Skip to main content
Energy & UtilitiesCompliance Guide

Energy & Utilities Compliance Guide 2026

Quick Answer

Energy and utility companies face compliance requirements from multiple federal and state agencies: OSHA general industry standards (29 CFR 1910) and construction standards (29 CFR 1926), PHMSA pipeline safety regulations (49 CFR Parts 190-199), state Public Utility Commission (PUC) licensing and reporting requirements, EPA environmental permits (Clean Air Act, Clean Water Act, RCRA), FERC reliability standards (through NERC for electric utilities), and state-specific...

PHMSA pipeline safety, multi-state license tracking, contractor documentation, equipment certifications, and state-by-state requirements — everything energy companies need to stay compliant and keep the lights on.

PHMSA: up to $257,664/violation/day5+ regulatory agencies per stateUpdated April 2026
By Chad Griffith, Founder & CEO|Last updated: April 2026

Energy companies face more overlapping regulators than any other industry.

A pipeline company operating in 5 states answers to OSHA, PHMSA, EPA, FERC, 5 state PUCs, 5 state environmental agencies, and potentially dozens of local jurisdictions — each with their own license requirements, inspection schedules, and penalty structures. A single compliance gap in a single state can halt operations across an entire region.

The Regulatory Landscape: 5 Agencies You Answer To

Energy and utility companies sit at the intersection of worker safety, environmental protection, public safety, and infrastructure reliability. Unlike a manufacturer that primarily deals with OSHA, an energy company may have active compliance obligations with all of these agencies simultaneously:

OSHA

Worker safety — general industry (1910) and construction (1926)

Key standards:Electrical safety, confined space, fall protection, PPE, HazCom, process safety (PSM)
Max penalty:$16,131/serious violation, $161,323/willful violation

PHMSA

Pipeline and hazardous materials transportation safety

Key standards:Operator Qualification (OQ), Integrity Management, Drug/Alcohol, Damage Prevention
Max penalty:$257,664/violation/day (max $2,576,627 per series)

EPA

Environmental compliance — air, water, waste, chemicals

Key standards:Clean Air Act permits, NPDES permits, RCRA hazardous waste, SPCC plans
Max penalty:Varies — CAA up to $109,024/day, CWA up to $64,618/day

FERC/NERC

Electric reliability and wholesale energy market regulation

Key standards:CIP cybersecurity standards, transmission reliability, vegetation management
Max penalty:Up to $1,496,035/violation/day for reliability standard violations

State PUCs

State-level utility regulation — rates, service quality, safety

Key standards:Operating authority, service standards, incident reporting, rate case compliance
Max penalty:Varies by state — can include license revocation

PHMSA Pipeline Safety: The Regulations Most People Have Never Heard Of

The Pipeline and Hazardous Materials Safety Administration regulates approximately 2.7 million miles of pipeline in the United States. If your company operates, maintains, or provides services to gas transmission, gas distribution, or hazardous liquid pipelines, PHMSA requirements apply to you.

The Operator Qualification (OQ) rule (49 CFR 192 Subpart N for gas, 49 CFR 195.505 for hazardous liquids) is the credentialing backbone of pipeline safety. Every individual who performs a covered task on a pipeline facility must be qualified through a written OQ program. Covered tasks include activities that are performed on a pipeline facility, are required by federal pipeline safety regulations, and affect the operation or integrity of the pipeline.

OQ records must include: identification of each covered task the individual is qualified to perform, the method of qualification (written exam, oral exam, observation, work performance history), the date of qualification, and the date of the next required requalification. These records must be maintained while the individual performs covered tasks and for 5 years after they stop.

PHMSA Compliance Program Components

Operator Qualification (OQ) program and records
Integrity Management Program (IMP) for HCAs
Drug and Alcohol Testing program
Public Awareness program
Damage Prevention program (One-Call compliance)
Emergency Response procedures and training
Corrosion control (cathodic protection records)
Leak detection and repair (LDAR) records
Pressure testing and commissioning records
Incident and safety-related condition reports

Multi-State License Tracking: The Compliance Nightmare Nobody Talks About

An energy company operating in 5 states does not have 5x the compliance work — it has 5x the compliance work with 5 completely different rule sets. State utility commissions, environmental agencies, and labor departments do not coordinate their renewal cycles, reporting requirements, or terminology.

