Workplace safety in Canada rests on a fundamental principle that shapes every decision employers make about protecting workers: hazards should be controlled at their source whenever possible, and the responsibility for safety should never fall primarily on the individual worker. This principle finds its clearest expression in the hierarchy of controls, a framework that ranks control measures from most effective to least effective and that underpins occupational health and safety legislation across all Canadian jurisdictions. Understanding this hierarchy is not merely an academic exercise for HR professionals and business owners but rather an essential competency that determines whether safety programs actually protect workers or simply create the appearance of protection while leaving employees vulnerable to preventable injuries and illnesses.
The hierarchy of controls emerged from decades of industrial hygiene practice and has been codified in various forms across Canadian occupational health and safety statutes. The Canada Labour Code, which applies to federally regulated industries including banking, telecommunications, interprovincial transportation, and federal Crown corporations, establishes the general duty of employers to ensure the health and safety of every person employed by them and to take prescribed health and safety measures. Provincial legislation mirrors this duty across all jurisdictions, from British Columbia's Workers Compensation Act and its accompanying Occupational Health and Safety Regulation to Ontario's Occupational Health and Safety Act to Quebec's Act Respecting Occupational Health and Safety. While the specific language varies, all jurisdictions share a common expectation, reflected in regulatory provisions and enforcement practices as of the date of authorship, that employers will implement controls in a hierarchical manner, beginning with the most effective measures and descending to less effective measures only when higher-order controls prove infeasible.
The hierarchy itself comprises five distinct levels, each representing a category of control measures with predictable effectiveness. At the apex sits elimination, the complete removal of a hazard from the workplace. Below elimination comes substitution, which involves replacing a hazardous substance, process, or piece of equipment with something less hazardous. The third tier encompasses engineering controls, physical modifications to the workplace or equipment that reduce worker exposure to hazards without requiring ongoing worker action. Administrative controls occupy the fourth position, including policies, procedures, training, and work organization measures that reduce exposure through behavioural requirements. At the base of the hierarchy sits personal protective equipment, commonly referred to as PPE, which places a physical barrier between the hazard and the worker's body. This ranking reflects a crucial reality about workplace safety: controls at the top of the hierarchy are inherently more reliable because they do not depend on continuous human behaviour, while controls at the bottom require constant vigilance and can fail whenever a worker is fatigued, distracted, or inadequately trained.
Elimination deserves particular attention because it represents the gold standard of hazard control, yet it is frequently overlooked by employers who have grown accustomed to working around hazards rather than removing them entirely. Elimination asks a fundamental question that should precede any other safety analysis: does this hazard need to exist at all? In many workplaces, hazards persist not because they are inherent to the work but because historical practices have never been questioned. A manufacturing operation might continue using a hazardous solvent for cleaning because that solvent was specified when the process was designed twenty years ago, even though modern alternatives could perform the same function without the same toxicity. A construction site might require workers to perform tasks at height because the project schedule was built around a particular sequence of operations, even though redesigning the sequence could allow more work to be completed at ground level. Elimination requires employers to step back from established practices and ask whether the hazard itself can be designed out of the work, and this examination should occur during the planning and design phase of any project, process, or workplace modification.
Substitution operates as a close cousin to elimination, recognizing that complete hazard removal is not always possible but that hazard reduction through replacement often is. The substitution analysis requires employers to evaluate whether a less hazardous alternative exists and whether that alternative is reasonably practicable given the work that needs to be accomplished. A cleaning company might substitute a caustic chemical cleaner with an enzyme-based alternative that poses fewer risks to workers' respiratory systems and skin. A healthcare facility might replace latex gloves with nitrile alternatives to eliminate the risk of latex allergies among staff. A machine shop might switch from solvent-based cutting fluids to water-based alternatives that reduce both skin irritation and fire hazards. The key to effective substitution lies in thorough evaluation: the replacement must actually be less hazardous overall, not simply less hazardous in one dimension while introducing new risks in another. This requires careful assessment of the alternative's properties, the tasks for which it will be used, and the conditions under which workers will encounter it.
