A process hazard analysis (PHA) must be updated and revalidated at least every five years after the initial analysis is completed. This requirement comes from OSHA’s Process Safety Management standard, 29 CFR 1910.119(e)(6), and applies to facilities handling highly hazardous chemicals above threshold quantities. The five-year clock starts from the completion date of your most recent PHA or revalidation, not from a fixed calendar date.
What the Five-Year Revalidation Requires
A revalidation is not the same as starting from scratch. OSHA has clarified that the five-year requirement does not mean an employer must conduct an entirely new PHA on a process that already has one. Instead, the revalidation is a structured review that confirms the existing PHA still reflects reality. The distinction matters because a full PHA can take weeks or months for complex processes, while a well-organized revalidation of a process with minimal changes is a lighter lift.
That said, OSHA expects the revalidation to cover specific ground:
- Accuracy check: Evaluate the existing PHA for completeness using OSHA’s criteria in 1910.119(e)(3), which include identifying hazards, previous incidents, engineering and administrative controls, consequences of failure, and human factors.
- Change verification: Confirm that every process modification since the last PHA went through management of change procedures, and that those changes are reflected in the current PHA documentation.
- Process safety information review: Verify that all safety data sheets, process flow diagrams, piping layouts, equipment specifications, and chemical data are current and accurate.
- Procedure adequacy: Check that PHA-specified operating, maintenance, and emergency procedures are up to date and actually being followed.
- Recommendation tracking: Confirm that every recommendation from the previous PHA has been documented, assigned, and either completed or formally addressed.
- Incident integration: Review all incident investigation reports since the last PHA and verify that lessons learned have been incorporated into safety information, procedures, and training.
Once the team completes this evaluation and makes any necessary updates, the PHA can be revalidated as current and accurate. The entire revalidation must be documented.
Situations That Trigger Updates Before Five Years
The five-year cycle is a minimum, not a ceiling. Several situations can require you to revisit the PHA sooner. Any process change that isn’t a simple replacement-in-kind (swapping a component with an identical one) must go through management of change procedures, and changes significant enough to alter the risk profile of a process should be folded into the PHA.
Extended plant shutdowns are one scenario OSHA has specifically addressed. A facility that has been idle for a prolonged period can develop new hazards that weren’t present during normal operations: corroded equipment, outdated procedures, staff turnover that erodes process knowledge. Before restarting, OSHA expects employers to verify that process changes during the shutdown went through management of change review, that piping and instrumentation diagrams are still accurate, and that operating procedures reflect current conditions.
Major incidents, near-misses, and changes in chemical inventory or operating conditions are other common triggers. The EPA’s Risk Management Program (40 CFR Part 68) draws a distinction between minor changes, like rerouting a short piping run, which get noted in the PHA file but don’t count as a formal revision, and major changes that invalidate the PHA’s conclusions. If a modification fundamentally changes the hazard profile of your process, that’s a PHA revision regardless of where you are in the five-year cycle.
Who Must Be on the Revalidation Team
OSHA requires the same team qualifications for a revalidation as for the original PHA. The team must include expertise in both engineering and process operations. At least one member needs hands-on experience and knowledge specific to the process being evaluated, and at least one member must be trained in the particular PHA methodology being used (HAZOP, What-If, fault tree analysis, or whichever method applies). In practice, this often means pulling together a process engineer, an operations supervisor or experienced operator, and a facilitator trained in the PHA method. Smaller facilities sometimes bring in outside consultants to fill the methodology expertise role.
EPA Requirements Mirror OSHA’s Timeline
If your facility is covered by both OSHA’s PSM standard and the EPA’s Risk Management Program, the PHA revalidation timelines align. The EPA’s Part 68 regulation uses the same five-year cycle. The practical difference is in how each agency treats interim changes. The EPA distinguishes between minor additions to the PHA file (which don’t reset the clock or count as a formal revision) and major updates that constitute a true PHA revision under Part 68. Keeping clear records of which changes were minor file additions and which triggered formal PHA updates helps demonstrate compliance to both agencies.
Penalties for Missing the Deadline
Falling behind on PHA revalidation is one of the more commonly cited PSM violations. OSHA classifies violations into tiers. A serious violation, where the hazard could cause death or serious harm and the employer knew or should have known about it, carries a penalty of up to $16,550 per violation. Willful or repeated violations can reach $165,514 per violation. If OSHA issues a citation and the employer fails to correct the problem by the deadline, a failure-to-abate penalty of $16,550 per day applies until the issue is resolved.
Because a PHA revalidation touches so many other PSM elements (process safety information, operating procedures, training, incident investigations), a single overdue revalidation can expose multiple related violations during an inspection. Keeping the five-year cycle current is one of the most straightforward ways to avoid a cascade of citations.
Practical Tips for Staying on Schedule
Facilities with dozens of covered processes often stagger their revalidations so they’re not trying to complete everything in one year. If your initial PHAs were all done around the same time, consider spacing out the revalidations across the five-year window so the workload stays manageable and qualified team members remain available.
Tracking PHA recommendations is one of the areas that causes the most trouble during revalidation. If recommendations from the previous cycle were never formally resolved, documented, or implemented, the revalidation team has to address them retroactively. Maintaining a living action-item tracker between revalidations, rather than only reviewing recommendations every five years, makes each cycle significantly smoother. It also means your process is actually safer in the interim, which is the entire point.