OSHA Citations for Subcontractors: Who Is Liable on Multi-Employer Worksites (2026)

On a construction site with a general contractor and six subcontractors, who gets cited when OSHA finds a fall protection violation? The subcontractor whose employee was unprotected? The general contractor who controls the site? Both? The answer depends on OSHA's Multi-Employer Citation Policy (CPL 02-00-124), which defines four categories of employer responsibility on multi-employer worksites. Understanding these categories — and knowing which one applies to your company — is the difference between defending a citation effectively and paying a penalty you should not have received.

This is one of the most confusing areas of OSHA enforcement, and one of the most expensive when misunderstood. General contractors regularly receive citations for hazards they did not create, and subcontractors receive citations for hazards they had no authority to correct. Both situations are defensible — if you know the framework. For a broader overview of the multi-employer doctrine, see our detailed guide on multi-employer worksite liability.

The Four Employer Categories: Who OSHA Can Cite and Why

OSHA's multi-employer policy categorizes every employer on a construction site into one or more of four roles. Each role carries different citation exposure and different defense strategies.

1. Creating Employer

The employer whose actions or inactions caused the hazardous condition. The creating employer can be cited even if its own employees are not exposed to the hazard. For example, if a subcontractor removes a guardrail to deliver materials and does not replace it, that subcontractor is the creating employer — even if only another subcontractor's workers are exposed to the fall hazard.

Defense strategy: Prove you did not create the hazard, or that you took immediate steps to correct it once discovered. Documentation showing that the hazard existed before your crew arrived on site, or was created by another trade, undermines OSHA's creating employer theory.

2. Exposing Employer

The employer whose employees are exposed to the hazard. This is the most common basis for citing subcontractors. If your electricians are working on a floor where the guardrails are missing — even though your crew did not remove them — you can be cited as the exposing employer because your employees are at risk.

Defense strategy: An exposing employer can defend by showing it took reasonable steps to protect its employees from the hazard. This includes: identifying the hazard and notifying the creating employer or controlling employer, requesting correction, implementing interim protective measures for its own employees, and removing employees from the hazard area if no protection was available. Documented notifications to the GC about uncorrected hazards are powerful defense evidence.

3. Correcting Employer

The employer responsible for correcting the hazard. This is often (but not always) the same as the creating employer. On some sites, a specific subcontractor is contractually responsible for maintaining safety conditions — for example, a scaffolding subcontractor responsible for all scaffold erection, modification, and daily inspections.

Defense strategy: If you are cited as a correcting employer, your defense depends on whether you actually had the contractual or practical responsibility to correct the hazard. Review your subcontract language carefully. If the contract does not assign correction responsibility to you, challenge the correcting employer classification.

4. Controlling Employer

The employer with general supervisory authority over the worksite, including the power to correct hazards or require other employers to correct them. On construction sites, this is almost always the general contractor. The controlling employer can be cited for any hazard on the site — even one created by a subcontractor — if OSHA determines the controlling employer failed to exercise reasonable diligence to detect and correct the hazard.

Defense strategy: A controlling employer can defend by demonstrating reasonable diligence. This does not mean the GC must prevent every hazard. It means the GC must have a system to identify and address hazards, and must demonstrate that the system was functioning. The required level of diligence depends on the foreseeability and severity of the hazard.

What “Reasonable Diligence” Means for General Contractors

OSHA evaluates whether a controlling employer exercised reasonable diligence based on several factors. If you are a GC, these are the questions OSHA will ask:

• Did you conduct regular site safety inspections? Not just a walk-through when the owner visits — documented, systematic inspections covering all active work areas.
• Did you identify the hazard? If the hazard was obvious and your inspection records do not reflect it, OSHA will argue you were not actually inspecting.
• Did you notify the responsible subcontractor? Written notification with a specific deadline for correction is far more defensible than a verbal conversation.
• Did you follow up? If you notified the subcontractor and the hazard persisted, did you escalate? Issue a written warning? Withhold access to the work area? Stop-work authority is meaningless if you never exercise it.
• Did you evaluate subcontractor safety performance before they mobilized? Pre-qualification reviews, safety program submittals, and EMR (Experience Modification Rate) checks demonstrate proactive diligence.

