PPE Is the Last Control: How to Do a Hazard Assessment in Canada (2026)

CCOHS is blunt about it: personal protective equipment is the last resort and the least effective level of control. It does not remove a hazard. It puts a barrier between the hazard and one worker, and only while that worker is wearing it correctly.

Which makes the term "PPE hazard assessment" slightly misleading. The assessment is not about PPE. It is about identifying hazards and working down a hierarchy, and PPE is what is left over at the bottom once the better options have been exhausted.

The hierarchy, and why the order matters

CCOHS guidance on the hierarchy of controls ranks five levels from most to least effective: elimination, substitution, engineering controls, administrative controls, and personal protective equipment.

Elimination removes the hazard entirely. Not doing the task, or designing it out.

Substitution replaces the hazard with something less dangerous. A less toxic solvent, a lower-vibration tool, a lighter package.

Engineering controls isolate people from the hazard. Guarding, ventilation, barriers, mechanical lifting, dust extraction at source.

Administrative controls change how people work. Rotation, scheduling, procedures, training, signage, permits.

PPE protects the individual worker, at the worker.

The instruction is to start at the top and work down. Assess the feasibility of elimination before moving to substitution, and continue until you have identified as many controls as are needed to adequately protect the worker. You do not skip to the bottom because the bottom is the cheapest and fastest.

Canada has its own standard for this work. CSA Z1002-12, reaffirmed in 2022, covers hazard identification and elimination and risk assessment and control, and it adds a layer the common five-level model does not: systems that increase awareness of potential hazards. Most guidance you will find online cites the American regulation instead, which is not what governs a Canadian workplace.

When PPE is legitimately the answer

The hierarchy is not an argument against PPE. It is an argument against reaching for it first.

CCOHS sets out when using PPE as the main method of control is appropriate: where elimination, substitution, engineering or administrative controls are not practicable; where additional protection is required because other control methods are not sufficient on their own; and where the hazard results from a temporary or emergency condition.

That last category covers a great deal of trade work. Maintenance access, breakdown response, and one-off tasks often cannot be engineered out on a reasonable timescale, and PPE is genuinely the right control for them.

Layering is normal and expected. CCOHS gives the example of a lifting zone: barriers restrict access as an engineering control, training and signs inform workers as administrative controls, and PPE is still required but only within the zone. Three levels working together, with PPE scoped to where it is actually needed rather than applied across the whole site.

The caution attached to all of it is worth quoting in spirit: PPE limits exposure to the harmful effects of a hazard, but only if it is worn and used correctly. That conditional is doing a lot of work, and it is the reason PPE sits where it sits.

The five steps of an actual assessment

An assessment is a process, not a form. The steps are consistent across Canadian guidance.

Identify the hazards. Walk the work as it is actually performed rather than as the procedure describes it. Use site inspections, worker input and past incident and near-miss reports. Workers doing the task will name hazards a walkthrough misses.

Assess the risk. Rate severity and probability, and combine them. A simple three-by-three matrix scoring each as low, medium or high is enough for most workplaces, with risk as the product of the two.

Control the risk. Work down the hierarchy, meeting or exceeding minimum legal requirements, and consider all relevant factors when selecting controls.

Evaluate and review. Check whether the controls actually work, and establish a review process to monitor that they remain effective as the work changes.

Communicate and record. Workers, supervisors and anyone involved in the job must be aware of the results. Workers must know every hazard associated with their job and the controls in place. Keep documentation of how the assessment was done and how conclusions were reached.

Risk rating should drive what happens next

The point of scoring risk is that the score determines the response, rather than everything landing in a report that gets filed.

Canadian guidance sets out actions matched to rating. Immediately dangerous: stop the process and implement controls immediately. High risk: investigate the process and implement controls immediately. Medium risk: the process continues, but a control plan must be developed and implemented as soon as possible. Low risk: the process continues with regular monitoring, and a control plan should still be investigated.

Two things follow. A hazard rated immediately dangerous is a stop-work trigger, not a scheduling problem. And a low rating is not a conclusion, it is a monitoring commitment.

The ratings also give you a defensible basis for spending. An employer who can show why a particular control was selected, and why higher-level controls were not practicable, is in a very different position from one who bought equipment because it seemed sensible.

Where this changes what you buy

Run the hierarchy properly and the purchasing decisions change, sometimes away from a purchase entirely.

Vibration exposure is the clearest case. Damping and isolation on the equipment outperform any glove, and the research on anti-vibration gloves is genuinely mixed. Buying a lower-vibration tool is an engineering control; buying gloves is the last layer.

