Most compliance content repeats the same advice: know your generator status, keep your manifests straight, don’t let waste sit past its accumulation limit. All true, all generic. What it doesn’t tell you is which of those failure modes actually shows up in a real EPA enforcement action, how often, and against whom. So we pulled the real federal record -- RCRAInfo’s violation, facility, and enforcement files -- and counted it ourselves.
| CFR Part | Real violations | At small/very-small generators | Avg. penalty |
|---|---|---|---|
| 40 CFR 262 | 376,336 | 61.6% | $49,038 |
| 40 CFR 264 | 77,344 | 34.1% | $93,771 |
| State-specific | 59,181 | 66.9% | $50,057 |
| 40 CFR 265 | 57,268 | 45.7% | $74,755 |
| 40 CFR 279 | 40,645 | 77.8% | $57,779 |
| 40 CFR 273 | 32,568 | 61.6% | $45,269 |
| 40 CFR 268 | 28,641 | 55.7% | $73,527 |
| 40 CFR 262 | 21,068 | 77.7% | $58,153 |
Generator size is not the shield people assume it is
“We’re too small to be inspected” is contradicted by the data: 61.6% of 40 CFR 262 violations were issued at small or very-small quantity generators, 376,336 real violations.
A common assumption is that small and very-small quantity generators fly under the radar because the big penalties are reserved for large operations. The real exposure data above doesn’t support that -- small and very-small generators show up under several of the most-cited parts at a real, meaningful share, not a rounding error. If your facility generates hazardous waste at all, the standard applies to you regardless of how little you generate; it changes which specific requirements attach, not whether any do.
What this means if you manage the program
The practical takeaway isn’t "reduce your generator category" -- most facilities can’t choose how much waste their process makes. It’s to put real training and documentation behind the specific parts that actually get cited, starting with whichever CFR part above carries both real volume and a real penalty average worth avoiding, rather than treating the whole standard as equally urgent.
How the maximum penalty actually gets set
RCRA Section 3008 authorizes EPA to assess civil penalties for violations of the Act, and the statutory maximum -- the absolute ceiling per violation, per day -- is not a fixed number written once into the law. It is adjusted annually for inflation under the Federal Civil Penalties Inflation Adjustment Act of 1990, as amended, with the current figures published in the Federal Register and codified at 40 CFR Part 19. That is a deliberately different question from what an actual violation costs a real facility: EPA’s own RCRA Civil Penalty Policy applies a structured set of factors, including the seriousness of the violation and the violator’s good-faith efforts to comply, to arrive at an actual proposed penalty that is typically well below the statutory maximum. The real, disclosed average penalties in the live table above reflect what enforcement actions actually assessed, not the theoretical ceiling, which is the more useful number for understanding real exposure.
Where this data comes from
Every figure on this page is pulled live from the same real US EPA RCRAInfo enforcement data (violations, facilities, and enforcement actions, 2023-01-01 through 2026-12-31) that powers CertQuestUSA’s public Risk Index. Rows below 50 real recorded violations are excluded as too thin to rank. Full disclosed methodology, every CFR part (including the ones with no matching CQU exam yet), and the FMCSA roadside-inspection data: see /risk-index.