Written and maintained by CASRAI Editorial Board
Last updated
Most labs have a PPE program. Fewer have the one document OSHA actually asks for by name when it inspects: the written certification of the workplace hazard assessment required by 29 CFR 1910.132(d)(2). Selecting the right gloves and picking the correct eyewear is necessary but not sufficient — without a certification that meets the standard’s four required elements, the whole PPE program rests on an assessment that, on paper, never legally happened.
This guide covers what 1910.132(d) actually requires, what separates a certification that would survive an OSHA citation from a checkbox exercise that will not, and walks through a worked example for a chemistry teaching lab.
What 29 CFR 1910.132(d) Actually Requires
The rule has two parts, and they are easy to conflate. 1910.132(d)(1) requires the employer to assess the workplace to determine whether hazards are present or likely to be present that necessitate PPE, and, if so, to select PPE that protects against those hazards, communicate the selection to affected employees, and select PPE that properly fits each employee. That is the assessment itself — the analytical work.
1910.132(d)(2) is the separate, distinct requirement that trips up most labs: the employer must verify that the assessment was actually performed, and it must do so through a written certification. OSHA’s regulatory text specifies exactly four things that certification must identify:
- The workplace evaluated — which room, bench, process, or area the assessment covers.
- The person certifying that the evaluation was performed — a named individual, not a department or “EHS.”
- The date(s) of the hazard assessment.
- Language that identifies the document itself as a certification of hazard assessment — the document has to say what it is.
That fourth element is the one drafts most often miss. A memo that lists hazards and required PPE, signed and dated, still is not a 1910.132(d)(2) certification unless it identifies itself as one. OSHA wrote the requirement this way specifically so a compliance officer doesn’t have to infer, from a pile of safety paperwork, whether a hazard assessment happened — the certifying document has to say so on its face.
Certification vs. Checkbox: What Makes One Legally Sufficient
A hazard assessment PPE checklist — a form with boxes for “eye protection: Y/N,” “gloves: Y/N,” signed once at onboarding — is common in labs and is not what the standard asks for. The distinction that matters:
| Checkbox exercise | Legally sufficient certification |
|---|---|
| Generic PPE list applied lab-wide | Task-specific: hazards tied to the actual operations performed in that workplace, not a template |
| No named individual, or “Safety Office” as signer | Names the actual person who performed or verified the evaluation |
| Undated, or dated once at lab opening and never revisited | Carries the date(s) the assessment was performed, and is re-dated when the workplace or process changes |
| Silent on what the document is | States explicitly that it is a certification of hazard assessment under 1910.132(d) |
| Lists PPE types only | Documents the hazard identified, then the PPE selected because of that hazard — the causal link an inspector looks for |
The underlying test an OSHA compliance officer applies is whether the certification demonstrates an actual, workplace-specific evaluation occurred — not whether a form exists. A one-page certification covering a single bench process, written in plain language and tied to the actual hazards present, clears that bar more reliably than an elaborate multi-tab spreadsheet copied from another lab and never updated.
Worked Example: A Teaching Chemistry Lab
Consider an undergraduate organic chemistry teaching lab running extraction and recrystallization exercises with volatile solvents (diethyl ether, hexane) and corrosive reagents (dilute HCl, NaOH). A compliant hazard assessment and certification for this workplace would look like this:
The assessment (1910.132(d)(1)): A walk-through of the actual bench operations identifies splash and vapor-inhalation hazards from volatile solvent transfer, chemical-contact hazards from acid/base handling, and glassware-related impact/cut hazards during setup and cleanup. Based on those identified hazards, the assessment selects chemical splash goggles (not safety glasses — the hazard is splash, not just impact), nitrile gloves rated for the specific solvents in use, and flame-resistant lab coats given the presence of diethyl ether near ignition sources.
The certification (1910.132(d)(2)): A separate, signed document reads, in substance: “Certification of Hazard Assessment under 29 CFR 1910.132(d) — Workplace evaluated: Organic Chemistry Teaching Laboratory, Room 214, extraction/recrystallization bench stations. Evaluation performed by: [named Chemical Hygiene Officer], [date]. This certifies that the hazard assessment required by 29 CFR 1910.132(d)(1) has been performed for the workplace and operations identified above.” That document, on its own, satisfies all four elements — workplace, person, date, self-identification as a certification — regardless of how thorough or thin the underlying assessment narrative is filed separately.
Note the two documents can be separate (a detailed hazard-assessment writeup plus a short certification cover sheet) or combined into one document that does both jobs, as long as the combined document still hits all four (d)(2) elements explicitly. What does not work is a hazard assessment narrative with no certifying language at all — that satisfies (d)(1) but leaves (d)(2) unmet.
When to Recertify
1910.132(d) does not specify a fixed recertification interval, but the certification is tied to a specific workplace and its actual operations. A new process introduced at the bench, a new hazardous reagent brought into use, or a room reconfiguration that changes what hazards are present all mean the underlying assessment is stale and the certification should be redone and re-dated. Institutions that treat the certification as a one-time compliance artifact signed at lab opening and never revisited are the ones most likely to be citing an assessment that no longer describes what the workplace actually does.
Where This Fits With the Rest of a Lab’s PPE Program
The written certification is the compliance record, not the whole program. Once hazards are identified and PPE selected, a lab still needs to work through PPE selection criteria for the specific chemicals in use (glove permeation ratings, eyewear rated for splash vs. impact) and the training and donning/doffing competency the standard separately requires under 1910.132(f). See CASRAI’s PPE Selection for Chemical Handling in the Lab for the glove/eyewear/lab-coat selection logic that follows from the hazard assessment, and PPE Donning and Doffing for the training and competency-demonstration side of 1910.132(f) that a certification alone does not cover.
Most labs already maintain a Chemical Hygiene Plan under 29 CFR 1910.1450 that documents control measures including PPE — see How to Write and Maintain a Chemical Hygiene Plan. The 1910.132(d) hazard assessment and certification is a distinct, narrower requirement that can live as its own signed document referenced by the CHP, rather than being assumed to be satisfied just because a CHP exists; a CHP that lists PPE by task without a document meeting all four (d)(2) elements has not closed this specific gap. The person named on the certification is often, though not required to be, the lab’s Chemical Hygiene Officer, who is typically the individual best positioned to evaluate task-specific hazards across the lab’s operations.
FAQ
Does a PPE hazard assessment need to be redone for every experiment?
No. The assessment and certification cover a workplace and its characteristic operations, not each individual experiment. It needs updating when the operations, hazards, or workplace itself materially change — a new reagent class, a new procedure, a reconfigured space — not for routine repetition of already-assessed work.
Who is allowed to sign the certification?
1910.132(d)(2) does not name a required job title or credential for the certifying person — it only requires that the certification identify who performed the evaluation. In practice this is usually the person with the safety authority and technical knowledge to evaluate the workplace’s actual hazards: a Chemical Hygiene Officer, EHS professional, or PI with documented safety training, not necessarily an outside consultant.
Is a signed PPE checklist enough on its own?
Not if it only lists required PPE without identifying the workplace evaluated, naming the person certifying, carrying a date, and stating that it is a certification of hazard assessment. A checklist can be part of the supporting documentation, but the certifying document itself needs to hit all four elements OSHA specifies in 1910.132(d)(2).
Does this requirement apply to research labs the same way it applies to industrial workplaces?
Yes. 1910.132 is a general industry standard and applies to laboratories along with every other covered workplace where PPE hazards are present — it is not displaced by the laboratory-specific standards (1910.1450, 1910.1200) the way some other general industry provisions are for lab settings.
