Mexico NOM-017-STPS-2024 Explained (Employer Guide)
Learn what Mexico NOM-017-STPS-2024 requires. Covers PPE obligations, employer duties, risk assessment, documentation, and STPS inspection readiness
What Is NOM-017-STPS-2024?
NOM-017-STPS-2024 is an Official Mexican Standard that regulates the selection, use, control, and maintenance of Personal Protective Equipment (PPE) in workplaces across Mexico.
It is issued by the Secretaría del Trabajo y Previsión Social (STPS) and applies to employers whenever workplace risks require protective equipment for employees.
Mandatory labor safety standard
NOM-017-STPS-2024 is legally binding. Employers must comply whenever PPE is required to control workplace hazards, regardless of industry or company size.Replacement of NOM-017-STPS-2008
The 2024 version supersedes the 2008 standard and introduces updated requirements for risk identification, PPE selection, training, and documentation.Focus on PPE management, not optional use
The NOM regulates how PPE must be evaluated, provided, used, maintained, and documented, not simply whether PPE exists.Position within Mexico’s safety framework
NOM-017 works alongside other STPS safety NOMs by addressing physical risk control at the employee level through proper protective equipment.
In practice, NOM-017-STPS-2024 ensures that PPE is treated as a structured safety control backed by risk analysis and documentation. Employers must be able to demonstrate correct selection, use, and oversight during STPS inspections.
Purpose of NOM-017-STPS-2024
NOM-017-STPS-2024 exists to ensure that employees are effectively protected against workplace hazards through the correct use of Personal Protective Equipment (PPE). The standard makes PPE a formal safety control backed by risk analysis, training, and documentation, not an informal or discretionary practice.
Protection against occupational hazards
The NOM requires employers to assess workplace risks and provide PPE that is appropriate to the specific hazards employees face during their activities.Prevention of accidents and occupational illnesses
Proper PPE selection, use, and maintenance help prevent injuries, exposure-related illnesses, and long-term health conditions linked to workplace risks.Employer accountability for PPE management
Employers are responsible for selecting suitable PPE, providing training, ensuring proper use, and maintaining records that prove compliance.
In practice, NOM-017-STPS-2024 shifts PPE from a basic safety item to a managed compliance obligation. Employers must be able to show that PPE decisions are intentional, documented, and actively enforced during STPS inspections.
Who Must Comply With NOM-017-STPS-2024
NOM-017-STPS-2024 applies based on risk exposure, not on company size, industry, or nationality. If workplace activities create hazards that require Personal Protective Equipment (PPE), the employer must comply with this standard.
Workplaces where PPE is required
Any workplace in Mexico where risks cannot be eliminated through engineering or administrative controls and require PPE falls under NOM-017.All company sizes and industries
The obligation applies equally to small offices, service companies, manufacturing sites, logistics operations, and high-risk industrial environments.Foreign companies with employees in Mexico
Foreign employers are fully subject to NOM-017 when they have employees in Mexico. Using an EOR or local employer structure does not remove PPE compliance obligations.Visitors and third parties in PPE-required areas
Employers must also ensure that visitors, contractors, and third parties entering PPE-required zones are provided with appropriate protection and follow PPE rules.
In practice, STPS evaluates compliance based on who is exposed to risk, not on payroll status or job title. Employers are expected to control PPE use for anyone entering hazardous areas, not only their direct employees.
What Is Considered Personal Protective Equipment (PPE) Under NOM-017
Under NOM-017-STPS-2024, Personal Protective Equipment (PPE) refers to equipment, devices, or clothing designed to protect employees from workplace hazards that cannot be eliminated by other means. PPE is not optional or generic. It must be selected based on identified risks and matched to specific job activities.
The standard treats PPE as a last line of defense. Employers are expected to first apply engineering and administrative controls. PPE is required when those controls do not fully remove the risk.
