OSH Code Compliance in India: 2026 Employer Guide

OSH Code Compliance in India: A 2026 Employer Guide

The Occupational Safety, Health and Working Conditions Code is one of the four labour codes that now sit at the centre of workplace regulation in India. For HR managers, founders, and compliance teams, OSH Code compliance has moved from a niche factory-floor concern to a board-level priority that touches every establishment with employees, from a 12-person software studio to a 2,000-worker manufacturing plant. This guide explains what the OSH Code is, who it applies to, the obligations it creates, and how to build a practical compliance programme that holds up to scrutiny in 2026.

If you have spent the last several years juggling a thick stack of separate enactments — the Factories Act, the Contract Labour Act, the Inter-State Migrant Workmen Act, the Building and Other Construction Workers Act, and several more — the OSH Code is meant to bring relief. It consolidates a large body of older laws into a single framework. But consolidation is not the same as simplification, and the practical task for employers is to translate a broad national code into day-to-day routines: registrations, registers, appointment letters, safety committees, and welfare facilities that actually exist on the ground.

Throughout this guide, treat specifics like thresholds, fees, and timelines as directional rather than final. The Code operates alongside Central rules and state-level rules, and states retain meaningful power to set their own numbers. Always verify the current notified rules for the state where your establishment operates before you act.

What the OSH Code Is and Why It Matters

The OSH Code is a framework law governing the safety, health, and working conditions of people at work. It pulls together the regulation of factories, mines, docks, plantations, construction sites, contract labour, inter-state migrant workers, journalists, audio-visual workers, and several other categories that were previously governed by their own statutes. The animating idea is that a worker's right to a safe workplace, decent hours, clean facilities, and fair treatment should not depend on which of a dozen older laws happens to cover their job.

For employers, the significance is threefold. First, the Code expands the universe of establishments that must formally register and maintain compliance records, because it sets thresholds that capture many service-sector and white-collar workplaces that historically flew under the radar. Second, it standardises a set of obligations — appointment letters, working-hour limits, leave, welfare facilities, and safety duties — that apply broadly across sectors. Third, it raises the stakes of non-compliance by giving inspectors, now reframed as inspector-cum-facilitators, clear powers and by attaching penalties to specific failures.

The practical message for 2026 is that OSH compliance is no longer something only manufacturers think about. A growing technology company with an office of 120 people, a retail chain with multiple outlets, a hospital, a logistics warehouse, and a construction contractor all have OSH obligations, even though the intensity and specifics differ enormously between them.

Who Must Comply: Coverage and Thresholds

Coverage under the OSH Code generally turns on the type of establishment and the number of workers employed. The Code uses the broad concept of an "establishment," which captures workplaces where any industry, trade, business, manufacture, or occupation is carried on, including places that employ workers through contractors. Several special categories — factories, mines, docks, construction, plantations — carry their own definitions and, in some cases, lower thresholds reflecting the higher inherent risk of those activities.

A few coverage principles are worth internalising. Establishments above a specified headcount must obtain registration. Manufacturing units that cross certain worker thresholds — with the threshold differing depending on whether power is used in the manufacturing process — fall within the stricter factory-type obligations. Contractors supplying labour above a threshold need a licence, and the principal employer who engages them has parallel duties. Hazardous activities can attract obligations regardless of headcount, because risk, not just size, drives the rules.

Because the precise numbers are set through a combination of the Code and the rules, and because states may notify their own thresholds, you should not rely on a remembered figure. The correct first step in any compliance exercise is to map each of your physical locations against the definitions and the current notified thresholds in the relevant state. A single company operating across several states will frequently find that the same job role triggers different obligations in different locations.

A simple coverage self-assessment

Work through these questions for every location you operate:

• What activity happens here — office work, manufacturing, storage, construction, healthcare, hospitality, or something else?
• How many people work here on a typical day, counting direct employees, contract workers, and apprentices?
• Is power used in any manufacturing or processing on site?
• Are any hazardous processes or substances involved?
• Do we engage any contractor who brings their own workers onto this site?
• Do we employ anyone who has relocated from another state specifically for this work?

