By Law, Who Is Responsible For Providing Safety Data Sheets?

Two different legal duties hide inside this question, and merging them is why the same question gets two different correct answers. The duty to author and supply a safety data sheet sits on the chemical manufacturer, the importer and the distributor. The separate duty to hold that sheet and put it in front of a worker sits on the employer. In the United States both duties live in one regulation, 29 CFR 1910.1200. In Great Britain, the EU and Northern Ireland they sit in two separate legal instruments — REACH for the supply side, COSHH for the workplace side.

I have spent seventeen years auditing chemical controls across specialty chemicals, coatings, chlor-alkali and polymer sites in fourteen countries. Almost every SDS finding I write up traces back to one of those two duties being treated as if it discharged the other.

Scope: this article covers occupational supply and workplace duties in the US, Great Britain, Northern Ireland and the EU. It does not cover transport documentation, consumer product labelling, or pesticide and pharmaceutical regimes, which sit under separate regulators.

Key takeaways

Manufacturers and importers author the SDS. Under 1910.1200(g)(1) they must obtain or develop one for each hazardous chemical they produce or import; under REACH Article 31 the supplier must provide one free of charge, no later than the date of first supply.

Distributors pass it on. Under 1910.1200(g)(7) they must send the SDS to other distributors and employers with the initial shipment and with the first shipment after an update.

Employers hold it and make it reachable. Under 1910.1200(g)(8) the SDS must be readily accessible during each work shift to employees in their work areas. The supplier's duty does not cover this, and never has.

Neither jurisdiction has a five-year update rule. The US requires new significant information to be added within three months; REACH Article 31(9) requires updating without delay and re-issuing to anyone supplied in the previous twelve months.

US employers face a live deadline. Following OSHA's January 2026 extension, employers must update workplace labelling, written programmes and training for substances by 20 November 2026.

A GB safety data sheet and an EU safety data sheet are not interchangeable. Great Britain did not adopt Regulation (EU) 2020/878, so the two now diverge on format.

The short answer: two duties, four duty holders

Ask "who provides the SDS" in a training room and you will get two answers, both confidently given. One half of the room says the manufacturer. The other half says the employer. They are describing different legal duties, and a compliance programme that only satisfies one of them fails.

The supply-side duty is about the document existing, being accurate, and travelling with the chemical. It attaches to whoever places the chemical on the market. The workplace-side duty is about a named person in a specific work area being able to read the thing at three in the morning during a spill. It attaches to the employer, and no supplier arrangement transfers it.

Four duty holders carry a distinct obligation. The table below sets out what each one owes and under which instrument.

Duty holder	What they must do	US instrument	GB / EU instrument
Chemical manufacturer	Classify the hazard, author the SDS, keep it accurate, send it with the first shipment	1910.1200(d), (g)(1), (g)(2), (g)(5), (g)(6)	REACH Art. 31(1), Annex II; GB CLP / EU CLP for classification
Importer	The same duties as the manufacturer for anything brought into the jurisdiction	1910.1200(g)(1), (g)(6)	REACH Art. 31(1) — the importer is the supplier
Distributor	Transmit the SDS to downstream distributors and employers; re-issue after updates	1910.1200(g)(7)	REACH Art. 31(1), (8), (9)
Employer	Hold an SDS for every hazardous chemical used; keep it accessible each shift; train on it	1910.1200(g)(1), (g)(8), (h)	COSHH Regs. 6, 7 and 12

Note who is not on that list. A worker has no legal duty to obtain an SDS. A safety officer has none personally. A third-party SDS management vendor has none — it holds a commercial contract, not a statutory duty. OSHA put this beyond argument in a 1997 interpretation letter. A manufacturer, importer or distributor may use a distribution service. But responsibility for distribution, and for the quality of the information, cannot be contracted out. The employer using such a service stays responsible for ensuring employees have access.

Three tests separate the two duties cleanly:

Who made or imported it? That party authors the sheet and stands behind its accuracy.
Who sold it on? That party transmits the sheet unchanged, with the shipment.
Who employs the person opening the drum? That party holds the sheet, keeps it current, and makes it reachable in the work area.

