When the Scaffold on Your Property Becomes Your OSHA Citation: The Controlling-Employer Trap for Building Owners
← Back to Blog Compliance

When the Scaffold on Your Property Becomes Your OSHA Citation: The Controlling-Employer Trap for Building Owners

Property owners assume scaffolding violations belong to the contractor. CPL 02-00-124 says the multi-employer worksite OSHA citation can stack against the property owner too — up to $165,514 per willful condition.

by iSi Environmental

Most commercial property owners assume a scaffolding violation belongs to the contractor. Under the multi-employer worksite OSHA citation doctrine, the property owner often gets cited too — as controlling employer — for the same scaffold and falling-object failures, at up to $16,550 per serious citation and $165,514 per willful one. Here is how the trap closes.

A scaffold tower goes up against the south wall of a four-story commercial building outside Kansas City. The property is owned by a regional REIT; the building has six tenants, a ground-floor cafe, and a maintenance staff of two. The scaffold belongs to a masonry contractor doing facade tuckpointing under a contract signed by the property owner. The owner’s facilities manager walks the site every Wednesday morning, signs off on the contractor’s daily JHA, and reserves the right under Section 14 of the master services agreement to stop work for any safety condition the owner deems unacceptable.

On the second Wednesday of the project, a worker on the third-level platform sets down a 6-pound hammer drill. There is no toeboard. The drill slides off the edge and falls four floors into the loading-dock walkway, missing a cafe delivery driver by about three feet. Nobody is hurt. A tenant calls OSHA anyway.

When the compliance officer arrives the next morning and pulls the file, the multi-employer worksite OSHA citation analysis for the property owner starts running before the first interview. Under CPL 02-00-124, the property owner is a controlling employer the moment the contract retained right-of-control AND the facilities manager exercised it. Two separate evidentiary facts, either one sufficient. The citation against the owner is parallel to the citation against the contractor — not in place of it.

This is the trap most building owners and property managers do not see until they are inside it.

How the Multi-Employer Worksite OSHA Citation Reaches the Property Owner

OSHA’s Multi-Employer Citation Policy — CPL 02-00-124, effective December 10, 1999 — is the operational doctrine that compliance officers apply whenever more than one employer’s workforce is exposed to a single hazardous condition. The directive lays out four employer categories:

  • Creating employer — the employer that caused the hazardous condition.
  • Exposing employer — the employer whose own employees are exposed to the hazard.
  • Correcting employer — the employer on site responsible for correcting the hazard.
  • Controlling employer — the employer with general supervisory authority over the worksite, including the power to correct violations itself or require others to correct them.

The contractor who put up the scaffold is clearly the creating and exposing employer. What surprises owners is how easily they themselves become the controlling employer. The directive states the test plainly: control can be established by contract or, in the absence of explicit contractual provisions, by the exercise of control in practice.

That two-prong test is the trap. A commercial property owner who hires contractors writes contracts protecting the owner’s right to inspect, approve safety plans, and stop work. That language exists to protect the owner commercially. Under CPL 02-00-124 the same language hands OSHA the contractual prong of the controlling-employer test. And the facilities manager who walks the site once a week, signs the JHA, or tells the masons where to stage materials supplies the second prong — actual exercise of control. Either one alone is sufficient. Most owners satisfy both without realizing they have.

OSHA’s December 13, 2001 standard interpretation on determining the controlling employer makes the analysis explicit: authority can be established by contractual provisions (right to require corrective action, right to stop work, right to inspect) or by exercise of control in practice (regular site walks, safety directives to subcontractors, retention of approval authority over safety plans). A property owner satisfies the test without holding the title “general contractor.”

Where the Line Sits Between Passive Landlord and Controlling Employer

OSHA has drawn one bright line and only one. In a December 29, 2004 standard interpretation, the agency confirmed that a private homeowner who contracts with specialty contractors to perform construction on a house is generally not an “employer” under the OSH Act, because the homeowner is not engaged in a business affecting commerce. That carve-out is residential, personal, and narrow.