Definition of PPE under the standard
PPE includes items such as helmets, gloves, eye and face protection, respiratory protection, hearing protection, protective clothing, and footwear, selected according to the hazards present.PPE as a last line of defense
NOM-017 requires PPE only after evaluating whether risks can be controlled through safer equipment, process changes, or administrative measures.Relationship with other risk controls
PPE must complement, not replace, other safety controls. Employers must document why PPE is necessary and how it fits into the overall risk prevention strategy.
In practice, STPS inspectors look for evidence that PPE decisions are based on risk analysis. Providing PPE without documented justification or relying on PPE as the only safety measure often results in inspection findings.
Employer Obligations Under NOM-017-STPS-2024
NOM-017-STPS-2024 places clear and non-delegable obligations on employers to manage PPE as part of a structured safety system. Compliance is based on documented risk analysis, correct PPE selection, and ongoing availability, not on informal distribution of equipment.
Occupational Risk Identification and Analysis
Employers must begin PPE compliance with a formal risk analysis. PPE decisions cannot be generic or based on past practice. They must reflect real workplace conditions.
Risk evaluation by job position and work area
Employers must analyze risks for each role and location, identifying tasks where hazards exist and PPE is required.Identification of hazard types and exposed body parts
The analysis must specify hazard types such as physical, chemical, biological, or mechanical risks, and identify which parts of the body are exposed.Updates when conditions change
Risk assessments must be reviewed and updated when processes, equipment, materials, or work conditions change.
PPE Selection and Assignment
Once risks are identified, PPE must be selected and assigned in a deliberate and documented manner.
Selection based on risk analysis results
PPE must directly correspond to the identified hazards and level of exposure for each task or position.Compatibility between multiple PPE items
When more than one PPE item is required, employers must ensure they can be used together without reducing protection or creating new risks.Certification and quality requirements
Where applicable, PPE must meet recognized standards and technical specifications suitable for the identified risks.
PPE Provision and Availability
Providing PPE is not enough. Employers must ensure continuous availability and proper replacement.
Free provision to workers
All required PPE must be provided at no cost to employees.Availability for visitors and emergencies
PPE must also be available for visitors, contractors, and emergency situations when access to risk areas is allowed.Replacement and availability obligations
Employers must replace damaged, worn, or expired PPE and ensure sufficient stock to maintain uninterrupted protection.
In practice, STPS inspectors focus on alignment. Risk analysis, PPE selection, and actual equipment in use must match. Any gap between documents and reality is commonly cited during inspections.
PPE Training and Supervision Requirements
NOM-017-STPS-2024 requires employers to ensure that PPE is not only provided, but properly understood and correctly used. Training and supervision are treated as essential parts of PPE compliance, not optional support activities.
Initial PPE training before work begins
Employees must receive PPE training before performing tasks that require protective equipment. Training must occur prior to exposure, not after incidents.Practical and theoretical training
Training must cover both theoretical understanding of risks and practical instruction on how to correctly use, adjust, wear, and remove PPE for the assigned tasks.Refresher training when conditions change
Employers must provide additional training when workplace risks change, new PPE is introduced, or equipment is modified or replaced.Employer duty to supervise PPE usage
Employers are responsible for supervising correct PPE use during daily operations. Allowing improper use or non-use is treated as a compliance failure.
In practice, STPS inspectors expect to see training records and evidence of active supervision. Providing PPE without training or oversight is commonly cited as noncompliance under NOM-017.
PPE Maintenance, Cleaning, Storage, and Disposal
NOM-017-STPS-2024 requires employers to manage PPE as a controlled safety resource throughout its entire lifecycle. PPE must remain effective, hygienic, and suitable for use at all times. Equipment that is damaged, poorly maintained, or improperly stored is treated as noncompliant during STPS inspections.
