Controlling exposure is not a matter of choosing one measure from a list. The hierarchy of control sets an order of preference, running from removing the hazard entirely down to protecting the individual wearer, and the reason respiratory protective equipment sits last is that its performance depends on more things going right than any other control. This page sets out the hierarchy as a decision framework and explains how to establish that a control actually works rather than assuming it does.
The hierarchy of control provides an order for selecting measures to prevent or reduce occupational exposure. It begins with elimination, followed by substitution, engineering controls, administrative controls and respiratory protective equipment. This order is internationally recognised practice rather than a statement that one foreign regulatory system applies in the UAE.
The hierarchy is not simply a checklist under which one measure is selected and the remaining stages are ignored. Effective control frequently combines measures from several levels. The purpose of the order is to prioritise controls that remove the hazard or contain it at source before relying on individual behaviour.
The assessment should consider exposure by inhalation, skin contact and accidental ingestion where relevant. A control that reduces airborne concentration may not prevent contamination of skin, clothing, surfaces or welfare areas. The selected measures must correspond to the ways in which the substance can reach the worker.
Elimination removes the hazardous material or exposure-generating activity. Examples include purchasing a finished component instead of carrying out an exposure-generating process, using a mechanical connection instead of an adhesive or avoiding an unnecessary cleaning chemical.
Elimination is often considered impracticable too quickly. The correct question is not merely whether the product is useful, but whether the hazardous step, material form, quantity or method is essential. Process redesign, prefabrication, automation or revised quality specifications may remove exposure without removing the underlying business function.
Substitution replaces the hazard with a less hazardous substance, form or process. A lower-volatility liquid, pre-mixed product, pellet rather than powder, brush application rather than spraying, or lower-temperature process may reduce emissions.
A substitute should be assessed before adoption. Replacing a well-characterised substance with a product having little toxicological information is not necessarily an improvement. The assessment should consider the complete process, including reaction products, decomposition products, cleaning requirements, waste and foreseeable abnormal conditions.
Engineering controls reduce exposure without depending primarily on the worker remembering to act. They include enclosure, isolation, automation, physical separation, closed transfer, process containment and extraction close to the emission source.
A well-designed engineering control should operate during the exposure-generating activity, accommodate normal production variability and fail in a visible or detectable manner. It should not make the work so difficult that operators routinely disable, bypass or reposition it.
Administrative controls change how work is organised. They include restricting access, reducing the duration of a task, scheduling high-emission work when fewer people are present, using written procedures, controlling quantities, providing supervision and rotating duties where appropriate.
Administrative controls are usually less reliable because they depend on consistent human behaviour. Job rotation may reduce the exposure of one individual but does not reduce the total contaminant released into the workplace. It should not be used to distribute excessive exposure among a larger group instead of controlling the source.
Training supports every control level but is not a substitute for effective physical control. A worker who understands a hazard cannot prevent exposure where an open process releases contaminant directly into the breathing zone.
Respiratory protective equipment can be necessary for residual risk, short-duration non-routine work, maintenance, emergencies or the period before permanent controls are completed. It is nevertheless the final stage of the hierarchy because its performance depends on correct selection, individual fit, continuous wear, inspection, maintenance and worker behaviour.
Tight-fitting equipment must seal to the individual wearer's face. A model that fits one person may not fit another, and leakage can substantially reduce protection. Fit testing is internationally recognised practice for confirming that the selected facepiece can fit the wearer.
Facial hair crossing the sealing surface can prevent an effective seal. Where facial hair cannot be removed, a suitable loose-fitting alternative may need to be considered rather than assuming that tightening the straps will correct the problem.
Wear time is equally important. Removing the equipment to speak, communicate by telephone, cool down or complete a supposedly minor part of the task can account for a substantial proportion of exposure. Filters must be suitable for the contaminant, replaced according to an appropriate schedule and stored so that they do not become damaged or contaminated.
An assigned protection factor represents the protection expected from a respirator class under specified programme conditions. It is not a guarantee of the protection achieved by a particular person on a particular day. Poor fit, incorrect use, damaged valves, an unsuitable filter, high work rate or intermittent wear can make achieved protection materially lower. HSE guidance also notes that maximum protection from personal protective equipment is seldom achieved consistently in practice.
