According to OSHA's PPE standard (29 CFR 1910.132), who is primarily responsible for conducting a hazard assessment to determine necessary PPE?