Infographic comparing two SDS duties: duty to author and supply versus duty to hold and make accessible, with responsible parties, legal references, and note that satisfying one does not discharge the other.

House style for all graphics in this article: technical line illustration, muted industrial palette with a single accent colour, clean sans-serif labels, red reserved for hazards and failure states. No photorealism, no depicted injuries, no identifiable people.

Chemical manufacturers and importers: the duty to author and supply

This is where the document is born, and where its accuracy is legally owned. A manufacturer cannot delegate authorship to a downstream user, and an importer cannot simply forward a foreign supplier's sheet without checking it lands correctly in the destination jurisdiction.

The importer's position is the one most often underestimated. Buy a specialty solvent from a supplier outside your jurisdiction and you are not a purchaser in the eyes of the regulator. You are the first party placing that chemical on the market. The classification and the sheet become yours to stand behind. On a coatings line I supported at Shin-Etsu Chemical Europe, the fastest way to find gaps was to sort the chemical inventory by origin and look at everything sourced directly from outside the region. That is where the SDS quality falls away.

What the United States requires

The core sentence is short. Chemical manufacturers and importers must obtain or develop a safety data sheet for each hazardous chemical they produce or import, and it must be in English and carry the sixteen sections in the prescribed order.

Beyond authorship, four transmission and maintenance duties apply:

Provide with the initial shipment — under 1910.1200(g)(6)(i), the SDS goes to distributors and employers with the first shipment, and again with the first shipment after the sheet is updated.
Provide on request — under (g)(6)(iv), a manufacturer or importer must supply an SDS to a distributor or employer who asks, whether or not a shipment is pending.
Update within three months — under (g)(5), where the author becomes newly aware of significant information about the hazards or the protective measures, that information goes into the sheet within three months.
Mark empty subheadings — under (g)(3), where no relevant information exists for a subheading, the sheet must say so. A blank invites the reader to assume there is no hazard.

The three-month rule is worth holding onto, because it is the specific fact the summary articles get wrong. There is no rule anywhere in the standard requiring a sheet to be refreshed every three or five years. A 2014 SDS that has attracted no new hazard information is not automatically non-compliant. A 2024 SDS whose author learned something in June and did nothing by October is.

What Great Britain, Northern Ireland and the EU require

The supply duty here comes from REACH rather than from occupational safety law. Under Article 31, the supplier of a substance or mixture must provide a safety data sheet compiled in accordance with Annex II. Three triggers bring that duty into play: the product is classified as hazardous under CLP, it is persistent, bioaccumulative and toxic, or it appears on the candidate list. "Supplier" covers the manufacturer, importer, downstream user and distributor alike — the duty follows whoever places the product on the market.

Three provisions of Article 31 carry practical weight and are routinely missed:

Free of charge, on or before first supply — Article 31(8). A supplier who charges for an SDS, or who supplies it only on request for a classified hazardous product, is not compliant.
Updated without delay, and pushed backwards — Article 31(9). When new information affecting risk management or hazards emerges, the revised, dated sheet goes free of charge to every recipient supplied in the preceding twelve months. Not only to future customers.
On request for certain unclassified mixtures — Article 31(3), which catches mixtures that are not themselves classified but contain hazardous constituents above threshold or a substance with a workplace exposure limit.

Then there is a divergence that catches multinational operators, and it is the single most useful thing in this section for anyone buying chemicals across the Channel. The EU revised Annex II through Regulation (EU) 2020/878, with all EU safety data sheets required to meet the revised format after the transition closed at the end of 2022. Great Britain did not adopt that amendment. GB CLP carries the EU CLP Regulation forward as assimilated law, with HSE acting as the GB CLP Agency, while Northern Ireland continues under EU CLP through the Windsor Framework. One sheet does not satisfy both regimes. The language rule differs too: UK REACH Article 31(5) requires English, while the EU version requires the official language of the member state where the product is placed on the market.

⚖️ Jurisdiction note: If you supply the same product into Great Britain and into the EU, you need two safety data sheets, not one with a dual footer. Check Section 1.3 for the responsible supplier entity and confirm it is the right one for the market you are selling into.