The answers determine which registrations, licences, and obligations attach to that location.

Registration: Your Foundational Obligation

Registration is the gateway compliance step under the OSH Code. An establishment that crosses the applicable threshold must apply to the registering officer, typically through an online single-window system, and obtain a registration certificate before or shortly after commencing operations. The Code's design intent is one consolidated registration rather than multiple overlapping registrations under separate old laws, which is a genuine simplification for multi-activity employers.

Practically, registration requires you to supply core details: the name and address of the establishment, the nature of work, the identity of the employer and any manager, and the number of workers. Keep your registration current. Material changes — a jump in headcount that crosses a new threshold, a change in the nature of activity, a new hazardous process, or closure of a unit — generally need to be reported, and your certificate may need amendment.

A recurring mistake is treating registration as a one-time formality completed at incorporation and then forgotten. Registration status should be reviewed whenever the business changes shape. When you open a new branch, start a night shift, add a manufacturing line, or take on a large contractor workforce, ask whether your registration and licences still reflect reality.

Working Hours, Overtime, and Leave

The OSH Code, read with the Wages Code and the relevant rules, sets the architecture for working time. The familiar concepts survive: a daily and weekly cap on ordinary hours, a weekly rest day, spread-over limits that cap the total span of a working day including breaks, and overtime that must be paid at a premium rate, conventionally double the ordinary wage rate.

Several points deserve emphasis for 2026 planning:

Overtime is consent-based and premium-paid. Where a worker works beyond the normal hours, the excess is overtime and attracts the statutory premium. Employers cannot quietly absorb extra hours into a fixed monthly salary and treat the obligation as discharged; the hours must be tracked and compensated correctly. Your attendance and payroll systems should compute overtime automatically rather than relying on manual estimates.

Daily and weekly limits still bind. Even where business is busy, the daily hour cap and the weekly cap constrain how much an individual can work. Overtime is an exception within outer limits, not a licence to extend the working day indefinitely.

Women's work across all hours is permitted with safeguards. The Code allows women to be employed in establishments across shifts, including night shifts, provided the employer obtains consent and puts in place safety measures — adequate lighting, safe transport, sufficient women workers on the shift, and protection against harassment. This is a meaningful shift from older, more restrictive regimes, but the permission is conditional on the safeguards genuinely being in place.

Annual leave with wages accrues on a defined formula. Workers earn paid annual leave based on days worked in the preceding period, with carry-forward and encashment governed by the rules. Your leave policy and HR system should mirror the statutory accrual so that what employees see in their leave balance matches their legal entitlement.

Designing compliant working-time rules

Translate these statutory limits into clear internal rules. Define the standard working day and week for each category of employee, state how overtime is authorised and recorded, specify the weekly off, and explain how leave accrues, carries forward, and is encashed. Make sure your time-and-attendance system enforces the spread-over and weekly caps rather than leaving them to manager discretion, and make sure overtime flows into payroll at the correct premium automatically.

Appointment Letters: A Universal Requirement

One of the most broadly applicable obligations under the new labour framework is the requirement to issue an appointment letter to every employee. This is no longer a courtesy extended to senior hires; it is a baseline entitlement for the whole workforce, including workers who historically may have started without any written terms.

A compliant appointment letter should capture the essentials of the employment relationship: the role and category, wages and the breakup of components, the date of joining, hours of work, leave entitlement, the place of work, and other terms the rules specify. For employers who have relied on informal arrangements with frontline or contract-adjacent staff, this is a change that needs operational attention — you must generate, issue, and retain appointment letters at scale, and you must keep them consistent with the wage structure you actually run in payroll.

The appointment letter requirement also intersects with onboarding. The cleanest way to comply is to make the appointment letter a mandatory, system-generated artefact of your joining process, produced automatically from the same data that feeds payroll and the statutory registers. That removes the risk of a worker being onboarded without the letter, and it keeps the letter, the payroll record, and the registers in agreement.

