OSHA requirements when hiring independent contractors

Last updated 2026-07-10

Does OSHA cover independent contractors at all?

Yes. OSHA coverage follows the worksite, not the contract. If a contractor works on your property or on a project you control, OSHA standards apply to that work. The contractor's own employer is primarily responsible for compliance, but you can still be cited as the site-controlling employer if you fail to exercise reasonable care over recognized hazards ^[1].

The common myth is that calling someone an independent contractor puts them outside your OSHA reach. It doesn't. What matters is whether you control the work environment or direct the means and methods of the work. OSHA looks at the real relationship, not the label on the contract.

The OSH Act at 29 U.S.C. § 654(a)(1) requires every employer to provide a workplace "free from recognized hazards that are causing or are likely to cause death or serious physical harm." Hiring a contractor doesn't hand off that general duty. You keep a piece of it as long as you control the space.

What is the OSHA multi-employer citation policy?

OSHA's multi-employer citation policy is the legal spine of every contractor situation. It's spelled out in OSHA Instruction CPL 02-00-124 and has driven enforcement since 1999. The policy names four employer types, and each one can be cited separately on a shared worksite ^[2].

Employer Type	Definition	Example
Creating employer	Created the hazardous condition	GC who installs scaffold without guardrails
Exposing employer	Exposes its own employees to the hazard	Sub whose workers use that scaffold
Correcting employer	Responsible for correcting a hazard it didn't create	Safety contractor hired to fix conditions
Controlling employer	Has authority to require corrections on the site	General contractor or site owner

You can land in more than one category at once. A general contractor who builds a defective work platform and then tells subs to use it is both a creating employer and a controlling employer.

The controlling employer role is the one that blindsides small business owners. CPL 02-00-124 states that a controlling employer "must exercise reasonable care to prevent and detect violations on the site" ^[2]. You don't have to inspect as often or as closely as a company that does safety for a living. But you do have to inspect. What counts as reasonable care scales with the size and complexity of the project.

Which OSHA standards apply specifically to contractor work?

There's no single standard titled "contractor safety." OSHA's general industry rules (29 CFR Part 1910) and construction rules (29 CFR Part 1926) each apply based on the type of work being done, no matter who signs the worker's paycheck ^[3].

For construction, 29 CFR 1926.16 speaks to subcontracting head-on. Even when a prime contractor hands work to a sub, the prime can't hand off its own OSHA responsibility. Both the prime and the sub can be held liable for violations tied to that work ^[4].

For general industry, the standards that surface most often in contractor situations are these:

• Hazard Communication: 29 CFR 1910.1200 means that if contractors bring hazardous chemicals onto your site, or run into yours, both employers share responsibility for keeping SDSs available and workers informed. Learn more about your hazard communication obligations.
• Lockout/Tagout: 29 CFR 1910.147 has specific language about "outside personnel," meaning contractors. If a contractor will work on your equipment, you have to tell them your lockout procedures, and their program must be at least as protective as yours ^[5]. This one shows up constantly in contractor incidents. See our full guide on lockout tagout.
• Confined Space Entry: 29 CFR 1910.146 requires the host employer to tell the contractor about permit-required spaces before entry. You share your hazard information. The contractor coordinates entry procedures with you.
• Personal Protective Equipment: 29 CFR 1910.132 requires each employer to assess hazards and give PPE to its own employees. If you're the controlling employer, watch whether contractors actually wear the right PPE, not whether they promise they will.

Am I responsible for a contractor's OSHA violations?

Sometimes. It turns on whether you qualify as a controlling employer and whether you exercised reasonable care.

OSHA won't cite you just because a contractor broke a rule. They look at whether you knew or should have known about the violation and did nothing. A reasonable pre-work safety walkthrough, a written contractor safety agreement, and periodic site inspections give you a far stronger defense than waving the contractor in and never checking back ^[2].

The penalty math is not gentle. OSHA's maximum penalties as of 2024 are $16,131 per serious violation and up to $161,323 per willful or repeated violation ^[6]. Ten contractors, one systemic hazard you ignored, and the exposure adds up fast. That's before the civil liability if somebody gets hurt.

