TL;DR
The OSHA multi-employer citation policy (CPL 02-00-124) allows OSHA to cite any employer on a shared worksite based on their role in creating, controlling, correcting, or being exposed to a hazard, even if only another company’s workers are at risk. General contractors are most frequently caught as “controlling employers.” The policy applies across all industries, not just construction. Your best defense is documented reasonable care: subcontractor prequalification, regular inspections, and corrective action follow-through.
A scaffold violation on a busy construction site. The framing sub built it wrong, the electrical sub is working on it, a staffing agency has two temps nearby, and the general contractor oversees the whole project. Who gets cited?
Under OSHA’s multi-employer citation policy, the answer could be all four of them.
This single enforcement directive is responsible for more surprise citations against general contractors than almost any other OSHA mechanism. It catches companies that never created the hazard, never had employees near the hazard, and assumed their contract language protected them. Understanding how it works is not optional for anyone managing a multi-trade jobsite.
If you’re already facing a citation on a multi-employer worksite, OSHA citation response support can help you navigate deadlines and build a defense.
What is the OSHA Multi-Employer Citation Policy?
The OSHA Multi-Employer Citation Policy (Compliance Directive CPL 02-00-124) is an enforcement framework that allows OSHA to cite multiple companies on a shared worksite for a single safety hazard. OSHA categorizes employers into four roles: Creating, Exposing, Correcting, and Controlling. Under this policy, a company—most frequently a general contractor acting as a controlling employer—can receive OSHA citations and penalties even if its own employees were never exposed to or endangered by the hazard.
What Is the OSHA Multi-Employer Citation Policy?
The OSHA multi-employer citation policy is Compliance Directive CPL 02-00-124, issued December 10, 1999 and still in force today. It instructs OSHA compliance officers on how to determine which employers to cite when more than one company shares a worksite.
The core principle: any employer on a shared worksite can be cited based on their role in creating, controlling, or correcting hazardous conditions, even if only another company’s workers were at risk.
Three points that trip people up immediately:
It is not a regulation. CPL 02-00-124 is an enforcement directive, not a standard codified in the Code of Federal Regulations. The underlying hazards are still cited under the actual standards in 29 CFR 1910 (general industry) and 29 CFR 1926 (construction). The directive only determines which employers receive those citations. This distinction matters significantly in legal challenges, as we’ll cover later.
It applies to every industry. Construction gets the most attention because multi-employer worksites are the norm in that sector. But the policy applies equally to general industry, maritime, and agriculture. A manufacturing facility with a maintenance contractor and a staffing agency on-site falls under the same rules.
It dates back to the 1970s. The doctrine originated shortly after OSHA came into existence. OSHA initially used it to cite general contractors who exercised control over worksites and employers who created hazards for other companies’ employees. Legal challenges began almost immediately and have continued ever since.
OSHA’s Two-Step Enforcement Process
When an OSHA compliance officer arrives at a worksite where multiple employers are present, they follow a two-step process to determine who gets cited.
Step 1: Categorize the Employer
The compliance officer determines whether each employer falls into one or more of four categories: creating, exposing, correcting, or controlling employer. An employer can hold multiple roles simultaneously on the same site.
Step 2: Evaluate Whether Obligations Were Met
If an employer falls into any of the four categories, the compliance officer then evaluates whether that employer’s actions were sufficient to meet the obligations attached to their category. The extent of what’s required varies by category. A controlling employer’s duty looks different from an exposing employer’s duty.
This two-step structure means that simply being on a multi-employer worksite doesn’t automatically make you citable. You have to fit one of the categories first, and then OSHA has to determine that you failed to meet the corresponding standard of care.
Employer Category | Primary Definition | Own Workers Exposed? | Key Defense / Standard of Care |
Creating | Caused or introduced the hazard/violation | No | Prove the hazard was abated immediately or turned over to a controlling entity with explicit warning. |
Exposing | Own employees are exposed to the risk | Yes | Demonstrate lack of authority to fix, notification sent to GC/creating sub, and interim protective steps taken. |
Correcting | Contracted to install, repair, or maintain safety controls | No | Prove reasonable care and prompt execution of installation, repair, or hazard abatement duties. |
Controlling | Holds general supervisory or scheduling authority | No | Demonstrate “Reasonable Care”: documented prequalification, regular site inspections, and logged corrective action. |
The Four Employer Categories Defined
The multi-employer citation policy classifies every employer on a shared worksite into one or more of four categories. Each carries distinct obligations.
Creating Employer
A creating employer causes a hazardous condition that violates an OSHA standard. This employer can be cited even if only another company’s workers are exposed to the hazard.
Example: A concrete subcontractor removes a guardrail to pour a section of wall and doesn’t replace it. The guardrail gap creates a fall hazard. Even if only the electrician’s crew works near that edge, the concrete sub is citable as the creating employer.
