OSHA Multi-Employer Worksite Responsibilities

Why This Topic Matters
Construction sites are almost never single-employer workplaces. An owner, a construction manager, a general contractor, dozens of subcontractors, suppliers, and inspectors may all have personnel on site at the same time. OSHA recognized decades ago that if it could only cite the employer whose own workers were hurt, the parties who actually created or controlled a hazard would escape accountability. The result is the Multi-Employer Citation Policy (OSHA Directive CPL 2-0.124, issued December 10, 1999), which allows OSHA to cite more than one employer for the same hazardous condition.

For a Certified Construction Manager, this is not an abstract regulatory topic. The CMAA Standards of Practice stress that the CM's safety role is defined by contract, and that the CM must understand how much authority it holds over site safety, because that authority is exactly what OSHA uses to decide whether the CM is a controlling employer. Misunderstanding this doctrine can expose a CM firm to citations, litigation, and reputational damage, and can also leave hazards uncorrected because everyone assumed someone else was responsible. On the CCM exam, the Safety Management domain regularly tests whether you can identify which party OSHA would hold responsible and what a CM should and should not do on a multi-employer site.

What the Multi-Employer Citation Policy Is
The policy is a framework OSHA compliance officers use to decide which employers on a shared worksite can be cited for a violation of an OSHA standard. It applies under the Occupational Safety and Health Act and is used heavily in construction (29 CFR Part 1926), supported by 29 CFR 1926.16, which states that prime contractors and subcontractors may be held jointly responsible and that the prime contractor cannot contractually escape its overall responsibility for compliance.

The policy defines four categories of employers. An employer may fall into more than one category at the same time.

1. Creating Employer
The employer that caused the hazardous condition. A creating employer can be cited even if only employees of other companies are exposed, as long as the creating employer's own employees were on the site. Example: a masonry subcontractor leaves an unguarded floor opening that exposes an electrical subcontractor's workers.

2. Exposing Employer
The employer whose own employees are exposed to the hazard. If the exposing employer also created the hazard, it is citable on that basis alone. If it did not create the hazard, it is citable only if it (a) knew of the hazard or could have discovered it with reasonable diligence, and (b) failed to take steps consistent with its authority. Those steps include asking the creating or controlling employer to correct the hazard, informing its own employees, and taking reasonable alternative protective measures. In cases of imminent danger, it must remove its employees from the hazard.

3. Correcting Employer
The employer engaged in a common undertaking on the same worksite that is specifically responsible for installing or maintaining a particular safety or health control, such as a company contracted to install and maintain perimeter guardrails or fall protection systems. A correcting employer must exercise reasonable care in preventing and discovering violations and must meet its obligation to correct them.

4. Controlling Employer
The employer with general supervisory authority over the worksite, including the power to correct safety violations itself or to require others to correct them. This authority may arise either from contract or from actual practice. Even without explicit contract language, an employer that in practice directs work, stops work, or enforces safety rules can be treated as a controlling employer. General contractors are the classic controlling employer, but an owner, a CM at-risk, or even an agency CM with sufficient contractual authority can qualify.

How the Policy Works: The Two-Step Analysis
OSHA applies a two-step test to every employer on the site.

Step 1: Does the employer fit one or more of the four categories? If not, it cannot be cited.

Step 2: If the employer fits a category, did it fail to meet the obligations of that category? Only an employer that fell short of its duties is citable.

The key concept in Step 2 is reasonable care. OSHA does not require perfection; it requires the employer to act reasonably given its role and knowledge.

The Controlling Employer's Standard of Reasonable Care
This is the most heavily tested nuance. A controlling employer's duty toward other employers' workers is less than its duty toward its own employees. OSHA states that a controlling employer is not normally required to inspect for hazards as frequently or with the same depth of knowledge as the employer whose workers are directly exposed. Factors that determine what is reasonable include:
• The scale and complexity of the project.
• The nature and pace of the work, including how quickly hazardous conditions change.
• How much the controlling employer knows about the safety history and practices of the subcontractor it controls.
• Whether the controlling employer has implemented a site safety program and enforces it.

A controlling employer that conducts periodic site inspections, has an effective system for promptly correcting hazards, and enforces compliance through a graduated enforcement system (warnings, fines, stop-work, removal) is generally considered to have exercised reasonable care. If the subcontractor has a history of noncompliance, the controlling employer is expected to inspect more frequently. Conversely, a controlling employer that simply hands safety responsibility to subcontractors on paper and then ignores obvious hazards will be cited.

The Summit Contractors litigation (OSHRC and the Eighth Circuit, 2007 through 2012) confirmed that OSHA may cite a general contractor as a controlling employer even when none of its own employees are exposed to the hazard, reinforcing the doctrine's reach.