Engineering controls represent the first level of the hierarchy where the hazard remains present but is physically contained or separated from workers through workplace design. These controls are highly reliable because they do not depend on worker behaviour once installed. Machine guarding provides a classic example: a properly designed guard physically prevents workers from contacting dangerous moving parts, and this protection remains effective whether the worker is alert or fatigued, experienced or newly hired. Ventilation systems that capture airborne contaminants at their source and exhaust them safely protect workers continuously without requiring those workers to take any particular action. Sound enclosures around noisy equipment reduce noise exposure for everyone in the area. Ergonomic workstation design reduces musculoskeletal strain by positioning work surfaces, tools, and materials in ways that minimize awkward postures and excessive force. The common thread among all engineering controls is that they modify the physical environment to reduce hazard exposure, and they continue functioning independently of worker compliance.
Administrative controls shift responsibility partially back to workers by requiring them to follow procedures, rotate through tasks, or otherwise behave in ways that reduce their exposure to hazards. These controls can be effective when properly designed and implemented, but they carry inherent limitations because their effectiveness depends on consistent human behaviour. A rotation schedule that limits any individual worker's exposure to a hazardous task to two hours per shift only works if supervisors enforce the schedule and workers adhere to it. Safe work procedures only protect workers who follow them, and workers under time pressure or facing competing priorities may take shortcuts that increase their risk. Training only translates into protection when workers retain and apply what they learned, which requires that training be effective, relevant, and periodically reinforced. Administrative controls also require ongoing management attention: procedures must be updated as conditions change, training must be refreshed as knowledge fades, and compliance must be monitored and corrected. The reliance on human behaviour makes administrative controls fundamentally less reliable than engineering controls, which is why they occupy a lower position in the hierarchy.
Personal protective equipment sits at the base of the hierarchy not because it is unimportant but because it represents the last line of defence when higher-order controls are insufficient or impracticable. PPE creates a physical barrier between the hazard and the worker's body, whether that barrier takes the form of safety glasses that shield eyes from flying particles, respirators that filter contaminated air before it reaches the lungs, hearing protection that attenuates harmful noise levels, or fall arrest systems that prevent fatal impacts after a fall begins. The critical limitation of PPE lies in its dependence on proper selection, fit, use, and maintenance. A respirator provides no protection if it is the wrong type for the contaminant present, if it does not fit the worker's face properly, if the worker removes it for comfort during hot weather, or if the filters are not replaced according to the manufacturer's schedule. Safety glasses protect eyes only when workers actually wear them. Hard hats prevent head injuries only when they are properly adjusted and free from defects that would compromise their protective capacity. Every PPE failure represents a direct exposure of the worker to the hazard, which is why reliance on PPE alone is widely recognized as inadequate safety management.
The legal expectation across Canadian jurisdictions is that employers will work through the hierarchy systematically, implementing controls at higher levels before resorting to lower-level measures. This expectation is sometimes expressed explicitly in legislation and regulations and is otherwise enforced through the general duty clause that requires employers to take every reasonable precaution for worker protection. Regulators and courts examining workplace incidents typically ask whether the employer considered controls at each level of the hierarchy and whether the employer's reasons for rejecting higher-order controls were defensible. An employer who relies exclusively on PPE while ignoring feasible engineering or elimination controls will face difficult questions about whether the safety program truly met the standard of care required by law.
The practical application of hierarchy principles can be illustrated through a scenario drawn from a realistic Canadian workplace context. Consider a medium-sized printing company located in Mississauga, Ontario, that operates multiple high-speed commercial printing presses producing magazines, catalogues, and promotional materials for clients across the Greater Toronto Area. The company employs approximately forty-five workers, including press operators, prepress technicians, finishing operators, maintenance staff, and administrative personnel. In late 2025, the company's joint health and safety committee received multiple concerns from press operators about noise levels in the pressroom. Workers reported experiencing ringing in their ears after shifts, difficulty hearing conversations even when not at work, and headaches that seemed connected to the constant noise exposure during operating hours. The committee measured noise levels and found that they routinely exceeded 90 decibels during normal operations, well above the 85-decibel threshold that triggers action requirements under Ontario's occupational health and safety provisions.
