Construction sites routinely have a general contractor, multiple subcontractors, and sometimes lower-tier subs all working in the same space. When OSHA finds a hazard during an inspection, the question isn't just "whose worker was exposed?" — it's "which employers had responsibility for that hazard?" The answer can include multiple employers, and each can receive a separate citation for the same condition.
OSHA's multi-employer citation policy (described in CPL 02-00-124) is the framework inspectors use to determine who gets cited on a multi-employer worksite. Understanding it matters for both general contractors and subcontractors, because the liability exposure is often different from what employers assume based on their contract language.
The Four Employer Roles
OSHA's policy assigns employers to one or more of four roles based on their relationship to a specific hazard. An employer can hold more than one role simultaneously — a general contractor is often both a controlling employer and a correcting employer, for example.
1. Creating Employer
The employer who caused a hazardous condition to exist. A subcontractor who leaves an open floor hole, removes a guardrail without replacing it, or creates a chemical exposure hazard is a creating employer for that condition — and can be cited regardless of whether its own workers are exposed to it.
This is one of the more counterintuitive aspects of the policy: creating employers can be cited even if they have no workers at the site at the time of the inspection. The relevant question is who created the hazard, not who is currently working near it.
2. Exposing Employer
An employer whose workers are exposed to a hazard created by another employer. The exposing employer can be cited for exposing its workers to that hazard if it knew or should have known of the hazard and failed to take reasonable steps to protect its employees — even if the employer didn't create the hazard and can't unilaterally correct it.
What "reasonable steps" looks like for an exposing employer who can't correct the hazard: request that the creating or controlling employer correct it, instruct workers to avoid the area, provide additional protective equipment, and if the hazard is imminent, remove workers from the area.
An exposing employer who simply points to the general contractor's responsibility and does nothing to protect its workers is not shielded from citation.
3. Correcting Employer
An employer who is responsible for correcting a hazard, even if it didn't create it and its workers aren't exposed to it. This typically applies to employers who have been contractually assigned responsibility for safety on the site — such as a safety consultant or a GC that has specifically taken on hazard correction duties.
Correcting employers must exercise reasonable care to prevent and correct violations — which means actively identifying hazards, not just responding to ones that are brought to their attention.
4. Controlling Employer
An employer who has general supervisory authority over the worksite, including the power to correct safety and health violations or require others to correct them. The general contractor is almost always a controlling employer. A construction manager, owner who controls the site, or prime contractor can also be a controlling employer.
The controlling employer's obligation is to exercise reasonable care to prevent and detect violations on the site. OSHA evaluates this based on the nature and frequency of the controlling employer's inspections and the extent to which the controlling employer knew or should have known about the violations.
A controlling employer is not required to provide the same level of oversight as the employer of the workers performing the work — but it must take reasonable steps. What's reasonable depends on several factors:
- How much the GC relied on the subcontractor's safety expertise
- Whether the GC implemented a safety program and how consistently it was enforced
- The frequency and thoroughness of site safety inspections
- Whether the GC had prior notice of the subcontractor's safety problems
How This Works in Practice
A concrete example: Electrical subcontractor removes a guardrail to run conduit, doesn't replace it, and leaves for the day. The next day, a drywall subcontractor's workers are working in the area near the unguarded edge.
- Electrical sub as creating employer: Can be cited for creating the hazard even though its workers aren't there.
- Drywall sub as exposing employer: Can be cited for exposing its workers to a hazard it didn't create, if it knew or should have known about the missing guardrail.
- General contractor as controlling employer: Can be cited if its site safety inspection process should have detected the missing guardrail and it failed to identify or correct it.
All three citations are legally independent. OSHA can issue all three from the same inspection.
What Contract Language Does and Doesn't Do
Contracts that assign safety responsibility to subcontractors do not transfer OSHA liability from the GC. If a contract says "each subcontractor is responsible for the safety of its own workers," that allocation may affect the parties' civil liability to each other — but it doesn't affect OSHA's citation authority.
OSHA determines who gets cited based on the four-role framework, not on what contracts say. A GC with supervisory authority over the site is a controlling employer regardless of how safety responsibilities are allocated in subcontracts.
This doesn't mean contract language is worthless. Contractual requirements for subcontractor safety programs, pre-qualification requirements, and indemnification provisions all matter for risk allocation between the parties. They just don't determine who OSHA can cite.
Practical Implications for General Contractors
As a controlling employer, a GC's citation risk tracks its actual oversight of the site. GCs that conduct regular, documented safety inspections and follow up on identified hazards have a defensible record. GCs that delegate safety entirely to subcontractors and conduct no independent oversight do not.
Reasonable practices for controlling employers:
- Conduct regular documented site safety inspections — frequency should match the risk level and pace of work
- Establish clear safety requirements for all subcontractors in writing before work begins
- Pre-qualify subcontractors based on safety performance — OSHA history, EMR, and safety programs
- Hold regular safety coordination meetings with subcontractor safety representatives
- When a hazard is identified, follow up to confirm it's been corrected — don't just report it
- Document everything: inspections, identified hazards, corrective actions, and follow-up
Practical Implications for Subcontractors
Subcontractors can be cited as creating employers, exposing employers, or both — regardless of what the GC does or doesn't do. A sub whose workers are exposed to a hazard the sub didn't create is still obligated to protect its workers.
Practical steps for exposing employers:
- Train workers to recognize hazards on the site, not just in their specific work area
- When workers identify a hazard created by another employer, report it to the GC in writing and keep a record
- If the hazard isn't corrected and workers remain at risk, consider whether protective measures are available — PPE, work area avoidance, or in serious cases, removal from the work area
- Document your safety communications with the GC
HazCom on Multi-Employer Sites
Multi-employer worksites create specific HazCom obligations. If your workers could be exposed to chemicals brought to the site by another employer, that employer must make SDS available to you. If you bring chemicals to a site, you must ensure other employers on the site know about the hazards and have access to the SDS.
The HazCom standard (29 CFR 1910.1200(e)(2)) specifically addresses multi-employer workplaces and requires employers to make their written HazCom programs and SDS available to other employers whose workers may be exposed to the chemicals.