Supply chain diagram showing SDS duty attachments from non-EU/US manufacturer through importer, distributor, employer to worker, with classification liability transfer point and specific regulatory duties at each stage.

Distributors: passing it on, and the retail exception people get wrong

A distributor authors nothing. Its duty is transmission, and the standard treats that as a real obligation rather than a courtesy. OSHA made the point plainly in a 1990 interpretation letter: a distributor who subdivides a bulk chemical into smaller containers must send a data sheet and a label with each new container it ships.

Under 1910.1200(g)(7), the distributor sends the SDS to other distributors and to employers with the initial shipment and with the first shipment after an update, either in the box or ahead of it. Wholesale distributors must also provide sheets on request.

The part that trips people up is the retail carve-out, and it explains why the same purchase can come with an SDS or without one depending on how the account is set up. The scenarios below cover what a buyer can actually insist on.

Buying scenario	What the distributor must do	Clause
Employer with a commercial account, buying from a retail distributor	Provide the SDS on request, and post a sign or otherwise say one is available	(g)(7)(iii)
Employer buying over the counter from a wholesale distributor	May provide on request at time of purchase; must post a sign or otherwise inform	(g)(7)(iv)
Employer without a commercial account, buying from a retail distributor that holds no sheets	Provide the name, address and phone number of a party from whom the SDS can be obtained	(g)(7)(v)
Retail distributor that has told its suppliers it sells nothing to commercial accounts	Upstream parties need not supply it with sheets at all	(g)(7)(vii)

Read that table alongside the purchasing behaviour on your own site. If a supervisor buys a solvent from a hardware store on a company card to keep a job moving, the retailer may have no sheet to give and no duty to hold one. The chemical still arrives on your site, and your employer duty under (g)(8) attaches the moment it does. That is a procurement control problem, not a supplier compliance problem, and it is one of the more common ways an otherwise well-run inventory develops holes.

Three checks close most distributor-side gaps:

Confirm your account status in writing. Commercial account or not changes what you can demand and from whom.
Route all chemical purchasing through approved suppliers. Petty-cash and retail purchases are how unlisted chemicals enter a site.
Treat an update notification as a trigger, not a filing task. A new sheet arriving means something changed; check whether it changes your assessment or your training.

Flowchart showing SDS (Safety Data Sheet) request requirements based on seller type, from manufacturers requiring provision with first shipment to retail distributors without commercial accounts who must provide contact information instead.

Employers: holding the sheet and making it reachable

This is the duty with the largest gap between what the paperwork shows and what the site delivers. Hazard communication was OSHA's most frequently cited general industry standard in fiscal year 2025 and second overall across all industries, a ranking it has held for four consecutive years according to OSHA's own Top 10 list. Sites are not failing this because the rule is obscure. They are failing it because the sheet exists somewhere the worker cannot reach.

In Great Britain the employer duty comes at the problem from a different direction, and the wording is more specific than most summaries admit. COSHH Regulation 6 requires a suitable and sufficient assessment of the risk from hazardous substances. Regulation 12 then requires suitable and sufficient information, instruction and training for anyone liable to be exposed — and Regulation 12(2)(a)(iii) names access to any relevant safety data sheet as part of what that information must include. That is the GB counterpart to the American access duty, sitting inside the training regulation rather than beside it.

HSE states the relationship between the two documents about as directly as a regulator can: a safety data sheet is not a risk assessment, and you should use the information it contains to help make your own.

What "readily accessible during each work shift" actually means

The US wording under 1910.1200(g)(8) is specific and it is the sentence I test against on every walkdown. Copies must be maintained in the workplace and readily accessible during each work shift to employees when they are in their work areas. Electronic access is permitted, on one condition: no barriers to immediate employee access may be created by that option.

That condition does real work, and it is where digital systems fail audits. A tablet mounted at the store entrance satisfies it. A system reachable only from a supervisor's desktop, behind a login the night-shift operator does not hold, does not — the barrier is the login, not the technology.

