Skip to content

Approaching: Nov 20, 2026 — HCS 2024 Deadline. Get ready →

General Industry (29 CFR 1910)

General Requirements for PPE

Verified vs OSHA sources · 2026-10-05

29 CFR 1910.132

29 CFR 1910.132 is OSHA's general PPE standard for general industry: employers must assess the workplace for hazards in writing, select and provide appropriate PPE at no cost to workers, and train them on its use. PPE is the last line of defense, applied after engineering and work-practice controls.

29 CFR 1910.132 at a glance

What it requires
Assess workplace hazards and provide, train on, and pay for appropriate PPE
The foundational duty
A workplace hazard assessment (with written certification) to determine what PPE is needed
Who pays
The employer: required PPE at no cost, with narrow exceptions (1910.132(h))
Enforcement
The base PPE rule for general industry
Max penalty (2026)
$16,550 per serious violation; $165,514 per willful
The #1 confusion
PPE is the LAST line of defense: it never replaces engineering/administrative controls

What 29 CFR 1910.132 requires (plain English)

29 CFR 1910.132 is the foundation of personal protective equipment in general industry: the standard that sits above the specific requirements for eye, face, head, foot, hand, and respiratory protection. It establishes the process every employer must follow: assess the workplace for hazards, select PPE appropriate to those hazards, provide it, train workers to use it, and pay for it. The specific PPE standards (eye/face 1910.133, respiratory 1910.134, head 1910.135, foot 1910.136, hand 1910.138) tell you WHAT device; 1910.132 tells you HOW to run the program.

The cornerstone is the hazard assessment. The employer must assess the workplace to determine whether hazards are present, or are likely to be present, that necessitate PPE, and must document that assessment in a written certification identifying the workplace evaluated, the person certifying it, and the date. From that assessment flows the duty to select and require appropriate PPE, ensure it fits each affected worker, and train workers on when PPE is necessary, what to use, how to put it on and take it off, its limitations, and its care.

Two principles anchor the standard. First, PPE is the LAST line of defense in the hierarchy of controls: it protects the individual worker only if it is worn correctly every time, so it should complement, never replace, engineering controls (guards, ventilation) and administrative controls that reduce the hazard at its source. Second, the employer pays: required PPE must be provided at no cost to employees, with only narrow exceptions (such as non-specialty safety-toe footwear and prescription safety eyewear allowed off-site, everyday clothing, and ordinary weather gear).

The regulatory text

“The employer shall assess the workplace to determine if hazards are present, or are likely to be present, which necessitate the use of personal protective equipment (PPE). If such hazards are present, or likely to be present, the employer shall: (i) Select, and have each affected employee use, the types of PPE that will protect the affected employee from the hazards identified in the hazard assessment; (ii) Communicate selection decisions to each affected employee; and, (iii) Select PPE that properly fits each affected employee.”
29 CFR 1910.132(d)(1)

Key facts about 29 CFR 1910.132

  • Requires a workplace hazard assessment to determine what PPE is needed (1910.132(d)(1)).
  • The hazard assessment must be documented in a written certification (1910.132(d)(2)).
  • The employer must select appropriate PPE, ensure proper fit, and require its use.
  • Training is required: when PPE is needed, what to use, donning/doffing, limitations, and care (1910.132(f)).
  • The employer must provide required PPE at no cost, with narrow exceptions (1910.132(h)).
  • PPE is the last line of defense: it complements, never replaces, engineering and administrative controls.
  • 1910.132 is the umbrella; the device-specific standards (133–138) set the requirements for each PPE type.

Scope: who 29 CFR 1910.132 applies to

Regulatory framework
General Industry (29 CFR 1910)
Citation reference
29 CFR 1910.132
Enforcement status
In force and enforced
Jurisdiction
Federal OSHA (29 State-Plan jurisdictions may be stricter)

State-Plan states (e.g. California, Washington, Michigan) operate OSHA-approved programs that must be at least as effective as federal OSHA and frequently impose higher penalties or additional requirements. Confirm the rule as adopted in your state.

