General contractor safety program requirements for subcontractors

Last updated 2026-07-10

What does OSHA actually require general contractors to do about subcontractor safety?

OSHA has no standard titled "general contractor responsibilities for subcontractors." What it has is an enforcement policy, and that policy has teeth.

The controlling document is OSHA's Multi-Employer Citation Policy, CPL 02-00-124, issued December 10, 1999. It defines four roles: the creating employer, the exposing employer, the correcting employer, and the controlling employer. A general contractor almost always fits the controlling employer definition, which OSHA describes as "an employer who has general supervisory authority over the worksite, including the power to correct safety and health violations itself or require others to correct them." ^[1]

The test for a controlling employer is reasonable care. OSHA looks at whether the GC took steps proportionate to the hazard to detect violations and get them fixed. Hand a sub a contract and never show up on site again, and you have not exercised reasonable care. Run weekly documented inspections, issue written notices, and stop work for serious hazards, and you very likely have.

This matters because OSHA cites controlling employers for sub-created hazards, and does so routinely. The citation lands on the GC's record, feeds into insurance underwriting, and can reach the serious, willful, or repeat categories depending on what the GC knew and when. ^[1]

So what does reasonable care look like day to day? CPL 02-00-124 scales it by hazard severity. For high-hazard conditions, a GC is expected to inspect "frequently." For low-hazard conditions, less often is fine. The agency says outright that GCs do not have to inspect every square inch constantly. They just need a system, and evidence it runs. ^[1]

What is the multi-employer worksite citation policy and how does it affect GCs?

The multi-employer policy is the framework that lets OSHA cite an employer that neither created a hazard nor exposed its own workers to it. It applies to any site with more than one employer present, which describes nearly every construction project and plenty of general industry sites too.

Here is the four-role breakdown under CPL 02-00-124: ^[1]

Employer Type	OSHA Definition	Example on a Construction Site
Creating	The one who caused the hazard to exist	Sub who left an unguarded floor opening
Exposing	The one whose employees face the hazard	Any worker walking past that opening
Correcting	The one hired to fix safety and health issues	A safety consulting firm on contract
Controlling	The one with supervisory authority over the site	The GC

One employer can hold several roles at once. A GC with its own crew on site is both a controlling employer and an exposing employer, which raises its citation exposure, not lowers it.

For controlling employers, OSHA asks one question: did you know, or should you have known, about the violation? Actual knowledge settles it. If the GC did not know, OSHA asks whether a reasonable inspection would have caught the hazard. "Should have known" is not a forgiving standard when you run the site.

Construction carries the highest volume of multi-employer citations of any industry. BLS reported 1,075 construction fatalities in 2023 out of 5,283 total private-sector workplace deaths, a share that has barely moved in a decade. ^[2] Multi-employer sites drive a big piece of that count.

What safety requirements should a GC put in the subcontract itself?

The subcontract is your first and best line of defense. A well-drafted safety clause does two jobs: it sets expectations before anyone steps on site, and it builds the paper trail behind your reasonable-care defense if something goes wrong.

At minimum, the safety section should include:

• A requirement that the sub maintain a written safety program meeting all applicable OSHA standards (29 CFR 1926 for construction, 29 CFR 1910 for general industry). ^[3]
• A requirement that sub supervisors hold OSHA 30 training or equivalent documented competency for high-hazard trades.
• A stated right for the GC to inspect the sub's safety program and records before work begins.
• A clause requiring the sub to report all work-related injuries, illnesses, and near-misses to the GC within 24 hours (or immediately for hospitalizations and fatalities, given OSHA's 8-hour and 24-hour reporting windows under 29 CFR 1904.39). ^[4]
• A provision letting the GC stop the sub's work for imminent danger, with no claim for delay damages from the sub in that case.
• An indemnification clause where the sub owns the violations it creates.
• A statement that the sub must flow down equivalent requirements to any lower-tier sub.

One thing GCs skip too often: require the sub's EMR before award. A three-year average above 1.0 is worth a hard look. The Associated Builders and Contractors and other owner groups use EMR thresholds as a prequalification screen. ^[5]

Don't reuse a boilerplate clause you grabbed online a decade ago. Have a construction attorney review it. State law on indemnification varies enough that a clause valid in one jurisdiction is dead on arrival in another.

What should a GC's pre-work subcontractor orientation cover?

Before any sub employee touches a tool on your site, they need a site-specific orientation. This is separate from whatever training their own company gave them. Your site has its own hazards, its own emergency plan, and its own rules, and those are what the orientation covers.