Four questions decide whether an access arrangement holds up, and all four are answered on the floor rather than in the office:

Can the person doing the work reach it from where the work happens, without leaving the area or finding a supervisor?
Does it work on the night shift, when the office is locked and IT support is eight hours away?
Does it work when the network is down? A cloud-only system with no offline fallback creates exactly the barrier the standard prohibits.
Can the worker actually read it? Employers may hold copies in additional languages, and where a workforce does not read English well, an English-only binder meets the letter of (g)(8) and fails the training duty under (h).

Multi-employer sites and contractors

Contractor exposure is the duty most commonly missing from a written programme, and it is explicit. It is set out in 1910.1200(e)(2). The trigger is producing, using or storing hazardous chemicals in a way that may expose another employer's people. Where that applies, the written programme must state three things: how the host will give those other employers on-site access to the relevant sheets, how it will inform them of the precautionary measures needed, and how it will explain the workplace labelling system.

Two settings deserve particular attention. Laboratories that ship chemicals out are treated as a manufacturer or distributor under 1910.1200(b)(3)(iv) and pick up the transmission duties accordingly. The second is warehousing, marine cargo handling and retail, where employees only handle sealed containers. Under 1910.1200(b)(4)(ii) the employer must keep any sheets that arrive with those containers. It must also obtain one as soon as possible for a sealed container that arrives without one, if an employee requests it. The reduced duty is not no duty.

Infographic displayed on a tablet showing the four-question access test for SDS compliance with 1910.1200(g)(8), featuring checkboxes and icons for each requirement about workplace chemical safety information accessibility.

What to do when your supplier will not send one

This comes up constantly, usually with a small overseas supplier or a discontinued product, and the answer is more reassuring than most people expect. Neither regulator expects an employer to conjure a document that a supplier is withholding. Both expect the employer to be able to show the pursuit.

OSHA set its position out in the 1997 interpretation letter cited above. An employer found without a sheet during an inspection should be able to demonstrate that it made an effort to obtain one, with documentation showing the manufacturer was contacted and asked. On presentation of that evidence, OSHA follows its own procedures and approaches the manufacturer directly. The employer's exposure shrinks to the quality of its paper trail.

The pursuit is only worth anything if it is documented as it happens. Work through these steps in order:

Request in writing, to a named person, quoting the product identifier exactly as it appears on the container label.
Set a deadline and record it — a fortnight is reasonable for a routine request.
Escalate to the manufacturer or importer if the distributor does not respond; under (g)(6)(iv) the manufacturer must supply on request regardless of who sold it.
Log every attempt — date, addressee, method, response or silence. This log is the evidence.
Control the chemical in the meantime. Quarantine it, or assess it on the most conservative reasonable basis, and say so in the assessment.
Escalate to the regulator where a supplier refuses outright. In Great Britain that is HSE as the GB CLP Agency; in the US, OSHA will approach the manufacturer.

⚠️ Safety critical: Missing paperwork is not authorisation to proceed on assumption. If nobody can say what is in the container, the honest control is to stop using it until somebody can — not to guess the PPE from the smell or the colour of the drum.

Timeline showing six-step escalation process for obtaining a missing Safety Data Sheet, from initial written request through manufacturer contact to regulatory escalation, spanning 14 days.

Where this breaks down on site: three failures I write up most

Across roughly seventy audits, the SDS findings I raise are almost never "no sheet on file." The file is usually excellent. The failure sits between the file and the hand on the drum, and it takes three recognisable shapes.

The binder is complete and the gloves are wrong

Auditing drum and IBC handling for LANXESS in France, I watched a decant operation run with the gloves the crew always used. The safety data sheets were on file, current, and complete. Nobody had opened Section 8 for that product, and the glove material in use was not the one the sheet specified.

I stopped the pattern, had the correct protection put in place, and briefed the crew before the work restarted. The follow-up observations on that scope showed the failure mode recurring less often. What made the difference was not a better binder — it was tying PPE issue to Section 8 at the point of issue rather than to habit at the point of use.

Here is the check worth taking away. Pick one chemical in a live task. Ask the operator what Section 8 specifies for glove material and breakthrough time, and then look at what is on their hands. If those two things disagree, your access arrangement is technically compliant and practically inert.