Your best protection is a documented contractor management process. Written pre-qualification, hazard communication before work starts, dated site inspections, and a clear record of any corrections you asked for all show reasonable care. OSHA review officers and courts have repeatedly given credit to employers who kept a paper trail of good-faith oversight.

What does OSHA require before a contractor starts work?

OSHA doesn't hand you a required pre-work orientation checklist. But the stack of standards that apply to your site tells you exactly what information has to change hands before anyone picks up a tool.

Cover these at minimum:

1. Hazardous chemicals on site (29 CFR 1910.1200): Tell the contractor what chemicals are present, where the SDSs live, and any labeling system you use. 2. Permit-required confined spaces (29 CFR 1910.146): Point out every permit space on the site, its location, and the hazards inside ^[11]. 3. Lockout/Tagout procedures (29 CFR 1910.147): Share your energy control procedures and confirm the contractor's program is compatible. 4. Emergency action plan (29 CFR 1910.38): If you have an emergency action plan, contractors working in your facility need the evacuation routes, alarm signals, and assembly points. 5. Site-specific hazards: The general duty clause (29 U.S.C. § 654) means you identify and communicate any recognized hazard unique to your site, whether or not a specific standard names it.

Document every briefing. A sign-in sheet, a written checklist, or at least an email record. Undocumented safety communication is worth almost nothing during an OSHA inspection.

How does OSHA recordkeeping work when a contractor gets hurt on your site?

This trips up almost everyone, and the answer is simpler than people fear. The injury goes on the injured worker's employer's 300 log, not the host employer's log.

When your contractor's employee gets hurt on your site, that injury belongs on the contractor's OSHA 300 log, so long as you don't run that worker's day-to-day tasks. The test under 29 CFR 1904.31 is supervision. If you supervise the contractor's employees day to day, they count as your employees for recordkeeping, and the injury lands on your log ^[7].

Here's the practical version. Are you telling them what to do, more than what outcome to hit? If yes, expect to own the recordkeeping. If the contractor runs their own crew's daily work and you're only directing the overall project scope, you're probably not the recording employer.

Reporting is a separate duty, and it doesn't care whose employee got hurt. Under 29 CFR 1904.39, you must report any fatality, in-patient hospitalization, amputation, or eye loss connected to your worksite within 8 hours for a fatality or 24 hours for the others ^[8]. OSHA reads "connection with your worksite" broadly. When in doubt, report. An unnecessary report costs you nothing. A missed required report can turn into a willful citation.

For help filling out the forms, see our guide to filing an incident report.

Do contractors need to be included in my written safety programs?

Your written safety programs cover your own employees' operations. But when contractors show up and do work those programs cover, the standards behind the programs reach that work too.

Lockout/tagout is the cleanest example. Your 29 CFR 1910.147 program has to address how outside contractors will interface with your energy control procedures. You coordinate with them, verify their program is adequate, and document the exchange. Your written program should have a section explaining how you handle that coordination.

The same logic runs through your hazard communication program, your confined space program, and your emergency action plan. Every standard that requires a written program either implies or flatly requires that you think through how visitors, contractors, and temporary workers fit into it.

No formal written programs and regular contractor work? That's a real compliance gap. A good starting move is a one-page contractor safety requirements document you hand to every contractor before work begins. It should name your key hazards, require the contractor to confirm they have compliant programs for the applicable standards, and collect a signature. SafetyFolio's safety program generator can build the underlying written programs in about 15 minutes if you need a framework to start from.

What about staffing agency workers? Are they contractors or employees?

Staffing agency workers sit in their own category, and OSHA treats them differently from independent contractors.

OSHA's position, stated in its 2013 temporary worker guidance, is that both the staffing agency and the host employer are employers of temporary workers under the OSH Act ^[9]. The host handles day-to-day safety on the worksite: site-specific hazard communication, PPE, and training on the equipment and processes the worker actually touches. The agency handles general safety training and has to ask about and respond to conditions at client sites.

So if you bring in a temp and one of them gets hurt because you never trained them on your equipment, you can be cited even though the agency is their employer of record. The recordkeeping rule (29 CFR 1904.31) puts injuries to temp workers on the host employer's 300 log, because the host supervises their daily work ^[7].