A solid GC-run orientation hits:

Emergency procedures. Where is the first aid station? What is the muster point? Who calls 911, and who calls you? Is there an on-site medical provider? Under 29 CFR 1926.23, construction sites have first aid requirements tied to crew size and proximity to care. ^[3]

Site-specific hazards. Buried utilities, overhead power lines, a shoring system with load limits, a confined space: sub workers need to know before they walk into it. A generic orientation that never names your actual site hazards is worthless.

Permit-required work. If your site has confined spaces (29 CFR 1926.1200 for construction, 29 CFR 1910.146 for general industry), lockout/tagout (29 CFR 1910.147), or hot work areas, walk subs through your permit process and name who issues permits. ^[6][11]

Incident reporting. Make clear that sub supervisors report any injury, illness, near-miss, or property damage to the GC superintendent within a set window. A lot of GCs require a call within one hour for anything beyond first aid.

PPE requirements. Spell out the site-wide minimums. Hard hats, high-visibility vests, and safety-toed footwear are standard almost everywhere. Extra requirements go here, before someone shows up without the right gear, not after.

Document it with a dated sign-in sheet and keep it. If OSHA investigates an incident six months later, that sheet is evidence. Do the same for any foreman or supervisor who joins mid-project.

How often does a GC need to inspect subcontractor work for safety compliance?

Honest answer: OSHA gives you no number. CPL 02-00-124 ties inspection frequency to hazard severity, not to a calendar. ^[1]

In practice, most construction risk managers and safety professionals recommend daily site walks on active projects, with the superintendent or a designated competent person documenting what they see. Not legally required. But it builds the record that proves reasonable care.

For high-hazard work (steel erection, trenching and excavation, scaffolding, roofing), experienced GC safety directors schedule inspections before the shift and after any significant change in conditions. The underlying construction standards push this anyway: 29 CFR 1926.651 for excavations and 29 CFR 1926.502 for fall protection both require a competent person to inspect before each shift. ^[3] The GC-level inspection overlaps those sub-level competent person checks, it does not replace them.

Weekly documented audits on a written checklist are a practical floor for most projects. Match the checklist to the trades and phases active that week. A scaffold checklist looks nothing like an electrical checklist, and a one-size form covers neither.

When you find a violation, document it, tell the sub's supervisor in writing (a text or email counts), and document the fix. Find, document, notify, verify. That loop is what OSHA means by reasonable care. A GC that logs violations but never confirms correction is not protecting itself. It's writing a record of its own failures.

Can a GC be fined for a subcontractor's OSHA violation?

Yes. This is the most misunderstood piece of GC liability on multi-employer sites.

OSHA issued a letter of interpretation on January 26, 1995, confirming that controlling employers can be cited for violations exposing employees of other employers, not only their own workers. ^[7] The multi-employer policy formalized this in 1999.

Penalties for serious violations run up to $16,550 per violation under the 2024 inflation adjustment. Willful or repeat violations reach $165,514 per violation. ^[8] Those caps apply to any employer cited, including a GC standing in as controlling employer.

In practice, OSHA often cites both the sub (as creating or exposing employer) and the GC (as controlling employer) for the same hazard. Separate penalties, same incident. The GC's penalty may drop if it shows it took reasonable steps, but "we didn't know" only helps if not knowing was reasonable given your inspection history.

OSHA fines are the small number. A sub-caused injury also generates workers' compensation claims, third-party tort litigation from injured sub employees (in many states an injured sub worker can sue the GC in tort, because the GC's workers' comp does not cover him), and possible criminal exposure if a death follows a willful violation. Those downstream costs dwarf the citation in nearly every serious case.

A run of incidents can push a GC's EMR up, add tens of thousands to annual insurance costs, and lock the company out of bidding on public or owner-controlled work. Safety program quality is a business issue, not a compliance checkbox.

What written safety programs should GCs require subs to maintain?

Requiring a sub to have "a safety program" is too vague to help you. The specific programs you require depend on the sub's scope, but several written programs are standard across almost every trade.

Here are the core written programs and the OSHA standards behind them for construction:

Written Program	OSHA Standard	Who Needs It
Hazard Communication (HazCom)	29 CFR 1910.1200	Any sub using chemicals or solvents
Fall Protection	29 CFR 1926.502	Any sub working above 6 feet
Scaffolding Safety	29 CFR 1926.451	Any sub erecting or using scaffolding
Excavation and Trenching	29 CFR 1926.651	Subs doing earthwork
Lockout/Tagout	29 CFR 1910.147	Subs doing maintenance or electrical work
Confined Space Entry	29 CFR 1926.1200	Subs entering permit spaces
Personal Protective Equipment	29 CFR 1926.95	All subs
Emergency Action Plan	29 CFR 1926.35	All subs on larger sites
Respiratory Protection	29 CFR 1910.134	Subs using respirators

For hazard communication, subs must keep Safety Data Sheets for every hazardous chemical on site and train their workers on those chemicals. ^[9] Require proof of that training before chemical work starts.

