What You Owe Contractor Workers Under OSHA's Multi-Employer Policy

Small businesses hire contractors for all kinds of work: HVAC maintenance, electrical upgrades, roof repairs, equipment installation, janitorial services. The contractor brings their own crew, their own equipment, often their own expertise. The assumption — sometimes stated, sometimes just implied — is that the contractor handles safety for their people and the host business handles safety for theirs.

OSHA's multi-employer citation policy doesn't work that way.

Under that policy, which has been in effect since 1999, OSHA can cite employers who don't directly employ the injured worker if they had control over the worksite conditions that caused the injury. A small manufacturing company whose employees never touch a piece of equipment can be cited if a contractor's employee is injured on that equipment because of a hazard the manufacturer created, controlled, or knew about and failed to correct.

How OSHA Categorizes Employers on a Multi-Employer Worksite

OSHA's multi-employer policy identifies four types of employers that can be cited on a worksite where multiple employers are present. A single employer can fall into more than one category at once.

The creating employer is the one whose work operations produced the hazardous condition. If a host business's employees created a tripping hazard that a contractor later trips over, the host is the creating employer even if none of its people were injured.

The exposing employer is the one whose employees are actually exposed to the hazard. This is typically the contractor whose worker gets hurt. The exposing employer is almost always citable, regardless of whether they created the hazard.

The correcting employer is responsible for correcting a hazard someone else created — usually a contractor specifically hired to fix something. If a safety contractor fails to correct a known hazard they were engaged to address, they can be cited as the correcting employer.

The controlling employer is the one with authority over the worksite conditions — the ability to require hazard correction, to direct how work is done, or to remove contractors who don't comply with safety requirements. Host businesses typically fall into this category. The controlling employer is expected to exercise reasonable care to prevent and detect violations, even if they couldn't have been expected to prevent every specific hazard.

The controlling employer standard is what catches most host businesses off guard. You don't have to know exactly what the contractor is doing wrong — you have to have a reasonable safety oversight process in place for the work being performed on your site.

What "Reasonable Care" Looks Like for a Host Employer

OSHA evaluates the controlling employer's reasonable care based on factors including the nature of the work, the likelihood and severity of the hazard, and what steps the host took to prevent violations. The standard is higher for high-hazard work — roofing, electrical, confined space entry — than for low-hazard services.

In practice, reasonable care means a few things. Before work begins, the host employer should verify that contractors have appropriate safety programs for the work they're doing, including any required training, licensing, or permits. For high-hazard work like hot work, confined space entry, or work at heights, this means asking for documentation — not just taking the contractor's word for it.

During work, the host employer should conduct periodic walkthroughs of contractor work areas. This doesn't mean constant supervision, but it does mean someone with authority walks through and looks for obvious hazard violations — no fall protection in place, respiratory protection not being used in an area where it's required, lockout procedures not being followed. When violations are observed, the host employer has an obligation to address them — which means talking to the contractor and, if the situation is serious enough, stopping the work.

The host employer should also brief contractors on site-specific hazards before work begins: known hazardous energy sources, hazardous materials stored in adjacent areas, permit-required confined spaces, traffic and pedestrian flow patterns. A contractor's employee who walks into a chemical storage area without knowing what's there because no one told them is a host employer problem, not just a contractor problem.

Where Small Businesses Get Exposed

The most common liability exposure for small businesses involves contractors performing high-hazard work in or around the host's operations. Roofing contractors working over an occupied building. Electrical contractors doing energized work near production equipment. Maintenance contractors entering vessels or tanks that require confined space entry procedures.

In these situations, the host employer often takes the position that the contractor handles all the safety — they're the experts, they know what they're doing. That's often true, but it doesn't eliminate the host's controlling employer obligations. If the roofing contractor isn't using fall protection and a host employee or manager walks past and says nothing, the host has failed to exercise reasonable care.

The exposure also appears in longer-term contractor relationships where familiarity breeds complacency. A contractor who has been coming to your facility for years, whose crew you know by name, is still subject to OSHA standards on your site. Longstanding relationships can make it harder to enforce safety requirements because the relationship feels awkward to confront — but OSHA doesn't grade on relationship history.

Contracts and Indemnification Aren't a Defense

Many businesses address contractor safety through contract language — requiring the contractor to maintain workers' compensation coverage, carry liability insurance, and indemnify the host for any injuries to contractor employees. That's worth doing, but it doesn't change OSHA's analysis. OSHA cites employers based on worksite conditions and control, not on what the contract says. A clause requiring the contractor to follow all applicable safety regulations doesn't fulfill your controlling employer obligations — it just gives you a potential claim against the contractor after the fact.

Workers' compensation coverage is its own issue. In most states, contractors' employees are covered by the contractor's workers' comp policy, not the host's. But a serious injury on your site can still result in an OSHA investigation, an OSHA citation with penalties, a general liability claim if the injured worker alleges your negligence contributed to the injury, and significant disruption to your operations.

Building a Workable Contractor Safety Program

A contractor safety program for a small business doesn't need to be elaborate. The goal is to document that you've exercised reasonable care — that you evaluated contractor qualifications before the work started, communicated site hazards, and conducted some level of oversight during the work.

Before hiring a contractor for high-hazard work, ask for their safety program, evidence of required training, and any permits or licenses required for the work. For specialized work — confined space entry, electrical work, fall hazard work — ask specifically about the procedures they use. A contractor who can't produce this documentation or becomes evasive about their safety program is a contractor you should think twice about.

Before work begins, conduct a site-specific briefing. Walk the contractor through the areas where they'll be working. Point out hazardous energy sources and the facility's LOTO program requirements. Identify any permit-required confined spaces in the work area. Note locations where your own employees work nearby and how traffic and pedestrian flow will be managed during the job.

During work, conduct at least one walkthrough per shift for high-hazard work. More frequent checks are appropriate if the work involves significant fall hazards, energized electrical work, or work in close proximity to your ongoing operations. Document the walkthroughs — a note in a log with the date, who checked, and what was observed is sufficient.

When you observe a violation, address it. Talk to the contractor supervisor, not just the worker. Make clear that the violation needs to be corrected before work continues in the affected area. If the violation is serious — no fall protection on a roof, a confined space entry without atmospheric testing — stop the work. That conversation is uncomfortable. The alternative is potentially far worse.

Confined Spaces Deserve Special Attention

OSHA's confined space standard for general industry, 29 CFR 1910.146, has specific multi-employer provisions. If a host employer has permit-required confined spaces on its property and a contractor's employees will enter them, the host has specific obligations: informing the contractor about the permit spaces, the hazards they contain, and the host's experience with those spaces; coordinating entry operations if both host and contractor employees might be in the space; and debriefing after the work is done.

These obligations exist regardless of whether the host's own employees ever enter the confined space. If there's a permit-required confined space anywhere on your property and a contractor works near it, you need to have this conversation with them before work begins.

Getting Started

If your business regularly uses contractors and you don't have a formal contractor safety process, start with a simple qualification and onboarding checklist. For each contractor, document that you've verified their safety program, communicated site-specific hazards, and agreed on safety expectations before work begins. For high-hazard work, add documentation of walkthroughs during the job.

The paperwork burden is real but manageable. The alternative — a serious contractor injury on your site without documentation that you exercised reasonable care — creates OSHA exposure and potential liability that far outweighs the effort of having a basic process in place.

Contractors working on your site are your problem too. Not entirely your problem, and not in every situation — but enough that having a process, and following it, is worth the effort.