Regulatory enforcement is how an agency turns a written rule into real consequences. The steps are graded: an inspection or audit, then a notice or citation, then civil fines. Only the gravest matters end in a criminal referral, and most stop early on the ladder.
Each agency writes its own procedure, but the shape repeats. Federal workplace safety enforcement gives a clear worked example. The Occupational Safety and Health Administration publishes its citation and penalty procedure in the Code of Federal Regulations, in plain text.
Where does an enforcement case begin?
An enforcement case starts with facts, not with punishment. Agencies gather them through inspections, audits of filed records, or complaints from workers. In OSHA’s system, nothing issues until the Area Director reads the inspection report of the Compliance Safety and Health Officer, per the federal rule. For related coverage, see How early intervention systems flag officer conduct.
Targeted programs also drive caseloads, since the agency sets inspection programs aimed at high-hazard work, per its own enforcement overview. The review draws a line between a concern and a case. A complaint describes. An inspection documents.
When does a citation follow an inspection?
A citation is the formal charge that a rule was broken. Under 29 CFR 1903.14, a citation or a notice of de minimis violations must follow an inspection with reasonable promptness. No citation may issue more than six months after an alleged violation.
Both clocks matter: one pushes the agency to act, and the other bars charges on stale findings. The document itself has content rules. It must describe the alleged violation in detail, name the provision said to be violated, and set a reasonable time for fixing the hazard, per the rule. This connects to our earlier piece, How body camera footage becomes public, and why release rules differ.
Each citation also carries a caution. It counts as a finding only if no one contests it, or if it survives review.
How does the ladder climb from notice to penalty?
OSHA’s sequence shows the escalation pattern used across agencies:
- 1. An inspection or audit sets the facts.
- 2. A citation states the alleged breach and sets a deadline for repairs.
- 3. A proposed penalty arrives with or after the citation.
- 4. The recipient can contest in writing within a short window.
- 5. Open matters go to the review commission, and the gravest conduct can be referred for prosecution.
The referral step is rare and distinct. Civil fines stay inside the agency. Criminal charges belong to prosecutors, so an agency hands possible crimes to the Department of Justice rather than charging them itself. The record built step by step is what travels to that review.
How are penalties calculated?
The sizing rule is written, not arbitrary. Under 29 CFR 1903.15, the Area Director sets the amount with due regard to four factors:
- the size of the business, which shapes the burden of repairs;
- the gravity of the breach, which tracks the real hazard;
- the good faith of the employer, meaning the quality of safety work;
- the history of past violations, which rewards sustained effort.
The dollar caps are public. OSHA lists the maximums that apply after January 15, 2026: $16,550 per serious breach, $16,550 per day past the repair deadline, and $165,514 for a willful or repeated breach, per the agency’s penalty table.
What if the business disputes the penalty?
The contest window is short. A recipient must tell the Area Director in writing within 15 working days of the notice, per the rule. The same notice can contest the citation, the amount, or both. Without it, the proposed penalty becomes a final order that no court or agency can review.
A contest moves the case to the Occupational Safety and Health Review Commission, an independent body. An administrative judge hears the matter there. The record from the inspection and citation stages frames what the judge can decide.
Conclusion: Process is the safeguard
Regulatory enforcement climbs by design: facts first, then a detailed citation, then a fine sized by stated factors, then review for anyone who contests. Each step creates a record and a deadline. Each step also narrows the space between an allegation and a consequence. Read that way, the ladder is less a threat than a map.
