if periodic monitoring falls below the action level and a second sample taken at least seven days later confirms it, periodic monitoring may stop.

Which analytical method should a lab use for Cr(VI) air samples, and what accuracy does OSHA require?

OSHA Method ID-215 and NIOSH 7605 are the laboratory ion-chromatography methods, and NIOSH 7703 is the field-portable equivalent. Whichever is used, 1910.1026(d)(5) requires the method to be accurate within plus or minus 25 percent at a 95 percent confidence level for airborne concentrations at or above the action level.

Lab selection is a compliance decision. A result you cannot defend on accuracy cannot be used to discontinue monitoring.

Regulated Areas

Establish regulated areas where exposures are or can reasonably be expected to be above the PEL:

Demarcate the area from the rest of the workplace, per (e)(2)
Limit access to authorized personnel, per (e)(3)
No eating, drinking, smoking, chewing, or cosmetics inside, and no consumables carried in, per (i)(5)

Note the citation split. Boundary and access rules live in paragraph (e), while the eating and consumables prohibition lives in the hygiene paragraph (i)(5). A citation for a sandwich in the plating room will not say (e).

Engineering Controls and PPE

Engineering and work-practice controls come first. Where they cannot bring exposure to the PEL, reduce as far as feasible and use respiratory protection for the remainder.

Is the 25 µg/m³ aerospace figure an alternate PEL for the aircraft industry?

No. 1910.1026(f)(1)(ii) applies narrowly to painting of aircraft or large aircraft parts in the aerospace industry, requiring engineering and work-practice controls down to 25 µg/m³ and respirators to reach the 5 µg/m³ PEL from there. The separate fewer-than-30-day exemption at (f)(1)(iii) is a different provision that applies to any process.

Earlier versions of this post merged the two. The 25 µg/m³ figure is not a relaxed limit for aircraft manufacturing generally.

Protective Clothing and Equipment

Contaminated PPE, waste, and debris removed at the end of the shift or task
Placed in sealed, impermeable bags or containers, labeled per hazard communication
PPE does not leave the workplace except for laundering, and the launderer must be informed in writing of the potentially harmful effects and of the requirement that Cr(VI) not become airborne
No shaking, blowing, or brushing down to remove dust
Waste needs a hazardous waste determination, since chromium content can make debris hazardous

Hygiene Areas

Change rooms with separate storage preventing cross-contamination between contaminated clothing and street clothes, per (i)(2)
Washing facilities that are readily accessible and meet 29 CFR 1910.141, per (i)(3)(i)
Employees wash hands and face at the end of the work shift, per (i)(3)(ii), and before eating, drinking, smoking, chewing, applying cosmetics, or using the restroom
Eating and drinking areas kept as free as practicable of Cr(VI), per (i)(4)(i), with contaminated clothing and equipment kept out

Housekeeping

Keep surfaces as free as practicable of Cr(VI) accumulation
Clean by HEPA-filter vacuuming or other methods that minimize the likelihood of exposure, per (j)(2)(i)
Dry shoveling, sweeping, and brushing only where HEPA vacuuming or other effective methods have been tried and found not effective

Does OSHA prohibit compressed air for cleaning up hexavalent chromium?

Not absolutely. 1910.1026(j)(2)(iii) allows compressed air in two situations: used together with a ventilation system designed to capture the resulting dust cloud, or where no alternative method is feasible. HEPA vacuuming remains the default, and dry methods are a fallback, but a flat “compressed air is banned” statement misreads the rule.

Medical Surveillance

At no cost to the employee, provide medical surveillance for employees:

Exposed at or above the action level for 30 or more days a year, per (k)(1)(i)(A), with the initial exam within 30 days of assignment and annually after
Experiencing signs or symptoms of Cr(VI) exposure
Exposed in an emergency
Whenever a PLHCP recommends an additional examination, per (k)(2)(iii)
At termination, if exposed within the past six months

The two off-by-one errors in the original version of this post both narrowed the trigger. “At or above” pulls in the employee sitting exactly at 2.5 µg/m³, and “30 or more days” pulls in the employee at exactly 30. Inspectors check those boundaries against your exposure records.

HazCom and Training

Include hexavalent chromium in the hazard communication program: labels, safety data sheets, and training. Under (l)(1)(ii), the classification must address at least cancer, eye irritation, and skin sensitization. Training covers the standard and the medical surveillance provisions.

Recordkeeping

Air monitoring records with names, job classifications, dates, locations, methods, results, and PPE worn. Historical monitoring records under (m)(2) and objective data records under (m)(3) if you rely on either. Medical surveillance and training records.

