Standards

What Is NR 5? Rules, Sizing and the New Scope of CIPA

Four workers in orange high-visibility vests gathered around a table in a glass-walled room inside an industrial warehouse, with helmets, a laptop and a tablet on the table, as one colleague speaks to the group.

Understand what NR 5 is, its sizing rules, the election process deadlines and the standard's new requirements on combating harassment in companies.

By: Vitória Willemann

The Internal Commission for Accident Prevention is widely known in the corporate world, but how it is set up and how it operates are not left to management's free choice. The entire structure of this commission follows a strict legal procedure, enforced by Brazil's Ministry of Labour.

In this article, we go beyond the basic concept of the commission to explore what NR 5 is — the legislation that sets the rules of the game. Learn how to size the commission correctly, the non-negotiable deadlines of the election process and the recent regulatory updates that have expanded the group's responsibilities.

What does NR 5 establish?

Regulatory Standard 5 (NR-5) is the legal provision that requires companies to set up the Internal Commission for Accident and Harassment Prevention (CIPA, from the Portuguese Comissão Interna de Prevenção de Acidentes e de Assédio).

While carrying out safety standards is the responsibility of the SESMT (the company's Specialised Service in Safety Engineering and Occupational Medicine), NR 5 ensures equal representation: some members are appointed by the company and some are elected by the workers themselves. The aim of the standard is to formalise a group of employees focused on the ongoing observation of risks in the workplace.

To understand the behavioural impact of this routine and how it transforms the work environment, we recommend reading our article on what CIPA is and why it matters in companies. Here, our focus will be compliance and the technical application of the legislation.

One of the most significant changes in the history of NR 5 happened recently. The legislation broadened the commission's duties, which now include actively preventing and combating sexual harassment and other forms of violence at work (Law No. 14,457/22).

To comply with the updated standard, the company and the commission must:

  • Include rules of conduct on sexual harassment in the company's internal policies.
  • Establish procedures for receiving and following up on complaints, guaranteeing anonymity.
  • Include topics on the prevention of violence and harassment in the annual training of CIPA members.

Sizing and the "CIPA Designee"

The composition of the commission is determined by a legal calculation. The HR team or the SESMT must cross-reference the company's main CNAE code (National Classification of Economic Activities) with the total number of employees at that specific establishment, using Table I of NR 5.

If, after cross-referencing this data, the company does not reach the minimum number of employees that requires a full commission (with elections and monthly meetings), it is not exempt from the standard. In this scenario, the employer must appoint the CIPA Designee — an employee who will receive the regulatory training and will be legally responsible for helping the company carry out preventive actions.

NR 5 sets a schedule that leaves no room for delays. The election process must be called at least 60 days before the end of the current term of office.

In addition, the standard guarantees temporary job security. An employee who registers as a candidate (and, if elected, whether as a full or alternate member) cannot be dismissed arbitrarily or without just cause from the moment of registering their candidacy until one year after the end of their term. Handling notices, registration deadlines and vote counting must be rigorously documented, since any technical failure can void the election and lead to fines during a labour inspection.

How to ensure NR 5 document compliance?

Managing CIPA under the standard creates a significant volume of ongoing obligations, such as keeping track of the minutes of monthly meetings and, above all, making sure that all members (elected, appointed or designated) complete the mandatory training within the deadline set by the standard.

Relying on manual spreadsheets to manage the expiry of the commission's training increases the risk of non-compliance. Adopting digital tools allows the EHS team to centralise employee document and training control, issuing automatic alerts about deadlines and expiry dates. This way, the company ensures the legal validity of its commission without overloading the Human Resources department.

Read also

Stop managing OSH on paper. Start now.

Simplify your Risk Management, reducing liabilities and ensuring safe, standardized, and auditable operations with fast implementation and advisory support.