Here is what multi-state compliance actually looks like across 5 major energy states:

Texas

Railroad Commission of Texas (RRC)

Pipeline operators must register with RRC; H2S training required for operations in sour gas areas; operator licensing through TCEQ for water/wastewater; separate PUC oversight for electric and telecom.

Renewal cycles: Annual registrations, biennial license renewals

California

CPUC, Cal/OSHA, CARB

Cal/OSHA operates under a state plan with requirements exceeding federal OSHA — includes mandatory IIPP (Injury and Illness Prevention Program). CARB imposes emission standards beyond federal EPA. CPUC requires General Order 95/128 compliance for overhead/underground lines.

Renewal cycles: Varies — some annual, some biennial, some tied to permit cycles

New York

NY PSC, NY DEC, NY DOL

Public Service Commission requires detailed incident reporting within 1 hour for serious events. DEC environmental permits have state-specific monitoring requirements. NY Labor Law 240 (Scaffold Law) creates strict liability for falls — relevant for utility line and tower work.

Renewal cycles: Annual operating certificates, 5-year environmental permits

Pennsylvania

PA PUC, PA DEP

PA PUC requires annual assessment filing for utilities. Act 127 (Gas and Hazardous Liquids Pipelines Act) imposes state penalties on top of federal PHMSA penalties. PA DEP has separate stormwater, air quality, and waste permits.

Renewal cycles: Annual assessments, 5-year DEP permits

Ohio

PUCO, Ohio EPA

Public Utilities Commission of Ohio requires Certificate of Public Convenience and Necessity for new facilities. Ohio EPA operates delegated programs for Clean Air and Clean Water Act. Pipeline operators must comply with Ohio Administrative Code Chapter 4901:1-16.

Renewal cycles: Annual reports, 5-year environmental permits

Multi-state tracking rule of thumb

For every state you add, assume 8-15 additional license/permit types to track: PUC registration, contractor licenses (potentially multiple trades), environmental permits (air, water, waste separately), DOT vehicle registrations, operator certifications, and local business licenses. A 10-state utility easily tracks 100+ active licenses and permits with rolling expiration dates.

Track Every License Across Every State in One Dashboard

FileFlo tracks operator qualifications, state licenses, equipment certifications, contractor documents, and environmental permits across every jurisdiction — with automatic alerts before anything expires. Built for multi-state energy operations.

See Energy Solutions →

Contractor Safety Compliance: You Are Responsible for Their Workers Too

Energy companies rely heavily on contractors for construction, maintenance, and emergency response. Under OSHA's multi-employer citation policy, the controlling employer — the energy company that controls the worksite — can be cited for contractor safety violations even if the energy company's own employees were not exposed to the hazard.

PHMSA takes this further: pipeline operators remain responsible for the qualification of contractor personnel performing covered tasks, even though the contractor employs the individuals. If a contractor welder performs a covered task on your pipeline without proper OQ documentation, the violation is yours — not the contractor's.

The documentation burden for contractor safety management is substantial. Here is what energy companies need to maintain for every contractor working on their sites:

Pre-Qualification Package

EMR (Experience Modification Rate), OSHA 300A logs (3 years), safety program, insurance certificates, DISA/ISN membership

Frequency: Annual review, before contract award

Insurance Certificates

General liability, auto, workers comp, umbrella/excess, pollution (if applicable) — with proper additional insured endorsements

Frequency: Annual renewal, tracked per policy expiration

Worker Certifications

Confined space entry, excavation competent person, electrical qualified worker, pipeline OQ records, crane operator, CDL/medical cards

Frequency: Per certification cycle (varies: 1-5 years)

Site Orientation Records

Site-specific hazards, emergency procedures, PPE requirements, communication protocols, environmental protections

Frequency: Before first day on each site; annual refresher

Daily Documentation

Tailgate/toolbox safety briefings, JSA/JHA forms, hot work permits, excavation permits, confined space entry permits

Frequency: Each work day / each task

Incident Documentation

Near-miss reports, first aid logs, OSHA-recordable injuries, environmental releases, property damage

Frequency: As they occur — within 24 hours of incident

Equipment Certification Tracking: 10 Items That Ground Your Crews If They Expire

In energy operations, expired equipment certifications do not just create compliance risk — they stop work. A bucket truck with an expired annual inspection cannot leave the yard. Rubber gloves past their 6-month dielectric test cannot be used on energized lines. A 4-gas monitor with lapsed calibration means no one enters a confined space. Every expired certification is a day of lost productivity.