Welfare Facilities and Working Conditions

The OSH Code carries forward and standardises a set of welfare and working-condition obligations. The exact list and the thresholds at which each kicks in depend on the type and size of the establishment, but the recurring themes are clean drinking water, hygienic toilets and washing facilities, adequate ventilation and lighting, first-aid arrangements, and, above certain sizes, canteens, restrooms, and creche facilities.

Creche facilities deserve a specific mention because they are increasingly relevant to office-based and service-sector employers, not just factories. Where an establishment employs workers above a specified number, it must provide a creche so that employees with young children have safe childcare within reach of the workplace. This is both a compliance obligation and, handled well, a genuine retention lever for parents in your workforce.

Welfare obligations are easy to under-resource because they are not always visible in a spreadsheet. Build a simple facilities checklist for each location, assign an owner, and inspect against it periodically. An inspector-cum-facilitator visiting your site will look at whether the drinking water is actually clean, whether the toilets are actually maintained, and whether first-aid boxes are actually stocked — not whether a policy document says they should be.

Safety: Committees, Officers, and the Duty of Care

The safety architecture of the OSH Code scales with risk and size. Smaller, low-risk establishments carry a general duty to provide a safe working environment. Larger establishments and those engaged in hazardous activity carry additional, specific obligations.

Two structures are central. First, larger establishments must constitute a safety committee with representation from both management and workers, giving the workforce a formal voice in identifying hazards and improving conditions. Second, establishments above a certain size or risk profile must appoint qualified safety officers whose job is to drive the safety programme, conduct inspections, investigate incidents, and advise management.

The Code also imposes a general duty on employers to ensure, so far as is reasonably practicable, the health, safety, and welfare of all workers. Concretely, that means maintaining safe plant and systems of work, providing information and training, supplying and maintaining personal protective equipment where needed, and putting emergency procedures in place. Where hazardous processes are involved, the duties intensify: disclosure of risks to workers and authorities, health monitoring, and adherence to prescribed safety standards.

A pragmatic safety baseline for any employer

Even if your establishment is small and low-risk, build a minimum safety baseline:

• A documented assessment of the hazards present at each location, however modest.
• Clear emergency procedures, including fire safety, evacuation routes, and assembly points.
• Accessible, stocked first-aid facilities and trained first-aiders.
• An incident reporting process so that near-misses and injuries are recorded and reviewed.
• Induction safety briefings for every new joiner and refresher training at sensible intervals.

For higher-risk sites, layer the safety committee, safety officers, formal training calendars, health surveillance, and process-specific controls on top of this baseline.

Contract Labour and Inter-State Migrant Workers

The OSH Code absorbs the regulation of contract labour and inter-state migrant workers, two areas where principal employers carry real exposure. If you engage workers through a contractor, you are not insulated from responsibility merely because someone else issues their pay.

For contract labour, the contractor generally needs a licence above a threshold number of workers, and the principal employer has duties around ensuring the contractor's compliance, providing or ensuring welfare facilities, and stepping in where the contractor defaults on wages. A principal employer who treats contractor compliance as entirely the contractor's problem can find themselves liable when the contractor fails.

For inter-state migrant workers — people recruited in one state to work in another — the Code adds protections, including provisions oriented around portability of benefits and fair treatment. Employers who recruit across state lines should identify these workers explicitly and ensure the additional obligations are met.

The practical control here is vendor management. Before you engage a labour contractor, verify their licence and registration, build compliance representations and audit rights into the contract, require monthly evidence of wage payment and statutory contributions, and reserve the right to withhold payment where evidence is missing. Treat contractor compliance as something you actively monitor, not something you assume.

Registers, Returns, and Records

A defining feature of the new framework is the move toward consolidated, often digital, registers and returns. Instead of maintaining numerous overlapping registers under separate old laws, employers are expected to maintain prescribed registers — covering workers, wages, attendance, leave, and similar matters — in the formats the rules specify, and to file periodic returns through the single-window portals.

