EPA has designated chemical accident risk reduction as a National Enforcement and Compliance Initiative (NECI) for fiscal years 2024 through 2027, with particular focus on facilities handling anhydrous ammonia and hydrogen fluoride. Civil penalties under the Clean Air Act for RMP violations now reach approximately $121,275 per day per violation, and EPA inspectors are using both programmed and incident-driven inspections to find them. The good news: most RMP citations don't come from exotic edge cases. They come from a relatively short list of recurring problems that develop slowly over time. This guide walks through the violations EPA finds most often, why they tend to develop, and the practices that prevent them.
1. Stale Offsite Consequence Analysis
The violation
OCA inputs (chemical inventory, process configuration, public receptors, population estimates) reflect facility conditions from years ago. Inspectors compare submitted OCA values against current chemical management and process records and find inconsistencies — often substantial. A plant that submitted an OCA based on a 50,000-gallon ammonia tank but has since installed a 100,000-gallon tank is in violation, even if the OCA submission predated the change.
Why it happens: Process changes work through engineering and operations, but the OCA — a document in the RMP submission — doesn't get updated until the next 5-year resubmission. The change exceeds RMP's 6-month resubmission trigger but no one connects the dots.
2. Incomplete 5-Year Accident History
The violation
Reportable accidents are missing from the submitted accident history, or the information about each accident is incomplete or inconsistent with internal incident records. Common omissions: events that resulted in offsite evacuations or sheltering, releases that caused property damage on a neighboring property, and small releases that nonetheless met one of the reportability triggers.
Why it happens: Reportability decisions are often made under time pressure, by people who may not have the full RMP context. The reportability criteria at 40 CFR 68.42 include several thresholds (deaths, injuries, evacuations, sheltering, environmental damage, $250,000+ on-site property damage), and a release can be reportable for one criterion even if not for others.
3. Weak or Bypassed Management of Change
The violation
Changes to covered processes occur without going through the formal MOC process: a vendor swaps a different valve in during maintenance, a procedural step is modified for efficiency, a relief device is uprated, an instrumentation change is made for reliability. The change isn't reviewed for safety impact, isn't reflected in operating procedures, and isn't communicated through training.
Why it happens: MOC is an extra step. Operations and maintenance teams under time pressure rationalize that "this isn't really a change" or "the engineer can do it during the next turnaround." Over years, dozens of un-MOC'd changes accumulate, invalidating PHAs, training records, and operating procedures.
4. Mechanical Integrity Inspection Gaps
The violation
Required mechanical integrity inspections, tests, and preventive maintenance tasks are overdue. Records show that pressure vessels, relief devices, piping, and rotating equipment have inspection intervals defined in the MI procedure, but actual completion dates are months or years past due.
Why it happens: MI inspections often live in spreadsheets, calendars, or paper logs that drift over time. Equipment owners change. New equipment gets added without inspection schedules. Maintenance backlogs grow when staff turn over or budgets tighten.
5. Training Records and Competency Gaps
The violation
Operators on covered processes have not received initial training, refresher training is overdue (the 3-year cycle has lapsed), or training records are incomplete or unverifiable. Sometimes training was provided but the records are missing or undated. Sometimes new operators are working unsupervised before initial training is complete.
Why it happens: Training records often live in HR systems, departmental spreadsheets, and certificate folders that don't talk to each other. New operators get on-the-job training that isn't formally captured. Refresher training falls behind during busy operational periods and quietly accumulates as a backlog.
6. Late RMP Submission or Missed Triggering Events
The violation
The 5-year RMP resubmission deadline is missed. Or a triggering event for early resubmission (new substance reaching TQ, change affecting program level, RMP-reportable accident) occurs but the 6-month early resubmission deadline lapses without action.
Why it happens: The 5-year resubmission is on the calendar, but compliance staff turn over and institutional memory lapses. Triggering events for early resubmission are recognized retrospectively rather than at the time of the change. Both failures increase as RMP responsibility transitions between people.
7. Unverified Program 1 Eligibility
The violation
A process classified as Program 1 no longer qualifies. Common scenarios: residential development created public receptors within the worst-case distance; an offsite-consequence accident occurred but wasn't recognized as disqualifying; LEPC coordination has lapsed beyond what the eligibility criteria require.
Why it happens: Program 1 eligibility is point-in-time at submission. But facility surroundings change continuously, especially in growing areas, and Program 1 facilities often have less compliance infrastructure to monitor those changes.
8. Inadequate Emergency Response Coordination
The violation
The submitted RMP claims emergency response coordination with local responders and the LEPC, but the actual coordination is minimal — one meeting from years ago, outdated chemical information, no exercises, no documented drills. EPA inspectors increasingly verify coordination by interviewing local responders and the LEPC.
Why it happens: LEPC coordination is delegated to "the EHS person" who tries to balance it against everything else. Drills and exercises are postponed for production reasons. Updates to chemical inventory don't get passed along to LEPC and responders.
9. Inconsistencies Between RMP and PSM Records
The violation
For facilities subject to both RMP and OSHA PSM, separate parallel programs produce conflicting documentation. PHAs in the PSM file say one thing; data submitted in the RMP says another. Operating procedures, training records, MOC records, and audit reports vary between the two systems.
Why it happens: Two different teams own the two regulations. Each maintains its own records. Updates to one don't propagate to the other. Joint inspections by EPA and OSHA expose the inconsistencies.
10. Missing Compliance Audits
The violation
The required compliance audit at least every three years has lapsed, or audit reports are missing for the prior two cycles, or the corrective actions from prior audits remain open and untracked.
Why it happens: Audits are scheduled but slip when staffing or budget tightens. Corrective actions from completed audits get logged but not tracked to closure. By the next audit, prior findings are still open and have multiplied.
Penalty Structure
How to Prepare for an EPA Inspection
- Run a quarterly internal audit comparing the submitted RMP to current facility data
- Verify chemical inventories against TQs at every container or vessel change
- Track every RMP-reportable accident through formal incident investigation with documented reportability decisions
- Add an OCA-impact and program-level-impact review to every MOC
- Maintain LEPC coordination on a defined annual schedule with documented participation
- Keep training, mechanical integrity, and audit records current with automatic deadline tracking
- Document the basis for every assertion in the submitted RMP — modeling assumptions, accident history decisions, prevention program data — so it can be produced on request
Ecesis Software for RMP Compliance
EPA RMP Software
Full prevention program with built-in violation prevention
Management of Change
Catch RMP-affecting changes before they become violations
Incident Management
RMP-reportability flags and accident history tracking
Compliance Calendar
5-year submissions, audits, and revalidations all in one calendar
Training Management
Operator training currency with automatic refresher tracking
Compliance Audits
Triennial audit workflows with corrective action closure