The company's initial response reflected a common but inadequate approach to hazard control. Management purchased a supply of disposable foam earplugs and directed all pressroom workers to wear them whenever the presses were operating. The safety coordinator conducted a brief training session on earplug insertion, demonstrating the roll-and-hold technique required for proper fit, and posted signs reminding workers to wear their hearing protection. Management considered the matter resolved and moved on to other priorities. Over the following months, however, the hearing concerns persisted. Workers complained that the earplugs were uncomfortable during eight-hour shifts, that they made it difficult to communicate with coworkers and hear warning signals, and that the foam plugs frequently fell out or were removed and not replaced. Noise-induced hearing loss is gradual and cumulative, and the workers' continuing exposure during the many moments when protection was inadequate would eventually manifest as permanent disability.
The joint health and safety committee, to its credit, raised the issue again and pushed for a more systematic analysis using the hierarchy of controls. The committee began with elimination: could the noise hazard be removed entirely? Complete elimination proved impractical because the printing presses necessarily generate significant noise during operation, and the company's business required those presses to run. However, the elimination analysis revealed that some noise sources were not inherent to printing operations. A large ventilation fan in the pressroom generated considerable noise that had nothing to do with the presses themselves, and replacing that fan with a quieter model could reduce overall noise levels without affecting production. The company also identified that certain maintenance practices had allowed noise levels to increase over time. Worn bearings in several rollers, loose panels that vibrated during operation, and deteriorated sound-dampening materials on one press all contributed to noise levels beyond what properly maintained equipment would generate. Addressing these maintenance issues would not eliminate the noise hazard but would reduce its severity.
Turning to substitution, the committee considered whether less noisy equipment could replace existing equipment. The company was not in a position to replace its printing presses, which represented significant capital investments with many years of useful life remaining. However, the committee identified that several auxiliary machines, including a paper jogger and a binding machine, were significantly noisier than current models available on the market. The company developed a plan to prioritize these machines for replacement as part of its normal capital equipment cycle, substituting quieter alternatives as budget permitted.
The engineering controls analysis yielded the most promising options for immediate noise reduction. An acoustical consultant conducted an assessment and recommended several measures. First, installing sound-absorbing panels on the walls and ceiling of the pressroom would reduce reflected noise that currently bounced throughout the space and amplified overall exposure levels. Second, constructing partial enclosures around the loudest sections of each press would contain noise at its source. Third, installing vibration-dampening mounts under the presses would reduce the transmission of noise through the building structure. Fourth, relocating the operator workstations slightly further from the primary noise sources and installing sound barriers between workstations and presses would reduce exposure during the monitoring tasks that operators performed throughout their shifts. The consultant estimated that these engineering measures, combined with the maintenance improvements and fan replacement identified earlier, could reduce noise levels in the operator workstations to approximately 82 decibels, below the 85-decibel action level.
Administrative controls complemented these engineering measures. The company revised its work rotation practices so that no worker would be stationed in the highest-noise areas for entire shifts, spreading exposure across more workers while reducing individual exposure duration. The company also scheduled the loudest operations, including certain finishing processes, during periods when fewer workers needed to be in the pressroom. Enhanced noise awareness training helped workers understand the risks of noise exposure and the importance of reporting maintenance issues that might indicate increased noise generation.
With these higher-order controls in place, personal protective equipment could serve its proper role as supplementary protection rather than the primary defence against hearing loss. Workers would continue to have access to hearing protection for use during specific high-noise tasks and during maintenance periods when noise might temporarily increase. However, PPE would no longer bear the entire burden of protecting workers from a hazard that engineering controls could substantially reduce.