RPE protects only the wearer. It does not prevent contamination spreading to nearby workers, surfaces, clothing, adjacent areas or the wider environment.
A control should not be accepted merely because it has been purchased, installed or written into a procedure. Verification asks whether exposure is actually prevented or reduced under real working conditions.
Initial checks may include observing how the task is performed, identifying visible or instrument-detected escape, confirming enclosure integrity, checking alarms or indicators, reviewing maintenance records and speaking with operators about abnormal conditions.
The verification method should match the control objective. A closed-transfer system may be assessed for leaks and exposure during connection and disconnection. An enclosure may require checks during loading, cleaning and access. An administrative restriction may require records showing whether people actually remain outside the controlled area.
Exposure monitoring can provide stronger evidence where the original concern was an airborne contaminant. Monitoring should be representative of the workers, tasks and conditions that produced the earlier result. A low measurement obtained during reduced production, with a different material or while the highest-emission task was absent does not demonstrate that the control has solved the original problem.
Routine indicators can help detect deterioration between formal assessments. These may include pressure readings, alarms, process parameters, inspection findings, worker reports and simple performance checks. Trigger levels and responsibilities should be defined so that a warning leads to investigation rather than being recorded and ignored.
Re-monitoring is appropriate where a significant control has been installed, modified or repaired and exposure measurement is needed to demonstrate effectiveness. The purpose is not simply to obtain a lower number, but to determine whether the intervention has reduced exposure during comparable work.
The post-control sample should therefore be collected under conditions as close as reasonably practicable to those that produced the problematic result. Relevant factors include the same task, material, production rate, equipment, worker position, duration, environmental conditions and pattern of intermittent work.
Perfect replication is rarely possible. Differences should be documented and considered during interpretation. Where production was lower during the second assessment, the result may still be useful, but it should not be represented as a direct demonstration of the maximum expected reduction.
Control effectiveness may also need to be confirmed over several occasions. Worker technique, product demand, temperature, maintenance condition and batch characteristics can change. A single satisfactory result provides evidence for the conditions assessed, not a permanent guarantee.
Re-monitoring should lead to a decision. A successful control may become the new operating standard, supported by maintenance and routine checks. A partially successful control may require improvement or additional measures. A failed control should prompt investigation before reliance is placed on RPE or administrative restrictions alone.
The question is not whether the product is useful but whether the hazardous step, material form, quantity or method is essential. Process redesign, prefabrication or revised specifications may remove exposure without removing the business function.
Rotating duties may lower one person's exposure but does not reduce the total contaminant released. It should not be used to distribute excessive exposure across a larger group.
It does nothing to prevent contamination spreading to nearby workers, surfaces, clothing, adjacent areas or the wider environment.
A control should not be accepted because it has been purchased, installed or written into a procedure. Verification asks whether exposure is actually prevented under real working conditions.
The hierarchy of control is internationally recognised occupational hygiene practice, described by bodies including HSE and NIOSH. Fit testing of tight-fitting respiratory protective equipment is likewise recognised practice. Neither is stated here as a UAE statutory requirement. Where a specific duty applies to a particular workplace it will arise from an applicable regulation, ministerial decision, emirate instrument, sector requirement, permit or free-zone rule, and that instrument should be named.
Foreign guidance from HSE, NIOSH, ACGIH, BOHS and AIHA, together with EN and ISO standards, is evidence of recognised practice. It does not become binding in the UAE merely because it is technically established elsewhere.
Not necessarily. The hierarchy requires consideration in order. The selected combination should control the risk effectively and should not bypass a reasonably practicable higher-level measure without justification.
Training supports safe work and correct use of controls, but it does not stop a contaminant being generated. It is normally an administrative measure rather than a substitute for elimination, containment or engineering control.
Sometimes residual exposure cannot be controlled completely by other means, but routine first-line reliance on RPE is vulnerable to poor fit, intermittent wear, maintenance failures and incorrect selection.
No. It confirms that a particular facepiece can fit the wearer under the test conditions. Correct use, facial condition, maintenance, filter selection and continuous wear remain necessary.
Re-monitoring is appropriate after significant control changes, process changes, unexpected deterioration, complaints or evidence that previous measurements no longer represent current conditions.