EquipmentCertification CycleStandard
Aerial lifts / bucket trucksAnnual comprehensive + pre-use dailyANSI A92, OSHA 1910.67/1926.453
Rubber insulating glovesEvery 6 months (dielectric test)ASTM D120, OSHA 1910.137
Rubber insulating blanketsEvery 12 months (dielectric test)ASTM D1048, OSHA 1910.137
Hot sticks / live-line toolsAnnual (or per written program)ASTM F711, OSHA 1910.269
Gas detection / 4-gas monitorsDaily bump test, monthly calibrationManufacturer specs, OSHA 1910.146
Cranes (mobile)Annual comprehensive, monthly, daily pre-useOSHA 1926.1400 series, ASME B30
Fire extinguishersMonthly visual, annual certified, hydrostatic per scheduleOSHA 1910.157, NFPA 10
Pipeline cathodic protectionAnnual pipe-to-soil readings, bimonthly rectifier readings49 CFR 192.463-465, 195.573
Pressure relief valvesPer manufacturer / API 576 guidelinesAPI 576, ASME BPVC
Commercial vehicles (DOT)Annual DOT inspection, daily pre-trip49 CFR 396, FMCSA

For a utility with 50 bucket trucks, 200 pairs of rubber gloves, and 100 gas monitors, that is 350+ individual certification dates to track — each with its own testing cycle. Multiply by the number of depots and service areas, and manual tracking becomes impossible. This is the kind of problem that spreadsheets cannot solve at scale.

Process Safety Management (PSM) for Energy Operations

OSHA's Process Safety Management standard (29 CFR 1910.119) applies to facilities handling highly hazardous chemicals above threshold quantities — including many energy operations such as natural gas processing plants, LNG facilities, and chemical storage associated with power generation.

PSM requires 14 elements, each with extensive documentation requirements:

Employee participation program
Process Safety Information (PSI)
Process Hazard Analysis (PHA)
Operating procedures
Training (initial + refresher)
Contractor safety management
Pre-startup safety review
Mechanical integrity program
Hot work permit program
Management of change (MOC)
Incident investigation
Emergency planning and response
Compliance audits (every 3 years)
Trade secrets protections

PSM violations carry serious penalties. In 2024, OSHA issued penalties exceeding $1 million in multiple PSM-related cases at energy facilities. The most commonly cited elements are process hazard analysis, mechanical integrity, and management of change — all of which require robust documentation systems to maintain.

Environmental Permits: The Silent Compliance Risk

Environmental permits are often managed by a different department than safety compliance, creating organizational blind spots. But an expired environmental permit can shut down operations just as fast as an OSHA violation — and the penalties are often larger.

Energy operations typically require multiple environmental permits that run on independent renewal cycles:

Air Quality Permit (Title V or Minor Source)

5-year term, annual compliance certifications, continuous emission monitoring for major sources

NPDES / Stormwater Discharge Permit

5-year term, quarterly or monthly monitoring, Discharge Monitoring Reports (DMRs)

SPCC Plan (Spill Prevention)

Updated within 6 months of any change, professional engineer certification required if >10,000 gallons total storage

RCRA Hazardous Waste (Generator Status)

Biennial report for large quantity generators, manifest tracking for all shipments

State Water Well Permits

Varies by state — some annual, some tied to water rights

Wetland/Waterway Permits (Army Corps 404)

5-year typical term, annual reporting on mitigation compliance

Building a Compliance System That Scales With Your Footprint

Energy companies that grow through acquisition or territory expansion inherit the compliance programs (or lack thereof) of every entity they absorb. The first 90 days after an acquisition are critical — you need to inventory every license, permit, certification, and training record across the newly acquired operation before anything expires without your knowledge.

Here is the framework that works for multi-state energy operations:

1

Centralize everything into one system of record

Not one system per state, not one system per department. One system that holds every license, permit, certification, and training record for every entity, every state, every employee and contractor. If your environmental permits live in one system and your OQ records live in another, you have organizational silos that create compliance gaps.

2

Map every document to its regulatory source and renewal cycle

Every credential in your system should be linked to the specific regulation that requires it, the agency that issues or inspects it, the renewal frequency, and the lead time needed to renew before expiration. A PHMSA OQ qualification has a different cycle than a state PUC license — treat them differently.

3

Automate alerts with enough lead time to act

A 30-day alert on a state PUC license that takes 60 days to renew is useless. Set alert thresholds based on the actual renewal lead time for each credential type. For environmental permits that take 6-12 months to renew, you need alerts starting a year out.

