OSHA Controlling Employer: Duties, Citations, and Reasonable Care

Under OSHA’s Multi-Employer Citation Policy, a controlling employer is any company with general supervisory authority over a worksite, meaning the power to correct safety hazards or to require others to correct them. That authority is almost always held by the general contractor or project manager, and it carries citation exposure even when the company neither created the hazard nor had its own employees near it. If OSHA finds you had the authority to prevent unsafe conditions and did not exercise reasonable care, the citation lands on you.1Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

Serious violations currently carry penalties of up to $16,550 per instance, and willful or repeated violations reach $165,514.2Occupational Safety and Health Administration. OSHA Penalties Those numbers are why the controlling-employer designation matters so much on shared sites.

What Makes a Company a Controlling Employer

The test is whether the employer has the power to correct safety violations or make others correct them. That power can come from two places, and OSHA treats them equivalently.3Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

Authority Written into the Contract

This is the common route. Standard construction contracts between owners and general contractors include provisions letting the GC direct work, stop unsafe activities, and require corrective action from subcontractors. If the contract gives you the right to shut down a subcontractor’s operation when you spot a fall hazard, you are a controlling employer whether you ever use that clause or not. Authority on paper is enough.

Authority Exercised in Practice

An employer can also become a controlling employer by acting like one. Directing the sequence of work, telling subcontractors how to perform tasks, and managing the flow of workers and equipment across the site all establish control through conduct. OSHA compliance officers look at what actually happened on the ground, not only what documents say. In the Summit Contractors case before the Occupational Safety and Health Review Commission, the general contractor was found liable because it had “exclusive authority to manage, direct and control” construction activities and “complete direction” over subcontractors’ use of the site.1Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

The determination turns on position in the site hierarchy, not daily physical presence. A project manager who visits once a week but retains contractual authority to approve work schedules and enforce safety compliance is still the controlling employer.

The Reasonable Care Duty

Being labeled the controlling employer does not automatically produce a citation. OSHA applies a reasonable care standard that asks whether the employer took adequate steps to prevent and detect hazards. The bar is intentionally lower than what OSHA expects of an employer protecting its own workforce. A general contractor is not required to inspect as frequently as each specialty subcontractor, and it is not expected to match a subcontractor’s depth of trade expertise. What it must have is a functioning oversight system.1Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

OSHA evaluates reasonable care by looking at three things:

  • Periodic inspections at a frequency that matches the hazards present. Trenching, steel erection, and electrical work demand more frequent walk-throughs than painting or finish carpentry.
  • Prompt correction, meaning a system that gets identified hazards fixed quickly.
  • Graduated enforcement that escalates consequences for subcontractors who ignore safety requirements, moving from verbal warnings to written notices to work stoppages.

Inspection frequency should rise on large-scale projects, when hazard types change often, and when a subcontractor’s compliance history is poor or unknown. A subcontractor with a consistent record and its own safety program may warrant lighter oversight, but never zero oversight.1Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

If a hazard was recently created without the controlling employer’s knowledge, a citation is not automatic. The employer can defend itself by showing that its existing inspection schedule and enforcement system were appropriate for the conditions at the time. Documentation is what makes or breaks that defense. An employer claiming it did not know, with no records of a reasonable oversight program, will lose that argument.

How Much a Citation Can Cost

OSHA adjusts penalty ceilings each year for inflation. As of the January 15, 2025 adjustment:2Occupational Safety and Health Administration. OSHA Penalties

  • Serious violations: up to $16,550 per instance.
  • Other-than-serious violations: up to $16,550 per instance.
  • Willful or repeated violations: up to $165,514 per instance.
  • Failure to abate: up to $16,550 per day past the abatement deadline.

Those are maximums. OSHA’s Field Operations Manual allows reductions on three grounds:4Occupational Safety and Health Administration. Field Operations Manual – Chapter 6: Penalties and Debt Collection

  • Employer size. Companies with 1–25 employees can receive up to a 70% reduction. The discount drops to 30% for 26–100 employees, 10% for 101–250, and nothing above 250.
  • Good faith. Up to 25% off for a written, effective safety management system, or 15% off for a system with minor gaps. No reduction applies to willful violations, repeated violations, or high-gravity serious violations regardless of the safety program.
  • History. A 20% reduction for employers whose inspections over the previous five years turned up no serious violations, or who have never been inspected.

These reductions can stack, so a small contractor with a clean record and a real safety program can bring the number down considerably. Willful violations and failure-to-abate notices are largely ineligible.

Vetting Subcontractors Before Work Starts

Reasonable care begins before anyone reaches the site. A controlling employer that documented its evaluation of each subcontractor’s safety record before awarding work is in a far stronger position during an OSHA inspection than one that took the lowest bid without questions.

Practical prequalification includes reviewing injury history such as Experience Modification Rates and OSHA 300 logs, verifying training certifications, and confirming the subcontractor has enough experienced workers to do the job safely. Each subcontractor should submit a site-specific safety plan explaining how it will address the hazards in its scope. If a subcontractor arrives with an EMR well above 1.0 or a string of recordable injuries, that is a signal to increase oversight or choose a different sub.

OSHA’s directive ties inspection frequency directly to what the controlling employer knows about a subcontractor’s history. A first-time subcontractor whose record is unknown calls for the same heightened scrutiny as one with a documented pattern of violations.1Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy

Running Oversight Day to Day

Prequalification sets the baseline. What determines whether the reasonable care standard is actually met is the routine of site walk-throughs at a frequency matching the hazards in progress.

When a walk-through finds a problem, notify the responsible subcontractor in writing, set a deadline for correction, and follow up to confirm the fix. Verbal warnings disappear; written records survive an OSHA investigation. If the deadline passes, escalate through the financial penalties in the subcontract, work stoppages, or removal from the project. Doing nothing after issuing a warning is often worse than not finding the hazard at all, because it shows awareness without action.

Log findings, corrections, and follow-ups in a centralized system. OSHA’s recordkeeping rules require employers to retain injury and illness logs for five years after the calendar year the records cover.5eCFR. 29 CFR 1904.33 – Retention and Updating Internal safety inspection records should be kept at least that long, since they are the primary evidence of reasonable care if a citation lands years later.

Reporting Serious Incidents

Confusion about whose employee was involved does not extend OSHA’s mandatory reporting clock. The deadlines are strict:6Occupational Safety and Health Administration. Reporting Fatalities, Hospitalizations, Amputations, and Losses of an Eye as a Result of Work-Related Incidents to OSHA

  • Fatalities: report to OSHA within 8 hours of learning of the death.
  • Inpatient hospitalizations, amputations, or eye losses: report within 24 hours.

If the employer does not immediately learn an incident was work-related, the clock starts when the connection becomes known. Reports can be made by calling the nearest OSHA Area Office, using the national hotline at 1-800-321-6742, or submitting electronically through OSHA’s website. After hours, the hotline and online portal are the available options.

Contesting a Citation

An employer that receives an OSHA citation has a narrow window to challenge it. The notice of intent to contest must be postmarked within 15 working days of receiving the proposed penalty. Those are working days, not calendar days, but the deadline is still easy to miss if the citation sits on a desk. The notice must go in writing to the OSHA Area Director and specify whether the employer contests the citation, the penalty, or both.7Occupational Safety and Health Administration. Employer and Employee Contests Before the Review Commission

Once the Area Director has the contest notice, the case moves to the Occupational Safety and Health Review Commission for adjudication. Missing the 15-day window makes the citation final and unappealable, which means the penalties become due and the abatement requirements become enforceable. For a controlling employer facing a willful citation in the six-figure range, put that deadline on more than one calendar.

The strongest controlling-employer defense tracks the reasonable care factors in OSHA’s own directive: documented inspection schedules, written subcontractor notifications, corrective action follow-ups, and a graduated enforcement system. Patterns of proactive oversight beat paperwork assembled after the compliance officer arrived.

State Plan Considerations

About half the states run their own OSHA-approved safety programs rather than sitting under direct federal enforcement. The federal multi-employer citation policy is classified as a Federal Program Change for which state adoption is not required.3Occupational Safety and Health Administration. CPL 02-00-124 – Multi-Employer Citation Policy Some state-plan states follow the federal approach, some have their own versions, and a few have historically resisted the multi-employer framework. If your project is in a state-plan state, check with that state’s occupational safety agency to confirm whether and how it applies the controlling employer concept.