Key requirements of 29 CFR 1910.132

#Employer obligation
1Conduct hazard assessment for PPE
2Select appropriate PPE for identified hazards
3Train employees on proper PPE use and care
4Provide PPE at no cost to employees
5Document hazard assessment in writing
6Maintain PPE in sanitary and reliable condition

Summarized from the text of 29 CFR 1910.132. Always read the full regulation for the binding language.

Common PPE General Requirements violations

Deficiencies OSHA cites under 29 CFR 1910.132 include the ones below, in no particular order. Distinct deficiencies can be cited as separate items, and each serious item carries up to $16,550 (2026). Broader per-instance stacking exists but is a discretionary, case-by-case OSHA enforcement policy, not an automatic multiplier.

  • No workplace hazard assessment, or no written certification of it (1910.132(d)).
  • PPE not provided where the hazard assessment shows it is needed (1910.132(d)(1)).
  • Employees not trained on PPE use, limitations, and care (1910.132(f)).
  • Requiring employees to pay for required PPE (1910.132(h)).
  • PPE that does not fit or is not maintained in a sanitary, reliable condition (1910.132(a)/(e)).

PPE is the last resort, not the first

The most important conceptual error is reaching for PPE as the primary way to control a hazard. In the hierarchy of controls, PPE is the LAST line of defense, below elimination, substitution, engineering controls (guards, ventilation, enclosures), and administrative controls (procedures, rotation). PPE only protects the individual wearing it, only when it is worn correctly, and it does nothing to reduce the hazard itself, so a program that relies on PPE while ignoring feasible engineering controls is both less protective and, for some standards, non-compliant. Use PPE to protect against the residual hazard that remains after higher-order controls, and remember two duties people forget: the hazard assessment must be WRITTEN, and the employer must PAY for required PPE.

What OSHA inspectors look for

A compliance officer asks for the written hazard-assessment certification, checks that the PPE provided matches the identified hazards, that the employer paid for it (with narrow exceptions), and that workers were trained.

Example: how a violation is cited

A plant issues gloves and glasses but never assessed its hazards or certified an assessment in writing, and a worker is hurt by a hazard no one evaluated. OSHA can cite 1910.132(d)(1) for the missing assessment and (d)(2) for the missing written certification.

Illustrative example, not a specific OSHA case.

PPE General Requirements compliance checklist

Use this to evaluate your compliance with 29 CFR 1910.132. Each item is a key requirement OSHA may verify during an inspection.

  • Conduct a workplace hazard assessment for each area/task and document it in a written certification.
  • Select PPE appropriate to each identified hazard and ensure it fits each affected worker.
  • Prefer engineering and administrative controls first; use PPE for the residual hazard.
  • Train workers on when PPE is needed, what to use, donning/doffing, limitations, and care.
  • Provide required PPE at no cost (apply only the narrow permitted exceptions).
  • Maintain PPE in a sanitary and reliable condition and replace it when worn or damaged.

2026 penalties for 29 CFR 1910.132

Maximums set by 29 CFR 1903.15(d). 2026 amounts unchanged from 2025 (no CPI adjustment; OMB M-26-11). Not an increase. The 2025 OSHA penalty levels remain in effect for 2026; OSHA made no inflation adjustment for 2026. 29 CFR 1903.15 identifies January 15, 2025 as the effective reference for these amounts, while OSHA's public penalties page currently references penalties assessed after Jan. 15, 2026.

Violation typeMinimumMaximumWhen it applies
Serious$1,085$16,550Substantial probability of death or serious physical harm.
Other-Than-Serious$0$16,550Relates to safety/health but unlikely to cause death or serious harm.
Willful$11,823$165,514Intentional, knowing, or voluntary disregard of the requirement.
Repeated$4,256$165,514A substantially similar violation cited within the last 5 years.
Failure to AbateNone$16,550/dayup to $16,550 per day; total capped at 30x the daily amount (FOM Ch.6)

A serious violation carries up to $16,550 and a willful or repeat violation up to $165,514, per violation, not per exposed employee. The written certification of the hazard assessment is its own requirement, (d)(2), so it can be cited even where the right PPE is in use.