Every commercial property owner is on the other side of that line by default. A REIT, a landlord, a building manager, an industrial facility owner — all of them are engaged in business. The only question for them is whether they have crossed from passive owner into controlling employer. The 2001 interpretation and the 1999 directive answer the question with a low bar: contract or exercise. Most commercial owners cross both.

The commercial property owner does not need to be on site daily. The commercial property owner does not need to hold the title of general contractor. The commercial property owner does not need to have its own employees in the fall zone. None of those are elements of the controlling-employer test. The test is whether the owner had the authority to require correction. Almost every commercial owner does, by contract.

What the Standards Require — Scaffolding and Falling-Object Protection

The standards being violated in the rooftop hammer-drill scenario are not obscure. They are among the most cited in OSHA’s enforcement docket every fiscal year — Scaffolding (1926.451) ranks in the Top 10 consistently, and Fall Protection (1926.501) is typically the most cited standard in construction.

29 CFR 1926.451 — Scaffolds, general requirements — sets capacity, platform construction, guardrail, fall protection, training, and falling-object protection requirements. Guardrail systems must include a top rail 38–45 inches above the platform, a midrail, and a toeboard at least 3.5 inches high where there is an exposure to workers below. Steel or plastic banding is prohibited as a top rail or midrail. Each employee on a scaffold more than 10 feet above a lower level must be protected from falling.

29 CFR 1926.451(h) — falling-object protection on scaffolds — requires employees below the scaffold be protected from falling hand tools, debris, and small objects through toeboards, screens, guardrail systems, debris nets, catch platforms, or canopy structures. Hardhats are required but are not the primary engineering control. Where tools or material are piled higher than the toeboard, paneling or screening must extend up to the top rail.

29 CFR 1926.502(j) — falling-object protection specifications under Subpart M — sets the design criteria. Toeboards must withstand a 50-pound force; guardrails used as falling-object protection must have openings small enough to prevent passage of falling objects; canopies must be strong enough to prevent collapse and penetration.

29 CFR 1926.454 — training — requires every employee who works on, erects, dismantles, moves, operates, repairs, maintains, or inspects a scaffold to be trained by a competent person.

Each of these is a separate citation point. Each can be issued at the maximum 29 CFR 1903.15 civil penalty for serious violations — $16,550 per violation as of the January 15, 2025 inflation adjustment. Willful or repeated violations reach $165,514 per violation. Failure-to-abate adds $16,550 per day.

The 2026 inflation adjustment publishes mid-January and will raise these figures a few percent. The order of magnitude does not change.

The Penalty Math Most Property Owners Have Never Calculated

Take the four-story building scenario and apply the multi-employer doctrine to a single condition — a missing toeboard on a working platform with a falling-object hazard to the loading dock below.

CitationCited PartyStandardMax Penalty
Missing toeboard / falling-object protectionScaffold contractor (creating + exposing)1926.451(h) / 1926.502(j)$16,550 serious
Failure to exercise reasonable careProperty owner (controlling)1926.451(h) via CPL 02-00-124$16,550 serious
No documented competent-person scaffold inspectionScaffold contractor1926.454$16,550 serious
Failure to require / verify contractor complianceProperty owner (controlling)program failure via CPL 02-00-124$16,550 serious
One condition, one inspection$66,200

If OSHA characterizes the owner’s failure as willful — for example, the facilities manager noted the missing toeboard in two prior weekly inspection memos and did nothing — the property owner’s exposure on the controlling-employer leg alone moves from $16,550 to $165,514. Add a multi-day failure-to-abate and the figure climbs $16,550 per day until corrected.

This is what penalty stacking under the Multi-Employer Citation Policy actually looks like. The property owner is not cited instead of the contractor. The owner is cited in addition to the contractor for the same condition, on the controlling-employer theory.

What Case Law Says About Property Owners and the Controlling-Employer Doctrine

Two federal court decisions in the past decade and a half have settled the question of whether OSHA can cite parties whose own employees were not exposed. Both decisions matter for property owners.