Real-World Scenarios: Who Gets Cited

Scenario 1: Missing Guardrails on an Active Floor

A framing subcontractor removes guardrails to install exterior sheathing and does not replace them. An HVAC subcontractor's workers are found working near the unprotected edge.

• Framing sub: Cited as creating employer (removed guardrails)
• HVAC sub: Cited as exposing employer (employees working near unprotected edge)
• GC: Cited as controlling employer if inspections did not catch the missing guardrails, or if the GC was notified and did not ensure correction

Defense for the GC: Produce daily inspection records from the same day showing the guardrails were in place during the morning inspection. Show that the framing sub removed them later in the day without notification. This demonstrates the GC was inspecting and the hazard was created between inspections.

Scenario 2: Unprotected Trench

A utility subcontractor excavates a 6-foot trench without sloping, shoring, or a trench box. The sub's workers enter the trench. OSHA arrives and cites both the sub and the GC.

• Utility sub: Cited as creating and exposing employer (excavated the trench and placed workers in it without protection)
• GC: Cited as controlling employer for failing to ensure the sub complied with excavation safety requirements

Defense for the GC: Produce the subcontractor's submitted excavation safety plan (showing the GC required one), daily inspection records covering the excavation area, written notifications to the sub about trenching requirements, and evidence that the GC verified competent person designation before excavation began.

Scenario 3: Subcontractor Cited for Hazard They Didn't Create

An electrical subcontractor is cited for exposed rebar on a floor where their workers were pulling wire. The rebar was left unguarded by the concrete subcontractor.

Defense for the electrical sub: The sub did not create the hazard and had no responsibility to correct it. Present evidence that the sub notified the GC about the exposed rebar (email, written safety report, or daily log entry), and that the sub took interim measures to protect its workers (routing workers away from the hazard area or providing supplemental protection).

Documentation That Protects Both GCs and Subcontractors

For General Contractors (Controlling Employers)

1. Daily site safety inspection records — documented walkthroughs of all active work areas, noting hazards observed and corrective actions directed
2. Written hazard notifications to subcontractors — specific description of the hazard, the standard violated, the deadline for correction, and consequences for non-compliance
3. Subcontractor corrective action responses — written confirmation that the hazard was corrected, with date and responsible person
4. Subcontractor safety pre-qualification records — safety program reviews, EMR verification, OSHA citation history checks performed before contract award
5. Escalation records — evidence that when subcontractors failed to correct hazards, the GC escalated enforcement (written warnings, stop-work orders, contract default notices)
6. Site safety meeting records — attendance sheets, topics covered, subcontractor participation

For Subcontractors (Exposing/Creating Employers)

1. Hazard notification records — copies of written notifications sent to the GC about hazards observed that were outside your scope to correct
2. Employee safety training records — documented training on hazards specific to your scope of work, with employee signatures and trainer qualifications
3. Daily crew safety briefing records — toolbox talk documentation covering site-specific hazards your workers may encounter
4. Scope-of-work documentation — clear contract language defining your scope, which helps establish what you did and did not have authority to control or correct
5. Interim protection measures — evidence that when you identified a hazard outside your scope, you took steps to protect your own workers (rerouting, supplemental PPE, removing workers from the area)

The Most Common Mistake: Assuming the Contract Protects You

Many general contractors include indemnification clauses in subcontracts that require subcontractors to assume responsibility for OSHA violations. Many subcontractors assume that because they did not create a hazard, they cannot be cited.

Both assumptions are wrong under OSHA law.

OSHA does not recognize contractual allocation of safety responsibility. A GC cannot transfer its controlling employer obligations to a subcontractor through a contract clause. OSHA cites based on the four-category framework, not based on what the parties agreed to in their subcontract. While the subcontract may affect who ultimately bears the financial cost (through indemnification), it does not affect who receives the citation or who must respond within the 15-day deadline.

Similarly, subcontractors cannot avoid citation by pointing to the GC's site control. If your employees are exposed to a hazard, you are the exposing employer regardless of who controls the site. Your defense is not “it's not my job” — it is “I took reasonable steps to protect my workers from a hazard I did not create.”

The only reliable protection is documentation. Not contract language — documentation of what you actually did to identify, communicate, and address hazards on the job site. For a complete list of what OSHA expects contractors to maintain, see OSHA required documentation for contractors.