The line between this and a true independent contractor matters a lot. An independent contractor runs their own business, controls how the work gets done, and owns their own OSHA compliance. A temp agency worker works under your supervision, and you owe them the same site-safety protection you owe your direct employees.

What training are contractors required to have before working on your site?

The contractor's employer provides all OSHA-required training to that contractor's employees. You don't have to train another company's workers on general OSHA standards. But you do owe them a site-specific orientation covering hazards unique to your workplace.

The split works like this:

• The contractor's employer provides: competency in their trade, plus training required by any standard governing their work (fall protection, electrical safety, HazCom, PPE selection, and so on).
• You provide: site-specific orientation covering your facility's hazards, emergency procedures, and any site rules that go beyond baseline OSHA requirements.

High-hazard work is where it gets tricky. Hire a contractor to run a forklift on your premises and their employer must have trained and evaluated them under 29 CFR 1910.178(l). That standard also requires retraining when an operator is seen working unsafely, and OSHA has held controlling employers responsible for letting untrained or visibly unsafe operators keep working on their sites. Review what forklift certification actually requires before you turn a contractor's operator loose in your warehouse.

For construction, an OSHA 10 or OSHA 30 card doesn't create a legal right to work on any site, but plenty of controlling employers require one to get through the gate. That's a sensible precaution, not an OSHA mandate. Our breakdown of OSHA training requirements sorts out industry practice from legal obligation.

What should a contractor safety agreement include?

A written contractor safety agreement (some call it a contractor safety plan or a pre-qualification questionnaire) isn't required by any single OSHA standard. But it's the most useful tool you have for showing reasonable care as a controlling employer.

A solid agreement covers:

• Confirmation that the contractor has a current OSHA-compliant safety program for the applicable work
• Verification of required training (trade-specific, HazCom, PPE, and the rest)
• Acknowledgment of the site-specific hazards you disclosed
• Agreement to follow your site safety rules
• Incident reporting requirements, including who on your team to call when something happens
• The contractor's duty to tell you about any hazards they find
• A statement that they won't bring unauthorized hazardous materials on site

Keep a signed copy of every agreement. After an incident, the first thing an OSHA investigator asks is what you did before work started. A signed agreement plus documentation of the hazard briefing is the closest thing to a legal shield you'll have.

Some larger companies run formal contractor pre-qualification through third-party platforms. For most small businesses, a two-page agreement and a 15-minute pre-work walkthrough does the job, and it beats nothing by a mile.

What are the most common OSHA violations involving contractors?

BLS data keeps showing that contractor workers die at higher rates than direct employees in several industries. In construction, where multi-employer worksites are the norm, falls stay the leading cause of death and accounted for 395 of 1,069 construction fatalities in 2022 ^[10].

The violations OSHA finds most often on multi-employer sites are these:

• Fall protection (29 CFR 1926.501): missing or inadequate guardrails, personal fall arrest systems left unused, holes uncovered or unguarded.
• Scaffold safety (29 CFR 1926.451): sloppy erection, missing planking, no fall protection on scaffolds.
• Lockout/Tagout (29 CFR 1910.147): a contractor works on energized equipment because the host's energy control procedures weren't shared or weren't followed.
• Hazard communication (29 CFR 1910.1200): chemicals on site without accessible SDSs, contractors never told about chemical hazards ^[12].
• Electrical safety (29 CFR 1910.303 and 1926.416): bad grounding, work on energized circuits without proper PPE or lockout.

The lockout/tagout and hazard communication failures dominate because they need active coordination between employers. A contractor who brings their own chemicals to your site, or works on your equipment without reading your energy control procedures, opens a gap neither employer is watching. Closing it takes explicit, documented communication before the work starts.

Can OSHA cite you if you didn't know about a contractor's hazard?

Yes, under the right conditions. The controlling employer standard doesn't hinge on actual knowledge. It hinges on what OSHA calls reasonable care to detect violations. If a hazard was obvious or discoverable through an ordinary inspection, the fact that you personally missed it is not a complete defense ^[2].