Maximums and the willful minimum are set by 29 CFR 1903.15(d); the serious and repeated minimums are OSHA policy floors from its annual penalty adjustment memo. OSHA applies gravity-based and size, good-faith and history reductions (FOM CPL 02-00-164 Ch.6). Estimates only, not legal advice.

The business case for PPE General Requirements compliance

PPE is the barrier of last resort, and when it is wrong for the hazard, missing, or unused, the worker takes the full force of that hazard. The written hazard assessment is what forces an employer to actually match protection to risk rather than guess.

Free compliance tools for 29 CFR 1910.132

PPE General Requirements penalties by state

Penalties and enforcement vary by state. State-Plan states may impose higher penalties and additional requirements beyond federal 29 CFR 1910.132.

Frequently asked questions about 29 CFR 1910.132

What is a PPE hazard assessment?

Under 1910.132(d)(1), the employer must assess the workplace to determine whether hazards are present, or are likely to be present, that necessitate PPE. Based on that assessment, the employer selects appropriate PPE for each hazard and requires affected employees to use it. The assessment must be documented in a written certification identifying the workplace evaluated, the person who performed the assessment, and the date: a document OSHA inspectors routinely ask to see.

Does the employer have to pay for PPE?

Yes, in almost all cases. Under 1910.132(h), the employer must provide required PPE at no cost to the employee. The narrow exceptions are non-specialty safety-toe footwear and non-specialty prescription safety eyewear that the employer permits the worker to take off-site, everyday clothing, and ordinary weather gear. Requiring employees to buy their own required PPE is a violation, and the employer must also pay for replacements (unless the employee lost or intentionally damaged the item).

Where does PPE fall in the hierarchy of controls?

PPE is the last line of defense: the lowest level of the hierarchy of controls. Above it, in order of preference, are elimination, substitution, engineering controls (guards, ventilation, enclosures), and administrative controls (procedures, training, rotation). PPE only protects the individual wearing it and does nothing to reduce the hazard itself, so it should be used to protect against the residual hazard that remains after higher-order controls are applied, not as the first or only control.

What PPE training does OSHA require?

Under 1910.132(f), each employee required to use PPE must be trained to know when PPE is necessary, what type is necessary, how to properly don, doff, adjust, and wear it, its limitations, and its proper care, maintenance, useful life, and disposal. Employees must demonstrate an understanding of the training before performing work requiring PPE, and retraining is required when workplace changes or observed inadequacies make previous training obsolete.

Regulatory history of 29 CFR 1910.132

1910.132 is part of Subpart I (Personal Protective Equipment), one of OSHA's original 1971 standards. OSHA added the explicit hazard-assessment and training requirements (paragraphs (d) and (f)) in 1994, and clarified the employer-payment obligation (paragraph (h)) in the 2007 PPE payment final rule, which took effect in 2008.

Related glossary terms

Key terms that appear in 29 CFR 1910.132, each with a full plain-English explainer.

Primary sources

OSHA figures on this page are imported from HazComFast's verified regulatory module (verified 2026-10-05 against eCFR, OSHA.gov, and the Federal Register).

This page is an educational summary, not legal advice. OSHA standards and penalty amounts change; confirm requirements against the current regulation and your applicable State-Plan before acting.

Get the Binder in Order Before the Inspector Arrives. Are You Ready?

OSHA does not give advance notice of inspections (29 CFR 1903.6). Get the binder in order before the opening conference, not during it.

Serious Violation

$16,550

per violation (max)

HazComFast Pro

$199/mo

10 jobsites, unlimited chemicals, unlimited workers

New sign-ups are paused. The free tools below need no account, and customers can log in as usual.

Your account keeps working as usual. Cancel anytime.