5.1 Hierarchy of Controls & Hazard Assessment Certification (1910.132)

5.1 Hierarchy of Controls & Hazard Assessment Certification (1910.132)

Subpart I of 29 CFR 1910 establishes mandatory general industry safety standards governing Personal Protective Equipment (PPE). Foundational to Subpart I is 29 CFR 1910.132, which defines the primary responsibilities of employers to evaluate workplace hazards, select appropriate protective equipment, ensure equipment quality and maintenance, train employees, and absorb the financial costs associated with employee protection.

However, OSHA standards and modern industrial hygiene practices strictly mandate that personal protective equipment must never serve as the primary or sole defense against workplace hazards. Instead, employers must evaluate and apply control strategies through the framework known as the Hierarchy of Controls.

---

The Hierarchy of Controls Framework

The Hierarchy of Controls is a conceptual framework prioritized by OSHA and the National Institute for Occupational Safety and Health (NIOSH) to systematically reduce or eliminate exposure to occupational hazards. The controls are arranged in descending order of effectiveness, forming an inverted pyramid:

+-------------------------------------------------------------+
|  ELIMINATION (Physically remove the hazard)                 |  MOST EFFECTIVE
+-------------------------------------------------------------+
|  SUBSTITUTION (Replace the hazard with a safer alternative) |
+-------------------------------------------------------------+
|  ENGINEERING CONTROLS (Isolate workers from the hazard)     |
+-------------------------------------------------------------+
|  ADMINISTRATIVE CONTROLS (Change the way people work)       |
+-------------------------------------------------------------+
|  PERSONAL PROTECTIVE EQUIPMENT (Protect worker with PPE)    |  LEAST EFFECTIVE
+-------------------------------------------------------------+

Detailed Breakdown of Control Levels

1. Elimination: The absolute removal of the hazard from the workplace. For example, discontinuing the use of a toxic solvent by re-engineering a manufacturing process to perform dry cleaning or ultrasonic cleaning. Elimination provides 100% risk reduction because the hazard no longer exists.
2. Substitution: Replacing a hazardous substance, machine, or process with a less hazardous one. Examples include replacing a flammable, toxic solvent (such as trichloroethylene) with a non-toxic water-based citrus detergent, or substituting lead-based paint with water-based acrylic paint. While the process remains, the risk level is dramatically minimized.
3. Engineering Controls: Designing physical modifications to the plant, equipment, or workplace to isolate workers from hazards. Engineering controls do not rely on human behavior or employee compliance. Examples include:
   • Local Exhaust Ventilation (LEV): Capturing airborne toxic vapors or welding fumes directly at the point of generation before they reach the worker's breathing zone.
   • Physical Machine Guarding: Interlocked safety gates, light curtains, and fixed barriers covering rotating shafts or nip points.
   • Acoustic Enclosures: Sound-dampening walls built around high-decibel air compressors to lower ambient noise levels below 85 dBA.
4. Administrative Controls: Establishing work practices, policies, procedures, and scheduling changes designed to reduce worker exposure duration or frequency. Because administrative controls rely on consistent human behavior, they are inherently less reliable than engineering controls. Examples include:
   • Job Rotation: Rotating workers through high-noise or high-heat environments to ensure no individual exceeds permissible daily dose thresholds.
   • Schedules: Performing hazardous chemical tank cleanings during off-peak night shifts when fewer non-essential workers are present in the plant.
   • Standard Operating Procedures (SOPs) and safety training programs.
5. Personal Protective Equipment (PPE): Placing a physical barrier directly on the worker's body (e.g., respirators, safety glasses, chemical gloves, hard hats). PPE is classified as the least effective control measure for several critical reasons:
   • It does not eliminate or reduce the hazard in the environment; if the PPE fails or is removed, exposure is instantaneous and unmitigated.
   • It depends 100% on proper selection, correct fitting, consistent donning/doffing, and continuous employee compliance.
   • PPE can create secondary hazards, such as heat stress, reduced peripheral vision, reduced tactile sensitivity, or reduced mobility.

OSHA MANDATE: Under OSHA policy, employers must implement feasible engineering and administrative controls first. PPE is permissible only as a temporary measure while engineering controls are being installed, when engineering controls are technically or economically infeasible, or as a supplemental safeguard alongside higher-level controls.

---

Workplace Hazard Assessment Certification (29 CFR 1910.132(d))

Under 29 CFR 1910.132(d)(1), the employer is legally obligated to assess the workplace to determine if hazards are present, or are likely to be present, which necessitate the use of personal protective equipment. If such hazards are present, the employer must select appropriate PPE, communicate selection decisions to affected employees, and require proper equipment usage.

Mandatory Written Certification Requirements

To prove compliance with the hazard assessment mandate, 29 CFR 1910.132(d)(2) requires the employer to prepare and maintain a formal written certification. OSHA compliance officers will review this document during any Subpart I inspection.

The written hazard assessment certification MUST contain four explicit administrative data elements:

+--------------------------------------------------------------------------+
|                   CERTIFICATION OF HAZARD ASSESSMENT                     |
|                               (29 CFR 1910.132(d))                       |
|                                                                          |
| Facility / Department Evaluated: Maintenance & Welding Shop (Bldg 4)     |
| Assessment Performed By: Jane Doe, CSP, CIH                              |
| Date(s) of Assessment: August 2, 2026                                    |
|                                                                          |
| Identified Hazards: High-impact flying debris, UV/IR optical radiation,  |
| hazardous metal fumes (hexavalent chromium), noise > 90 dBA.             |
| Required PPE: ANSI Z87.1 Safety Glasses w/ side shields, Welding Helmet  |
| (Shade 11), ANSI Z89.1 Class E Hard Hat, Leather Welding Gloves,         |
| Half-Mask Elastomeric Respirator w/ P100/OV cartridges.                  |
|                                                                          |
| Signature: [ Jane Doe ]                      Date: August 2, 2026        |
+--------------------------------------------------------------------------+

---

Employer Payment for PPE (29 CFR 1910.132(h))

On November 15, 2007, OSHA issued its final rule on Employer Payment for Personal Protective Equipment (codified at 29 CFR 1910.132(h)), establishing that employers are required to provide all mandatory PPE to employees at no cost.

General Rule

Under 1910.132(h)(1), with very limited exceptions, all personal protective equipment required by 29 CFR 1910 to comply with OSHA standards must be provided by the employer without charging the employee or requiring employee payroll deductions.

Statutory Exceptions to Employer Payment (1910.132(h)(2)-(h)(6))

OSHA explicitly established narrow, defined exceptions where the employer is NOT legally required to pay for protective equipment:

1. Non-Specialty Safety-Toe Footwear: Employers are not required to pay for non-specialty safety-toe footwear (such as standard steel-toe work boots), provided that the employer permits the footwear to be worn off the jobsite.
2. Prescription Safety Eyewear: Employers are not required to pay for prescription safety eyewear, provided that the employer permits the glasses to be worn off the jobsite and provides protective over-glasses (OTG goggles or side shields) that fit over the employee's personal prescription spectacles.
3. Everyday Weather Clothing: Employers are not required to pay for everyday clothing worn for protection against normal weather elements, including cold-weather coats, parkas, rain gear, winter gloves, sun hats, and sunglasses.
4. Logging Boots: Under 29 CFR 1910.266(d)(1)(v), employers are not required to pay for specialized cut-resistant logging boots, though they must ensure employees wear them.

SPECIALTY EXCEPTION RULE: If safety footwear or prescription eyewear is designed for highly specialized protection and cannot be worn off the jobsite (for example, non-standard metatarsal guards, chemical-encapsulating boots, or specialized laser prescription safety glasses that remain at the facility), the employer MUST pay for them in full.

Employee-Owned PPE (29 CFR 1910.132(b))

Where employees provide their own personal protective equipment (such as an employee electing to wear their own custom-fit hard hat or safety boots), the employer is not required to reimburse the employee. However, under 29 CFR 1910.132(b), the employer remains strictly accountable for assuring that the employee-owned equipment is adequate, properly maintained, sanitized, and fully compliant with all applicable OSHA and ANSI standards.

---

Employee Training Requirements (29 CFR 1910.132(f))

Under 29 CFR 1910.132(f)(1), employers must provide comprehensive training to every employee who is required to wear PPE. Training must occur prior to initial assignment and must cover five core competencies:

1. When PPE is necessary.
2. What PPE is necessary for specific job tasks.
3. How to properly don (put on), doff (take off), adjust, and wear assigned PPE.
4. The limitations of the protective equipment (e.g., breakthrough times, impact limits).
5. The proper care, maintenance, useful life, and disposal of the equipment.

Retraining Triggers (29 CFR 1910.132(f)(3))

Employers must retrain an employee whenever any of the following three conditions occur:

• Workplace Changes: Changes in the workplace render previous training obsolete (e.g., installation of a new automated chemical line).
• PPE Type Changes: Changes in the types of PPE to be used render previous training obsolete (e.g., switching from air-purifying respirators to powered air-purifying respirators).
• Employee Inadequacy: Inadequacies in an affected employee's knowledge or use of assigned PPE indicate that the employee has not retained the requisite understanding or skill (e.g., observing an employee wearing safety glasses upside down or failing to adjust a hard hat suspension).

Employers must document training via a written certification containing the name of each trained employee, the date(s) of training, and the subject of the certification.