Most Common Hexavalent Chromium Exposures in General Industry

Operation	Typical Source
Electroplating	Hard chrome, decorative chrome, and anodizing baths. Loading and unloading parts, rinsing, replenishing with chromate solution or powder
Welding	Stainless welding, and confined-space or indoor welding on stainless and carbon steel. Fume from base metal, coatings, electrodes, and chromium filler metals
Painting and blasting	Spray painting with strontium or zinc chromate primers, abrasive blasting of chromate paint, sanding and grinding chrome-covered material. Spent grit carries the waste
Foundries and steel mills	Furnace and crane operations, molten metal pouring, tapping, surface conditioning, hot rolling, torch cutting and gouging

Construction and Shipyards

Construction work is covered by 29 CFR 1926.1126. Same 5 µg/m³ PEL, same 2.5 µg/m³ action level, same portland cement exclusion. The notification window is shorter: within 5 work days of receiving monitoring results, per 1926.1126(d)(4)(i), against 15 work days in general industry. The construction standard is organized differently, so do not assume a paragraph letter carries across. Read 1926.1126 on its own terms.

Shipyard employment has its own standard, 29 CFR 1915.1026, named alongside the other two in the NEP directive’s standard list. Marine coating removal and stainless welding in shipyards fall there.

Construction exposures cluster in chromate paint and primer removal on bridges, water towers, and industrial structures, including cleanup of spent blast grit, and in welding and thermal cutting on stainless and carbon steel, including brazing and boilermaker work.

Compliant and Safe Are Two Different Findings

Is the OSHA PEL a health-protective limit, or just the legal limit?

The 5 µg/m³ PEL is a legal limit that OSHA set on technological and economic feasibility grounds, not a finding that 5 µg/m³ carries no risk. ACGIH’s occupational hygiene benchmark for water-soluble hexavalent chromium sits well below OSHA’s legal limit. A facility can be fully compliant and still be running exposures a hygienist would want lowered.

A useful monitoring report answers two questions: where you stand against the PEL, which decides citation exposure, and where you stand against the hygiene benchmark, which decides worker health and long-term liability.

Do Kansas, Missouri, Oklahoma, Nebraska, Texas, or Colorado have their own hexavalent chromium rules?

No. All six are federal OSHA jurisdictions with no approved State Plan, so 29 CFR 1910.1026 applies directly to private employers with no state variant to reconcile. There is a jurisdictional gap worth knowing: state and local government workers in these states are not covered by federal OSHA, so a municipal shop doing plating, welding, or bridge paint removal falls outside this standard’s enforcement entirely.

Frequently Asked Questions

Q: What is the permissible exposure limit for hexavalent chromium under OSHA?

The PEL is 5 µg/m³ as an 8-hour TWA. The action level of 2.5 µg/m³ triggers periodic monitoring and medical surveillance obligations under 29 CFR 1910.1026 (general industry), 29 CFR 1926.1126 (construction), and 29 CFR 1915.1026 (shipyards).

Q: What are the most common sources of hexavalent chromium exposure in manufacturing?

Electroplating baths for hard and decorative chrome, stainless steel welding, spray painting with chromate primers, abrasive blasting to remove chromate coatings, and foundry and molten metal operations. Each has a different engineering control strategy. One respirator program does not fit all of them.

Q: What must employers include in their hexavalent chromium compliance program?

Initial and periodic exposure monitoring with a written exposure control approach, regulated areas with demarcation and access control, engineering and work-practice controls before respirators, protective clothing handling, change rooms and readily accessible washing facilities, housekeeping, medical surveillance, hazard communication classification and training, and recordkeeping.

Q: What are the consequences of non-compliance?

OSHA enforces under the National Emphasis Program. In 2026 a serious violation runs from $1,085 to $16,550 depending on gravity, employer size, history, and abatement speed, and willful or repeat violations reach $165,514. Complaint-triggered inspections routinely produce citations that stack across multiple hygiene subsections.

Q: How do the general industry and construction rules differ?

The clearest operational difference is the notification window: 5 work days under 1926.1126 against 15 work days under 1910.1026. The PEL, action level, and monitoring triggers match. Beyond that, the construction standard is structured differently, so program documents written against 1910.1026 paragraph letters do not transfer cleanly to a construction site.

Q: Is the waste from hexavalent chromium operations hazardous under RCRA?

Often yes. Debris, spent grit, contaminated PPE, and rinsate commonly carry enough chromium to trigger EPA waste code D007, which applies at a toxicity characteristic level of 5.0 mg/L by TCLP under 40 CFR 261.24. A waste determination is required for each stream, and OSHA compliance on the worker exposure side does not address the EPA side.

Sources

All URLs verified 2026-08-31.

If your operation runs plating baths, stainless welding, or chromate coating removal, the next step is a set of numbers you can defend: personal sampling that meets the plus-or-minus-25-percent accuracy requirement, a written exposure control approach that matches what your people actually do, and a medical surveillance program scoped to the employees who cross the 30-day trigger. We Plug In with the sampling, the program documents, and the regulated-area walkthrough that finds the change room and washing facility problems before an inspector does. You Level Up with a documented pass instead of a guess. Run the 60-second Compliance Gap check or get a scoped proposal.

Talk to an iSi industrial hygiene specialist →