The compliance discipline that matters most here is consistency. Your registers must agree with your payroll, your appointment letters, your attendance system, and the contributions you actually deposit. Inspectors increasingly cross-check these artefacts against each other, and the fastest way to turn a routine inspection into a problem is to present registers that contradict your payroll.

Modern HR and payroll software earns its keep precisely on this dimension. When attendance, leave, payroll, and statutory registers are generated from a single source of truth, contradictions become hard to create. When they live in separate spreadsheets maintained by different people, contradictions become almost inevitable.

Inspections and the Inspector-cum-Facilitator

The Code reframes the traditional inspector as an inspector-cum-facilitator, signalling an intended shift from a purely punitive posture toward one that also advises and guides. Inspections may be informed by web-based systems and, in some cases, randomised allocation to reduce arbitrary targeting. None of this means inspections have lost their teeth. The facilitator can still inspect, examine records, interview workers, and initiate action where they find non-compliance.

The right way to prepare for an inspection is to assume one could happen at any time and to keep your house in order continuously. Maintain a single, well-organised compliance file for each location containing the registration certificate, appointment letters, registers, returns, safety documentation, welfare-facility evidence, and contractor licences. Run an internal mock inspection periodically — ideally using a checklist that mirrors what a facilitator would examine — and fix gaps before an external visit finds them.

Penalties and Why Compliance Pays

The OSH Code attaches penalties to specific failures, ranging from monetary fines to, in serious cases involving danger to life or repeat offences, more severe consequences. The Code also provides, in some circumstances, opportunities to compound offences or to remedy a first-time contravention within a window before prosecution, reflecting the facilitative philosophy. The exact penalty amounts and procedures are set out in the Code and rules and should be checked against the current text.

The stronger argument for compliance, though, is rarely the fine. It is the cumulative cost of getting safety and working conditions wrong: workplace accidents that injure people and trigger investigations, attrition driven by poor facilities, reputational damage when conditions become public, and the management distraction of fighting enforcement actions. Establishments that treat OSH compliance as part of running a decent workplace tend to find that the formal obligations largely take care of themselves, because they are doing the underlying things anyway.

Building Your OSH Compliance Programme: A Step-by-Step Plan

A credible OSH compliance programme is less about a single heroic project and more about a durable operating rhythm. Here is a sequence that works for most employers.

Start by mapping your footprint. List every location, classify the activity, count the workers including contractors and apprentices, and note any hazardous processes. This map drives everything else.

Next, confirm registrations and licences. For each location, verify that registration is in place and current, that any required factory-type licence or contractor licence exists, and that the details match reality.

Then standardise your documentation. Make appointment letters a mandatory, system-generated output of onboarding. Align your wage structure, payroll, registers, and appointment letters so they tell one consistent story.

After that, operationalise working time. Configure your attendance and payroll systems to enforce daily, weekly, and spread-over limits and to compute overtime at the statutory premium automatically. Align leave accrual with the statutory formula.

Then stand up the safety baseline. Conduct hazard assessments, document emergency procedures, stock first-aid, train new joiners, and — for larger or higher-risk sites — constitute safety committees and appoint safety officers.

Provision welfare facilities. Build a per-location facilities checklist covering water, sanitation, first-aid, and, where thresholds apply, canteens, restrooms, and creches. Assign ownership and inspect periodically.

Tighten contractor governance. Verify contractor licences, build compliance into contracts, and collect monthly evidence of wage payment and statutory contributions.

Finally, institutionalise review. Maintain a per-location compliance file, run periodic internal mock inspections, and review your coverage status whenever the business changes shape — a new branch, a new shift, a new line, or a new contractor engagement.

How HR Software Supports OSH Compliance

Much of OSH compliance is, at its core, a data-consistency problem layered on top of physical reality. The physical reality — clean facilities, safe equipment, trained people — you have to provide. But the documentation, registers, appointment letters, working-time enforcement, and audit-readiness are exactly where an integrated HRMS earns its place.

