The HVAC Tech on Your Roof Just Brought Four Chemicals Without an SDS Exchange: 1910.1200's Multi-Employer Trap for Property Managers

It is 7:45 on a Tuesday morning. A property manager runs a six-story, multi-tenant office tower in the Kansas City metro — twelve tenants, about 340 employees on a normal day, a ground-floor restaurant, and a building maintenance staff of three. At 8:00 the rooftop HVAC service contractor pulls up. Two technicians unload a 50-pound R-410A recovery cylinder, a 30-pound R-32 charge cylinder, brazing flux, phos-copper rod, a gallon of coil cleaner concentrate, an acidic evaporator cleaner sprayer, leak-detection dye, and a bucket of condensate-pan tablets. They ride the freight elevator up, prop the roof hatch open, and start work.

At 8:15 the building’s maintenance worker — employed by the property manager — climbs to the roof to help move some duct sections. At 9:30 the restaurant’s general manager comes up to ask about a strange smell coming through her vent. At 10:45 a tenant’s IT contractor is on the roof troubleshooting a satellite dish. By the time the HVAC crew leaves at 4:00 in the afternoon, at least eleven workers from four different employers have been within fifty feet of four hazardous chemicals.

Who held the safety data sheets? Where were they accessible? Who is the controlling employer? Who exercised reasonable care?

If the property manager cannot answer those four questions, this is the multi-employer trap that 29 CFR 1910.1200(e)(2) and CPL 02-00-124 were written to address — and exactly the kind of situation OSHA inspectors investigate after a tenant complaint.

The Regulation Property Managers Are Sure Does Not Apply to Them

The most common belief in commercial property management is that Hazard Communication is somebody else’s problem. The building does not manufacture chemicals. The building’s own employees do not handle hazardous materials beyond a few gallons of cleaning supplies. So HazCom — the standard widely known as “the right-to-know rule” — must be a manufacturing problem, or a construction problem, or somebody else’s problem.

Read 29 CFR 1910.1200(e)(2) carefully and that belief becomes expensive. The provision applies to any employer that produces, uses, or stores hazardous chemicals at a workplace in a way that could expose another employer’s employees. It does not say the chemicals have to belong to the building. It does not say the building owner has to bring them on site. It says that when chemicals are present and other employers’ employees could be exposed, three things have to happen in writing:

The employer must specify in its written HazCom program how it will provide on-site SDS access to the other employers whose employees could be exposed.
The employer must specify in writing how it will inform the other employers of the labeling system in use at the workplace.
The employer must specify in writing how it will inform the other employers of any precautionary measures needed to protect employees.

Now reread it in the context of the rooftop scenario. The HVAC contractor brought chemicals to the property. The property manager has employees who go up to the roof. Other contractors and tenants go up to the roof. The trigger fires the moment the recovery cylinder comes off the truck.

The question the regulation asks is not whether HazCom applies — it asks whether the property manager’s written program addresses the situation. If the building does not have a written HazCom program at all, that is one violation. If it has one but the program does not include the (e)(2) elements for outside contractors, that is another violation. If the program exists, includes the elements, but the property manager never asked the HVAC contractor for SDSs, that is a third violation — failure to exercise reasonable care under the Multi-Employer Citation Policy.

CPL 02-00-124 — Why the Property Manager Gets the Citation, Not Just the Contractor

CPL 02-00-124, OSHA’s Multi-Employer Citation Policy, is the operational doctrine OSHA inspectors apply when more than one employer’s workforce is exposed to a single hazardous condition. The directive lays out four employer categories and a two-step analysis. Every property manager hiring outside contractors should be able to map these categories onto a service-vendor scenario in their sleep, because OSHA inspectors absolutely can.

Creating employer. The employer that caused the hazardous condition. The HVAC contractor — its decision to bring four chemicals up to a shared roof created the exposure.

Exposing employer. The employer whose own employees are exposed. The HVAC contractor for its two technicians. The property manager for the maintenance worker who came up to help. The restaurant tenant for the general manager who came up to investigate. Each had to know about the chemicals and give its own employees access to the SDSs.

Correcting employer. The employer on site responsible for correcting the hazard. Usually the HVAC contractor; if the property manager’s HazCom program names itself as central SDS recipient, the property manager too.