Solis v. Summit Contractors, Inc., 558 F.3d 815 (8th Cir. 2009) reinstated OSHA’s controlling-employer policy in the Eighth Circuit after the Occupational Safety and Health Review Commission had vacated it. Summit was the general contractor on a college dormitory with only four of its own employees on site; the rest were subcontractor employees working on scaffolds lacking guardrails. The court held that 29 CFR 1910.12(a) “is unambiguous in that it does not preclude OSHA from issuing citations to employers for violations when their own employees are not exposed to any hazards related to the violations.” For property owners with facilities in Kansas, Missouri, Nebraska, Iowa, Arkansas, Minnesota, North Dakota, or South Dakota, Solis is binding circuit law. The controlling-employer doctrine is enforceable against parties who exercise supervisory authority even when none of their own people are in harm’s way.

Acosta v. Hensel Phelps Construction Co., 909 F.3d 723 (5th Cir. 2018) overruled thirty-seven years of contrary Fifth Circuit precedent and joined every other federal circuit in upholding OSHA’s multi-employer doctrine. Hensel Phelps was the general contractor on a public library in Austin; subcontractor employees were working next to an unsloped excavated wall. The court upheld OSHA’s citation of Hensel Phelps regardless of whether its own employees were exposed. As of November 2018, there is no longer a federal circuit in which a controlling employer can defend on the theory that “my employees weren’t exposed.”

For owners with multi-state portfolios — REITs, industrial parents, regional developers — the geographic safe-harbor argument is closed. Solis covers iSi’s core eight-state Midwest footprint. Hensel Phelps closes the Fifth Circuit. Every other circuit had already adopted the doctrine on its own.

The Reasonable-Care Standard — What OSHA Expects From a Controlling Property Owner

The controlling employer’s affirmative duty under CPL 02-00-124 is to exercise “reasonable care” to prevent and detect violations. The directive is specific about what that means in practice. Three elements show up in every inspector’s analysis:

  1. Periodic site inspections appropriate to the scale, complexity, and hazard profile of the project. A four-story facade tuckpointing project with active scaffold work warrants weekly walks at minimum, with documented observations and corrective action requests.
  2. An effective project safety program — written, contractually required of contractors, and aligned with the standards applicable to the work being performed. For scaffolding work, that means contractor pre-qualification, scaffold inspection certifications, daily competent-person sign-off, fall protection and falling-object protection program documentation, and training records on file.
  3. Effective enforcement of subcontractor safety compliance. Review-only oversight is insufficient. The owner has to actually require corrective action when noncompliance is observed, and document that the corrective action was completed.

The property owner who has periodic inspections but no enforcement, or an enforcement record but no inspection rhythm, or a written program but never asked for the contractor’s scaffold inspection certifications — that owner has not exercised reasonable care. The inspector arriving after a complaint will reach that conclusion in the first hour and document it in the case file before the closing conference.

Where Owners Actually Get Caught

The fact patterns repeat across enforcement actions and standard interpretations. Five failure modes account for most controlling-employer scaffolding citations against property owners:

  1. The contractor’s scaffold inspection certification was on file but the owner never read it, never asked when it was last updated, and never verified the inspections were happening. Reasonable care under CPL 02-00-124 requires verification, not reliance.
  2. Adjacent tenant employees, delivery personnel, or visitors walked through a falling-object zone without canopy protection or barricades. The owner is exposing employer for the bystanders (when they are tenants of the owner) AND controlling employer for the contractor’s failure to install canopy protection per 1926.502(j).
  3. The owner’s own maintenance staff climbed onto the contractor’s scaffold to perform their own work. The owner is now exposing employer for its own people on a noncompliant scaffold, controlling employer for the contractor, and potentially correcting employer if the owner’s safety procedures gave it that role. Three categories of citation against one party for one condition.
  4. The owner reviewed the contractor’s safety plan but never enforced it. OSHA treats “rubber-stamp review” as insufficient. The enforcement record has to show the owner actually pushed back on noncompliance, in writing.
  5. Owner-supplied scaffold components, anchorages, or staging surfaces were defective or wrong-spec. The owner becomes creating employer in addition to controlling employer.