Proof that a program exists is not enough. Ask to see the actual document. Plenty of small subs have "programs" that are three-page generic files pulled off the internet and never matched to their real operations. That won't protect the sub in an inspection, and it won't protect you if you accepted it without reading it.

If you're building your own GC-level programs from scratch, a tool like the SafetyFolio program generator can produce compliant written programs for specific operations far faster than drafting from a blank page. The standards are what matter, and any program has to fit your actual site conditions.

How should a GC handle a subcontractor who repeatedly violates safety rules?

This is where GCs go soft, and it costs them. Tolerating repeat violations because the sub is cheap or the schedule is tight is the exact pattern that turns into a willful citation when someone gets hurt.

A defensible escalation process runs like this:

First violation. Written notice to the sub foreman and the sub's company-level safety contact. Name the hazard, the standard violated, and the required fix. Set a short, reasonable deadline.

Second violation (same or related). Escalate the written notice to the sub's owner or project manager. Require a written corrective action plan within 24 hours. Issue a formal warning that continued violations may pull the crew off site.

Third violation or imminent danger. Stop work. Remove the crew or equipment from the hazard area. Notify your owner per contract. Decide whether keeping that sub on the project is tenable at all.

Write everything down. Texts work. Emails work. Paper notices work. A verbal conversation you have no record of does nothing for you.

Build a few things into the subcontract upfront so none of this is a surprise: a clause letting the GC stop work for safety violations, a clause letting the GC remove workers who repeatedly violate rules, and a clause back-charging the sub for any corrective work the GC has to perform because the sub didn't.

Terminating a sub mid-project is painful and expensive. An OSHA willful citation (up to $165,514 per violation) ^[8] plus litigation from an injured worker is reliably worse. Make the hard call early.

Do state-plan OSHA states have different requirements for GC-sub safety programs?

Yes, and it matters a lot if you work across state lines.

OSHA lets states run their own occupational safety programs in place of federal OSHA, as long as those programs are "at least as effective" as the federal one. As of 2024, 22 states and 2 territories run state plans covering private employers. ^[10]

State plans can go beyond federal requirements, and several do. California's Cal/OSHA requires every employer, subs included, to maintain an Injury and Illness Prevention Program (IIPP) under Title 8 CCR Section 3203. The IIPP is more prescriptive than anything in federal OSHA and must include written elements for hazard identification, employee communication, and training documentation. ^[10]

Washington's WISHA program carries similar written-program demands. Michigan and North Carolina run construction rules that differ in detail from federal 29 CFR 1926.

What this means for you: in a state-plan state, your subcontract safety terms need to reference the state standard, more than federal OSHA. "Comply with all applicable OSHA standards" is useful language because it captures state and federal requirements at once. But your inspection and verification process still has to know what the state actually demands.

For the current list of which states run their own plans and what they require, OSHA maintains it at osha.gov. ^[10]

What records should a GC keep to document subcontractor safety oversight?

Documentation is your evidence of reasonable care. Without it, you're arguing your word against the inspector's notes. With it, you have a factual defense.

Keep these records for at least the project duration plus three years (some attorneys say five, given tort statutes of limitations):

Pre-qualification records. The sub's EMR, its written safety program, proof of required licenses and certifications. Keep them per project, not once per sub.

Subcontract. The signed contract with safety clauses attached. Your legal framework.

Orientation records. Dated, signed attendance sheets from site orientation. One per employee, not per company.

Inspection logs. Dated, signed records of every safety inspection, what you found, and what you did about it. Photos help enormously.

Corrective action records. Written notices to subs, their responses, and verification of correction. This is the loop that proves reasonable care.

Incident reports. Any injury, illness, near-miss, or property damage on site. For recordable injuries, the sub handles its own OSHA 300 log entries, but keep copies of all incident reports for any injury on your project. ^[4]

Training records. Proof that sub supervisors hold required training, such as OSHA 30 cards or trade-specific competent person certification. Don't just ask if they're trained. Ask for the card.