A capable HR and payroll platform lets you generate appointment letters automatically from joining data, enforce working-hour and overtime rules in attendance and payroll, maintain statutory registers that reconcile to payroll by construction, track leave accrual against the statutory formula, store contractor compliance evidence in one place, and assemble an inspection-ready compliance file on demand. The result is fewer contradictions, less manual effort, and a credible answer when a facilitator asks to see your records.

What Actually Changed Compared to the Old Laws

If your compliance habits were formed under the older statutes, it helps to understand what is genuinely new versus what is simply repackaged. The biggest structural change is consolidation: a single registration, a single set of definitions, and consolidated registers and returns replace the patchwork of separate registrations and formats that used to apply under each individual law. This reduces duplication for employers who previously held multiple overlapping registrations.

The second meaningful change is breadth of coverage. By framing obligations around the general concept of an establishment and setting thresholds that capture service-sector and office workplaces, the Code draws in employers who could plausibly ignore the old factory-centric regime. A 150-person office that never thought about the Factories Act now has clear, affirmative obligations around registration, appointment letters, working time, and welfare.

The third change is the universal appointment letter, which formalises the employment relationship for categories of workers who often had nothing in writing. This is socially significant and operationally demanding, because it forces employers to document terms at scale and to keep those terms aligned with payroll.

The fourth is the recasting of enforcement around the inspector-cum-facilitator and web-based, sometimes randomised, inspection systems. The intent is less arbitrary, more transparent enforcement, paired with opportunities to remedy first-time lapses. The duties themselves, however, are not softened.

Finally, the Code modernises specific provisions — most notably the conditional permission for women to work all shifts with safeguards, and the emphasis on digital, single-window compliance. For many employers the substance of their day-to-day obligations is recognisable, but the packaging, the breadth, and the documentation discipline are new.

Common Compliance Mistakes to Avoid

Several failure patterns recur across employers, and most are avoidable with a little foresight.

The first is assuming the Code is "a factory thing." Office-based and service-sector employers frequently discover, often during a funding diligence or an acquisition, that they should have registered and issued appointment letters long ago. Do the coverage assessment early rather than retrofitting compliance under time pressure.

The second is documentation drift. Appointment letters say one wage structure, payroll runs another, and the registers reflect a third. Inspectors and auditors cross-check these, and contradictions are far more damaging than an honest, consistent record. Drive all three from one data source.

The third is treating overtime as absorbed into salary. Extra hours that are not tracked and paid at the statutory premium are a live liability, and the exposure compounds quietly over months. Configure systems to compute overtime automatically.

The fourth is contractor complacency — assuming that because a vendor pays the workers, their compliance is none of your concern. As principal employer you can be drawn in when the contractor defaults. Verify licences and collect monthly compliance evidence.

The fifth is welfare facilities that exist on paper but not in reality. A policy that promises clean drinking water and stocked first-aid means nothing if the facilitator finds neither on site. Inspect against a physical checklist, not a document.

The sixth is letting registration go stale. Crossing a new threshold, adding a shift, or opening a branch can change your obligations, and a certificate that no longer matches reality is itself a problem.

Sector Snapshots

The Code applies broadly, but the practical centre of gravity differs by sector.

For technology and professional-services firms, the priorities are registration once you cross the threshold, universal appointment letters, correct working-time and leave configuration, basic welfare facilities, and creche provision above the specified employee count. Hazardous-process rules generally will not apply, which keeps the burden manageable.

For manufacturing, the factory-type obligations dominate: licensing, safety committees and safety officers above the relevant sizes, hazard controls, health surveillance for hazardous processes, and robust welfare facilities. Contractor governance is usually significant because manufacturing leans heavily on contract labour.

For retail and hospitality, the focus tends to be multi-location registration, working-time and weekly-off compliance across shifts, welfare facilities at each outlet, and — given the prevalence of women employees across shifts — the night-work safeguards.

