Grouping the criteria by failure type is what produces consistency across shifts and sites, and it is also what makes a withdrawal explicable two years later.
Why Retirement Is a Decision, Not a Date
An issue date tells you how old an item is; it does not tell you whether it still protects.
Two things are true at the same time. Some equipment has a service life the manufacturer states, and that life is a control rather than a suggestion. Other equipment fails from events and exposure that no calendar can predict, which is why the employer’s duty under OSHA 1910.132, within the general obligations of 29 CFR 1910 Subpart I, is framed around equipment being maintained in a reliable condition rather than around age. Regulator guidance such as that from HSE in the UK and CCOHS in Canada points the same way: equipment that can no longer do its job has to come out of service, whatever its age.
The practical consequence is that a site needs two mechanisms rather than one. A withdrawal-on-criteria route for items that fail inspection, and a service-life route for items that reach a limit stated by the manufacturer or by the programme. Protective equipment remains the last measure in the hierarchy of controls, so retirement is the maintenance of a control rather than the removal of a hazard, and the criteria are the mechanism that keeps the control real.
Failure Type 1: Mechanical Damage
Mechanical damage is the most visible failure type and the least ambiguous, provided the criteria are written in physical terms rather than adjectives.
The categories worth writing down: fabric or shell damage that affects integrity; seam failure or stitch breakdown; damaged, missing or non-functioning closures; deformed or cracked components; and damage that reduces coverage, such as a torn sleeve or a stretched hood opening. For footwear, add sole separation, midsole compression and deformation around the protective toe area. For gloves, add surface cuts, loose lining and grip loss that changes how the wearer holds a tool. The test that makes these criteria usable is whether two supervisors looking at the same item would reach the same conclusion: phrases such as “worn” or “in poor condition” do not achieve that, while “the reflective trim is detached over more than a short section” does. Where the manufacturer specifies limits or condemns an item after a particular event, that specification overrides a general visual assessment.
Failure Type 2: Thermal or Arc Exposure
Exposure to heat, flame or an electric arc changes an item’s status even when it appears intact.
Garments involved in an arc or flash fire event are withdrawn from service and retained for examination rather than returned to the pool, because the exposure the item experienced may exceed what it was designed for and because the item itself is evidence. The same applies to head protection that has taken an impact, to face protection that has been struck, and to footwear exposed to a molten metal incident. In each case, visible condition is not the criterion: the criterion is that the item has been through an event whose effect on performance cannot be established by looking at it. Damage from radiant heat or molten metal splash also affects reflective trim and coated surfaces, which can lose function while the underlying garment still looks serviceable. A short written rule that names the events which condemn an item regardless of appearance removes the argument at the point where it is least useful.
Failure Type 3: Contamination
Contamination retires equipment when the contaminant cannot be removed using the process the manufacturer permits, and the decision belongs with the care instructions rather than with the laundry.
Three categories are worth separating. Contaminants that can be removed using the permitted care process, where the item returns to service once cleaned. Contaminants that cannot be removed, where the item is withdrawn because its performance may have changed. And contaminants that alter how the material behaves in contact with heat or flame, where the item is withdrawn even if cleaning appears to have succeeded. The second and third categories are where sites get into difficulty, because the decision usually has to be made by someone who can identify the substance: a chemical exposure needs the safety data sheet and, where relevant, the manufacturer’s guidance, while oil and fuel contamination on flame-resistant garments requires a judgement that the permitted cleaning process has removed it. Where a garment is used in an environment with continuous contamination, the more effective answer is usually to increase the number of garments in rotation rather than to extend cleaning intervals. Care requirements themselves are set by the manufacturer’s instructions, and the article on washing and caring for flame-resistant clothing owns those rules.
Failure Type 4: Loss of Evidence (Labels, Ratings)
An item that can no longer be identified cannot be shown to meet the requirement, and that alone is a retirement criterion.