How This Applies to the Construction Manager
The CMAA position, reflected in the Standards of Practice and the CM Safety Management chapter, is that the CM's safety responsibilities are determined by the contract and that the contractor is normally responsible for construction means, methods, techniques, sequences, procedures, and site safety programs.

• Agency CM (CM as owner's advisor): Typically does not direct the contractor's work and usually is not a controlling employer. However, the CM is still an exposing employer with respect to its own on-site staff and must protect them. The CM should also report observed hazards to the contractor and the owner and document that notification. The CM must be careful not to assume authority it does not have by contract (for example, routinely directing how subcontractors perform work), because actual practice can convert it into a controlling employer.

• CM at-Risk: Holds the trade contracts and has supervisory authority, so it is almost always a controlling employer, and often a creating or correcting employer as well. It must implement and enforce a site-specific safety program, conduct inspections at reasonable intervals, and correct or require correction of hazards.

• Contract drafting: The CM should ensure the owner-contractor agreement clearly assigns site safety responsibility to the contractor, requires a site-specific safety plan, requires compliance with OSHA, and defines the CM's role (observe, report, require corrective action) in a way that matches how the CM actually behaves in the field.

• Best practice regardless of role: Never ignore an imminent danger. A CM observing a life-threatening hazard should notify the responsible contractor immediately, protect its own staff, and escalate to the owner. Documentation of these actions is the CM's best defense.

Exam Tips: Answering Questions on OSHA Multi-Employer Worksite Responsibilities

Tip 1: Identify the role before anything else. Read the question stem and ask: who created the hazard, whose workers are exposed, who was contracted to correct it, and who has authority to require correction? Label each party as creating, exposing, correcting, or controlling. The correct answer almost always follows directly from the correct label.

Tip 2: Remember that roles overlap and multiple employers can be cited. If an answer choice says only one employer may be cited for a hazard, it is usually wrong. A subcontractor who created a hazard and exposed its own crew is both a creating and exposing employer, and the general contractor can simultaneously be cited as the controlling employer.

Tip 3: Know the two-step test. Questions may describe an employer that clearly fits a category but acted with reasonable care. Being in a category is not enough for a citation; the employer must also have failed its obligations.

Tip 4: Authority equals control. The defining feature of a controlling employer is the power to correct hazards or require others to correct them, whether that power comes from the contract or from actual practice. If a question stresses that the CM had and exercised stop-work authority and directed subcontractors, expect the CM to be treated as a controlling employer.

Tip 5: The controlling employer's duty is reduced, not eliminated. Watch for answers that say the controlling employer must inspect as often and as thoroughly as the exposing employer (too strict) or that it has no duty to inspect at all (too lenient). The correct standard is reasonable care, with less frequent inspection than for its own workers, increased when a subcontractor has a poor safety record.

Tip 6: Know the exposing employer's limits. An exposing employer that did not create a hazard is expected to request correction, warn its workers, take alternative protective measures, and remove workers from imminent danger. It is not expected to fix hazards outside its authority.

Tip 7: For CM-specific questions, default to the contract. The CMAA answer is that the CM's safety role is defined by the contract and that the contractor controls means, methods, and site safety. Be suspicious of extreme choices such as the CM is always responsible for site safety or the CM has no safety responsibility whatsoever. The best answer usually involves the CM observing, notifying, documenting, and enforcing contract requirements without assuming the contractor's means and methods.

Tip 8: Imminent danger is the exception. When a scenario describes a life-threatening hazard, the correct CM action is immediate notification to the contractor and protection of people, not waiting for a scheduled safety meeting or merely noting it in a report.

Tip 9: Watch for the words knew or should have known. Knowledge, actual or constructive, is central to citing exposing and controlling employers. If the hazard was hidden, newly created, and undiscoverable through reasonable diligence, the non-creating employer generally cannot be cited.

Tip 10: Connect to 29 CFR 1926.16. If a question references the prime contractor's inability to contract away overall responsibility for OSHA compliance, this regulation is the source. Subcontracting work does not relieve the prime contractor of its duties, though it may shift primary responsibility for specific tasks to the subcontractor.

Quick Reference Summary
• Policy source: OSHA CPL 2-0.124 (1999); construction support in 29 CFR 1926.16.
• Four categories: Creating, Exposing, Correcting, Controlling (often remembered as CECC).
• Two-step test: Does the employer fit a category? Did it fail to meet that category's obligations?
• Standard: Reasonable care, scaled to role, authority, project scale, and subcontractor history.
• Controlling employer: general supervisory authority by contract or practice; reduced but real inspection duty.
• CM takeaway: Define safety roles in the contract, act consistently with that role, observe and report hazards, document everything, and never ignore imminent danger.