The implications of this scenario extend well beyond the specific facts of the printing company example. The initial reliance on hearing protection alone represents a compliance failure that exposed the employer to significant liability. Ontario's Occupational Health and Safety Act and its regulations require employers to implement noise control measures using the hierarchy of controls, with engineering controls taking precedence over administrative controls and PPE. An employer who skips directly to PPE without documenting a systematic evaluation of higher-order controls cannot demonstrate that every reasonable precaution was taken. If workers in that pressroom develop occupational hearing loss, the employer will face workers' compensation claims that increase insurance costs, potential penalties under occupational health and safety enforcement, and possible civil liability if workers can demonstrate that the employer's failure to implement available controls fell below the standard of care. The fact that PPE was provided will not be a complete defence when feasible engineering controls were ignored.
The scenario also illustrates the importance of joint health and safety committee engagement. In this case, the committee served as an essential check on management decisions, pushing back against an inadequate initial response and insisting on a proper hierarchy analysis. Employers should view their committees not as obstacles to efficient decision-making but as partners in achieving genuine worker protection. Committee members often have frontline knowledge about how hazards actually affect workers and which controls might be most effective in their specific workplace context.
HR professionals and business owners applying these principles should begin with a commitment to systematic hazard analysis that explicitly addresses each level of the hierarchy. When a hazard is identified, the first question should always be whether it can be eliminated entirely, followed by whether substitution could reduce the hazard's severity. Only after elimination and substitution have been considered should attention turn to engineering controls, and engineering controls should be fully exhausted before administrative measures become the primary response. PPE should be treated as a last resort, supplementing higher-order controls when necessary but never serving as the sole protection against serious hazards.
Documentation plays a critical role in demonstrating that this systematic approach was followed. Employers should maintain records of the hazard assessments conducted, the controls considered at each hierarchy level, the rationale for accepting or rejecting specific controls, and the implementation status of chosen measures. When an incident occurs or a regulator conducts an inspection, these records provide evidence that the employer applied sound principles rather than simply grabbing the most convenient or cheapest solution.
The cost of higher-order controls often creates pressure to default to PPE, which is typically the least expensive option in terms of direct expenditure. A set of foam earplugs costs pennies, while an acoustical engineering project costs thousands or tens of thousands of dollars. This cost differential is real, but it presents a false economy. The true costs of relying on PPE include the ongoing expense of replacements, the training and supervision required to ensure proper use, the productivity losses when workers find PPE uncomfortable or limiting, and most importantly, the human and financial costs when PPE fails and workers are injured. Engineering controls typically require a larger upfront investment but then operate continuously with minimal ongoing cost, while PPE requires perpetual repurchase, training, and compliance monitoring. Over the lifespan of most operations, engineering controls frequently prove to be the more economical choice as well as the more effective one.
Workers' compensation systems across Canada operate on a principle that employers pay insurance premiums reflecting their injury experience. When workers are injured because PPE failed while engineering controls were available but not implemented, those injuries drive up experience ratings and premiums. The employer who invests in engineering controls reduces injury rates and thereby reduces long-term insurance costs. This financial incentive aligns with the legal duty and the ethical imperative to protect workers, creating a situation where doing the right thing is also the practical choice.
The hierarchy of controls applies across all workplace hazards, not only the physical hazards like noise, chemical exposure, or machinery contact that most readily come to mind. Ergonomic hazards respond to the same framework: elimination might involve automating a repetitive manual task entirely, substitution might involve replacing heavy containers with lighter alternatives, engineering controls might involve adjustable workstations and mechanical lifting aids, administrative controls might involve job rotation and rest breaks, and PPE such as back braces represents a last resort with limited evidence of effectiveness. Psychosocial hazards including workplace violence also fit this model: elimination might involve design choices that remove conditions conducive to violence, engineering controls might involve physical security measures, and administrative controls might involve protocols and training.
Canadian employers who internalize the hierarchy of controls as a fundamental operating principle will find that their safety programs become more effective, their regulatory compliance improves, and their workplaces become genuinely safer for the people who work in them. The framework is not complicated, but it requires discipline to apply consistently rather than defaulting to familiar but less effective approaches. For HR managers and people managers, championing proper hierarchy application across the organization represents one of the most significant contributions they can make to workplace safety. The framework ensures that when workers arrive each morning, the workplace has been designed and managed to protect them, rather than placing the burden of protection on their own vigilance and compliance with rules that too often fail when human factors intervene.