August 29, 2026 · The Key Bot

Traffic Control on Private Property and in Parking Lots

No permit, no agency inspector, and no plan review — which is exactly why private-site work carries risk that public work does not. What still applies, and what to do about the parts that do not.

Traffic OS — cones and a barricade channelizing traffic around work in a commercial parking lot

A supermarket wants its lot resurfaced in sections. A hospital is replacing a section of its access road. A distribution centre needs its truck court restriped. None of these involves a permit, an agency plan review, or an inspector.

That absence is usually treated as good news. It is better understood as the removal of a safety net that public work has and this work does not.

Caveat throughout: whether public-road requirements extend to a particular private site depends on the jurisdiction and the nature of the site. Some private roads and lots are treated as open to public travel; some localities extend requirements by ordinance. Confirm with the authority having jurisdiction before assuming you are outside the framework.

What actually applies

Strip away the permit and three things remain.

Your obligations to your own employees. OSHA's construction standards run against the employer with respect to their employees regardless of who owns the pavement. The signs, signals, and barricades requirements at 29 CFR 1926 Subpart G tie work zone traffic control back to the MUTCD, and they do not carve out private property. A crew working in a parking lot is exposed to vehicles in the same way as a crew on a highway, and the employer's duty is the same.

OSHA's own highway work zones and signs, signals, and barricades guidance is the readable entry point to those obligations, and it frames the hazard in terms of workers being exposed to traffic rather than in terms of road classification — which is the framing that carries onto a private site unchanged.

Duty of care to the public. People using the site are members of the public, whatever the pavement's ownership. The absence of a permit condition does not reduce what a reasonable operator is expected to do, and after an incident the question asked will be whether the setup was reasonable — not whether it was required.

The standard of care. Even where the MUTCD does not formally apply, it is the recognised national standard for how to do this. Departing from it on a private site is a decision you may be asked to explain. That does not mean a lot requires a highway-grade setup; it means the reasoning for whatever you do should be defensible by reference to the same principles.

Why parking lots are harder than they look

Low speed is genuinely protective in one respect and irrelevant in several others.

Pedestrians are everywhere, and not where you expect. On a highway, pedestrians are an exception you plan for. In a lot they are the dominant hazard, moving unpredictably between vehicles, pushing carts, holding children's hands, and walking diagonally across your work area because that is the shortest line to the door. Pedestrian accommodation is not a supplementary consideration here — it is the main design problem, and the principles in pedestrian accommodation in work zones apply with more force rather than less.

Drivers are doing something other than driving. People in lots are looking for spaces, reading signage, reversing out of stalls with limited visibility, and paying minimal attention to the travel path. A cone taper that would be adequate on a street is routinely driven straight through in a lot.

Sight lines are poor and structured badly. Parked vehicles, landscaping, cart corrals, and building corners block sight distance in ways a road does not. A work area visible from fifty feet on a street may be visible from fifteen in a lot.

There is no agreed circulation plan. Streets have direction and priority; lots have conventions, and closing one aisle can produce a circulation pattern nobody designed — including vehicles reversing along an aisle to escape a dead end you created. Mapping the resulting circulation is the part most often skipped, and it is where the genuinely novel hazards come from.

Accessible routes and parking are a live issue. Closing an accessible space or the accessible route to an entrance is a serious problem that is easy to do accidentally. Identify accessible parking, the routes from it, and any curb ramps before deciding what to close.

Design it as if someone would review it

The practical approach: produce the same artefact you would produce for a permitted job, and use it internally.

Sketch the site and the phasing. Which aisles close, in what order, and how vehicles and pedestrians circulate during each phase. A phased approach is usually necessary in a lot, because closing everything at once is not an option for an operating business.

Design the pedestrian route explicitly. Where do people walking from the far end of the lot to the door go? If the answer is "around," draw it, and make it obvious enough that it is followed — a barricaded gap that people simply step over is not a route.

Protect the work space physically, not just visually. In an environment where drivers are inattentive and speeds are low, channelizing devices with real presence — drums and Type 3 barricades rather than cones alone — do considerably more work than additional signage. A cone communicates; a barricade obstructs.

Sign the approach, not just the work. Vehicles entering from the street need to know the layout has changed before they commit to an aisle.

Consider what happens at night. A lot that is quiet at 2 a.m. is also dark and has drivers moving faster than they do during the day. Devices adequate under daylight and store lighting may not be after closing — see barricade and warning light types and night work traffic control.

Write down who decided what, and photograph it. This is the single most valuable habit on private sites, because there is no permit file, no inspection record, and no agency documentation. Your daily record is the only evidence that a competent setup existed. Time-stamped photographs of the installed setup, taken at installation and at any change, cost nothing and are the entire evidentiary record if something happens.

Agree the boundaries with the property owner

The property owner substitutes for the permitting agency, and the conversation should be treated with the same seriousness — before mobilising rather than during.

Agree in writing: which areas you may occupy and when; the hours you may work, which are frequently driven by business operations rather than by traffic; who notifies tenants, staff, and delivery vehicles; who is responsible if a customer's vehicle is damaged or if someone moves your devices; and what happens to devices left overnight on a site you do not control.

That last one recurs. Devices in a public right-of-way go missing at a known rate; devices in a lot get moved by staff, by delivery drivers, and by members of the public who found them inconvenient. A setup that is complete at 6 p.m. and rearranged by 8 a.m. is not a theoretical risk, and it is why a morning walk-through before work resumes should be a standing requirement rather than a good habit. The loss side of the same problem is covered in equipment theft and vandalism.

The commercial side

Two things worth agreeing at quoting stage.

Whether the work is phased, and how many mobilisations that means. A lot resurfaced in four sections is four setups and four teardowns. Estimators pricing from the total area consistently price one, which is the same failure as omitting the second phase from a quantity takeoff.

Who bears the cost of re-setting devices that get moved. On a site where the public can reach your devices, someone will be resetting them. Decide in advance whether that is included or billable, because discovering it after the third morning is an awkward conversation.

The one-line version

Private-site work removes the permit, the plan review, and the inspector — and leaves your obligations to your crew, your duty of care to the public, and the recognised standard of care exactly where they were. The absence of anyone checking is not an absence of a requirement. It is an absence of the thing that would have caught your mistake, which is a reason to design more carefully rather than less, and to keep the record that nobody is asking you for.

Frequently asked questions

Does the MUTCD apply in a private parking lot?+

The MUTCD is the national standard for traffic control devices on roads open to public travel, and a private lot is generally outside that scope — but the answer is not uniformly no, because some private roads and lots are treated as open to public travel, and some jurisdictions extend requirements by ordinance. Confirm with the authority having jurisdiction rather than assuming.

If the MUTCD does not apply, what does?+

OSHA's obligations to your own employees apply regardless of who owns the pavement, and general duty of care to the public does not stop at a property line. In practice the manual also remains the best available standard of care — departing from it on private property is a decision you may have to justify.

Do we need a permit for parking lot work?+

Usually not from a roads authority, though local ordinances, fire access requirements, and accessibility rules can still apply, and the property owner's own requirements substitute for a permit. Never assume there is nothing to comply with just because there is no permit to pull.

Why is private site work riskier if it is lower speed?+

Because pedestrians are everywhere, drivers are distracted and unpredictable, sight lines are poor, and there is no plan review catching mistakes. Lower speed reduces severity, not frequency, and it does not reduce the likelihood of a pedestrian conflict at all.

Should we still produce a written plan?+

Yes. Nobody requires it, which is precisely why it is worth doing — it is the only record that a competent setup was designed rather than improvised, and it is what you will want if an incident occurs on a site with no agency documentation at all.