Yes, personal protective equipment is considered the last line of defense against workplace hazards. This ranking comes from the hierarchy of controls, a five-level framework developed by NIOSH (part of the CDC) that orders safety measures from most to least effective. PPE sits at the bottom because it does nothing to remove or reduce the hazard itself. It only places a barrier between the worker and the danger.
The Hierarchy of Controls, Explained
The hierarchy has five levels, meant to be followed from top to bottom:
- Elimination: Physically remove the hazard entirely. If a task requires working at a dangerous height, redesign the process so the work happens at ground level.
- Substitution: Replace the hazard with something less dangerous. Swap a toxic solvent for a safer alternative.
- Engineering controls: Isolate people from the hazard through physical changes to the workspace. Install ventilation systems, machine guards, or sound-dampening enclosures.
- Administrative controls: Change the way people work. Rotate workers to limit exposure time, post warning signs, create safety procedures, or adjust shift schedules.
- Personal protective equipment: Equip the worker with gear like gloves, respirators, hard hats, or safety glasses.
The top three levels are the most effective because they either remove the hazard or physically separate people from it. These changes don’t depend on anyone remembering to do something correctly every single day. Once you install a machine guard or replace a chemical, the protection is automatic. Administrative controls and PPE, by contrast, require ongoing human behavior to work, which is exactly why they’re ranked lower.
Why PPE Is Ranked Last
PPE doesn’t eliminate, reduce, or isolate a hazard. It just asks a worker’s body armor to absorb what the workplace is still producing. A pair of cut-resistant gloves protects against lacerations, but the blade or sharp edge is still there. Earplugs reduce the noise reaching your eardrums, but the machinery is still just as loud. If the glove tears or the earplug slips out, the worker is fully exposed in an instant.
There’s also a psychological trap. When organizations reach for PPE first, they often stop looking for better solutions. It’s usually the easiest and cheapest control to hand out in the short term, so it becomes the default. OSHA’s own compliance guidelines state this plainly: “PPE devices alone should not be relied on to provide protection against hazards, but should be used in conjunction with guards, engineering controls, and sound manufacturing practices.” Federal regulation requires employers to conduct a formal hazard assessment before selecting PPE and to document that assessment in writing. PPE is meant to cover whatever risk remains after higher-level controls have been applied, not to serve as the entire safety strategy.
One study examining how safety measures were actually implemented on real worksites found that PPE accounted for just 7.5% of all safety measures used. Engineering controls made up 35%, and administrative controls made up nearly 54%. That distribution reflects how the hierarchy is supposed to work in practice: PPE fills in the gaps rather than carrying the load.
The Human Problem With PPE
The fundamental weakness of PPE is that it requires a person to wear it correctly, consistently, for their entire shift, every single day. Research on healthcare workers reveals how difficult that actually is. In one study, about 76% of workers reported that handling emergencies made it hard to keep PPE on properly. Roughly 75% said PPE was physically uncomfortable, and 74% said it caused health problems during use, things like overheating in coveralls, fogging and limited visibility from goggles, and skin irritation from prolonged mask wear.
Nearly 73% said wearing PPE made their actual work harder to perform. Around 72% cited heavy workloads and busy schedules as a reason they skipped PPE at times, and 71% pointed to long duty hours. Even something as simple as getting the right size was a major issue: 74% of workers said their PPE didn’t fit properly, and statistical analysis confirmed that improper sizing was significantly associated with lower compliance. About 39% of workers admitted they sometimes just forgot to put it on.
These aren’t personal failings. They’re predictable outcomes of relying on a control that demands perfect human behavior under imperfect conditions. Compare that to an engineering control like a ventilation hood. Once installed, it runs regardless of whether anyone is tired, rushed, or wearing the wrong size of anything.
Passive vs. Active Controls
Safety professionals sometimes frame the hierarchy as a spectrum from passive to active controls. Passive controls work without any action from the worker. A guardrail around a roof edge protects everyone who walks near it, whether they’re paying attention or not. Active controls require someone to do something: wear a harness, follow a procedure, remember training. The higher you go on the hierarchy, the more passive and automatic the protection becomes. The lower you go, the more you depend on human vigilance.
This distinction helps explain why PPE, the most active control of all, is the least reliable. Every layer of human action you add (selecting the right equipment, fitting it correctly, wearing it consistently, maintaining it, replacing it on schedule) is another point where things can break down.
When PPE Still Matters
None of this means PPE is useless. In many situations, it’s essential. Some hazards simply can’t be fully eliminated or engineered away. Construction workers need hard hats because objects can fall despite netting and barriers. Healthcare workers need respirators during airborne disease outbreaks because the pathogen can’t be removed from the environment. Firefighters need turnout gear because the fire itself is the job.
PPE also serves as critical backup protection. Even in workplaces with strong engineering controls, unexpected failures happen: a ventilation system goes down, a machine guard gets damaged, a chemical spill occurs. In those moments, the gloves, goggles, or respirator a worker is wearing may be the only thing preventing injury.
The key principle is layering. The hierarchy isn’t meant to be a choice between one level or another. It’s a sequence. You eliminate what you can, substitute where elimination isn’t possible, engineer controls around what remains, establish administrative procedures for residual risks, and then outfit workers with PPE to handle whatever is left. When PPE is the last line of defense, it’s doing exactly what it’s supposed to do: catching the risk that every other layer couldn’t fully address.
What This Means in Practice
If your workplace hands you PPE but hasn’t addressed the hazard in any other way, that’s a red flag. Federal regulations require employers to assess hazards first and use higher-level controls before defaulting to protective equipment. PPE should be the final layer in a system, not the only one.
If you’re responsible for workplace safety, the hierarchy is a useful audit tool. For any given hazard, ask whether it could be eliminated entirely. If not, could a safer alternative be used? Could a physical barrier or ventilation system reduce exposure? Could scheduling or training lower risk further? Only after working through those questions does PPE selection make sense. That’s how PPE earns its role as the last line of defense: not because it’s unimportant, but because everything above it should have been tried first.