OSHA's Subpart M puts specific, enforceable obligations on every construction contractor whose workers are exposed to a fall of 6 feet or more — here is what each one requires and how to prove compliance during an inspection.
What triggers the duty to provide fall protection?
The duty kicks in at 6 feet above a lower level on any walking or working surface — floors, roofs, ramps, bridges, runways, formwork, and concrete reinforcing steel all qualify under 29 CFR 1926.500(b) and 1926.501(b)(1). The three approved protection methods are guardrail systems, safety net systems, and personal fall arrest systems (PFAS). You must choose at least one of those three for every exposed worker.
One important exception to the "pick any three" rule: specific work types have their own subsections in 29 CFR 1926.501(b). Steep-slope roofing (slope greater than 4 in 12), leading-edge work, precast concrete erection, low-slope roofing, residential construction, and several others each have a dedicated requirement. A single generic fall protection plan does not satisfy all of them.
> If you manage crews that move between new construction and facility maintenance, note that the general industry trigger under 29 CFR 1910.28 is 4 feet, not 6. Workers who cross that line without recognizing the lower threshold are a common citation source.
Guardrail requirements you must meet
Guardrails are the most common passive protection choice, but the dimensions are exact and inspectors measure them.
- Top rail height: 42 inches ± 3 inches (acceptable range: 39–45 inches), measured vertically from the walking surface.
- Midrail: installed midway between the top rail and the walking surface.
- Top rail load rating: must withstand 200 pounds applied within 2 inches of the top edge, in any outward or downward direction.
- Midrail load rating: must withstand 150 pounds in any outward or downward direction.
- Holes: guardrails must be erected on all unprotected sides of a hole.
- Steel or plastic banding used as top rail or midrail must be flagged with high-visibility material at no more than 6-foot intervals.
Surface matters too. Rails must be smooth to prevent lacerations or snagged clothing. A rough-cut 2×4 with protruding nails is not a compliant top rail regardless of height.
Hole cover requirements you must meet
A hole is any gap 2 inches or more in its least dimension in a floor, roof, or other walking surface — including skylights, which OSHA classifies as holes, not roof surface, under 29 CFR 1926.501(b)(4).
Every hole cover must satisfy three requirements under 29 CFR 1926.502(i):
1. Load capacity: support at least twice the weight of employees, equipment, and materials that may be imposed on it at any one time. 2. Secured: fastened so it cannot be displaced accidentally by wind, equipment, or workers. 3. Marked: labeled with the word HOLE or COVER — or color-coded — so workers always know what they are stepping near.
An unsecured sheet of plywood sitting over a roof opening with no marking fails all three tests. It is one of the most frequently cited violations in roofing inspections.
One common skylight misconception: a factory-installed plastic dome, weather screen, or glazing panel is not a compliant cover unless you hold manufacturer documentation showing it meets the 2× load requirement. Treat every skylight as an unprotected hole until you have that documentation in hand.
Personal fall arrest system (PFAS) requirements
When guardrails or covers are not the chosen method, PFAS is the alternative — and it comes with its own mandatory specifications under 29 CFR 1926.502(d).
Anchorages
Anchorages must be independent of any anchorage used to support or suspend platforms. They must be capable of supporting at least 5,000 pounds per worker attached, or alternatively, be designed and used under a qualified person's supervision as part of a complete system maintaining a safety factor of at least two.
Practical traps to avoid:
- Vent pipes, electrical conduit, sprinkler lines, and standard guardrails (rated to 200 pounds top-rail force, not 5,000 pounds) are not compliant anchorages.
- Solar panels, mounting rails, and racking clips are designed for wind and snow loads — not fall arrest forces — and require sign-off from a qualified person before anyone ties off to them.
Body support
Only a full-body harness is acceptable for fall arrest under 29 CFR 1926.502(d). Body belts have been prohibited for fall arrest since January 1, 1998. Using a body belt to arrest a fall is a citable violation.
Free fall and arresting force limits
- Maximum free fall distance: 6 feet.
- Maximum arresting force on the worker: 1,800 pounds.
- Maximum deceleration distance: 3.5 feet.
- The system must prevent the worker from contacting any lower level.
Those numbers interact. A standard 6-foot shock-absorbing lanyard anchored at roof level can easily let a worker contact the ground on a low-slope residential roof. Calculate total fall clearance — lanyard length plus deceleration distance plus harness stretch plus a safety margin — before issuing gear.
Pre-use inspection
29 CFR 1926.502(d)(21) requires inspection of every PFAS component before each use — not daily, not weekly, before each use. Look for webbing cuts, burns, fraying, hardware cracks, distorted D-rings, and impact indicators. Any harness with a deployed impact indicator must be destroyed, not returned to service.
Rescue plan requirements
29 CFR 1926.502(d)(20) requires that you provide for prompt rescue of any worker who falls and is suspended in a harness. This obligation is not optional and must be satisfied before work at height begins — not after the first incident.
