The Written PPE Hazard Assessment OSHA Expects (29 CFR 1910.132(d))

⏰ OSHA HazCom deadline — November 20, 2026: employers must update their workplace labels, written HazCom program, and employee training to the new GHS format by then. Check your program free — 2-minute self-audit →
Updated August 2026

Most small facilities know they need safety glasses and gloves. Far fewer know that OSHA also requires a written certification saying you assessed the workplace and decided what protection the work needs — and that the certification has to name four specific things. It is a single page, it is easy to overlook, and it is easy to produce once you know what belongs on it.

Free, no signup: the SDS binder builder at sdsentry.0xpi.com/sds-binder.html turns a pasted list of the products you keep on site into one printable index of their current safety data sheets — which is where the PPE recommendations you are assessing against actually live.

Section 8 of every SDS names the protection the manufacturer recommends. Paste your product list and get each one’s current sheet as a printable binder index — free, no signup. Build my SDS binder — free →

The requirement, in two short clauses

29 CFR 1910.132(d)(1) requires the employer to “assess the workplace to determine if hazards are present, or are likely to be present, which necessitate the use of personal protective equipment.” If hazards are found, you select PPE that protects against them and communicate that selection to each affected employee.

1910.132(d)(2) is the part people miss. It requires the employer to “verify that the required workplace hazard assessment has been performed through a written certification.” The assessment is the thinking. The certification is the proof it happened, and it is what an inspector can actually ask to see.

The four things the certification must identify

That last one sounds like paperwork for its own sake, and in a sense it is — but it is also the difference between a document that satisfies the rule and a sensible-looking PPE policy that does not. A wall chart of glove types is not a certification. A dated page naming the site, the assessor, and itself, is.

Where the safety data sheet comes in

You cannot assess chemical hazards without knowing what the chemicals do. Section 2 of each SDS gives the hazard classification, and Section 8, Exposure controls and personal protection, names the eye, skin and respiratory protection the manufacturer recommends, along with any exposure limits.

The SDS does not perform the assessment for you. It does not know how much you use, how you ventilate, or whether the task splashes. What it does is give you the evidence you reason from — and an assessment written without reference to the sheets is hard to defend, because the manufacturer’s own recommendation is the most obvious thing an inspector will compare it against.

Training is a separate duty

Under 1910.132(f), each employee required to use PPE must be trained on when it is necessary, what to use, how to put it on and take it off and adjust it, its limitations, and its care and disposal. Under 1910.132(f)(2) each affected employee must demonstrate an understanding of that training, and the ability to use the PPE properly, before doing work that requires it; (f)(3) requires retraining when the workplace or the PPE changes or an employee has not retained it. The current text of 1910.132 does not prescribe a written training certification (checked on eCFR, Oct 2026), but a dated record naming the employee and the topics is the simplest way to show (f)(2) was met. Two duties, two purposes: one says you worked out what was needed, the other says the people wearing it were taught.

What sits outside this standard

A hazard assessment can conclude that a respirator is needed, but respirators have their own standard at 1910.134 — including medical evaluation and fit testing — and hearing protection falls under 1910.95. Reaching one of those conclusions pulls you into a larger programme than a single certification page. It is better to know that before writing the assessment than after.

When to redo it

The standard sets no expiry date, which tempts people to treat the certification as permanent. It is not: it describes a workplace at a moment in time. Add a chemical, change a process, move a machine or take on different work, and the assessment behind your PPE choices is describing a place you no longer run. Re-certify with a new date when the work changes, and keep the superseded version — it shows the assessment is maintained rather than written once.

Frequently asked questions

Does OSHA require a written PPE hazard assessment?

Yes. 29 CFR 1910.132(d)(1) requires the employer to assess the workplace to determine whether hazards are present, or are likely to be present, that make personal protective equipment necessary. 1910.132(d)(2) then requires the employer to verify that the assessment has been performed through a written certification. The assessment itself is the work; the certification is the piece of paper that proves it happened.

What has to be in the certification?

Four things, and they are specific: the workplace evaluated, the person certifying that the evaluation was performed, the date or dates of the hazard assessment, and a statement identifying the document as a certification of hazard assessment. A page of PPE rules with no date and no named certifier does not satisfy the rule, however sensible its contents.

Is a hazard assessment the same as a HazCom written program?

No, and having one does not cover the other. The HazCom written program under 1910.1200(e) covers labels, safety data sheets and training for hazardous chemicals. The PPE hazard assessment under 1910.132(d) covers whether the physical and chemical hazards in your workplace require protective equipment, including hazards that have nothing to do with chemicals such as impact, penetration, compression and heat.

How does a safety data sheet help with the assessment?

Section 8 of each SDS, Exposure controls and personal protection, names the eye, skin and respiratory protection the manufacturer recommends for that product, and Section 2 gives the hazard classification that tells you how serious the exposure is. The SDS does not perform your assessment - it does not know your tasks, quantities or ventilation - but it is the evidence you reason from, and an assessment written without reference to it is difficult to defend.

Does the assessment need redoing?

There is no fixed expiry in the standard, but the assessment describes a workplace at a moment in time. If you change a process, add a chemical, move equipment or take on different work, the assessment behind your PPE selection is no longer describing the place you now run. Re-certify with a new date when the work changes rather than on a calendar schedule.

Does this cover respirators and hearing protection too?

Not entirely. Respirators have their own standard at 1910.134 and hearing conservation at 1910.95, each with its own requirements that go well beyond a hazard assessment. If your assessment concludes a respirator is needed, that conclusion pulls you into 1910.134, including fit testing and medical evaluation.


SDSentry keeps your SDS library, GHS labels and HazCom training records in one place — OSHA deadline price: $24 per location a month, or $199 a year (regularly $49). Start by November 20, 2026 to lock it in.

Unlimited users and no SDS cap. On an annual plan that is less than any paid SDS tool we compared.

Start 7-day free trial Compare SDS software prices →