Mexico NOM-030-STPS-2009 Explained (Employer Guide)

What Is NOM-030-STPS-2009?

NOM-030-STPS-2009 is an Official Mexican Standard that regulates how employers must organize, assign, and document occupational safety and health services in the workplace.

It does not regulate physical safety conditions directly. Instead, it focuses on how employers manage prevention, responsibilities, and ongoing compliance.

• Official Mexican Standard definition
  NOM-030 is a legally binding Norma Oficial Mexicana that sets mandatory rules for organizing preventive occupational safety and health services within Mexican workplaces.
  
  

• Issuing authority
  The standard is issued and enforced by the Secretaría del Trabajo y Previsión Social (STPS), Mexico’s federal labor authority responsible for labor inspections and workplace compliance.
  
  

• Mandatory legal status
  Compliance with NOM-030 is required by law. It applies to all employers in Mexico, regardless of company size, industry, or whether operations are on-site, hybrid, or remote.
  
  

• Purpose within Mexico’s safety framework
  NOM-030 ensures that workplace safety is planned, documented, and assigned to responsible roles, rather than handled informally or only after incidents occur.
  
  

In practice, NOM-030 acts as the organizational backbone of Mexico’s occupational safety system. It requires employers to prove that safety and health compliance is structured, traceable, and continuously monitored, not improvised.

Purpose and Scope of NOM-030

NOM-030 exists to ensure that employers in Mexico actively manage occupational safety and health, instead of reacting only after accidents or inspections.

The regulation focuses on how safety responsibilities are organized, documented, and monitored inside the company, making prevention a continuous and measurable process.

• Why the regulation exists
  Mexican labor law requires employers to protect employee health and safety. NOM-030 was created to prevent informal or unstructured safety practices that increase legal and operational risk.
  
  

• Focus on accident prevention and occupational disease
  The standard emphasizes early identification of workplace risks that may cause accidents or long-term occupational illnesses, rather than addressing issues only after harm occurs.
  
  

• Support for proactive risk management
  Employers must define responsible roles, establish preventive actions, and keep records that show ongoing safety management, not one-time compliance efforts.
  
  

• Connection to employer duty of care
  NOM-030 reinforces the employer’s legal obligation to provide safe working conditions by requiring proof that safety and health measures are planned, implemented, and reviewed over time.
  
  

In scope, NOM-030 applies to all workplaces in Mexico with employees, regardless of industry or size. It strengthens the employer’s duty of care by turning safety management into a documented and enforceable obligation under Mexican labor law.

Who Must Comply With NOM-030?

NOM-030 applies broadly to all employers with employees in Mexico, without exceptions based on company size, revenue, or industry. The obligation is tied to the existence of an employment relationship, not to how large or complex the operation may be.

• All workplaces in Mexico
  Every workplace with employees must comply with NOM-030, including offices, industrial sites, commercial locations, and service-based operations. There is no exemption for small teams or early-stage companies.
  
  

• Foreign companies operating in Mexico
  Foreign companies that employ staff in Mexico are fully subject to NOM-030. The employer’s country of incorporation does not remove Mexican labor and safety obligations.
  
  

• Employer of Record structures
  When using an Employer of Record in Mexico, the EOR is the legal employer and is responsible for NOM-030 compliance. The client company still participates by supporting risk identification and operational coordination.
  
  

• On-site, hybrid, and remote work
  NOM-030 applies regardless of where work is performed. Employers must organize and document safety and health responsibilities for on-site, hybrid, and remote work environments.
  
  

In short, if you have employees legally working in Mexico, NOM-030 applies to you. The compliance duty follows the employer role, not the work location or corporate structure.

Core Employer Obligations Under NOM-030

NOM-030 places clear and enforceable obligations on employers to formally organize occupational safety and health management. The standard focuses on responsibility, documentation, and cooperation, ensuring that safety is handled through defined processes rather than informal practices.

• Establish preventive safety and health services
  Employers must formally establish preventive occupational safety and health services. This includes defining how risks are identified, how preventive actions are planned, and how safety activities are coordinated on an ongoing basis.
  
  

• Appoint a responsible safety and health person
  A specific individual or function must be designated to oversee safety and health activities. This responsibility cannot be vague or shared informally. The appointment must be clear and traceable during audits or inspections.
  
  

• Provide access, data, and resources
  Employers must provide the responsible person with access to workplace areas, relevant documentation, employee information, and the resources needed to carry out preventive duties effectively.
  