Inspection procedures
Employers must implement regular PPE inspections to identify wear, damage, contamination, or malfunction. Any defective PPE must be removed from service immediately.Maintenance and cleaning responsibilities
PPE must be cleaned, serviced, and maintained according to manufacturer instructions and workplace conditions. Employers are responsible for ensuring these activities are carried out and enforced.Proper storage conditions
PPE must be stored in designated, clean, and dry areas that protect it from deterioration, contamination, or physical damage when not in use.Safe disposal or replacement
PPE that is damaged, expired, or no longer effective must be safely disposed of and replaced without delay. Continued use of unsafe PPE is not permitted.Accessible PPE instructions
PPE instructions, procedures, and guidance must be available in Spanish or in the language spoken by the employee. These documents must remain accessible at all times for consultation to ensure workers understand proper use and limitations.Record retention requirement
Documentary evidence and records required under NOM-017-STPS-2024 may be kept in physical or electronic form. All required documentation must be retained for at least one year from the date of creation.
In practice, STPS inspectors often verify PPE condition on-site. Equipment that exists in records but is unusable, dirty, or improperly stored commonly results in inspection findings and corrective orders.
Worker Obligations Under NOM-017-STPS-2024
NOM-017-STPS-2024 places clear responsibilities on workers alongside employer obligations. PPE compliance depends on correct daily use and cooperation, not only on equipment availability. STPS expects employees to actively follow PPE rules once equipment and training are provided.
Proper use of assigned PPE
Workers must correctly wear and use the PPE assigned for their tasks at all required times. Failure to use PPE as instructed is considered a safety violation.Participation in PPE training
Employees are required to attend PPE training sessions and apply the instructions received regarding correct use, adjustment, and limitations of the equipment.Inspection of PPE before and after use
Workers must visually inspect PPE before and after each use to identify damage, wear, or malfunction that could reduce protection.Reporting damaged or ineffective PPE
Any damaged, expired, or ineffective PPE must be reported immediately so it can be replaced. Continued use of unsafe PPE is not permitted.
In practice, STPS inspectors evaluate whether PPE rules are followed in daily operations. Even when employers provide compliant equipment, improper use or lack of reporting by workers can lead to inspection findings and corrective actions.
Mandatory Documentation and Recordkeeping
Under NOM-017-STPS-2024, documentation is essential to prove that PPE is properly selected, provided, used, and maintained. STPS inspections focus heavily on written evidence that connects risk analysis to real PPE practices. Verbal explanations or informal controls are not sufficient.
Occupational risk analysis records
Employers must keep documented risk assessments by job position and work area, identifying hazards and the need for PPE.PPE selection justification
Records must explain why specific PPE was selected based on the identified risks and how it matches exposure levels and body parts at risk.PPE delivery and replacement logs
Employers must document when PPE is issued to workers, including dates, types of equipment, and replacement history.Training attendance records
Documentation must show which employees received PPE training, when it occurred, and the type of training provided.Maintenance and inspection logs
Records must reflect routine PPE inspections, maintenance activities, and removal of damaged or defective equipment from service.Storage and disposal records
Employers must document proper PPE storage conditions and the safe disposal or replacement of expired or unusable equipment.
In practice, STPS inspectors look for consistency across records. Risk analyses, PPE issued, training provided, and equipment in use must align. Missing or inconsistent documentation is one of the most common causes of noncompliance findings under NOM-017.
NOM-017-STPS-2024 During STPS Inspections
During an STPS inspection, NOM-017-STPS-2024 is reviewed as a practical, evidence-based safety obligation. Inspectors focus on whether PPE controls are actually working in daily operations, not just whether policies exist.
What labor inspectors verify
Inspectors confirm that workplace risks have been identified, PPE has been correctly selected, and employees are using appropriate equipment for the hazards present.Required documents during inspections
STPS typically requests occupational risk analyses, PPE selection justifications, delivery and replacement logs, training attendance records, and maintenance or inspection logs.Common non-compliance findings
Frequent issues include outdated risk assessments, PPE that does not match identified hazards, missing training records, damaged equipment in use, or undocumented replacements.Evidence-based compliance expectations
Inspectors expect alignment between documentation and reality. PPE records must match what workers are wearing and what is available on-site.
