Quick Highlights
- More than one employer can have OSHA responsibilities on the same worksite.
- OSHA evaluates employers based on their role in creating, exposing workers to, correcting, or controlling hazards.
- Contractor safety responsibilities can overlap even when another company created the hazard.
- Effective contractor safety management requires clear responsibilities, communication, and ongoing oversight.
- Centralizing compliance information lets contractors identify and manage potential compliance risks.
When several contractors are working on the same jobsite, it can be easy to assume each company is responsible only for its own employees and activities.
OSHA's approach to multi-employer worksites is more complicated.
Under OSHA's Multi-Employer Citation Policy, more than one employer may be cited for a hazardous condition that violates an OSHA standard. OSHA evaluates the role each employer plays and whether that employer took sufficient steps to meet its obligations.
That makes understanding OSHA employer responsibilities especially important for general contractors, subcontractors, and other companies sharing a worksite.
A recent California enforcement case illustrates why.
In August 2026, Cal/OSHA announced $282,420 in proposed penalties against three roofing contractors following an investigation into a worker's fatal 24-foot fall. According to Cal/OSHA, inspectors determined that each employer had responsibilities for protecting workers involved in the roofing operation. The alleged violations included failures involving fall protection, ladder-safety training, first-aid coverage, and heat-illness-prevention training.
The case involved California requirements rather than a federal OSHA multi-employer citation determination, but it highlights a broader lesson for contractors: having multiple employers on a jobsite doesn't necessarily mean safety responsibility belongs to someone else.
Contractor Safety Starts With Understanding OSHA Employer Responsibilities
OSHA's federal Multi-Employer Citation Policy applies to multi-employer worksites across industry sectors. Under the policy, OSHA uses a two-step process when determining whether an employer may be cited.
First, OSHA determines whether the employer fits into one or more of four categories:
- Creating employer
- Exposing employer
- Correcting employer
- Controlling employer
OSHA then evaluates whether the employer took sufficient action to satisfy the obligations associated with its role.
This means OSHA employer responsibilities are not determined solely by a company's title.
A general contractor isn't automatically responsible for every violation simply because it is the general contractor. Likewise, a subcontractor can't necessarily avoid responsibility because another company created a hazard.
OSHA has specifically explained that responsibilities under its multi-employer policy depend on an employer's role, rather than simply its job title.
Understanding those roles is therefore an important part of contractor safety.
The Four Employer Roles Under OSHA's Multi-Employer Citation Policy
The four categories are central to understanding how OSHA approaches responsibility on a multi-employer worksite.
Creating Employer
The creating employer is the employer that caused a hazardous condition that violates an OSHA standard.
Importantly, OSHA says a creating employer may be cited even when its own employees aren't the workers exposed to the hazard.
For example, one contractor could damage a protective system that employees from another company rely on. The fact that the first contractor's employees aren't exposed doesn't automatically eliminate its responsibility for the condition it created.
Exposing Employer
The exposing employer is an employer whose own employees are exposed to a hazard.
If another company created the condition, that doesn't necessarily relieve the exposing employer of its obligations.
Under OSHA's policy, an exposing employer that knew about a hazardous condition, or failed to exercise reasonable diligence to discover it, may be cited if it doesn't take appropriate steps within its authority to protect employees.
If the employer has authority to correct the hazard, OSHA expects it to do so. When it doesn't have that authority, OSHA's policy describes other steps, including asking the creating or controlling employer to correct the condition, informing employees about the hazard, and using reasonable alternative protective measures.
Correcting Employer
A correcting employer is responsible for correcting a hazard on a shared worksite.
OSHA notes that this commonly occurs when an employer has responsibility for installing or maintaining particular safety and health equipment or devices.
The correcting employer is expected to exercise reasonable care in identifying and preventing violations and fulfilling its responsibility to correct hazards.
Controlling Employer
The controlling employer has general supervisory authority over the worksite, including the ability to correct safety and health violations itself or require another employer to correct them.
Control can arise through a contract, but contractual language isn't the only consideration. OSHA says an employer may sometimes be considered controlling based on the authority it exercises in practice.
A controlling employer must exercise reasonable care to prevent and detect violations. However, OSHA's policy recognizes that the degree of care expected of a controlling employer is different from the responsibility an employer has for protecting its own employees.
Contractor Safety Responsibilities Can Overlap
One of the most important aspects of OSHA's policy is that these categories aren't necessarily exclusive.
An employer can have multiple roles at the same time. OSHA specifically notes that creating, correcting, and controlling employers may also be exposing employers.
Consider a project where a subcontractor's employees encounter an unprotected fall hazard created by another company.
The company that created the condition may have responsibilities as the creating employer.
The subcontractor whose employees are exposed may have responsibilities as the exposing employer.
Another contractor tasked with maintaining fall-protection systems could potentially be the correcting employer.
And an employer with sufficient supervisory authority over the worksite could potentially qualify as a controlling employer.
Whether OSHA would actually issue citations depends on the specific facts and whether each employer fulfilled the obligations associated with its role. OSHA has emphasized that multi-employer citation decisions are fact and site-specific.
Contractor Safety Management Requires More Than Assigning Responsibility
Contracts and written policies are important, but effective contractor safety management also requires employers to understand what's actually happening on the jobsite.
Responsibilities can become blurred when several companies perform different scopes of work in the same area. One contractor's activities may introduce hazards for another company's employees, conditions can change as work progresses, and responsibilities for correcting problems may differ from project to project.
A contractor safety management process should therefore make it easier for organizations answer practical questions such as:
- Who has authority to address a particular hazard?
- Who is responsible for correcting it?
- Which employees could be exposed?
- How are hazards communicated between employers?
- How are identified problems documented and escalated?
- Are workers properly trained for the hazards they encounter?
- Are corrective actions followed through to completion?
These conversations should happen before a serious incident or OSHA inspection forces companies to determine who was responsible after the fact.
Compliance Risk Management on Multi-Employer Jobsites
Good compliance risk management begins before crews arrive at the worksite.
Contractors should understand applicable regulatory requirements as well as requirements imposed by customers, hiring clients, and contractor management platforms.
Depending on the relationship, that may involve maintaining current safety programs, insurance information, employee qualifications, training records, incident information, or other documentation.
Once work begins, compliance risk management continues.
Companies still need processes for identifying hazards, communicating concerns, managing corrective actions, maintaining required documentation, and responding when conditions change.
A company may have strong safety procedures but still create unnecessary risk if expired documents, incomplete requirements, or changing hiring-client expectations aren't identified in time.
Strengthen Contractor Safety Management With Safety Services Cloud
Managing OSHA employer responsibilities becomes increasingly complicated when contractors work for multiple hiring clients, use different contractor-management platforms, and need to keep numerous compliance requirements current.
Safety Services Cloud brings that information together.
The result: Contractors using the Safety Services Cloud can:
- Cut internal compliance costs by up to 50%
- Reduce manual work by up to 95%
- Free up time to go win the next job instead of chasing paperwork on the current one
Rather than relying on disconnected spreadsheets, emails, and individual platform accounts, Safety Services Cloud gives contractors a centralized place to manage compliance requirements across hiring clients and contractor-management platforms.
With everything in one place, you’ll always know where your compliance stands, what needs attention, and what’s already covered.