Version drift between the file and the container

The second failure is quieter. A supplier issues an updated sheet, it is filed correctly, and the COSHH assessment or the JHA built on the previous version is never revisited. On tank farm and pilot plant scopes, this is the finding I have to work hardest to make land, because every individual document is in order.

Under (g)(5) an author has three months to fold new information in, and under Article 31(9) a European supplier must push the revision to everyone supplied in the past year. Both mechanisms exist to reach you. OSHA has also said what arrival is supposed to trigger. An employer only receives a new sheet when the product or the information has changed, so receipt of one compels the employer to examine the data and decide whether it represents a hazard the workers have not been trained on.

So treat the envelope as a task, not a filing job. If a revised sheet arrives and nothing downstream moves, the mechanism has delivered the information to a cabinet.

Contractors working from their own paperwork

The third shows up on every multi-employer site. A contractor crew arrives with its own chemicals and its own sheets, works alongside your people, and neither party has seen the other's inventory. Under 1910.1200(e)(2) the duty to arrange that access is on the host where its chemicals may expose the contractor's people. Great Britain reaches the same place by a different route. COSHH Regulation 12(4) requires every employer to ensure that any person carrying out work in connection with its duties under the Regulations has suitable and sufficient information, instruction and training. The regulation says whether or not his employee. The contractor's crew is inside that wording.

The three questions that surface these failures faster than a document review are:

"Show me the sheet for this drum, from where you are standing." Not from the office.
"What changed in the last revision?" If nobody knows, nothing downstream moved.
"Whose chemicals are these?" On a shared site, the answer decides whose duty it is — and the answer is often unclear to both parties.

Infographic showing three SDS failure modes and field checks: comparing Section 8 glove specifications to operator's hands, asking about changes in document revisions, and identifying chemical sources using regulation 1910.1200(e)(2).

What changes before 20 November 2026 in the United States

The US hazard communication rules are mid-transition, and this is the section most competing articles have not updated. OSHA aligned the standard with GHS Revision 7 in the May 2024 final rule, then extended every compliance date by four months in a rule published on 15 January 2026, giving the agency time to publish guidance. Any article still quoting 19 January 2026 or 19 July 2027 is citing superseded dates.

The current schedule sits in 1910.1200(j), and the employer deadline for substances is the next one to land.

Who	What	Deadline	Status
Manufacturers, importers, distributors — substances	Full compliance with modified provisions	19 May 2026	Passed
Employers — substances	Update alternative workplace labelling, written HazCom programme, and training for newly identified hazards	20 November 2026	Next
Manufacturers, importers, distributors — mixtures	Full compliance with modified provisions	19 November 2027	Upcoming
Employers — mixtures	Labelling, programme and training updates	19 May 2028	Upcoming

Source: 29 CFR 1910.1200(j) as amended by the Federal Register rule of 15 January 2026 (91 FR 1695). Paragraph (j)(4) is unchanged: until each date arrives, a duty holder may comply with the 2012 standard, the 2024 standard, or both.

What has not changed is the allocation of duties this article describes. The supply duty still sits with manufacturers, importers and distributors; the access duty still sits with the employer. What changes is the content flowing through that structure — reclassified hazards, revised label elements, and new information in Sections 2 and 3 of sheets you already hold.

For a US employer, the practical work before November is narrower than the rulemaking suggests:

Re-inventory against incoming revisions. Substance sheets have been arriving under the revised standard since May; identify which of your products they cover.
Check secondary and alternative workplace labelling against the revised sheets, since (j)(2)(ii) names this explicitly.
Update the written programme where the hazardous chemical list or the labelling system has moved.
Train on newly identified hazards only — the duty under (h)(3) is triggered by a hazard the workers have not been trained on, not by every revised sheet.

Timeline showing US HazCom compliance dates after January 2026 extension, with four milestones for suppliers and employers to comply with substance and mixture labeling requirements through May 2028.

Frequently asked questions

Short answers to the questions that come up alongside this one.

By law, who is responsible for providing safety data sheets — select all that apply?

