How to Conduct a PPE Hazard Assessment, Area by Area

This is the fieldwork half of PPE compliance: the walkthrough itself. Not what the certification page has to say — that is covered in what a PPE hazard assessment certification must contain — but how to actually move through a facility, which hazard categories to test each task against, and how to write down what you find so it holds up later.

29 CFR 1910.132(d) requires employers to assess the workplace for hazards that necessitate PPE. The standard says what the assessment has to achieve and says almost nothing about how to perform one, which is where most small businesses stall. A good assessment is a structured walk with the right person beside you, run against a fixed list of hazard categories, one work area at a time. Budget most of a day.

What the Standard Actually Requires

The requirement in 1910.132(d) is straightforward but often misread. OSHA requires a workplace-specific evaluation, not a generic statement that PPE is worn. The assessment must walk through the hazard categories the standard identifies: impact, penetration, compression, chemical, heat, harmful dust, light radiation, and any other relevant hazard sources present in your operation. For each area and task where those hazards exist, the assessment documents what the hazard is and what PPE is selected to protect against it.

The walkthrough ends in a signed certification, and the specific elements that document has to carry are set out in what a PPE hazard assessment certification must contain. For the purposes of the walkthrough, the thing to keep in mind is that everything you observe has to end up traceable to a work area and a task — vague findings produce a certification that cannot be defended.

The reason inspectors find this violation so often is not that employers refuse to do safety assessments. It is that the hazard assessment and the PPE rules feel like two separate conversations. Many small businesses have general safety audits, near-miss logs, and job hazard analyses for their riskiest tasks. What they lack is a single document that specifically links workplace hazard categories to PPE selection decisions and carries a signature and date. That specific connection is what 1910.132(d) is asking for.

How to Conduct the Assessment

Start by walking the facility with someone who knows the work — ideally a supervisor or lead who understands each task at the task level, not just the department level. Go area by area and consider every job performed there. Think about what could hit a worker's eyes, what could cut or puncture their hands, what chemicals contact skin during normal work and during cleaning, whether heat sources are present, whether overhead work creates drop hazards, and whether any task generates dust, mist, or fumes that require respiratory or face protection.

Document what you find in plain language. You do not need legal language or elaborate formatting. A table that lists work area, hazard type, body part at risk, and required PPE is entirely sufficient. What matters is that someone reviewed the actual tasks in the actual space and made deliberate decisions about protection. If a task presents no hazard beyond what normal work clothing handles, write that down too — a documented finding of no required PPE is still a finding, and it protects you if a worker later claims they were never told what gear was expected.

Once you have completed the walkthrough and documented your findings, the responsible person signs and dates the certification. Keep it with your safety program records. If OSHA asks, you hand it over. If you add a new work area, change a process, or introduce new chemicals, you update it.

The Training Connection

1910.132(f) pairs with the hazard assessment requirement in a way that makes the documentation even more important. The training provision requires employers to train each employee who is required to use PPE. Training must cover when PPE is necessary, what type is necessary, how to properly put it on and take it off, the limitations of the equipment, and care, maintenance, and disposal. Training must be documented to show who was trained, who conducted training, and when it occurred.

The hazard assessment is where training decisions come from. If you have not documented which tasks require what PPE, your training program has no baseline. An inspector reviewing your PPE compliance will typically ask for the hazard assessment first, because it defines the scope of everything that follows. Solid training records without an underlying assessment still leaves you exposed on the parent requirement.

What the Citation Looks Like

OSHA cites 1910.132 frequently in small manufacturing, construction support, and general industry shops. The most common path to a citation is a worker wearing PPE, an inspector asking for the hazard assessment, and the employer being unable to produce one. The citation is typically classified as serious, with a proposed penalty in the range of $1,000 to $7,000 for smaller employers depending on size and history. The penalty is correctable with a relatively simple abatement — produce the document — but the citation itself stays on your record and can influence how future inspections proceed.

The time required to conduct a solid hazard assessment for a small operation is typically a few hours for the walkthrough and a few more to write it up clearly. For most small businesses, a single working day is enough to complete the assessment, draft the certification, and put a system in place for reviewing it annually or when work processes change. That investment is substantially smaller than the cost of a citation, the liability exposure from a worker injury where no documented PPE standard was established, or the credibility damage that comes from an inspector finding a gap in your most basic safety documentation.

If you have handed out safety glasses and gloves for years without ever writing down why, 29 CFR 1910.132(d) is your starting point. The gear is already right. The document is the missing piece.

Related reading: What a PPE Hazard Assessment Certification Must Contain