Why most HazCom audits fail (and how to fix them before OSHA does)

Ask most teams if they audit their Hazard Communication program, and the answer is usually yes.

Ask how consistent those audits are, and the answer may be less clear.

In many organizations, HazCom audits evolve over time without a defined structure. One site may focus heavily on labeling, while another spends most of its time reviewing SDS binders or training records. Over time, those differences create blind spots that are difficult to detect until an inspection, incident, or customer audit exposes them.

The real problem with HazCom audits

The issue isn’t that audits aren’t happening. It’s that they’re often informal and inconsistent.

One auditor focuses on labels. Another checks SDSs. Someone assumes training has already been handled. Everyone contributes, but no one is working from the same structure.

Sometimes the written program hasn’t been updated in years. Sometimes employees are trained, but there’s no easy way to verify what was covered or when. In other cases, updated SDSs exist, but old labels are still in circulation on secondary containers.

That’s how gaps slip through unnoticed.

Sometimes internal audit programs haven’t been updated in years, leading to gaps and inconsistencies.

What is a HazCom audit?

Let’s take a step back and look at the big picture: A HazCom audit is a structured review of an organization’s hazard communication program to verify that Safety Data Sheets (SDSs), labeling, hazard classifications, training, and documentation meet OSHA requirements.

Most organizations conduct a HazCom audit at least annually, not just to maintain compliance, but to ensure hazard information is accurate, employees are properly informed, and chemical safety processes are working consistently across the organization.

A strong audit helps identify gaps before they become larger compliance or safety issues. It also creates a documented record showing that the organization is actively verifying its program against OSHA’s Hazard Communication Standard (29 CFR 1910.1200):
https://www.osha.gov/laws-regs/regulations/standardnumber/1910/1910.1200

Why consistency matters more than coverage

A strong HazCom audit doesn’t need to be complicated; it needs to be repeatable.

At a minimum, audits should cover SDSs, labeling, hazard classifications, training, and the written program. But the real difference isn’t what you check—it’s whether it’s checked the same way, every time.

Two audits may technically “cover” the same areas but produce very different results depending on how questions are asked, what evidence is reviewed, and how findings are documented.

Without structure, audits drift. Questions get skipped, evidence isn’t captured, and follow-up becomes inconsistent.

Making audits defensible, not just complete

With a structured approach, audits become something you can stand behind, not just a checklist exercise completed once a year.

Platforms like GapCross guide users through defined questions, capture observations, and maintain a record of evidence and actions taken, helping ensure consistency and traceability across assessments.

Next, we’ll look at another area that often appears solid on paper but breaks down in practice: HazCom training.