Controlling employer. The employer with general supervisory authority over the worksite. The property manager controls access to the roof, decides which contractors come on site, and has the authority to require HazCom compliance before work begins. Under CPL 02-00-124 the controlling employer is citable when it fails to exercise reasonable care to detect and prevent violations.

Reasonable care, in OSHA’s view, is not a vague aspirational standard. The directive describes specific actions a controlling employer should be taking — periodically inspecting the worksite, having a project safety program in place, taking effective steps to enforce subcontractor compliance with health and safety obligations. A property manager who has never asked an HVAC contractor for an SDS, never seen a contractor’s HazCom program, never set foot on the roof during work, and never told tenants about the chemicals present has not exercised reasonable care. The inspector arriving after a tenant complaint will reach that conclusion in the first hour.

The Practical Failure Modes on a Customer Property

There are five places where multi-employer HazCom compliance breaks on customer property. Property managers and the contractors they hire should recognize all five — because OSHA inspectors do, and they look for these exact failures.

Failure 1 — No written program at all on the property manager side. The most common gap. The property manager’s HazCom program either does not exist or addresses only the small set of chemicals the building’s own maintenance staff uses. The (e)(2) provisions are absent. A 1990 OSHA letter of interpretation responding to the National Association of Plumbing-Heating-Cooling Contractors made this clear: each employer’s written program must specify the methods that employer will use to provide other employers with SDSs or to make them available at a central location. There is no “we don’t have chemicals so we don’t need a program” exception when other employers’ chemicals routinely come on site.

Failure 2 — SDSs in the wrong physical place. Section 1910.1200(g)(8) requires SDSs to be “readily accessible during each work shift to employees when they are in their work area.” On a rooftop service call the work area is the roof. SDSs back at the contractor’s shop in another city are not accessible. SDSs locked in the service van after the crew climbed to the roof and put the keys in their pocket are not accessible. SDSs on a tablet whose battery died at 11 a.m. on a 95-degree roof are not accessible. The standard does not require paper — it requires “readily accessible.” The contractor’s compliance plan has to specify what counts and what is the backup when the primary access path fails.

Failure 3 — Mixed-version SDS library during the HazCom 2024 transition. Per OSHA’s January 2026 extension notice, chemical manufacturers must ship updated substance SDSs and labels by May 19, 2026, and employer compliance for substances follows on November 20, 2026. During this window every HVAC contractor’s SDS library is a mixed-version inventory. If the contractor sent the property manager’s central repository the wrong version, both employers have a problem.

Failure 4 — Secondary containers without labels. The recovery cylinder, the brazing flux bottle decanted into a squeeze bottle, the coil cleaner transferred into a sprayer. Section 1910.1200(f) requires every container to carry a label that identifies the product and warns of the hazards. The one-shift, one-user exemption at 1910.1200(f)(8) does not apply when the chemical is left on a roof shared with another employer’s employees.

Failure 5 — No communication to tenants and building staff. The property manager has both an obligation under 1910.1200(e)(2)(iii) — to inform other employers on site of precautionary measures — and a CPL 02-00-124 controlling-employer obligation to take reasonable care. A short email to tenants the day before scheduled service work, naming the chemicals present, the access restrictions, and the location of SDSs, closes both gaps.

What a Defensible Multi-Employer SDS Exchange Looks Like

Property managers who treat the (e)(2) obligation as a written deliverable rather than an aspirational principle can build a compliant exchange in a week. The framework has four pieces.

A contracting-side requirement. The vendor agreement with every outside HVAC, pest control, water treatment, fire protection, and janitorial contractor includes a HazCom rider. The rider requires the contractor to submit a chemical inventory list and the corresponding SDSs prior to each service date, to label all containers brought on site, to keep SDSs accessible on the truck and at the work location during the shift, and to notify the property manager of any new chemical introduced. The rider names the property manager’s HazCom program as the controlling-employer program for shared-worksite purposes and requires the contractor to coordinate with it.

A central repository the property manager actually maintains. Whether the repository is a binder at the security desk, a tablet kiosk in the maintenance office, a cloud-shared folder, or a commercial SDS platform, the program specifies (a) where it is, (b) how every employee on site can reach it during every shift, and (c) the backup procedure when the primary access path fails. The repository contains both the building’s own chemical SDSs and the SDSs each visiting contractor has submitted for the current service date.