In practice, STPS evaluates consistency and traceability. Employers that can clearly connect risks, PPE selection, training, and equipment condition are more likely to pass inspections without findings.
Penalties and Risks for Non-Compliance
Non-compliance with NOM-017-STPS-2024 exposes employers to financial penalties, legal exposure, and operational disruption. Because PPE directly relates to employee safety, STPS treats failures under this standard as serious violations, especially when risks are known and documented.
Administrative fines
STPS may impose fines when PPE is missing, incorrectly selected, poorly maintained, or undocumented. Penalties can increase if violations are repeated or if corrective actions are ignored.Increased liability after workplace accidents
If an accident occurs and PPE requirements were not properly met, employers face higher liability. Missing risk analyses, training records, or PPE logs weaken any defense.Labor law exposure during disputes
In labor claims involving injuries or unsafe conditions, lack of NOM-017 compliance is often used as evidence of employer negligence, increasing settlement and judgment risk.Operational risks for foreign employers
Foreign companies often underestimate PPE enforcement in Mexico. Non-compliance can trigger inspection findings, corrective orders, hiring delays, and reputational damage with labor authorities.
In practice, NOM-017 violations rarely stand alone. They often escalate broader compliance issues during inspections, making proactive PPE management essential for ongoing operations in Mexico.
Relationship With Other STPS Safety Standards
NOM-017-STPS-2024 does not function as a standalone obligation. It operates within Mexico’s broader occupational safety system, where multiple STPS standards work together to control risks, assign responsibility, and document compliance. Treating PPE compliance in isolation often leads to gaps during inspections.
Interaction with NOM-019 (Safety and Hygiene Commissions)
NOM-019 establishes the internal commission responsible for identifying risks and reviewing safety conditions. That commission plays a key role in evaluating PPE needs, reviewing incidents, and tracking corrective actions related to PPE use.Relationship with NOM-030 (preventive safety services)
NOM-030 requires employers to manage preventive safety and health services. PPE selection, training, and maintenance under NOM-017 form part of those preventive services and must be aligned with overall safety planning.Relationship with NOM-035 (psychosocial risks)
While NOM-035 focuses on psychosocial factors, certain preventive measures may involve PPE or protective controls in specific environments. Coordination ensures risks are addressed consistently.Why NOM-017 cannot be treated in isolation
PPE obligations depend on risk identification, internal oversight, and preventive planning defined by other NOMs. Without alignment, documentation becomes fragmented and difficult to defend during inspections.
In practice, STPS inspectors assess how safety standards work together. Employers that manage NOM-017 as part of an integrated safety framework are far better positioned to demonstrate consistent, inspection-ready compliance.
Common Employer Mistakes With NOM-017 Compliance
Many employers fail NOM-017-STPS-2024 not because PPE is missing, but because it is managed incorrectly. STPS inspections focus on how PPE decisions are made, documented, and enforced, not just whether equipment exists.
Treating PPE as a substitute for risk elimination
Employers sometimes rely on PPE instead of first applying engineering or administrative controls. NOM-017 requires PPE only after other risk controls have been evaluated and documented.Using generic PPE without risk-based selection
Providing standard PPE without linking it to specific hazards, body parts exposed, or job tasks is a common violation. PPE must match the actual risks identified.Lack of documentation despite having PPE
Even when PPE is provided and used, missing risk analyses, delivery logs, training records, or inspection logs result in non-compliance during STPS inspections.Failure to update PPE after operational changes
Changes in processes, equipment, materials, or work conditions require updated risk assessments and PPE adjustments. Outdated PPE programs are frequently cited.
In practice, these mistakes create gaps between paperwork and reality. STPS inspectors look for alignment, and when PPE use cannot be clearly justified and documented, employers are often found non-compliant.
Why Foreign Companies Struggle With NOM-017 Compliance
Foreign companies often underestimate NOM-017-STPS-2024 because PPE rules in Mexico are inspection-driven and documentation-heavy. What works in other countries rarely aligns with STPS expectations, which focus on evidence, structure, and ongoing control.