No single OSHA rule requires a GC to keep all of these. But together they are the substance of a reasonable-care defense. If a compliance officer shows up after an incident and you can produce them all, the conversation goes very differently than if you can't.

What's a practical starting point for a GC building a subcontractor safety program from scratch?

Start with your subcontract language. Get a lawyer involved, or at least use your trade association's model language as a baseline. The Associated General Contractors of America and Associated Builders and Contractors both publish subcontractor safety guidance for members. ^[5]

Next, build a sub prequalification checklist. Before you send an invitation to bid, you should know the sub's EMR, its safety program status, and its OSHA citation history. OSHA's establishment search tool at osha.gov lets you look up citations by company name. It's public, and it's worth checking for any sub you haven't worked with. ^[12]

Then write a site-specific safety plan for each project. Not a generic file: a plan that names the specific hazards on that site, names your competent persons, and lists the permits and procedures in place. This is the document you hand every sub at orientation and reference in every inspection.

For the written programs the standards actually require, you have options. Write them yourself off OSHA's free compliance assistance resources at osha.gov. Hire a consultant (costs range widely, from a few hundred dollars for a document review to several thousand for a full build). Or use a platform like SafetyFolio, which generates OSHA-compliant written programs for specific operations fast, which helps when you need programs for six sub trades and have no dedicated safety director.

Whatever you build, review it annually and update it after any significant incident or near-miss. A program untouched since 2019 is not a living document, and compliance officers notice.

The OSHA training requirements for your own people, especially the competent person requirements tied to specific standards, belong in that review too. Your team can't oversee sub safety if they don't know what they're looking at.

Frequently asked questions

Is a general contractor responsible for subcontractor safety violations?

Yes. Under OSHA's Multi-Employer Citation Policy (CPL 02-00-124), a GC acting as controlling employer can be cited for a sub-created hazard if it failed to exercise reasonable care to detect and correct it. The GC need not have caused the hazard or had its own workers exposed. Both the sub and the GC can receive separate OSHA citations for the same violation.

What OSHA standard governs general contractor responsibility for subcontractors?

There is no CFR section titled 'GC responsibilities for subs.' The controlling authority is OSHA Directive CPL 02-00-124, the Multi-Employer Citation Policy, issued December 10, 1999. It defines the controlling employer role and the reasonable-care standard GCs must meet. Specific hazard standards such as 29 CFR 1926.502 (fall protection) and 29 CFR 1926.651 (excavations) also apply to whoever controls those operations on site.

Can a subcontractor's OSHA violation affect the general contractor's EMR?

Not directly the way the GC's own injuries do. A sub's recordable injuries go on the sub's OSHA 300 log and affect the sub's EMR. But if OSHA cites the GC as controlling employer for a sub-created hazard, that citation lands on the GC's inspection record. A pattern of citations influences insurance underwriting, and some owners use citation history as a prequalification factor.

What should a subcontract safety clause include?

At minimum: a written safety program compliant with all applicable OSHA standards, documented competency training for sub supervisors, a GC right to inspect safety records and stop work for imminent danger, a requirement to report all injuries and near-misses to the GC within a set window, indemnification language, and a flow-down requirement to lower-tier subs. Have a construction attorney review the indemnification language for your state.

Does a GC need to provide OSHA training to subcontractor employees?

Generally no. Each employer trains its own employees under the applicable standards. The sub must train its workers on the hazards they'll face (HazCom, fall protection, PPE, and so on). The GC's job is site-specific orientation covering site hazards, emergency procedures, and site rules. That orientation is distinct from trade-specific OSHA training, which stays the sub's responsibility.

How often should a GC inspect a subcontractor's work for safety?

CPL 02-00-124 ties inspection frequency to hazard severity, not a fixed schedule. High-hazard work needs frequent inspection; low-hazard work needs less. Most risk professionals recommend daily site walks on active projects, with documented weekly audits on trade-specific checklists. For high-hazard operations like steel erection, trenching, or roofing, inspections before each shift are standard and defensible practice.

What happens if a subcontractor refuses to fix an OSHA violation?

Escalate in writing on a documented process: written notice to the foreman, then to the sub's owner or safety manager, then a stop-work order for the hazardous activity if the fix doesn't happen. Your subcontract should give the GC the right to stop work and back-charge correction costs. Tolerating repeated uncorrected violations is exactly the pattern OSHA uses to support a willful citation against a controlling employer.

Do state OSHA plans require more from GCs than federal OSHA?

