Most compliance content repeats the same advice: know your generator status, keep your manifests straight, don’t let waste sit past its accumulation limit. All true, all generic. What it doesn’t tell you is which of those failure modes actually shows up in a real EPA enforcement action, how often, and against whom. So we pulled the real federal record -- RCRAInfo’s violation, facility, and enforcement files -- and counted it ourselves.
| CFR Part | Real violations | At small/very-small generators | Avg. penalty |
|---|---|---|---|
| 40 CFR 262 | 376,336 | 61.6% | $49,038 |
| 40 CFR 264 | 77,344 | 34.1% | $93,771 |
| State-specific | 59,181 | 66.9% | $50,057 |
| 40 CFR 265 | 57,268 | 45.7% | $74,755 |
| 40 CFR 279 | 40,645 | 77.8% | $57,779 |
| 40 CFR 273 | 32,568 | 61.6% | $45,269 |
| 40 CFR 268 | 28,641 | 55.7% | $73,527 |
| 40 CFR 262 | 21,068 | 77.7% | $58,153 |
Generator size is not the shield people assume it is
“We’re too small to be inspected” is contradicted by the data: 61.6% of 40 CFR 262 violations were issued at small or very-small quantity generators — 376,336 real violations.
A common assumption is that small and very-small quantity generators fly under the radar because the big penalties are reserved for large operations. The real exposure data above doesn’t support that -- small and very-small generators show up under several of the most-cited parts at a real, meaningful share, not a rounding error. If your facility generates hazardous waste at all, the standard applies to you regardless of how little you generate; it changes which specific requirements attach, not whether any do.
What this means if you manage the program
The practical takeaway isn’t "reduce your generator category" -- most facilities can’t choose how much waste their process makes. It’s to put real training and documentation behind the specific parts that actually get cited, starting with whichever CFR part above carries both real volume and a real penalty average worth avoiding, rather than treating the whole standard as equally urgent.
Where this data comes from
Every figure on this page is pulled live from the same real US EPA RCRAInfo enforcement data (violations, facilities, and enforcement actions, 2023-01-01 through 2026-12-31) that powers CertQuestUSA’s public Risk Index. Rows below 50 real recorded violations are excluded as too thin to rank. Full disclosed methodology, every CFR part (including the ones with no matching CQU exam yet), and the FMCSA roadside-inspection data: see /risk-index.