Exposing Employer
An exposing employer’s own workers are exposed to the hazard. Even without creating the hazard, this employer must take reasonable steps to protect its employees.
The defense pathway for exposing employers is specific. If the exposing employer lacks authority to correct the hazard directly, it must still: (1) ask the creating or controlling employer to correct the hazard, (2) inform its own employees of the danger, and (3) take reasonable alternative protective measures, such as removing employees from the area until the hazard is fixed.
One important limitation: only exposing employers can be cited for violations of the General Duty Clause. Creating, controlling, and correcting employers face citations under specific OSHA standards, not the catch-all provision of Section 5(a)(1).
Correcting Employer
A correcting employer is responsible for fixing a specific hazard. Common examples include a company hired to maintain guardrails, install temporary electrical systems, or handle fire protection equipment. The correcting employer must exercise reasonable care in performing its abatement duties.
Example: A safety netting subcontractor is responsible for maintaining fall protection systems across a high-rise project. If the nets develop gaps and the company doesn’t fix them promptly, it’s citable as the correcting employer even if none of its own employees work near those gaps.
Controlling Employer
A controlling employer has general supervisory authority over the worksite. On construction projects, this is almost always the general contractor. This employer must exercise reasonable care to detect and prevent violations across the site.
This is the category that generates the most citations, the most legal disputes, and the most confusion. It deserves a deeper look.
Controlling Employer: Why General Contractors Get Caught
The controlling employer classification is where the multi-employer citation policy hits hardest. A general contractor can be cited for a subcontractor’s violation even when no GC employees were anywhere near the hazard.
How Control Is Established
Control can be established two ways: by explicit contractual provisions or by actual practice on the jobsite. The contract doesn’t have to say “safety oversight.” If the GC has authority to stop work, direct scheduling, or approve subcontractor activities, that’s enough.
This catches construction managers too. Regardless of what the contract says, if a construction manager is exercising general supervisory authority as a practical reality, OSHA will treat it as a controlling employer.
Practitioners on Reddit and construction forums frequently express frustration about this point. Many report learning they were considered controlling employers only after receiving a citation, because they assumed their contract structure shielded them from liability.
The “Reasonable Care” Standard
The controlling employer’s obligation is to exercise reasonable care to detect and prevent violations. This is a lower standard than what’s required of an employer protecting its own workers, reflecting the GC’s secondary safety role. But “lower” doesn’t mean “low.”
OSHA evaluates reasonable care using several factors:
Scale of the project. A 200-worker commercial build demands more oversight than a 10-person tenant improvement.
Nature and pace of the work. Fast-moving operations with higher inherent risk (steel erection, demolition) require more frequent monitoring.
The subcontractor’s safety history. If a sub has a track record of noncompliance, the controlling employer must increase inspection frequency. Prior knowledge of problems raises the bar.
The controlling employer’s knowledge of safety practices and expertise. OSHA expects more from a GC with a full safety department than from a small builder acting as their own GC.
Why “Telling the Sub to Fix It” Is Not Enough
One of the most common mistakes GCs make: they identify a hazard, tell the subcontractor to correct it, and move on. Under the multi-employer citation policy, verbal direction alone doesn’t satisfy the reasonable care standard. The controlling employer must verify that correction actually occurred.
This verification requirement is what makes documented jobsite inspections so important. Safety professionals who serve as on-site safety staff for general contractors spend a significant portion of their time creating exactly this kind of documented evidence: inspection records, corrective action logs, and close-out verifications.
Current Penalty Amounts (2025 to 2026)
For 2025 and 2026, OSHA’s maximum civil penalties are:
Violation Type | Maximum Per Violation |
|---|---|
Serious | $16,550 |
Other-than-serious | $16,550 |
Willful or repeated | $165,514 |
Failure to abate | $16,550 per day |
Note: 2026 maximum penalty rates reflect the 2025 baseline ($16,550 for Serious/Other-than-Serious; $165,514 for Willful/Repeat) as annual inflation adjustments were not indexed by the BLS for this cycle.
These amounts are unchanged for 2026. The fall 2025 government shutdown prevented the Bureau of Labor Statistics from publishing October 2025 CPI-U data, and the Federal Civil Penalties Inflation Adjustment Act allows no substitute measure. No index, no adjustment.
The Multiplier Effect on Multi-Employer Sites
Here is where the math gets alarming. On a multi-employer worksite, a single hazard can generate citations against multiple employers. Consider a scaffold that violates fall protection standards. Under the OSHA multi-employer citation policy, OSHA can cite the subcontractor who built it (creating employer), the GC overseeing the site (controlling employer), and the trade working on it (exposing employer). That’s potentially $49,650 or more in penalties from one scaffold, one violation, one inspection.