Manual handling is similar. Hoists, lift tables and carts eliminate the lift; back belts are not personal protective equipment at all under Canadian guidance and should not be counted as a control in an assessment.

Dust control follows the same logic. Wet cutting and vacuum extraction reduce the exposure at source, and a respirator handles what remains, as covered in our guide to respirator fit testing under CSA Z94.4.

And where PPE genuinely is the answer, the assessment tells you the specification rather than the category. Not "gloves" but which material against which chemical, covered in our guide to choosing chemical resistant gloves. Not "hi-vis" but which class and level, covered in our guide to CSA Z96 classes and levels. Not "safety boots" but which mark, covered in our guide to CSA work boot symbols.

The PPE program the assessment feeds

An assessment that produces a list of equipment and stops there has done half the job. CCOHS guidance on designing an effective PPE program describes a comprehensive strategy as identifying all hazards, conducting risk assessments, considering all control methods from the hierarchy, integrating approaches, and evaluating controls frequently to confirm the hazard remains controlled.

Selection is only the first component. The program also has to cover fit, training in correct use, maintenance and cleaning, inspection, storage, and replacement criteria. Equipment that is correctly specified and poorly maintained protects nobody.

Some hazards require more than one piece of PPE, and the interactions matter. Earmuffs and spectacle temple arms compete for the same space, a respirator and safety glasses fight over the same seal, and winter headwear changes how a hard hat sits. Our guides to hearing protection, safety glasses and hard hats cover those conflicts.

Verify the equipment is what it claims to be, since a marking is a claim until you check what it means. Our guide to CSA certified versus CSA compliant covers that distinction, and it applies well beyond footwear.

Common failures

Generic policies are the most frequent. A document that says workers shall wear appropriate PPE is not an assessment, because it has not identified a hazard, rated it, or selected anything.

Assessing the job title rather than the task is the second. The same worker may face very different exposures across a week, and the assessment needs to follow the task.

Treating it as a one-time exercise is the third. Hazards change with processes, equipment, materials and people, and an assessment from three years ago describes a workplace that may no longer exist.

Leaving workers out is the fourth, and it is self-defeating. The people doing the task know where the procedure and the reality diverge, and an assessment built without them documents the procedure.

Finally, counting the wrong things as controls. Equipment that is not certified for the hazard, devices that are not PPE under Canadian guidance, and communication tools that summon help rather than provide it all get recorded as controls when they are not. Our guides to who pays for PPE in Canada, the complete PPE checklist for Canadian workers and PPE requirements for Canadian construction sites cover the equipment side once the assessment is done.

Where the work involves height, isolation, heat or cold, the assessment has to extend to rescue and emergency response rather than stopping at equipment. See our guides to suspension trauma and fall rescue, CSA Z1220 first aid kit requirements and cold stress at work in Canada.

Frequently Asked Questions

Why is PPE the least effective control?

Because it does not remove the hazard. It places a barrier between the hazard and one worker, and only while that worker is wearing and using it correctly. Controls higher in the hierarchy protect everyone present regardless of individual behaviour, which is why CCOHS describes PPE as the last resort.

What is the hierarchy of controls?

Five levels ranked from most to least effective: elimination, substitution, engineering controls, administrative controls and personal protective equipment. The instruction is to assess the feasibility of each level before moving down, continuing until enough controls are identified to adequately protect the worker.

Is there a Canadian standard for hazard assessment?

Yes. CSA Z1002-12, reaffirmed in 2022, covers hazard identification and elimination and risk assessment and control. It includes a layer the common five-level model omits: systems that increase awareness of potential hazards. Much of the guidance available online cites American regulation instead.

When is PPE the right main control?

Where elimination, substitution, engineering and administrative controls are not practicable, where additional protection is needed because other controls are not sufficient on their own, or where the hazard results from a temporary or emergency condition. Layering PPE with higher controls is normal rather than a compromise.

What should a risk rating actually trigger?

Immediately dangerous means stop the process and implement controls now. High risk means investigate and implement immediately. Medium risk means the process continues while a control plan is developed and implemented as soon as possible. Low risk means continue with regular monitoring while investigating a control plan.

How often should an assessment be reviewed?

Whenever the work, equipment, materials or people change, and on a regular schedule besides. Hazards are not static, and an assessment describes the workplace as it was on the day it was done. A review process for monitoring whether controls remain effective is part of the assessment itself.

This guide is general workplace safety information, not legal advice. Hazard assessment and control obligations are set by federal, provincial and territorial legislation and vary between jurisdictions. Confirm your requirements with the occupational health and safety authority where you operate.