Each of these is documentable in the first inspection. None requires special expertise from the compliance officer. None depends on a willful violation theory — serious is the default.

A Word on Where the Doctrine Is Vulnerable

The Supreme Court’s June 28, 2024 decision in Loper Bright Enterprises v. Raimondo ended Chevron deference. Federal courts no longer defer to agency interpretations of ambiguous statutes. Labor and employment commentators have specifically flagged OSHA’s multi-employer citation policy as among the enforcement positions most exposed to post-Loper Bright challenge. Both Solis and Hensel Phelps relied at least in part on Chevron deference when they upheld the doctrine. CPL 02-00-124 is a 1999 compliance directive rather than a notice-and-comment regulation, which makes it structurally more vulnerable than a final rule. A future circuit panel — or the Supreme Court — could narrow or vacate the doctrine on independent statutory interpretation grounds.

That is the contrarian view, and it is honest. It is also not a defense for any property owner facing an inspection in 2026. Circuit challenges take three to five years to mature. OSHA is still citing controlling employers under CPL 02-00-124 today, and the agency’s post-Chevron enforcement posture has not softened. The property owner who builds compliance posture today is protected against the rule that exists today. The property owner who waits for Loper Bright to bail them out is making a bet measured in years against a citation measured in weeks.

What a Defensible Owner-Side Compliance Posture Looks Like

The reasonable-care standard is documentary. An owner who can produce the following at the closing conference has a defensible position; an owner who cannot does not.

  • Contractor pre-qualification file: insurance certificates, safety program submittal, EMR/TRIR history, prior OSHA citation review.
  • Master services agreement with explicit safety enforcement language — right to inspect, right to require corrective action, right to stop work, indemnity for OSHA exposure.
  • Project-specific safety plan acceptance from the contractor, including scaffold erection plan, fall protection plan, falling-object protection plan, and competent-person designation.
  • Site inspection cadence and log — who walks, how often, what is documented, how corrective actions are tracked to closure.
  • Tenant and bystander protection plan for falling-object zones — canopy specs per 1926.502(j), barricades, pedestrian routing, communication to building occupants.
  • Owner-employee restriction policy: maintenance staff do not access contractor scaffolds; if they must, the work is added to the contractor’s scope or the scaffold is re-inspected and the owner becomes a documented exposing employer with its own training and PPE records.
  • Documented enforcement actions: when noncompliance is observed, the corrective action request, the contractor response, and the verification of closure.

This is what reasonable care looks like under CPL 02-00-124. It is what an inspector documents the absence of in the first hour. It is also what an owner-side safety audit produces in two or three days, before the inspector arrives.

How iSi Helps Property Owners Close the Controlling-Employer Gap

iSi runs owner-side contractor safety audits, controlling-employer documentation reviews, and multi-employer worksite compliance program builds for commercial property owners, REITs, and industrial parents across our 40-state footprint. The work is structured to produce the documentary file a controlling employer needs to defend against a CPL 02-00-124 citation: contractor pre-qualification standards, master services agreement safety language review, project-specific safety plan acceptance protocols, site inspection cadence design, and the enforcement record that converts review into reasonable care.

For owners with active contractor work across multiple sites, our EHS COOP retainer keeps the controlling-employer compliance posture continuously current — quarterly contractor file reviews, scheduled site safety walks, regulatory updates as the standards change, and a documented record that survives the closing conference. The owner who already has the file when OSHA arrives is in a different position than the owner who has to assemble it after the fact.

If you own commercial property where contractors perform scaffold work, facade work, steel erection, or any overhead operation with falling-object exposure, the question is not whether you are a controlling employer. The contract language and the site-walk practice have already answered that. The question is whether your compliance file will hold up when the citation arrives.

Sources

Tags: