OSHA is the single most authoritative source for PPE requirements in the United States. Specifically, 29 CFR 1910 Subpart I covers general industry, and 29 CFR 1926 Subpart E covers construction. But OSHA isn’t the only source you need. Depending on your industry, the best information comes from layering OSHA’s legal requirements with guidance from agencies like the CDC and NIOSH, plus consensus standards from organizations like ANSI/ISEA and NFPA.
Here’s a breakdown of the major sources, what each one actually covers, and when to use which.
OSHA: The Legal Baseline
OSHA sets the enforceable federal rules. If you’re an employer or safety manager looking for what the law requires, this is where you start. The core standard for general industry is 29 CFR 1910.132, which mandates that protective equipment for eyes, face, head, extremities, and respiratory system be provided whenever workplace hazards could cause injury through absorption, inhalation, or physical contact.
The standard doesn’t just say “provide PPE.” It requires employers to conduct a formal hazard assessment of the workplace, select PPE that matches the identified hazards, ensure the equipment properly fits each worker, and communicate those decisions to every affected employee. That hazard assessment must be documented in a written certification that names the workplace evaluated, the person who performed it, and the date.
For construction, OSHA’s 1926 Subpart E mirrors much of the general industry standard but adds requirements specific to construction hazards like fall protection, safety nets, and working over water. A final rule that took effect January 13, 2025, added explicit proper-fit language to the construction PPE standard, aligning it with the general industry requirement that had been in place for years. If you work in construction, check this updated standard rather than relying on older references.
What OSHA Requires for Training
Before any employee uses PPE, OSHA requires training in five areas: when PPE is necessary, what type is needed, how to wear it correctly, what its limitations are, and how to care for, maintain, and dispose of it. This training requirement is part of 1910.132 and applies broadly. If you’re building a PPE program from scratch, OSHA’s standards give you both the legal framework and the training checklist.
CDC: The Go-To for Healthcare Settings
If you work in healthcare, the CDC’s infection control guidelines are your primary resource for PPE specifics. OSHA still applies to healthcare employers, but the CDC provides the clinical detail on which PPE to use for which types of patients and pathogens.
The CDC organizes healthcare PPE around three categories of transmission-based precautions:
- Contact Precautions: Gloves and gown for all interactions with patients who pose a risk of contact transmission. You put them on before entering the room and discard them before leaving.
- Droplet Precautions: A mask, donned upon room entry, for patients infected with pathogens spread through coughing, sneezing, or talking.
- Airborne Precautions: A fit-tested, NIOSH-approved N95 respirator or higher for diseases transmitted through the air, such as tuberculosis, measles, and chickenpox.
The CDC also publishes detailed guidance on the correct sequence for putting on and removing PPE, which matters because improper removal is one of the most common ways healthcare workers accidentally expose themselves.
NIOSH: Respirator Certification and Testing
NIOSH is the federal agency responsible for testing and approving respirators used in U.S. workplaces. When you see “NIOSH-approved” on a respirator, it means the device passed strict quality assurance and performance testing. Every approved respirator carries a testing and certification (TC) approval number printed directly on it.
NIOSH tests respirators using a near worst-case particle size, meaning particles specifically chosen because they’re the hardest to filter. An N95 respirator, for example, must block at least 95% of these challenging test particles. If you’re selecting respirators for your workplace, NIOSH’s approval listings tell you exactly which products meet the standard and which don’t. Any respirator without a TC number hasn’t been verified.
ANSI/ISEA: Consensus Standards for Equipment Performance
OSHA tells you that you need eye protection, head protection, or hand protection. ANSI and ISEA tell you how that equipment should perform. These consensus standards define the testing criteria that PPE manufacturers use to design and rate their products.
The most widely referenced is ANSI/ISEA Z87.1 for eye and face protection. OSHA incorporates this standard by reference, meaning PPE that meets Z87.1 is considered compliant with OSHA’s eye protection requirements. You’ll see “Z87” markings stamped on safety glasses and goggles for this reason. OSHA accepts multiple editions of the standard (2010, 2003, and 1989 versions are all referenced), and employers can also use equipment they can demonstrate is at least as effective as Z87.1-compliant gear.
Similar ANSI/ISEA standards exist for head protection, high-visibility clothing, hand protection, and hearing protection. When you’re purchasing PPE, these standard numbers on product packaging are your verification that the equipment has been tested to a recognized performance level.
NFPA 70E: Electrical Work PPE Categories
For anyone working with or near energized electrical equipment, NFPA 70E is the essential standard. It defines four arc flash PPE categories based on increasing risk levels, each with specific minimum arc ratings and equipment requirements.
Category 1 requires arc-rated clothing with a minimum rating of 4 cal/cm² (a measure of thermal energy protection) and typically involves a single layer of arc-rated material plus a face shield. Category 2 raises the minimum to 8 cal/cm² and adds rubber-insulated gloves and mandatory hearing and eye protection. Categories 3 and 4 push the ratings to 25 and 40 cal/cm² respectively, requiring multiple layers of arc-rated clothing, flash suit hoods, hard hats, and leather footwear. OSHA references NFPA 70E as the recognized standard for electrical safety PPE, so compliance with these categories is effectively expected during enforcement.
How These Sources Work Together
No single source covers everything. The practical approach is to think of these sources as layers. OSHA provides the legal obligations: do a hazard assessment, select appropriate PPE, train your workers, document everything. Consensus standards like ANSI/ISEA and NFPA tell you the performance specifications your equipment should meet. And agency-specific guidance from the CDC or NIOSH fills in the details for specialized settings like healthcare or respiratory protection.
If you’re in general industry or construction, start with OSHA’s standards (1910 Subpart I or 1926 Subpart E). If you’re in healthcare, layer CDC transmission-based precautions on top of OSHA. If you’re selecting respirators, check NIOSH’s approved product listings. If you’re buying eye protection or other gear, look for the relevant ANSI/ISEA markings. And if electrical work is involved, NFPA 70E defines your PPE categories.
All of these sources are freely available online. OSHA’s standards are published at osha.gov under “Laws & Regulations.” CDC guidelines are on their infection control pages. NIOSH maintains a searchable database of approved respirators. NFPA 70E requires purchase, but OSHA publishes summary guidance documents that cover the key PPE category requirements at no cost.