How to Conduct a Workplace Hazard Assessment (29 CFR 1910.132)

How do you conduct a workplace hazard assessment under 29 CFR 1910.132?

A workplace hazard assessment is a structured evaluation of your facility and tasks to identify the hazards employees are exposed to and decide what controls — including personal protective equipment (PPE) — are needed. Under OSHA's general PPE standard at 29 CFR 1910.132(d), every employer must assess the workplace to determine whether hazards are present, or are likely to be present, that necessitate the use of PPE. If they are, the employer must select appropriate PPE, communicate selection decisions to affected employees, and verify that the assessment was completed through a written certification.

In practice, that means walking the workplace, identifying hazards by category, reviewing your injury history, talking with employees, choosing controls in the right order, and documenting the result. This article explains how to do each step and how to satisfy the written-certification requirement. It is educational information, not legal advice.

What does 29 CFR 1910.132(d) actually require?

Section 1910.132(d) is the heart of the PPE hazard assessment rule. It requires the employer to assess the workplace to determine if hazards are present that require PPE. Where such hazards exist, the employer must select PPE that protects the affected employee, communicate those selection decisions, and select PPE that properly fits each affected employee.

Critically, the standard also requires verification. The employer must verify that the required workplace hazard assessment has been performed through a written certification. That certification must identify three things: the workplace evaluated, the person certifying that the evaluation was performed, and the date or dates of the assessment. The certification identifies the document as a hazard assessment. A verbal walkthrough or an undocumented inspection does not satisfy this requirement — the written certification is the part OSHA inspectors look for.

How is a PPE hazard assessment different from a job hazard analysis?

The two are related but not the same. A PPE hazard assessment under 1910.132(d) is a workplace-focused evaluation that asks: what hazards are present here, and what PPE do they require? It is performed once for a given workplace and then redone when conditions change. Its required output is the written certification.

A job hazard analysis (JHA), sometimes called a job safety analysis, is task-focused. It breaks a specific job into its individual steps, identifies the hazards of each step, and determines controls for each. A JHA is broader than PPE alone, covers the full hierarchy of controls, and is typically treated as a living document reviewed on an ongoing basis. JHAs are an OSHA-recommended best practice rather than a single mandated standard. Many employers use a JHA as the engine that feeds the PPE hazard assessment: the task-level findings roll up into the workplace-level certification.

What are the steps to conduct a hazard assessment?

OSHA does not mandate one specific format, but a defensible assessment generally follows these steps:

1. Walk the workplace. Tour each area, process, and task as work is actually performed. Note sources of motion, energy, temperature, chemicals, dust, light, and sharp or falling objects.
2. Identify hazards by category. For PPE purposes, evaluate at minimum the basic hazard categories: impact, penetration, compression (roll-over), chemical, heat, harmful dust, and light radiation. Record where each is present and which body parts are exposed.
3. Review injury and illness records. Examine your OSHA 300 logs, incident reports, near-miss reports, and workers' compensation claims to find recurring hazards the walkthrough might miss.
4. Consult employees. The people doing the work know where the real exposures are. Interview workers and supervisors about close calls, awkward tasks, and equipment problems.
5. Select controls using the hierarchy of controls. For each hazard, work down the hierarchy before defaulting to PPE (see below).
6. Select and fit appropriate PPE. Where PPE is required, choose equipment that protects against the identified hazard and fits each affected employee, and communicate the decision to them.
7. Document the assessment and complete the written certification. Record the hazards, affected areas/tasks, and PPE selected, and sign the certification identifying the workplace, the certifier, and the date(s).
8. Reassess when conditions change. Revisit the assessment whenever you add equipment, change a process, introduce new materials, or modify a work area — and periodically as good practice.

What is the hierarchy of controls?

The hierarchy of controls ranks hazard-reduction strategies from most to least effective. PPE sits at the bottom because it does not remove the hazard — it only shields the worker, and it fails if it is worn incorrectly or not at all. Work down the list in order:

1. Elimination — physically remove the hazard (for example, eliminate a process that creates airborne dust).
2. Substitution — replace the hazard with something less dangerous (swap a hazardous solvent for a safer one).
3. Engineering controls — isolate people from the hazard (machine guarding, local exhaust ventilation, enclosures).
4. Administrative controls — change the way people work (procedures, training, rotation, signage, scheduling).
5. Personal protective equipment — protect the worker with equipment as the last line of defense (safety glasses, gloves, respirators).

A hazard assessment that jumps straight to PPE without considering elimination, substitution, and engineering or administrative controls misses the most effective protections and is harder to defend.

Which related OSHA standards should you check?

The general PPE requirements live in 29 CFR 1910 Subpart I. Within that subpart, several standards address specific hazards your assessment may flag. Eye and face protection is covered by 1910.133, respiratory protection by 1910.134 (which carries its own program, fit-testing, and medical-evaluation requirements), and hand protection by 1910.138. When your assessment identifies a hazard, confirm the controls and PPE against the standard that governs it.

Construction work follows a parallel set of rules. PPE for construction is addressed in 29 CFR 1926 Subpart E, with the general criteria at 1926.95. Construction employers should run the same assessment process but verify selections against the 1926 requirements rather than the 1910 general-industry standards.

How should you document and maintain the assessment?

Keep the written certification and the underlying assessment together and accessible. At minimum the certification must name the workplace evaluated, identify the person certifying that the assessment was performed, and state the date(s). Supporting detail — the hazards found, the areas and tasks affected, the controls and PPE chosen, and the employees notified — strengthens the record and makes reassessment faster. Treat the assessment as a record you update, not a one-time form you file and forget. Software-generated drafts and AI-assisted hazard lists are useful starting points, but a qualified person should review them and confirm them against your actual operations before you rely on them. Using a tool does not by itself make you compliant.