Three losses matter. An illegible or missing label, which removes the performance information, the care instructions and often the traceability reference. Lost marking, which is the same problem for equipment where the marking itself carries the standard and level. And separation of the item from its record, where the issue line or inspection history can no longer be matched to the article in hand. Sites commonly treat a faded label as cosmetic and keep the garment in service, which is the wrong way round: the label is what links the article to the assessment that selected it and to the care regime that keeps its performance valid. Where the label is damaged but the article is otherwise serviceable, the question is whether the manufacturer permits replacement labelling and, if so, whether the replacement carries the same information. Where it does not, the item is withdrawn. This criterion also protects the worker in a practical way, because an unmarked garment is one nobody can inspect properly, and guidance from bodies such as ASSP and NIOSH on equipment condition is a useful reference when a site is writing its criteria for the first time.
Failure Type 5: Performance Drift After Care
Protective performance can decline through care and use without any visible damage, which is why the manufacturer’s instructions set the limits.
Four signals suggest drift rather than damage. An item that has been through more cleaning cycles than the instructions support, where the manufacturer states a limit. A garment whose water resistance, anti-static behaviour or retroreflective performance appears to have changed, since these properties are not visible in the way a tear is. An item whose protective element has been replaced or repaired with a component outside the tested configuration, such as an unrated patch, a substitute closure or an alternative reflective tape. And an item whose fabric has been exposed to conditions the instructions exclude, including certain chemicals, excessive heat or inappropriate drying. In each case the criterion is not appearance but conformity with the conditions under which the article was assessed. Repairs are only permitted where the manufacturer’s instructions allow them and prescribe the method and materials; anything else changes the article. Performance drift is also the reason the care record matters at the issue and laundry stages, since a garment’s history is the only evidence that it has been maintained as the instructions require.
| Failure type | Typical triggers | Who decides |
|---|---|---|
| Mechanical | Fabric, seam, closure or component damage; loss of coverage | Formal inspector, supervisor |
| Thermal or arc exposure | Involvement in an arc, flash fire, impact or molten metal event | Supervisor with HSE, item retained as evidence |
| Contamination | Residue that the permitted cleaning process cannot remove, or that changes material behaviour | HSE with chemical information |
| Loss of evidence | Illegible or missing label or marking; item separated from its record | Stores with HSE |
| Performance drift | Care beyond permitted limits; unauthorised repair or component change | HSE with manufacturer guidance |
Who May Condemn an Item
The authority to withdraw equipment has to be defined, because an inspection that cannot remove an item is not a control.
Three levels work in practice. Any wearer can withdraw their own equipment, immediately and without needing agreement, on a suspicion that it may have failed; the item goes out of circulation and the decision about repair, retention as evidence or disposal is taken later. Supervisors and inspectors can withdraw items on the criteria in the schedule. And HSE or a nominated technical authority takes the marginal calls, such as contamination questions, borderline damage and items whose service life has been reached. Two points keep this structure honest. A withdrawal should never require the person to justify their judgement before the item is removed, since that is how defective equipment stays in use. And the person who condemns an item should be identifiable in the record, not because anyone is being blamed but because the competence question will be asked and the answer has to exist.
Recording Withdrawal and Destruction
The record is what prevents a retired item from returning to service, and it also feeds the decisions that improve the programme.
Four fields make a withdrawal record complete: the item identifier, the date, the failure type with the specific criterion, and the action taken. Actions worth distinguishing are disposal, retention as evidence, return to the manufacturer where that route exists, and repair where the instructions permit it and the repair is carried out as specified. For destruction, define a route that prevents reissue: equipment cut or marked so it cannot be reused, or disposed of through a controlled process, with the disposal captured against the same item. Retired items should also be removed from the issuing area physically at the point of decision, not at the end of the week. Finally, use the record as data: the distribution of failure types across a period shows whether the issue is wear (a specification or interval question), events (a task or control question) or care (a laundering or training question), and the answer determines which part of the programme to change. The documentation structure that holds these records is described in the sourcing, manufacturing and compliance hub, and a management system such as ISO 45001 expects the same evidence of control maintenance to be retained and reviewable.
FAQ: Questions About Retirement Criteria
When should PPE be taken out of service?
When it fails one of five criteria groups: mechanical damage affecting integrity or coverage, exposure to a thermal, arc or impact event, contamination that cannot be removed within the permitted process, loss of the label or marking that links it to the assessment, or performance drift through care or an unauthorised repair. It also comes out of service when it reaches a service life the manufacturer or the programme states.