4

Give field supervisors visibility into their team's credentials

The compliance manager in corporate cannot see that a lineman's rubber glove test expired yesterday. The field supervisor sending that lineman up a pole needs to see it before the truck leaves the yard. Role-based dashboards that show each supervisor the credential status of their crew prevent fieldwork gaps.

5

Build contractor onboarding into the system from day one

Contractor compliance is not a side project — it is half your compliance exposure. Every contractor worker who steps onto your site or right-of-way needs documented qualifications, and you need to track them with the same rigor as your own employees.

Frequently Asked Questions

What are the main compliance requirements for energy and utility companies?

Energy and utility companies face compliance requirements from multiple federal and state agencies: OSHA general industry standards (29 CFR 1910) and construction standards (29 CFR 1926), PHMSA pipeline safety regulations (49 CFR Parts 190-199), state Public Utility Commission (PUC) licensing and reporting requirements, EPA environmental permits (Clean Air Act, Clean Water Act, RCRA), FERC reliability standards (through NERC for electric utilities), and state-specific operator qualification (OQ) requirements for pipeline operators. Multi-state operators must meet the strictest applicable standard in each jurisdiction.

What is PHMSA and what does it require for pipeline operators?

PHMSA (Pipeline and Hazardous Materials Safety Administration) regulates pipeline safety under 49 CFR Parts 190-199. Key requirements include: Operator Qualification (OQ) programs requiring written plans for qualifying individuals who perform covered tasks on pipeline facilities, Integrity Management Programs for high-consequence areas, Drug and Alcohol Testing programs for covered employees, Public Awareness programs, Damage Prevention programs, and detailed recordkeeping for inspections, maintenance, and incidents. PHMSA penalties can reach $257,664 per violation per day, with a maximum of $2,576,627 for a related series of violations.

How do multi-state license tracking requirements work for energy companies?

Energy companies operating across state lines must maintain separate licenses, permits, and certifications in each state. A utility operating in 5 states may need: 5 state PUC certificates/registrations, 5 sets of state contractor licenses, 5 state environmental permits, operator-level certifications that may not transfer across state lines, and state-specific continuing education requirements. Each state has its own renewal cycle, fee structure, and regulatory authority. A license lapse in any single state can halt operations in that jurisdiction and trigger contract penalties from customers.

What contractor safety documentation must energy companies maintain?

Energy companies are responsible for contractor safety compliance on their sites and rights-of-way. Required documentation includes: contractor pre-qualification records (safety history, EMR, OSHA 300A data), contractor insurance certificates with proper endorsements and limits, individual contractor worker certifications (confined space, excavation, electrical, pipeline OQ), site-specific safety orientation records, daily safety briefing documentation, hot work permits, and excavation/trenching permits. Under OSHA's multi-employer citation policy, the controlling employer (the energy company) can be cited for contractor safety violations on their worksite.

What equipment certifications do energy and utility companies need to track?

Energy and utility companies track certifications for both personnel and equipment. Equipment certifications include: aerial lift / bucket truck annual inspections, crane certifications (OSHA 1926.1400 series), dielectric testing of insulated tools and PPE (rubber gloves every 6 months per ASTM D120), gas detection equipment calibration records, pipeline cathodic protection system readings, transformer oil testing, pressure vessel inspections, and vehicle DOT inspections for commercial fleet. Missing any single equipment certification can ground the equipment and halt field operations.

Related Compliance Resources

Compliance That Scales With Your Territory

FileFlo tracks operator qualifications, state licenses, equipment certifications, contractor documents, and environmental permits across every state you operate in — with automatic alerts before anything expires.

5-day free trial · $299/mo after · Cancel anytime

EPA inspection ready?

Free EPA compliance audit covering RCRA hazardous waste, SPCC oil pollution, Tier II reporting, stormwater NPDES, Title V air permits, USTs. 15 questions, CFR-cited gap report.

RCRA + SPCC + Tier II
Stormwater + air + USTs
3 min, no signup

Free: EPA Tier II Filing Calendar + RCRA Generator Status Worksheet

Tier II March 1 deadline calendar, generator status determination flow, SPCC plan-review checklist, stormwater inspection log.

Delivered free to your inbox · No commitment, no sales calls without your permission · Unsubscribe anytime

You Might Also Like

More Related Articles

Industry Regulations

8 articles on this topic

Explore Industry Regulations solutions