A compliant rescue plan is site-specific and must:
- Name the rescuers and confirm they are trained.
- Identify the rescue equipment available on site.
- Account for realistic response times given actual site conditions.
- Address post-rescue positioning and immediate medical evaluation, because suspension trauma can develop within minutes of arrest.
Calling 911 is not a compliant plan on its own. If local emergency services lack high-angle rescue capability or cannot respond quickly enough to prevent suspension trauma, you need on-site rescue capability. Rescue equipment locked in a remote trailer does not count as accessible.
Training and documentation requirements
29 CFR 1926.503 requires fall protection training for every worker exposed to fall hazards. Training must be provided by a competent person, must occur before exposure, and must cover:
- The nature of fall hazards in the work area.
- Correct procedures for erecting, maintaining, and using fall protection systems.
- Correct use, limitations, and care of equipment.
- The employee's role in the fall protection plan.
Written certification — trainee name, training date, and trainer signature — is required. Missing records are a frequent citation even when training actually occurred.
Retraining is required under 29 CFR 1926.503(c) whenever workplace or equipment changes make prior training obsolete, or when a worker shows gaps in knowledge or skill. No fixed calendar interval is mandated, but most employers and platforms use a 12-month refresh cycle as a documented best practice.
Multi-employer site obligations
If you are the general contractor or construction manager, OSHA's Multi-Employer Citation Policy (CPL 02-00-124) extends your obligations beyond your own employees. As the Controlling Employer, you have a duty to exercise reasonable care to prevent and detect fall protection violations — even when the exposed workers belong to a subcontractor.
Reasonable care means:
- Conducting periodic site inspections frequent enough to detect plain-view violations.
- Issuing written hazard notices to subcontractors and following up to confirm correction.
- Having the authority — and using it — to stop work or remove non-compliant subs from the site.
Contractual language that assigns safety responsibility to a sub does not eliminate your OSHA liability. Verbal assurances that a sub's competent person is trained are not enough; you must occasionally audit actual work practices.
Warning line and safety monitor rules
On low-slope roofs (slope 4 in 12 or less), you may use a warning line system combined with a safety monitoring system instead of conventional fall protection in certain situations. These systems have their own strict specifications under 29 CFR 1926.502(f) and 1926.502(h).
Warning lines must:
- Have a minimum tensile strength of 500 pounds — standard yellow caution tape does not qualify.
- Be flagged with high-visibility material at no more than 6-foot intervals.
- Be rigged so the lowest point (including sag) is no less than 34 inches and the highest point no more than 39 inches above the walking surface.
- Be erected not less than 6 feet from the roof edge (10 feet perpendicular to the direction of mechanical equipment operation when mechanical equipment is in use).
Safety monitors must:
- Be on the same walking or working surface as the workers being watched — not on a ladder or higher roof section.
- Have no other duties. A monitor who is moving materials, picking up debris, or checking a phone is not a compliant monitor and is a frequent citation trigger.
- Have the authority to stop work immediately when a worker approaches an unprotected edge.
Jobsite's Fall Protection training library covers each of these obligations in course-specific modules — from PFAS basics and harness inspection to multi-employer responsibilities and rescue planning — so you can document compliance for every role on your site.
FAQ
Does OSHA require a specific rescue response time?
No. 29 CFR 1926.502(d)(20) requires 'prompt rescue' but does not define a specific number of minutes. OSHA's enforcement position is that calling 911 is not a compliant rescue plan unless the local responder has confirmed high-angle rescue capability and a response time fast enough to prevent suspension trauma. Your written rescue plan must name the rescuers, identify the equipment, and account for realistic site-specific response times.
Can a body belt replace a full-body harness in a PFAS?
No. Body belts have been prohibited as fall arrest equipment since January 1, 1998 under 29 CFR 1926.502(d). Only full-body harnesses satisfy the personal fall arrest system requirement. Using a body belt to arrest a fall is a citable violation.
Who qualifies as the competent person for fall protection?
Under 29 CFR 1926.32(f), the competent person must have the knowledge to identify fall hazards and the authority to take prompt corrective action — including stopping work — without needing a manager's approval. Designation alone is not enough. If the person you designated has to ask permission before halting unsafe work, the designation fails on audit.
How often must workers be retrained on fall protection?
29 CFR 1926.503(c) does not set a fixed calendar interval. Retraining is required when workplace changes make prior training obsolete, when new equipment or systems are introduced, or when a worker shows gaps in knowledge or skill. Most employers apply a 12-month refresh cycle as a documented best practice.
Cited standards
See how Jobsite handles this in practice: Safety & compliance on the platform →
About the author
The Jobsite Editorial Team — Construction safety & OSHA compliance
The Jobsite Editorial Team writes the safety and compliance library behind Jobsite, the construction safety, OSHA compliance, and training platform for contractors. Every article starts from the primary regulatory text — the CFR section itself, not a summary of it — and is fact-checked against that source before it publishes, so what you read here is what the standard actually requires of small and mid-size contractors in the field.