  

• Cooperate during labor inspections
  During inspections by the Secretaría del Trabajo y Previsión Social (STPS), employers must cooperate fully by presenting records, explaining procedures, and demonstrating active compliance with NOM-030 requirements.
  
  

Together, these obligations ensure that workplace safety in Mexico is structured, accountable, and verifiable. Employers must be able to show not only that safety exists, but that it is actively managed and documented.

Appointment of the Safety and Health Responsible Person

NOM-030 requires employers to formally appoint a specific person or function responsible for coordinating occupational safety and health activities. This role is central to compliance and is one of the first elements reviewed during labor inspections.

• Internal or external designation options
  Employers may appoint an internal employee or contract an external service provider. The key requirement is that the role is clearly defined and officially assigned, not handled informally or on an ad hoc basis.
  
  

• Required qualifications and competence
  The responsible person must have sufficient knowledge and experience to identify risks, coordinate preventive actions, and understand applicable safety regulations. Formal credentials are not always mandated, but competence must be demonstrable.
  
  

• Legal accountability and authority
  This role carries legal accountability for organizing safety and health activities. The appointed person must have enough authority to access workplaces, request information, and implement preventive measures.
  
  

• Importance during inspections
  During inspections by the Secretaría del Trabajo y Previsión Social (STPS), inspectors will request proof of appointment and evaluate whether the responsible person is actively performing their duties.
  
  

This role is critical because it creates a clear line of responsibility. Without a properly appointed and empowered safety and health lead, employers risk failing NOM-030 even if other safety measures exist.

Workplace Safety and Health Diagnosis Requirement

NOM-030 requires employers to perform a formal workplace safety and health diagnosis. This diagnosis is the foundation of preventive compliance. It shows that risks are identified systematically and addressed before accidents, illnesses, or inspections occur.

Employers must conduct an initial diagnosis when operations begin or when employees are first hired. This is not optional and must exist before preventive actions are defined.

What the diagnosis must identify

The diagnosis must clearly document all safety and health risks present in the workplace, based on the actual activities performed by employees.

• Unsafe physical conditions
  This includes structural hazards, unsafe equipment, inadequate lighting, electrical risks, and any physical condition that could cause accidents or injuries.
  
  

• Physical, chemical, and biological agents
  Employers must identify exposure to noise, vibrations, dust, fumes, chemicals, microorganisms, or any agent that could affect employee health.
  
  

• Ergonomic and environmental risks
  The diagnosis must cover posture risks, repetitive movements, workstations, temperature, ventilation, and other environmental factors affecting employee well-being.
  
  

• Applicable NOMs by risk type
  Identified risks must be linked to the corresponding Official Mexican Standards that regulate each specific hazard.
  
  

• Update frequency
  The diagnosis must be reviewed and updated whenever processes change, new risks appear, incidents occur, or working conditions are modified.
  
  

During inspections by the Secretaría del Trabajo y Previsión Social (STPS), this diagnosis is often the first document requested. Without it, employers cannot demonstrate proactive safety management under NOM-030.

Safety and Health Program or Preventive Action Plan

NOM-030 requires employers to formalize how identified risks will be prevented or corrected. Depending on workplace complexity and risk level, this is done through either a full Safety and Health Program or a simplified preventive and corrective action list.

The key requirement is that actions are documented, assigned, and monitored.

• When a full Safety and Health Program is required
  A full program is required when workplaces have multiple risk factors, hazardous activities, or exposure to regulated agents. It must show structured planning, follow-up, and measurable prevention efforts.
  
  

• When a simplified action list is allowed
  Low-risk workplaces with limited hazards may use a simplified list of preventive and corrective actions. This option still requires documentation and accountability, but with reduced administrative complexity.
  
  

Both approaches must be based on the workplace safety and health diagnosis and aligned with applicable Official Mexican Standards.

Required components

Under NOM-030, a Safety and Health Program or preventive action plan must be operational, not symbolic. Each component must clearly show how risks are addressed, who is responsible, and how progress is tracked over time.

• Preventive measures
  These measures must be directly linked to risks identified in the workplace diagnosis. They should focus on eliminating hazards at the source or reducing exposure through engineering controls, procedures, training, or changes in work organization.
  
  

• Corrective actions
  Corrective actions address existing unsafe conditions, inspection findings, or incidents. They must specify what will be corrected, how the correction will be carried out, and how recurrence will be prevented.
  
  

• Implementation timelines
  Each preventive or corrective action must include a defined execution timeframe. Timelines allow employers to demonstrate progress and enable inspectors to verify whether actions are being implemented, delayed, or ignored.
  
  

• Assigned responsibilities
  Every action must be assigned to a specific role or individual. General responsibility is not acceptable. Inspectors will verify that responsible parties are identified and have authority to execute the assigned actions.
  
  

During inspections by the Secretaría del Trabajo y Previsión Social (STPS), these components are reviewed together. Missing detail in any one area can result in a compliance finding, even if other safety measures exist.

Responsibilities of the Safety and Health Services Function

Under NOM-030, the safety and health services function is responsible for actively managing occupational risk prevention, not just documenting it. This function must operate continuously and be able to demonstrate real involvement in workplace safety during inspections.

• Creating and updating the safety and health diagnosis
  The function must prepare the initial workplace diagnosis and keep it updated when processes, activities, or risk conditions change. This ensures that prevention efforts remain aligned with real working conditions.
  
  

• Implementing the safety and health program
  Identified preventive and corrective actions must be executed according to the approved program or action plan. This includes coordinating timelines, verifying completion, and ensuring actions are not left pending.
  
  

• Monitoring workplace risks
  Ongoing monitoring is required to detect new hazards, unsafe practices, or changes in exposure. This allows risks to be addressed before they result in accidents or occupational illnesses.
  
  

• Establishing emergency response mechanisms
  The function must help define procedures for emergencies such as fires, medical incidents, or evacuations, ensuring employees know how to respond and whom to contact.
  
  

• Promoting health and risk-prevention initiatives
  Employers must promote a preventive culture through communication, training, and awareness activities that reinforce safe behaviors and compliance with safety measures.
  
  

• Annual reporting and continuous improvement
  The safety and health services function must prepare periodic evaluations of results, identify gaps, and propose improvements to strengthen prevention over time.
  
  

During inspections by the Secretaría del Trabajo y Previsión Social (STPS), inspectors evaluate whether this function is active, organized, and producing measurable outcomes. Passive or undocumented involvement does not meet NOM-030 requirements.

Employee Communication and Training Obligations

NOM-030 requires employers to ensure that employees are informed, trained, and prepared to manage workplace risks. Safety compliance is not limited to internal documentation. Employees must understand the risks they face and how prevention measures apply to their daily work.

• Informing employees of identified risks
  Employers must clearly communicate the risks identified in the workplace safety and health diagnosis. This information must be relevant to the employee’s role and working conditions, not generic or theoretical.
  
  

• Training obligations for employees and safety personnel
  Employees must receive training related to identified risks, preventive measures, and safe work practices. Safety and health personnel must receive additional training appropriate to their responsibilities and level of risk exposure.
  
  

• Emergency and contingency preparedness
  Employers must ensure that employees know how to respond to emergencies such as fires, medical incidents, or evacuations. This includes understanding procedures, alarm systems, evacuation routes, and points of contact.
  
  

• Health promotion and prevention initiatives
  NOM-030 encourages ongoing initiatives that promote health, safe behaviors, and risk prevention. These initiatives help reduce accidents and occupational illnesses by reinforcing preventive awareness over time.
  
  

During inspections, inspectors will verify that communication and training efforts are documented and actively implemented. A lack of employee awareness is treated as a compliance failure, even if policies exist on paper.

Documentation and Recordkeeping Requirements

NOM-030 requires employers to maintain clear, organized, and accessible documentation that proves occupational safety and health obligations are being actively managed. Documentation is not a formality. It is the primary way employers demonstrate compliance during inspections.

Mandatory documents under NOM-030

Employers must maintain a defined set of records that show how safety and health services are structured and executed.

• Safety and health diagnosis reports
  Written diagnosis identifying workplace risks, affected areas, exposure types, and applicable Official Mexican Standards linked to each identified hazard.
  
  

• Safety programs or preventive action plans
  The full Safety and Health Program or the simplified preventive and corrective action list, including updates, timelines, and assigned responsibilities.
  
  

• Training records
  Evidence of employee and safety personnel training related to identified risks, preventive measures, emergency procedures, and role-specific responsibilities.
  
  

• Monitoring and follow-up evidence
  Records showing inspections, evaluations, corrective action completion, and ongoing risk monitoring activities.
  
  

Record retention and availability

NOM-030 requires that documentation remains available and traceable over time.

• Minimum retention periods
  Records must be kept for the duration of the employment relationship and for any additional period required by labor or safety regulations.
  
  

• Accessibility during inspections
  Documents must be readily available when requested. Incomplete, outdated, or inaccessible records are treated as non-compliance.
  
  

Documents commonly requested during inspections

Inspectors from the Secretaría del Trabajo y Previsión Social (STPS) typically request the diagnosis report, safety program or action plan, appointment of the responsible person, training records, and proof of follow-up actions.

Well-maintained documentation transforms NOM-030 compliance into demonstrable evidence. Employers that cannot produce records on demand are assumed to lack effective safety management, regardless of actual workplace conditions.

Inspections, Enforcement, and Penalties

NOM-030 is enforced through workplace inspections carried out by Mexico’s labor authority. Compliance is evaluated based on documentation, organization, and active safety management, not on intent or future plans.

• Role of labor inspectors
  Inspectors from the Secretaría del Trabajo y Previsión Social (STPS) are responsible for verifying that employers comply with occupational safety and health obligations and that preventive systems are properly implemented.
  
  

• What inspectors review under NOM-030
  Inspectors typically examine the workplace safety and health diagnosis, the safety program or preventive action plan, appointment of the responsible person, training records, and evidence of monitoring and follow-up.
  
  

Consequences of non-compliance

Failure to comply with NOM-030 can trigger enforcement actions, even if no accident has occurred.

• Fines
  Monetary penalties may be imposed depending on the severity of the violation, recurrence, and number of affected employees.
  
  

• Corrective orders
  Employers may receive formal orders requiring deficiencies to be corrected within a defined timeframe and supported with written evidence.
  
  

• Inspection follow-ups
  STPS may conduct follow-up inspections to confirm that corrective actions were properly implemented.
  
  

• Common employer mistakes during inspections
  Frequent issues include missing or outdated documentation, lack of a formally appointed safety and health responsible person, and safety programs that exist only on paper.
  
  

NOM-030 inspections focus on proof of prevention, not explanations. Employers must be able to demonstrate active, organized safety management at the time of inspection.

How NOM-030 Relates to Other Mexican Safety Standards

NOM-030 functions as the organizational framework for occupational safety and health compliance in Mexico. It does not replace other safety standards.

Instead, it coordinates how those standards are identified, implemented, and monitored within the workplace.

• Relationship with NOM-035
  NOM-035 regulates psychosocial risk factors, including work stress, workplace violence, and organizational environment. NOM-030 requires employers to formally identify psychosocial risks and integrate NOM-035 actions into the overall safety and health management system.
  
  

• Relationship with NOM-037
  NOM-037 regulates safety and health conditions for telework. When employees work remotely, NOM-030 requires employers to document telework-related risks and ensure NOM-037 preventive measures are properly organized and assigned.
  
  

• Holistic compliance approach
  NOM-030 ensures that all applicable Official Mexican Standards are identified through the workplace diagnosis and managed under a single preventive structure, rather than treated as isolated obligations.
  
  

• Risk of partial compliance
  Employers that comply with individual NOMs but fail to organize them under NOM-030 risk enforcement findings. Partial compliance strategies often result in gaps, inconsistent documentation, and inspection failures.
  
  

In practice, NOM-030 ties Mexico’s safety regulations together. Without it, compliance with individual standards becomes fragmented and difficult to defend during inspections.

Practical Compliance Checklist for Employers

NOM-030 compliance is easier to manage when treated as a continuous process, not a one-time setup. Employers that follow a structured compliance flow are far better prepared for inspections and operational changes.

• Step-by-step NOM-030 compliance flow
  Start by appointing a safety and health responsible person, conduct the initial workplace diagnosis, identify applicable NOMs, define preventive or corrective actions, assign responsibilities, and document implementation and follow-up activities.
  
  

• Inspection-ready documentation checklist
  Maintain an updated safety and health diagnosis, a Safety and Health Program or preventive action plan, proof of appointment of the responsible person, training records, monitoring evidence, and records showing corrective actions were completed.
  
  

• Internal controls HR teams should maintain
  HR teams should track role assignments, ensure documentation updates after operational changes, coordinate training schedules, and verify that safety responsibilities are clearly communicated across teams.
  
  

• Ongoing monitoring best practices
  Conduct periodic reviews, document changes in risks, update action plans when processes evolve, and retain evidence of evaluations and improvements over time.
  
  

A practical approach to NOM-030 focuses on consistency and traceability. Employers that embed these controls into daily operations reduce inspection risk and avoid last-minute compliance gaps.

Why Foreign Companies Struggle With NOM-030 Compliance

Foreign companies often underestimate NOM-030 because it focuses on organization and documentation, not just physical safety. Most compliance failures occur due to structural gaps rather than unsafe workplaces.

• Lack of local safety expertise
  Foreign employers may rely on global HR policies that do not align with Mexican labor and safety standards. Without local expertise, key NOM-030 requirements are often misunderstood or overlooked.
  
  

• Fragmented compliance management
  Safety, payroll, HR, and legal compliance are frequently handled by different providers or internal teams. This fragmentation makes it difficult to maintain a unified safety management structure as required by NOM-030.
  
  

• Misalignment between HR, payroll, and legal obligations
  NOM-030 requires coordination across functions. When HR, payroll, and legal responsibilities are not aligned, documentation gaps and inconsistent risk management are common.
  
  

• Risks of non-specialized providers
  Providers without deep Mexico-specific expertise may treat NOM-030 as a generic safety policy rather than a mandatory management standard, increasing inspection and penalty risk.
  
  

Foreign companies that approach NOM-030 without an integrated, Mexico-specific compliance strategy often fail inspections despite good intentions and existing safety practices.

How Human Resources Mexico (HRM) Ensures NOM-030 Compliance

For foreign companies, NOM-030 compliance is difficult because it requires local execution, not just policies. This is where Human Resources Mexico (HRM) plays a critical role by operating as a real employer in Mexico with full compliance accountability.

• Mexico-only compliance model
  HRM operates exclusively in Mexico. This focus ensures that NOM-030 requirements are applied correctly within the context of Mexican labor law, safety regulations, and inspection practices, without relying on global templates.
  
  

• Integrated HR, payroll, and safety oversight
  NOM-030 compliance depends on coordination between safety management, HR administration, and payroll records. HRM manages these functions together, reducing gaps that often arise when responsibilities are split across vendors.
  
  

• Local teams supporting inspections and audits
  HRM maintains local teams in Mexico who understand STPS inspection procedures and documentation expectations. During inspections, HRM supports preparation, document presentation, and corrective follow-ups.
  
  

• Why this matters for foreign employers
  Foreign companies remain operationally focused while HRM assumes responsibility for organizing, documenting, and maintaining NOM-030 compliance as the legal employer, reducing risk and inspection exposure.
  
  

By combining local presence with integrated compliance management, HRM turns NOM-030 from a reactive obligation into a controlled and inspection-ready process for foreign employers hiring in Mexico.

If you are planning to hire staff in Mexico, reach out to our team to discuss your specific hiring needs and receive a custom proposal tailored to your business and compliance requirements.

Frequently Asked Questions (FAQs)

Is NOM-030 mandatory for all companies in Mexico?

Yes. NOM-030 is legally mandatory for all employers with employees in Mexico, regardless of company size, industry, or nationality. The obligation is based on having an employment relationship, not on revenue level or risk profile. Small offices, startups, and foreign companies are all required to comply.

Does NOM-030 apply to remote or telework employees?

Yes. NOM-030 applies even when employees work remotely or under telework arrangements. Employers must still organize safety and health management, document risks, and assign responsibilities. For telework-specific risks, NOM-030 works together with NOM-037 to ensure proper prevention and documentation.

Who can act as the safety and health responsible person?

The employer may appoint an internal employee or an external professional, as long as the role is formally designated. The person must have sufficient knowledge and authority to manage safety activities, access documentation, and coordinate preventive actions. Informal or shared responsibility does not meet NOM-030 requirements.

What documents must be shown during an STPS inspection?

Inspectors from the Secretaría del Trabajo y Previsión Social (STPS) typically request the workplace safety diagnosis, the safety program or action plan, proof of appointment of the responsible person, training records, and evidence of monitoring and corrective actions.

How does HRM help foreign companies comply with NOM-030?

Human Resources Mexico (HRM) acts as the legal employer in Mexico and manages NOM-030 compliance directly. HRM coordinates safety documentation, HR processes, payroll alignment, and inspection support, allowing foreign companies to operate compliantly without building local safety infrastructure.