A pre-service notification routine. A standing pre-service email or portal post the day before each scheduled outside service date that names the chemicals present, the work zone, the precautionary measures, and a link or location for SDS access. The notification goes to the building’s maintenance staff and to tenant points of contact. It costs ten minutes per service date and closes a doctrinal gap that costs $16,550 per violation when it fails.

A reasonable-care inspection routine. Periodic walks of the work area during contractor service work. Photo documentation of labeling. A quick check that the SDS access path actually works on that shift, from the actual work location, with whatever device the worker has at hand. This is what reasonable care looks like in CPL 02-00-124 — not a guarantee that nothing goes wrong, but a documented record of having looked.

The Penalty Math

Hazard Communication violations are not theoretical. HazCom holds the #2 spot on OSHA’s Top 10 most frequently cited standards for the fourth consecutive year — and the #1 spot among general industry standards. OSHA issued 2,546 HazCom citations in FY 2025 and over 2,500 in FY 2024. For an outside contractor doing service work on a commercial property in any of iSi’s seven service states, the citation risk for HazCom is higher than for almost any other OSHA standard, period.

The January 2025 civil penalty adjustment set the current maximums at $16,550 per serious or other-than-serious violation and $165,514 per willful or repeat violation. Treat each chemical without proper SDS access as a separate instance: refrigerant, brazing flux, coil cleaner, and water treatment chemicals on one roof can produce four citations from one inspection. At $16,550 each that is $66,200 from a single tenant complaint phone call.

Now run the same math on the controlling-employer side. The property manager gets cited separately for failing to exercise reasonable care under CPL 02-00-124 — another serious citation, another up to $16,550. If the citation is upgraded to willful because the property manager had been warned in a prior inspection and made no changes, the maximum runs $165,514 per violation.

The Kentucky and Multi-State Wrinkle

Six of the seven iSi service states (Kansas, Missouri, Oklahoma, Nebraska, Texas, Arkansas) are under federal OSHA jurisdiction, so 29 CFR 1910.1200 and CPL 02-00-124 apply directly. Kentucky operates an OSHA-approved state plan under the Kentucky Education and Labor Cabinet that adopts federal HazCom by reference and follows federal multi-employer enforcement — and extends to public-sector property managers as well. There is no state in iSi’s region where the multi-employer SDS-exchange obligation is weaker than federal. A program built to the federal floor works everywhere.

What This Costs to Fix Before the Inspector Shows Up

A single willful OSHA violation costs up to $165,514. An iSi industrial hygiene assessment that catches the multi-employer SDS gap before the inspector does costs $4,050. That is a 41:1 return on a phone call.

The assessment is concrete: a walk-through of the property, a review of the existing HazCom program against the 1910.1200(e)(2) elements, a sample audit of the SDS access path from each common service location (rooftops, mechanical rooms, parking-lot meter pits, water-treatment equipment closets), a contractor-rider template the property manager can drop into vendor agreements, and a one-page pre-service notification template the building can use the day before each outside service date. The deliverable is a written program update that closes the controlling-employer gap and a documentation routine the maintenance staff can run without adding a full-time role.

For property managers who would rather have continuous coverage than a one-time engagement, iSi’s EHS COOP retainer puts a licensed industrial hygienist or safety professional on call for multi-tenant facility operators — periodic reasonable-care inspections, SDS exchange verification, tenant-facing communications, and direct OSHA-inspector interface when complaints arrive. The arrangement covers the controlling-employer obligation that property managers cannot in-source without hiring a full-time EHS director.

The Bottom Line

The rooftop HVAC scenario is not a hypothetical. It happens at every multi-tenant commercial property in iSi’s service region, sometimes multiple times a week. Each service date is a multi-employer worksite under 29 CFR 1910.1200(e)(2) the moment the contractor opens the truck. Each service date is a CPL 02-00-124 inspection waiting for a tenant complaint.

The cost to compliance is a written program update, a contractor rider, a central SDS repository, a pre-service notification routine, and periodic documented inspection. The cost to non-compliance is up to $165,514 per willful violation, per chemical, per inspection. Property managers who already handle tenant lease, building code, and insurance compliance have the operational chops to handle HazCom multi-employer compliance — they mostly have not been told the obligation runs to them. CPL 02-00-124 says it does, and the inspector responding to the next tenant complaint will start asking who held the SDSs the moment they arrive on site.