Why PPE Should Never Be Your First Control Measure

On construction sites across New Zealand and Australia, the most common response to a hazard is still "make them wear PPE." Hard hat, hi-vis, safety glasses, steel caps -- tick the boxes and move on. But this approach fundamentally misunderstands how risk control works, and it is exactly the kind of shortcut that leads to serious injuries and enforcement action.

PPE is the lowest level of the hierarchy of controls for a reason. It does not remove the hazard, does not reduce the risk, and relies entirely on every individual worker using it correctly, every time, without fail. That is a standard no workplace has ever achieved.

The PPE Problem

Personal Protective Equipment is designed to be the last line of defence -- the control you implement after you have exhausted all higher-order options. Yet in practice, it is often the first and only control listed against hazards in SWMS documents, risk assessments, and site safety plans.

This happens for understandable reasons. PPE is visible, tangible, and easy to specify. Writing "safety glasses and gloves" on a risk assessment takes ten seconds. Engineering a guard, redesigning a process, or eliminating a hazard entirely takes real effort, time, and sometimes money. But the legislation does not allow you to take the easy path when a more effective one is reasonably practicable.

Under section 30 of New Zealand's HSWA 2015, and the equivalent provisions in Australian WHS Acts, risks must be minimised so far as is reasonably practicable. The hierarchy of controls -- codified in regulation 6 of the Health and Safety at Work (General Risk and Workplace Management) Regulations 2016 -- establishes the order in which controls must be considered.

The Hierarchy of Controls, Briefly

The hierarchy ranks control measures from most effective to least effective:

1. Elimination -- remove the hazard entirely. The most effective control because no hazard means no risk.
2. Substitution -- replace the hazardous material, process, or equipment with something less hazardous.
3. Isolation -- physically separate people from the hazard using distance, enclosure, or barriers.
4. Engineering controls -- design out the risk through guarding, ventilation, interlocks, or mechanical aids.
5. Administrative controls -- procedures, training, signage, supervision, job rotation, and permits to work.
6. PPE -- the last resort when all higher-order controls have been considered and the residual risk still needs managing.

For a deeper understanding of how to assess and score the residual risk after applying controls, see our guide to residual risk calculation.

Why PPE Fails as a Primary Control

PPE has fundamental limitations that make it the least reliable control measure:

It depends on human behaviour

PPE only works if every worker wears it correctly, every time. Research consistently shows that PPE compliance rates on construction sites range from 60% to 85% -- meaning a significant minority of workers are unprotected at any given time. A guardrail, by contrast, protects everyone regardless of their behaviour.

It can create new hazards

Heavy hearing protection reduces situational awareness. Respirators restrict breathing and cause heat stress. Safety gloves reduce dexterity and grip. Fall arrest harnesses can cause suspension trauma if a worker hangs in one for more than a few minutes after a fall. Each piece of PPE introduces trade-offs that must be managed.

It does not reduce the hazard

PPE does not make the hazard smaller or less likely to occur. It only attempts to reduce the consequence to the individual worker when the hazard does occur. The falling object still falls. The chemical still splashes. The noise is still there. PPE is a barrier between the hazard and the worker -- but the hazard remains fully present.

It degrades over time

PPE wears out, gets damaged, expires, and loses its protective properties. Hard hats degrade from UV exposure. Hearing protection compresses and loses its noise reduction rating. Safety harnesses must be replaced after a fall event. Without rigorous inspection and replacement programs, PPE can give workers a false sense of security.

It only protects the wearer

PPE protects the individual worker wearing it -- not bystanders, other trades, or members of the public. An engineering control like a barrier or enclosure protects everyone in the area.

Real-World Examples

Consider these contrasting approaches to the same hazard:

Silica dust from concrete cutting

PPE-only approach: Issue P2 respirators to workers. Result: workers remove respirators because they restrict breathing in hot weather. Silica exposure continues.

Higher-order approach: Use a wet-cutting method (engineering control) that suppresses dust at the source, combined with LEV (local exhaust ventilation) for enclosed areas. Respirators used only as a supplementary control during specific high-exposure tasks. Silica exposure reduced by 90%+ before PPE is even considered.

Falls from height on a flat roof

PPE-only approach: Issue fall arrest harnesses and anchor to a portable anchor point. Result: workers must clip on, move, unclip, re-clip constantly. Compliance drops as the shift progresses.

Higher-order approach: Install temporary edge protection (guardrails) around the perimeter (engineering control). Workers can move freely on the roof without any PPE for fall prevention. The guardrail protects everyone, including workers from other trades who access the roof.

Noise exposure from pneumatic tools

PPE-only approach: Issue earplugs. Result: workers insert them incorrectly (reducing effectiveness by 50%+), remove them to communicate, or lose them.

Higher-order approach: Substitute with electric tools where possible (substitution). Schedule noisy work for periods when fewer workers are in the area (administrative). Use noise barriers around the work zone (isolation). Issue hearing protection as supplementary control for remaining exposure.

What Inspectors Look For

WorkSafe NZ inspectors and SafeWork Australia inspectors are trained to look beyond PPE. When they review a SWMS or visit a site, they are specifically looking for evidence that higher-order controls have been considered and, where reasonably practicable, implemented.

Red flags that will attract inspector attention:

• A SWMS where every hazard has "PPE" as the only control measure
• No documented consideration of elimination, substitution, or engineering controls
• Controls that are exclusively administrative (procedures and training) without any physical controls
• Workers wearing PPE but no engineering controls visible on site (e.g., no dust suppression despite concrete cutting occurring)
• PPE that is damaged, expired, or improperly fitted

Demonstrating Higher-Order Controls

Your SWMS should document the reasoning process, not just the final control selection. For each hazard, the document should show:

1. Whether the hazard can be eliminated (and if not, why not)
2. Whether a less hazardous substitute is available
3. Whether isolation or engineering controls can reduce the risk
4. What administrative controls are in place
5. What PPE supplements the higher-order controls

This is exactly how the hierarchy of controls should be applied in practice. Every hazard should have controls from at least two levels -- never PPE alone.

The Proper Role of PPE

None of this means PPE is unnecessary. It means PPE is necessary but not sufficient. The proper role of PPE in a risk control strategy is:

• Supplementary protection -- after higher-order controls have reduced the risk, PPE manages the residual exposure
• Interim control -- while engineering controls are being installed or modified, PPE provides temporary protection
• Emergency situations -- for unexpected exposures or emergency response where pre-planned controls are not available
• Incidental exposure -- for brief, low-level exposures that do not justify permanent engineering controls (e.g., safety glasses for occasional grinding)

When PPE is used in these contexts -- as part of a layered defence rather than the entire defence -- it is effective and appropriate. The problem is when it stands alone.

The best SWMS documents clearly show the hierarchy of controls in action: a primary control that addresses the hazard at its source, supported by administrative procedures, with PPE as the final layer. That is what compliance looks like, and it is what keeps workers safe.