Some do. California's Cal/OSHA requires every employer, subs included, to maintain a written Injury and Illness Prevention Program under Title 8 CCR Section 3203, more prescriptive than any federal equivalent. Washington, Michigan, and other state-plan states run their own construction rules. In a state-plan state, your subcontract safety terms should reference the applicable state standards. Federal OSHA's website lists all 22 state plan states and their program offices.

What prequalification safety criteria should a GC use when selecting subcontractors?

Check the sub's three-year average EMR (above 1.0 warrants scrutiny), review OSHA citation history through the public establishment search tool, confirm written safety programs for its specific trade, verify supervisor training credentials, and confirm insurance coverage. Some owners and GCs set a hard EMR cutoff around 0.9 or 1.0 as a threshold, though nobody has clean data on which EMR level actually predicts future performance.

Are lower-tier subcontractors (sub-subs) covered by the GC's safety program requirements?

Yes. OSHA's multi-employer policy applies to every employer on site, regardless of tier. A GC acting as controlling employer has reasonable-care obligations for all employers it controls, including sub-subs it never contracted with directly. That's why well-drafted subcontracts include a flow-down clause requiring the sub to impose equivalent safety requirements on any lower-tier subs it hires.

What records prove a GC exercised reasonable care over subcontractor safety?

The most useful ones: signed sub orientation sheets (per employee), dated inspection logs with findings and photos, written corrective action notices with documented follow-up, prequalification records including EMRs and safety programs, and copies of incident reports for any injury on the project. Keep them for the project duration plus at least three years. They are the factual substance of a reasonable-care defense in an inspection or in litigation.

Does a general contractor need to be included on a subcontractor's OSHA 300 log?

No. Each employer keeps its own OSHA 300 log for injuries to its own employees. A sub's workers appear on the sub's log. If the GC has its own crew on site, those workers appear on the GC's log. The GC has no legal obligation to record sub employee injuries on its own 300 log, but keeping copies of sub incident reports for project records is good practice and supports oversight documentation.

What OSHA standards are most commonly violated by subcontractors on construction sites?

OSHA's annual top-10 citations consistently include fall protection (29 CFR 1926.501), scaffolding (29 CFR 1926.451), ladders (29 CFR 1926.1053), hazard communication (29 CFR 1910.1200), and personal protective equipment. These are where GC oversight and sub compliance checking should concentrate. Fall protection alone has driven the most construction fatalities in BLS data nearly every year since 2011.

Sources

1. OSHA, Multi-Employer Citation Policy, CPL 02-00-124 (Dec. 10, 1999): Defines controlling employer as one with general supervisory authority over the worksite, including the power to correct violations or require others to correct them; establishes reasonable-care standard for citation.
2. Bureau of Labor Statistics, Census of Fatal Occupational Injuries: Construction fatalities totaled 1,075 out of 5,283 total private-sector workplace deaths in 2023.
3. OSHA, 29 CFR Part 1926 Safety and Health Regulations for Construction: Governing standard for construction safety including 1926.502 fall protection, 1926.451 scaffolding, 1926.651 excavations, and 1926.23 first aid requirements.
4. OSHA, 29 CFR 1904.39 Reporting Fatalities, Hospitalizations, Amputations, and Losses of an Eye: Requires employers to report work-related fatalities within 8 hours and in-patient hospitalizations, amputations, or eye losses within 24 hours to OSHA.
5. Associated Builders and Contractors, Safety: Industry organizations use EMR thresholds as prequalification criteria for contractor selection.
6. OSHA, 29 CFR 1910.147 Control of Hazardous Energy (Lockout/Tagout): Requires written energy control program for maintenance and servicing operations where unexpected energization or release could cause injury.
7. OSHA, Letter of Interpretation on multi-employer worksites (Jan. 26, 1995): Controlling employers can be cited for violations that expose employees of other employers, not only their own workers.
8. OSHA, Penalties (2024 civil penalty inflation adjustments): Serious violations carry penalties up to $16,550 per violation; willful or repeat violations up to $165,514 per violation as of 2024 adjustment.
9. OSHA, 29 CFR 1910.1200 Hazard Communication Standard: Requires employers using hazardous chemicals to maintain Safety Data Sheets and train employees on chemical hazards.
10. OSHA, State Plans: As of 2024, 22 states and 2 territories operate state plans covering private employers; state plans must be at least as effective as federal OSHA and may exceed federal requirements.
11. OSHA, 29 CFR 1926.1200 Confined Spaces in Construction: Establishes permit-required confined space entry requirements specifically for construction, effective August 3, 2015.
12. OSHA, Establishment Search: Public tool allowing lookup of OSHA citation history by employer name, usable for sub prequalification review.