OSHA asks whether a reasonable employer in your position would have caught the violation. The factors include how long the contractor's work lasted, how complex the project was, how often you were on site, and whether you had any system for spotting safety problems.

A one-day service contractor who creates a hazard during a quick visit and fixes it before anyone is exposed is worlds apart from a six-month build where scaffolding violations sit in plain view every day. The longer the project runs, the more often you're expected to look.

So walk the site. Document the walk. See something wrong, put your correction request in writing and record the contractor's response. That sequence, run routinely, is what reasonable care looks like in the field.

Frequently asked questions

Is a 1099 independent contractor covered by OSHA?

The 1099 tax classification doesn't decide OSHA coverage. A true independent contractor working for themselves is a self-employed person and is not covered by the OSH Act as an employee. But if that person works on your site and you control the work environment, you can still be cited as the controlling employer for hazards you failed to correct. Their tax status has nothing to do with your site-control obligations.

Who is responsible for a contractor's PPE, the contractor or the hiring company?

The contractor's own employer provides PPE to that contractor's employees under 29 CFR 1910.132. You aren't required to supply PPE to another company's workers. As the controlling employer, though, you should verify contractors actually wear the right PPE on your site. Watch a contractor work without required PPE and do nothing, and you've failed the reasonable care standard and can be cited.

What does OSHA's multi-employer citation policy actually mean for small businesses?

It means you can get an OSHA citation for hazards on your site that a contractor created, if you control that site and failed to exercise reasonable care to detect and correct the violation. You don't have to have caused the hazard. OSHA's CPL 02-00-124 lays this out. Small businesses get no exemption. Your size may affect penalty amounts, but not whether a citation can issue.

Does a contractor need to be included in my OSHA 300 injury log?

Usually no. Injuries to a contractor's employees go on that contractor's 300 log, not yours, as long as the contractor's employer supervises their daily work. The exception under 29 CFR 1904.31 is when you supervise the contractor's workers day to day, which makes them your employees for recordkeeping. Temp agency workers placed under your direct supervision typically land on your 300 log.

What is the difference between a controlling employer and an exposing employer under OSHA?

An exposing employer is the company whose own employees are exposed to a hazard, no matter who created it. A controlling employer has authority to direct the overall worksite and can require others to fix hazards. One company can be both. The difference matters because both types can be cited, and the required fix differs. Exposing employers protect their workers; controlling employers use their authority to correct site conditions.

Do contractors need to follow my company's internal safety rules?

OSHA doesn't force contractors to follow your internal policies, but your written contractor agreement can and should require it. Beyond the contract, if your internal rules run stricter than OSHA's minimums, OSHA still only cites to the regulatory standard. Even so, requiring contractors to follow your rules gives you a way to remove a non-compliant contractor from the site and documents your good-faith oversight.

Who do I call if a contractor gets seriously hurt or killed on my site?

Call OSHA at 1-800-321-OSHA. Under 29 CFR 1904.39, a fatality on your worksite must be reported within 8 hours. An in-patient hospitalization, amputation, or eye loss must be reported within 24 hours. This duty applies to you as the site controller regardless of whose employee was hurt. Report even if you're not sure the incident is work-related. OSHA makes that call.

Can OSHA cite both the contractor and the hiring company for the same hazard?

Yes. OSHA can issue separate citations to multiple employers for the same violation when each had independent obligations and failed to meet them. The creating contractor who built a defective scaffold and the controlling employer who saw it and stayed quiet can both be cited for the same guardrail violation. Penalties are assessed separately based on each employer's culpability, size, and history.

Are there OSHA requirements specifically for construction subcontractors?

29 CFR 1926.16 covers subcontracting in construction directly. A prime contractor can't shed its OSHA responsibility by delegating work to a subcontractor. Both the prime and the sub can be cited for the delegated work. All of 29 CFR Part 1926 (construction standards) applies to subcontractors doing that work, and the multi-employer citation policy fully applies on construction sites.

What should I do if I see a safety violation by a contractor on my site?

Document it right away, tell the contractor's supervisor in writing (text or email works), and set a clear correction deadline. If the hazard is imminent, stop the work. Keep records of every message. As a controlling employer, you meet the reasonable care standard by using your authority to require corrections. Ignoring a visible violation, or giving a verbal note with no follow-up, is the scenario that gets you cited right alongside the contractor.