Manufacturers, importers and distributors are responsible for supplying the SDS; employers are responsible for having one for every hazardous chemical they use and keeping it accessible to workers. Where a question offers all four, all four are correct — they hold different duties under 29 CFR 1910.1200.

Is the employer or the supplier responsible for safety data sheets?

Both, for different things. The supplier must author and transmit an accurate sheet. The employer must hold one for every hazardous chemical in use and make it readily accessible during each work shift. Neither duty discharges the other, and no contract transfers the employer's.

Do safety data sheets have to be updated every three or five years?

No. There is no fixed renewal interval in either regime. Under 1910.1200(g)(5) a US author must add significant new information within three months of becoming aware of it. Under REACH Article 31(9) a European supplier must update without delay and re-issue to anyone supplied in the previous twelve months.

Can safety data sheets be kept electronically instead of in a binder?

Yes, in both jurisdictions, provided access is genuinely immediate. OSHA permits electronic access under 1910.1200(g)(8) only where it creates no barrier to immediate employee access in each workplace — which rules out systems requiring a login the shift worker does not hold, or a network that fails on nights.

Does a supplier have to provide a safety data sheet free of charge?

Yes in Great Britain, Northern Ireland and the EU: REACH Article 31(8) requires the sheet free of charge, on paper or electronically, no later than the date of first supply. The US standard does not use the phrase, but the (g)(6) and (g)(7) transmission duties are unconditional, so charging for it is not a lawful workaround.

Who is responsible for safety data sheets on a multi-employer construction site?

Each employer holds the duty for its own workers. The host carries an extra duty under 1910.1200(e)(2): give other on-site employers access to sheets for chemicals its own operations may expose them to, along with the precautionary measures and the site labelling system. Those arrangements go in the written programme.

Is a safety data sheet the same as a COSHH assessment or a risk assessment?

No. HSE states plainly that a safety data sheet is not a risk assessment. The sheet describes the substance in the abstract; the assessment applies that information to your process, your quantities, your ventilation and your people. You need both, and the sheet feeds the assessment.

Infographic comparing four common SDS myths with their actual regulatory requirements, including information retention, digital access, COSHH assessment differences, and GB versus EU regulations.

What to check this week, by role

The allocation of duty only matters if it changes what somebody does on Monday. Below is what each role can verify without a project, a budget or a consultant.

If you buy chemicals, pull the last three purchases made outside your approved supplier list and find the sheets for them. If you supervise a chemical task, take one product, open Section 8, and compare it against the PPE in use. If you run the HSE function on a US site, put the 20 November 2026 employer deadline on a plan this month, because relabelling and retraining are not two-week jobs. And if you manage a multi-employer site, ask both parties whose chemicals are in the laydown area — the pause before the answer tells you whether 1910.1200(e)(2) has been thought about at all.

Sometimes the sheet you hold leaves the classification, the exposure controls or the emergency measures genuinely unclear. That is the point to bring in a competent occupational hygienist or chemical safety specialist, rather than reason it out from the label. The regulations set the floor; the assessment of your specific process is a competence question.

Infographic showing four role-based SDS action card responsibilities: Buyer audits off-list purchases, Supervisor compares Section 8 against PPE in use, US HSE lead plans for November 20 2026 employer deadline, and Site manager confirms chemical control assignments under regulation 1910.1200(e)(2).

About the author — Isabella Wright

Isabella Wright is a British Chemical Safety & Hazardous Materials Assurance Consultant with 17 years of continuous field experience across specialty chemicals, petrochemicals, coatings and solvents, chlor-alkali and polymer processing in 14 countries. Her focus is practical assurance — checking that controls still work where work actually happens. She has inspected 180+ workplaces and conducted 70+ audits, including drum and IBC handling for LANXESS, hazmat store assurance for Evonik Specialty, and tank farm chemical HSE for Arkema Coatings. She currently leads Wright Chemical Safety Assurance in London.

Credentials: NEBOSH International General Certificate; ISO 45001 Lead Auditor; ISO 14001 Internal Auditor; IOSH Managing Safely; Dangerous Goods Awareness.