Can damaged PPE be repaired?
Only where the manufacturer’s instructions permit the repair and prescribe the materials and method. A repair with a component outside the tested configuration changes the article, which is why unrated patches, substitute closures or alternative reflective trim are retirement issues rather than maintenance decisions. Where the instructions do not cover a repair, the item is withdrawn.
What do I do with retired PPE?
Record the item, the date, the failure type and the action, then remove it from circulation physically at the point of decision. Items involved in an incident are retained as evidence rather than disposed of. For everything else, use a destruction route that prevents reissue, such as cutting or marking the item, or controlled disposal, and capture that against the same record.
Does equipment have to be replaced on a fixed schedule?
Where the manufacturer states a service life, that life applies and is a control. Where no life is stated, retirement follows condition and events rather than the calendar, because equipment fails from exposure and use rather than from age alone. A fixed review date is still useful as a trigger to look at the item, but the decision itself should rest on the criteria rather than on the date.
If you are writing retirement criteria and want them specific enough to apply consistently across shifts, send your current schedule and a sample of withdrawal records to [email protected], or use the contact page to ask for a programme review.
{
“@context”: “https://schema.org”,
“@type”: “Article”,
“headline”: “PPE Retirement Criteria: Deciding When Protection Has Ended”,
“description”: “PPE retirement criteria grouped by failure type: mechanical damage, thermal or arc exposure, contamination, loss of evidence and performance drift, with who may condemn an item and how withdrawal is recorded.”,
“inLanguage”: “en-US”,
“author”: { “@type”: “Organization”, “name”: “Shield Wings”, “url”: “https://www.shield-wings.com/” },
“publisher”: { “@type”: “Organization”, “name”: “Shield Wings”, “url”: “https://www.shield-wings.com/” },
“mainEntityOfPage”: { “@type”: “WebPage”, “@id”: “https://www.shield-wings.com/ppe-retirement-criteria/” },
“about”: [
{ “@type”: “Thing”, “name”: “PPE retirement criteria” },
{ “@type”: “Thing”, “name”: “Withdrawal from service” },
{ “@type”: “Thing”, “name”: “Equipment contamination and care” }
],
“keywords”: “ppe retirement criteria, when to replace ppe, ppe withdrawal from service”
}
{
“@context”: “https://schema.org”,
“@type”: “FAQPage”,
“mainEntity”: [
{
“@type”: “Question”,
“name”: “When should PPE be taken out of service?”,
“acceptedAnswer”: { “@type”: “Answer”, “text”: “When it fails one of five criteria groups: mechanical damage affecting integrity or coverage, exposure to a thermal, arc or impact event, contamination that cannot be removed within the permitted process, loss of the label or marking that links it to the assessment, or performance drift through care or an unauthorised repair. It also comes out of service when it reaches a service life the manufacturer or the programme states.” }
},
{
“@type”: “Question”,
“name”: “Can damaged PPE be repaired?”,
“acceptedAnswer”: { “@type”: “Answer”, “text”: “Only where the manufacturer’s instructions permit the repair and prescribe the materials and method. A repair with a component outside the tested configuration changes the article, which is why unrated patches, substitute closures or alternative reflective trim are retirement issues rather than maintenance decisions. Where the instructions do not cover a repair, the item is withdrawn.” }
},
{
“@type”: “Question”,
“name”: “What do I do with retired PPE?”,
“acceptedAnswer”: { “@type”: “Answer”, “text”: “Record the item, the date, the failure type and the action, then remove it from circulation physically at the point of decision. Items involved in an incident are retained as evidence rather than disposed of. For everything else, use a destruction route that prevents reissue, such as cutting or marking the item, or controlled disposal, and capture that against the same record.” }
},
{
“@type”: “Question”,
“name”: “Does equipment have to be replaced on a fixed schedule?”,
“acceptedAnswer”: { “@type”: “Answer”, “text”: “Where the manufacturer states a service life, that life applies and is a control. Where no life is stated, retirement follows condition and events rather than the calendar, because equipment fails from exposure and use rather than from age alone. A fixed review date is still useful as a trigger to look at the item, but the decision itself should rest on the criteria rather than on the date.” }
}
]
}