For construction and logistics, contract labour and inter-state migrant worker provisions, site safety, and welfare facilities for a mobile workforce are the headline issues, and principal-employer responsibility for contractor compliance is acute.

Whatever the sector, the underlying method is identical: assess coverage, register, document, enforce working time, build safety and welfare baselines, govern contractors, and keep everything reconciled and inspection-ready.

Frequently Asked Questions

Does the OSH Code apply to a pure software company with only office workers?

Very likely, once you cross the applicable headcount threshold for registration. Office-only employers do not escape the Code simply because there is no factory floor. They will typically need registration, must issue appointment letters, must comply with working-time and leave rules, and must provide basic welfare facilities, with creche obligations applying above a specified number of employees. The factory-specific and hazardous-process obligations generally will not apply, but the core obligations do. Confirm the exact thresholds in your state.

Is registration under the OSH Code a one-time task?

No. Registration must be obtained when you cross the threshold, but it must also be kept current. Material changes — crossing a new headcount band, changing the nature of activity, introducing a hazardous process, adding locations, or closing a unit — generally require reporting and may require amendment of your certificate. Treat registration status as something you review whenever the business changes shape.

Are appointment letters really required for every employee?

The new labour framework moves strongly toward a universal appointment-letter entitlement, including for workers who historically started without written terms. The safest course is to issue a compliant appointment letter to every employee capturing role, wages and their breakup, joining date, hours, leave, and place of work, and to make that letter a mandatory output of onboarding so no one slips through.

Can women be employed on night shifts under the OSH Code?

Yes, subject to conditions. The Code permits employment of women across shifts, including at night, where the employer obtains consent and implements safety measures such as adequate lighting, safe transport, a sufficient number of women on the shift, and protection against harassment. The permission is conditional, so the safeguards must genuinely be in place, not merely written into a policy.

What is my exposure for contract workers supplied by a vendor?

More than many employers assume. As principal employer you carry duties around ensuring contractor compliance, providing or ensuring welfare facilities, and stepping in where the contractor defaults on wages. Verify the contractor's licence, build compliance and audit rights into the contract, and collect monthly evidence of wage payment and statutory contributions. Do not assume the contractor's obligations are entirely the contractor's problem.

How are inspections likely to work in practice?

The Code reframes inspectors as inspector-cum-facilitators, intended to advise as well as enforce, and inspections may be informed by web-based systems and, in some cases, randomised allocation. They retain the power to inspect records, interview workers, and act on non-compliance. Prepare by keeping a continuously current, well-organised compliance file for each location and by running periodic internal mock inspections.

Do state rules override the Central position?

States play a significant role. While the Code sets the national framework, much of the operational detail — thresholds, formats, fees, and timelines — comes through rules, and states can notify their own. A company operating in several states will commonly face different specifics in each. Always verify the current notified rules for the state where each establishment operates.

Where do the numbers — thresholds, fees, penalties — actually come from?

From the Code read together with the applicable Central and state rules. Because these can change and vary by state, treat any specific figure you read, including in this guide, as directional. Before you act on a threshold, fee, or penalty, confirm it against the current notified text for your state.

Conclusion

OSH Code compliance in 2026 is broad, practical, and unavoidable for almost any employer with a workforce. The Code consolidates a sprawling body of older safety and working-conditions law into a single framework, extends core obligations — registration, appointment letters, working-time limits, welfare facilities, and safety duties — across sectors that previously paid these issues little attention, and backs them with real enforcement. The path through it is not glamorous, but it is well-defined: map your locations, confirm your registrations, standardise your documentation, enforce working time, build a safety and welfare baseline, govern your contractors, and review continuously.

Much of the heavy lifting is data discipline — keeping appointment letters, payroll, registers, and returns in agreement and inspection-ready. That is precisely where the right HR and payroll system turns a recurring compliance headache into a routine. If you want to centralise appointment letters, working-time enforcement, statutory registers, and audit-ready compliance records in one place, it is worth seeing how a modern HRMS like CozyHR can carry that load for your team.