Practitioners on safety forums often point out that the most frequently cited OSHA violations (fall protection, scaffolding, ladders) are exactly the hazards most likely to trigger multi-employer citations on construction sites.
If your company has received a citation and needs guidance on OSHA penalty reduction strategies, acting quickly matters. OSHA imposes a 15-business-day deadline to contest citations.
Six Common Misconceptions About the Multi-Employer Citation Policy
These are the points of confusion that come up again and again in practice.
“I Didn’t Create the Hazard, So I Can’t Be Cited”
Wrong. Controlling and correcting employers can be cited for hazards they played no role in creating. The question isn’t who caused the problem. It’s who had an obligation to detect, prevent, or fix it.
“My Employees Weren’t Exposed, So I’m in the Clear”
Wrong. Creating, controlling, and correcting employers can all be cited even if none of their own employees were exposed to the hazard. Only the exposing employer category requires the employer’s own workers to be at risk.
“My Contract Says the Sub Is Responsible for Safety”
This does not limit OSHA’s authority. Recent court decisions confirm that contractual risk transfer provisions do not shield a controlling employer from citations. Contract language may help with civil litigation and insurance recovery after the fact, but OSHA doesn’t recognize it as a defense.
“This Only Applies to Construction”
The multi-employer citation policy applies across construction, general industry, maritime, and agriculture. Any shared worksite with multiple employers is covered.
“The Policy Is an Actual Regulation”
It is not. CPL 02-00-124 is an enforcement directive, an internal instruction to OSHA compliance officers. This distinction is the basis for ongoing legal challenges, particularly after the Supreme Court’s 2024 Loper Bright decision (more on that below).
“If I Told the Sub to Fix It, I’ve Done Enough”
It depends, but usually no. Verbal instruction without documented follow-up and verification of correction typically fails to meet the reasonable care standard.
How Employers Can Defend Against Multi-Employer Citations
The strength of any defense under the multi-employer citation policy depends on documentation. As one safety director put it in an industry podcast: “If it’s not documented, it didn’t happen in OSHA’s eyes.” That phrase has become a cliche in the profession because it keeps proving true.
Prequalify Every Subcontractor
Review their Experience Modification Rate (EMR), OSHA 300 logs, written safety programs, training records, and any history of OSHA citations before they set foot on your site. Contractors with poor safety records increase your exposure as a controlling employer because OSHA will evaluate whether you knew (or should have known) about their compliance history.
Require Written Safety Programs Before Mobilization
Every subcontractor should submit a written safety program that meets your project’s requirements. If their safety manual isn’t OSHA-compliant, that’s a red flag you need to address before work begins, not after an inspection.
Conduct Documented Inspections Matched to Project Risk
Inspection frequency should reflect the scale of the project, the nature of the work, and each subcontractor’s compliance history. Keep written records with dates, findings, photos, and corrective actions assigned. This documentation is your primary evidence of reasonable care.
Track Corrective Actions to Closure
Identifying a hazard and noting it on an inspection report is only half the job. The controlling employer must verify that corrections were actually made. Maintain a corrective action log with close-out dates and verification signatures.
Include Safety Clauses in Every Contract
Your subcontract agreements should include explicit right-to-correct provisions, safety compliance requirements, and consequences for noncompliance. While these clauses won’t stop OSHA from citing you, they demonstrate organizational commitment to safety oversight and support your reasonable care defense.
Ensure Your Supervisors Have Proper Training
OSHA expects controlling employers to have competent personnel monitoring the site. Your field supervisors and project managers should have appropriate OSHA training documented in their files.
Address the Employee Misconduct Defense Carefully
If a citation stems from a subcontractor employee’s actions, the unpreventable employee misconduct defense is available but demanding. You must show that rules existed, were communicated, were monitored, and were enforced. Without all four elements, the defense fails.
State Plan Considerations
CPL 02-00-124 is a federal program change for which state adoption is not required. That means states operating OSHA-approved State Plans have some discretion in how they handle multi-employer citations.
North Carolina has adopted the multi-employer citation policy. NC OSHA continues to issue multi-employer worksite citations and follows the same four-category framework as federal OSHA. Contractors working in North Carolina should not assume they’re operating under different rules.
California’s Cal/OSHA generally mirrors federal enforcement but has pursued even broader interpretations of controlling employer liability in some cases.
Other state-plan states may take different approaches. Before assuming the federal framework applies on your project, verify whether the state has adopted the directive or uses its own variation.
Legal Landscape: Key Cases and Post-Loper Bright Uncertainty
Solis v. Summit Contractors (8th Circuit, 2009)
The landmark case for the multi-employer doctrine. In Solis v. Summit Contractors, the Eighth Circuit upheld OSHA’s authority to cite general contractors for subcontractor-created violations even when no GC employees were exposed to the hazard. This decision validated the controlling employer framework and has been the backbone of OSHA’s enforcement approach on multi-employer worksites.