Limited understanding of STPS inspection practices
Many foreign employers are unfamiliar with how STPS inspectors verify PPE compliance. Inspections focus on risk-based justification, records, and real-world use, not policy statements.Fragmented HR and safety compliance management
When HR, payroll, and safety are handled by separate providers, PPE obligations fall through the cracks. NOM-017 requires coordination across risk analysis, training, and daily supervision.Overreliance on global providers without Mexico expertise
Global HR or payroll platforms often treat PPE as a generic checklist item. They may not manage local risk assessments, documentation, or inspection readiness required by STPS.Poor documentation and training controls
Even when PPE is provided, foreign employers frequently lack training records, delivery logs, or maintenance documentation, leading to automatic findings during inspections.
In practice, these gaps only become visible during inspections or after incidents. Without Mexico-specific expertise and integrated compliance oversight, foreign companies are often caught unprepared under NOM-017.
How Human Resources Mexico (HRM) Ensures NOM-017 Compliance
Human Resources Mexico (HRM) manages NOM-017-STPS-2024 as a practical, inspection-driven compliance obligation, not a theoretical safety policy.
By operating exclusively in Mexico, HRM aligns PPE management with real STPS enforcement expectations and workplace realities.
Mexico-only compliance model
HRM operates solely within Mexico, with deep knowledge of STPS inspection practices, local enforcement trends, and labor safety requirements specific to the Mexican regulatory framework.Risk assessment coordination
HRM supports structured occupational risk identification by job role and work area, ensuring PPE decisions are directly tied to documented hazards and exposure levels.PPE documentation and inspection readiness
HRM ensures PPE selection records, delivery logs, training records, and maintenance documentation are complete, consistent, and ready for review during STPS inspections.Integrated HR, payroll, and safety oversight
PPE compliance is managed alongside payroll, HR administration, and other labor obligations, reducing gaps caused by fragmented providers or disconnected processes.Local teams supporting STPS audits
HRM’s local teams support employers before, during, and after STPS inspections, helping respond to document requests, corrective actions, and follow-up requirements.
By combining local presence with integrated compliance management, Human Resources Mexico turns NOM-017 from a reactive risk into a controlled and inspection-ready process.
If you are hiring or employing staff in Mexico and want to ensure PPE compliance under NOM-017, reach out to HRM to discuss your workforce setup and get a custom proposal tailored to your hiring and compliance needs in Mexico.
Frequently Asked Questions (FAQs)
Is NOM-017 mandatory for all employers in Mexico?
NOM-017-STPS-2024 is mandatory for any employer in Mexico where workplace risks require the use of Personal Protective Equipment. The obligation depends on risk exposure, not company size or industry. If hazards exist that cannot be eliminated through other controls, employers must comply and document PPE management.
Does NOM-017 apply to office-based or low-risk workplaces?
Yes, NOM-017 can apply to office-based or low-risk workplaces if specific tasks or areas require PPE. Examples include maintenance activities, electrical work, storage areas, or emergency response situations. STPS evaluates actual risk conditions, not how the workplace is generally classified.
Are employers required to provide PPE free of charge?
Yes. Employers must provide all required PPE at no cost to employees. This includes initial issuance, replacements, and PPE needed for changes in tasks or risks. Charging employees for PPE or requiring them to supply their own equipment is not permitted under NOM-017.
What documents does STPS request under NOM-017?
STPS typically requests occupational risk analyses, PPE selection justifications, PPE delivery and replacement logs, training attendance records, and maintenance or inspection logs. Inspectors also compare documentation against the PPE actually in use to confirm alignment between records and reality.
How does HRM help foreign companies comply with NOM-017?
Human Resources Mexico supports NOM-017 compliance through its Mexico-only model. HRM coordinates risk assessments, manages PPE documentation, ensures inspection readiness, and integrates safety compliance with HR and payroll for foreign employers hiring in Mexico.
