The PPE Hazard Assessment Most Small Businesses Have Never Done

Ask most small business owners what PPE they require on the floor and they can answer without hesitating. Hard hats near overhead work, safety glasses in the shop, cut-resistant gloves when handling sheet metal. The gear exists, people know to wear it, and the owner considers the subject handled. What is almost certainly missing — and what OSHA will cite you for if an inspector visits — is the written hazard assessment that the standard actually requires before any of that equipment gets handed out.

29 CFR 1910.132 governs personal protective equipment for general industry employers. Most of the attention it receives is about the gear itself: what to buy, how to fit it, when to replace it. The piece that gets quietly overlooked is paragraph (d), which requires employers to assess the workplace to determine if hazards are present or likely to be present that necessitate the use of PPE. That assessment must be documented in writing, signed by the person who conducted it, and certified as having been performed for the specific workplace. Without that document, your PPE program has no legal foundation even if every worker on the floor is wearing the right equipment.

What the Standard Actually Requires

The requirement in 1910.132(d) is straightforward but often misread. OSHA requires a workplace-specific evaluation, not a generic statement that PPE is worn. The assessment must walk through the hazard categories the standard identifies: impact, penetration, compression, chemical, heat, harmful dust, light radiation, and any other relevant hazard sources present in your operation. For each area and task where those hazards exist, the assessment documents what the hazard is and what PPE is selected to protect against it.

At the end of the assessment, you must produce a written certification. The certification needs to identify the workplace that was evaluated, the person who performed the assessment, the date it was done, and a statement that it certifies compliance with 1910.132(d). OSHA does not provide a mandatory form, which means any clear, signed document that contains those elements satisfies the requirement. The standard is about evidence that you looked, not about a specific template.

The reason inspectors find this violation so often is not that employers refuse to do safety assessments. It is that the hazard assessment and the PPE rules feel like two separate conversations. Many small businesses have general safety audits, near-miss logs, and job hazard analyses for their riskiest tasks. What they lack is a single document that specifically links workplace hazard categories to PPE selection decisions and carries a signature and date. That specific connection is what 1910.132(d) is asking for.

How to Conduct the Assessment

Start by walking the facility with someone who knows the work — ideally a supervisor or lead who understands each task at the task level, not just the department level. Go area by area and consider every job performed there. Think about what could hit a worker's eyes, what could cut or puncture their hands, what chemicals contact skin during normal work and during cleaning, whether heat sources are present, whether overhead work creates drop hazards, and whether any task generates dust, mist, or fumes that require respiratory or face protection.

Document what you find in plain language. You do not need legal language or elaborate formatting. A table that lists work area, hazard type, body part at risk, and required PPE is entirely sufficient. What matters is that someone reviewed the actual tasks in the actual space and made deliberate decisions about protection. If a task presents no hazard beyond what normal work clothing handles, write that down too — a documented finding of no required PPE is still a finding, and it protects you if a worker later claims they were never told what gear was expected.

Once you have completed the walkthrough and documented your findings, the responsible person signs and dates the certification. Keep it with your safety program records. If OSHA asks, you hand it over. If you add a new work area, change a process, or introduce new chemicals, you update it.

The Training Connection

1910.132(f) pairs with the hazard assessment requirement in a way that makes the documentation even more important. The training provision requires employers to train each employee who is required to use PPE. Training must cover when PPE is necessary, what type is necessary, how to properly put it on and take it off, the limitations of the equipment, and care, maintenance, and disposal. Training must be documented to show who was trained, who conducted training, and when it occurred.

The hazard assessment is where training decisions come from. If you have not documented which tasks require what PPE, your training program has no baseline. An inspector reviewing your PPE compliance will typically ask for the hazard assessment first, because it defines the scope of everything that follows. Solid training records without an underlying assessment still leaves you exposed on the parent requirement.

What the Citation Looks Like

OSHA cites 1910.132 frequently in small manufacturing, construction support, and general industry shops. The most common path to a citation is a worker wearing PPE, an inspector asking for the hazard assessment, and the employer being unable to produce one. The citation is typically classified as serious, with a proposed penalty in the range of $1,000 to $7,000 for smaller employers depending on size and history. The penalty is correctable with a relatively simple abatement — produce the document — but the citation itself stays on your record and can influence how future inspections proceed.

The time required to conduct a solid hazard assessment for a small operation is typically a few hours for the walkthrough and a few more to write it up clearly. For most small businesses, a single working day is enough to complete the assessment, draft the certification, and put a system in place for reviewing it annually or when work processes change. That investment is substantially smaller than the cost of a citation, the liability exposure from a worker injury where no documented PPE standard was established, or the credibility damage that comes from an inspector finding a gap in your most basic safety documentation.

If you have handed out safety glasses and gloves for years without ever writing down why, 29 CFR 1910.132(d) is your starting point. The gear is already right. The document is the missing piece.