Do I need a written contractor safety program or just a verbal briefing?

OSHA doesn't require a document literally called a "contractor safety program," but several standards require written procedures you must share with contractors. Lockout/tagout (29 CFR 1910.147) requires a written energy control program you give to outside personnel. Confined space (29 CFR 1910.146) requires written permits and coordination. A documented contractor safety orientation is the practical tool that ties these duties together and proves you met them.

Does OSHA apply to self-employed contractors with no employees?

Self-employed individuals with no employees aren't covered by the OSH Act as employees and can't be cited by OSHA. They're still exposed to hazards on the worksite, though, and if you control that worksite, your obligations as a controlling employer don't vanish just because the person has no employees of their own. Some states run broader coverage rules, so check your state's occupational safety plan if you're in a state-plan state.

What is a reasonable inspection frequency for a controlling employer?

OSHA doesn't name a number. CPL 02-00-124 says the frequency and thoroughness should track the project's duration, complexity, and hazard level. A short, low-hazard job might need one walkthrough. A months-long build with multiple trades and high-hazard work warrants weekly documented inspections. The standard is what a reasonable employer in your position would do, which leaves room for judgment but demands that you actually use it.

Sources

1. OSHA, OSH Act of 1970, General Duty Clause (29 U.S.C. § 654): Every employer must provide a workplace free from recognized hazards likely to cause death or serious physical harm, regardless of whether workers are direct employees or contractors on a controlled site.
2. OSHA Instruction CPL 02-00-124, Multi-Employer Citation Policy: OSHA's multi-employer citation policy defines four employer types (creating, exposing, correcting, controlling) and states that controlling employers must exercise reasonable care to prevent and detect violations on the site.
3. OSHA, 29 CFR Part 1910 (General Industry Standards): OSHA general industry standards apply based on the nature of the work and the hazards present, regardless of whether workers are direct employees or contractor employees.
4. OSHA, 29 CFR 1926.16, Rules of Construction (Subcontracting): A prime contractor cannot relieve itself of OSHA responsibility by delegating work to a subcontractor; both prime and sub can be cited for violations related to the delegated work.
5. OSHA, 29 CFR 1910.147, Control of Hazardous Energy (Lockout/Tagout): When outside contractors perform servicing or maintenance on a host employer's equipment, the host must inform the contractor of lockout/tagout procedures, and the contractor's program must provide protection at least equivalent to the host's.
6. OSHA, Penalties (civil penalty amounts, current schedule): OSHA's maximum penalty for a serious violation is $16,131 per violation and up to $161,323 per willful or repeated violation as of 2024.
7. OSHA, 29 CFR 1904.31, Covered Employees (Recordkeeping): Injuries and illnesses are recorded on the 300 log of the employer who supervises the injured worker's day-to-day activities; contractor employees injured on a host site go on the contractor's log unless the host supervises them day-to-day.
8. OSHA, 29 CFR 1904.39, Reporting Fatalities, Hospitalizations, Amputations, and Eye Losses: Employers must report any work-related fatality within 8 hours and any in-patient hospitalization, amputation, or eye loss within 24 hours, including incidents involving contractor workers on their worksite.
9. OSHA Memorandum, Protecting Temporary Workers (April 29, 2013): OSHA's 2013 guidance states that both staffing agencies and host employers are employers of temporary workers under the OSH Act and share responsibility for their safety.
10. Bureau of Labor Statistics, National Census of Fatal Occupational Injuries in 2022: Falls accounted for 395 of 1,069 construction fatalities in 2022, making them the leading cause of death in the construction industry.
11. OSHA, 29 CFR 1910.146, Permit-Required Confined Spaces: Host employers must inform contractor employers of permit-required confined spaces, their locations, and hazards before the contractor enters, and must coordinate entry procedures.
12. OSHA, 29 CFR 1910.1200, Hazard Communication Standard: When contractors bring hazardous chemicals on a host employer's site or encounter the host's chemicals, both employers share responsibility for ensuring SDSs are accessible and workers are informed of chemical hazards.