A PPE hazard assessment is a task-by-task survey of your workplace, required by OSHA under 29 CFR 1910.132(d), that identifies the physical and health hazards each job exposes workers to, decides what personal protective equipment defends against them, and is signed off in a written certification. It is the step that has to happen before you hand anyone gloves, glasses, or a face shield.
Most plants own plenty of PPE. What they are missing is the piece of paper that says why each item is required and which hazard it defends against. That document is not optional. OSHA's PPE standard makes the written hazard assessment the foundation of the whole program, and it is a common inspection finding precisely because the gear is easy to buy and the assessment is easy to skip. This post walks through how to do one and how to certify it, using the standard as the reference. It is educational, not legal advice.
What does OSHA require in a PPE hazard assessment?
OSHA 1910.132(d) says the employer must assess the workplace to determine if hazards are present, or likely to be present, that require PPE. If they are, you select the right PPE for each hazard, communicate the selection to the affected worker, and make sure the equipment fits. Then you verify the whole thing was done through a written certification. The assessment is not a walk-around that stays in someone's head; it is a documented determination that a hazard exists and that a specific type of PPE addresses it.
The key move is to assess by task, not by department. "The packaging line" is not a unit of analysis; "clearing a jam on the case sealer" is. Hazards live in tasks, and PPE defends against the hazard of a task, so that is the grain you survey at. This is the same task-first logic behind a job safety analysis and the two documents feed each other.
What hazards does the assessment look for?
OSHA's guidance points you at specific categories of basic hazard. Walk each task against this list and you will not miss much:
Impact from flying or falling objects. Penetration from sharp edges and points. Compression, meaning roll-over or pinch. Chemical splash and contact. Heat, from hot surfaces to sparks. Harmful dust. And light radiation, mostly from welding and cutting arcs. For each hazard you find, name the part of the body it threatens (eyes, face, head, hands, feet, body, or lungs) and you are ready to match protection. Respiratory hazards get their own dedicated program, so if the assessment turns up airborne contaminants above safe limits, that routes to a respiratory protection program rather than a dust mask handed out on the fly.
The point of naming the body part is that it makes the PPE choice almost automatic. "Chemical splash to the face" points straight at a chemical goggle plus a face shield. "Impact to the eyes" points at ANSI-rated safety glasses with side protection. "Penetration to the hands" points at a cut-resistant glove of the right cut level. When the hazard is written vaguely, as "chemicals present" or "sharp stuff," the PPE choice gets vague too, and vague PPE is how a worker ends up with a splash goggle against a hazard that needed a full face shield. Precision in the hazard column is what makes the equipment column correct.
How do you actually do a PPE hazard assessment?
The mechanics are a structured walk-through followed by a matching step and a signature. Here is the sequence.
- List the tasks, not the rooms. Break each area into the actual jobs performed there, including maintenance, cleaning, and the non-routine tasks that only happen at changeover or breakdown. Pull from injury history and your hazard analysis worksheet to make sure the rare, high-risk tasks are on the list.
- Walk each task and observe it done. Watch the work, look at the sources of motion, energy, chemicals, and sharp edges, and talk to the operator. The hazard you find watching is the real one; the hazard you guess at a desk is the imagined one.
- Name each hazard by category and body part. Impact to the eyes, chemical splash to the face, compression to the feet. Specificity here is what makes the PPE choice obvious in the next step.
- Match PPE to each hazard, selecting equipment that fits the affected worker and meets the applicable performance standard (for example, ANSI-rated eye protection). Note the type, not just "gloves," because a chemical-splash glove and a cut-resistant glove are different tools for different hazards.
- Certify the assessment in writing, then train workers on what PPE to wear, when, and how. The certification and the training close the loop; without them the assessment is incomplete.
Reassess when the work changes: new equipment, new chemicals, a new process step, or an incident that shows the current PPE is not enough. The assessment is a living document tied to the tasks, and it should be sampled during any safety audit.
What has to be in the written certification?
This is the part OSHA cites most, and it is oddly specific, so get it exactly right. The written certification must identify the workplace evaluated, the name of the person certifying that the evaluation was performed, the date or dates of the hazard assessment, and it must clearly identify the document as a certification of hazard assessment. Four elements. A stack of PPE sign-out sheets is not a certification, and neither is a glove-purchase order. If OSHA asks for your hazard assessment certification and you hand over anything that is missing one of those four elements, the citation stands regardless of how good your actual PPE is.
Do you need a separate assessment for every worker?
No. OSHA lets you assess by task or job type rather than by individual, so if ten people do the identical job under identical conditions, one assessment of that job covers all ten. What you cannot do is assess one area and assume it speaks for a different one. A mixing room and a shipping dock are different task sets with different hazards, and each needs its own assessment. The practical unit is the task performed under a given set of conditions. When conditions genuinely differ, say the same job runs on a line with a splash guard and a line without one, those are two assessments, because the hazard exposure is not the same. Assess the task, cover everyone who does it, and re-cut the assessment only when the task or the conditions actually change.
How does the assessment fit the bigger PPE program?
The hazard assessment is step one, not the whole thing. It feeds the rest of the PPE program: selection, fit, training, maintenance, and the employer-pays rule. The assessment tells you what hazards exist; the program is how you defend against them and keep the defense working. And PPE sits at the bottom of the hierarchy of controls, so a good assessment also asks whether a hazard can be engineered out before you reach for equipment. If a task's only control is "wear a face shield," the assessment has done half its job; the other half is asking whether a guard or a process change could remove the splash in the first place, the same instinct behind machine guarding.
What do the numbers say?
PPE and its underlying hazard assessment show up constantly in enforcement and injury data:
- The general PPE requirement, including the hazard assessment and written certification, is OSHA 29 CFR 1910.132; the nonmandatory guidance for doing the assessment is in Appendix B to Subpart I.
- Eye and face protection alone is a heavily cited standard; OSHA's 1910.133 and NIOSH note that most eye injuries involve workers not wearing eye protection or wearing the wrong type, which is exactly the gap a hazard assessment closes.
- Private industry reported millions of nonfatal injuries a year per the Bureau of Labor Statistics, a large share of them to the hands, eyes, and feet that PPE is meant to protect.
Behind those hand, eye, and foot injuries is usually a task whose hazard was never named and matched to protection. That is the entire job of the assessment.
Here is the practical failure mode: the assessment gets done once, filed in a binder, and never touched again as lines change and new chemicals arrive, so the paper stops matching the floor. Harmony is an AI-native layer that connects machines, software, and paperwork into one operational layer, with no rip-and-replace. The hazard assessment, PPE selections, and training records become structured data captured at the station, and AI search returns cited answers across them, so "what PPE is required to clear a jam on line 3, and when was that assessed" is a question, not a folder hunt. It is the everyday shape of connected worker technology and it is not a safety-compliance product. Harmony's digital workflows move those forms and handoffs into that structure; you can see how in the CLS case study. Keep the assessment tied to the task, and PPE stops being a bin by the door and becomes a decision with a reason behind it.