The Circuit Split
Not all federal circuits agree. The First, Second, Seventh, Eighth, and Tenth Circuits have upheld the multi-employer citation policy. The Fourth Circuit historically rejected it, and the Fifth Circuit did as well, though a more recent Fifth Circuit decision expanded enforcement expectations by confirming that OSHA may cite controlling employers at multi-tier worksites in Texas, Louisiana, and Mississippi.
Where your project is located can affect your legal exposure.
Federal Circuit | Jurisdictions Covered | Stance on Multi-Employer Policy | Practical Employer Impact |
1st, 2nd, 7th, 8th, 10th | CT, IL, IA, MA, MO, NY, CO, etc. | Fully Upheld (Solis v. Summit) | Controlling employers face strict enforcement and routine citations for subcontractor hazards. |
5th Circuit | TX, LA, MS | Enforced | OSHA actively cites multi-tier controlling employers across jobsites in these states. |
4th Circuit | MD, NC, VA, WV, SC | Historically Resisted | High vulnerability post-Loper Bright; local State Plans (like NC OSHA) enforce their own guidelines. |
State Plan States | CA, WA, OR, NC, NV, etc. | State Discretion | Enforcement varies; Cal/OSHA often applies broader controlling employer liability than federal OSHA. |
Post-Loper Bright: The Doctrine’s Vulnerability
This is the development most competing resources fail to cover. In 2024, the Supreme Court overturned Chevron deference in the Loper Bright decision. This matters enormously for the multi-employer citation policy.
Courts that previously upheld the directive typically relied on Chevron deference to validate OSHA’s administrative interpretations. Following the Supreme Court’s 2024 Loper Bright ruling, judges no longer defer to agency interpretations of ambiguous statutes and must evaluate independently whether the OSH Act authorizes citations against non-exposing employers.
Without clear language in the OSH Act authorizing citations against non-exposing employers, the multi-employer doctrine is vulnerable to renewed legal challenges. Outcomes may diverge further among circuits until Congress amends the statute or the Supreme Court addresses the issue directly.
For now, the directive remains in effect and OSHA continues to enforce it aggressively. But GCs and subcontractors should be aware that the legal ground under the multi-employer citation policy is shifting.
Bottom Line
The OSHA multi-employer citation policy means that every employer on a shared worksite has obligations, not just the company whose workers are closest to the hazard. General contractors carry the heaviest burden as controlling employers, and the “reasonable care” defense that protects them requires real, documented effort: prequalified subs, regular inspections, corrective action tracking, and proper training.
The penalties multiply fast when a single hazard generates citations against three or four employers simultaneously. And while the Loper Bright decision has opened the door to new legal challenges, no contractor should rely on future court rulings to protect them from a citation today.
Preparation is the best defense. If your organization needs help building the inspection programs, safety documentation, and oversight systems that demonstrate reasonable care, ESR’s OSHA compliance consulting provides the practitioner-level support that multi-employer worksites demand.
Frequently Asked Questions
Can a subcontractor be cited for another subcontractor’s violation?
Yes. If a subcontractor qualifies as a controlling or correcting employer on the worksite, it can be cited for another sub’s hazard. The categories in the multi-employer citation policy are based on each employer’s role, not just their contractual position. A mechanical sub that’s been given authority over a section of the jobsite could be treated as a controlling employer for that area.
Does the OSHA multi-employer citation policy apply to staffing agencies?
Yes. Staffing agencies are typically classified as exposing employers because their temporary workers are exposed to hazards on the host employer’s site. Both the staffing agency and the host employer have obligations to protect those workers, and both can be cited.
How does OSHA determine inspection frequency for reasonable care?
There’s no fixed schedule in the directive. OSHA evaluates whether the controlling employer’s inspection frequency was appropriate given the project’s scale, the pace and nature of the work, and each subcontractor’s compliance history. A project with high-hazard trades and a sub with prior citations demands more frequent monitoring than a low-risk project with experienced contractors.
Can I be cited as a controlling employer if I hired a safety consultant?
Hiring a safety consultant doesn’t automatically transfer your controlling employer obligations. The GC retains responsibility for exercising reasonable care. A consultant can help you meet that standard through inspections, documentation, and program management, but the legal obligation stays with the entity that has supervisory authority over the worksite.
What should I do immediately after receiving a multi-employer citation?
Note the 15-business-day contest deadline. Document everything you can about the conditions at the time of the inspection. Gather your inspection records, corrective action logs, and subcontractor prequalification files. Review the steps every company should know after receiving a citation and consider engaging professional support for your response.
Is the multi-employer citation policy the same in every state?
No. State-plan states are not required to adopt CPL 02-00-124. Most construction-heavy states follow the federal framework, but some (like California) apply broader interpretations while others may not have formally adopted the directive. Always verify the enforcement approach in the state where your project is located.