17.1 Lockout/Tagout, Machine Guarding, Fall Protection & PPE Programs
Key Takeaways
- Lockout/tagout under 29 CFR 1910.147 requires isolating every energy source, applying a personal lock and tag, dissipating stored energy, and verifying zero energy by attempting to start the equipment before any work begins.
- Only the person who applied a lock may remove it, and each authorized employee working on the equipment applies their own lock, which is why group lockout devices and multi-lock hasps exist.
- Stored energy includes far more than electricity — hydraulic and pneumatic pressure, springs, suspended loads, rotating flywheels, thermal energy, and charged capacitors must all be released or restrained.
- In general industry, fall protection is required at unprotected sides and edges four feet or more above a lower level, a lower trigger height than the six feet that applies to construction work.
- A workplace noise exposure at or above an 85 decibel eight-hour time-weighted average triggers a hearing conservation program, and respirator use requires a written program with medical evaluation and fit testing.
17.1 Lockout/Tagout, Machine Guarding, Fall Protection & PPE Programs
Exam Focus: The Need-to-Know Criteria lists "Establish and/or update safety procedures — Lockout/tagout, Confined space, Hazard communication, Fall protection, Spill response, Chemical handling, Emergency response, Vulnerability assessments" and "Maintain safety equipment." Section 8.1 covered confined space and Section 8.2 covered chemical handling and hazard communication; this section covers the rest.
1. Lockout/Tagout (29 CFR 1910.147)
Lockout/tagout (LOTO) is the control of hazardous energy during servicing and maintenance. It exists because equipment that starts unexpectedly — because a coworker pressed a button, because a level switch called for a pump, because SCADA rotated the duty unit — kills people.
The Sequence
- Prepare. Identify every energy source feeding the equipment: electrical supply, hydraulic and pneumatic pressure, process liquid or gas, springs, gravity, thermal, chemical.
- Notify affected employees that the equipment is being shut down.
- Shut down using the normal stopping procedure.
- Isolate every energy source — open the disconnect, close and chain the block valves, bleed the air supply.
- Apply locks and tags. Each authorized employee applies their own personal lock and a tag identifying who applied it and why.
- Release stored energy. Bleed hydraulic and pneumatic pressure, block or lower suspended loads, chock or restrain springs, allow rotating equipment to stop completely, discharge capacitors, allow hot surfaces to cool.
- Verify zero energy. Attempt to start the equipment with its normal controls, then return the control to the off position. Test electrically with a meter where appropriate. Verification is a step, not an assumption — this is the step people skip.
Rules That Get Tested
- Only the person who applied a lock may remove it. Removal by anyone else is permitted only under a documented exception procedure with verified employee absence and notification.
- Every authorized employee working on the equipment applies their own lock. A multi-lock hasp or a group lockout box exists precisely so no one is protected by someone else's lock.
- A tag alone is not a lock. Tagout without lockout is a warning, not an energy isolation, and is permitted only where the energy isolating device cannot accept a lock, with additional safeguards.
- Shift change requires continuity of protection — the incoming employee applies a lock before the outgoing employee removes theirs.
- An emergency stop is not a lockout. An E-stop stops equipment; it does not prevent a restart and provides no protection for someone with hands inside a machine.
- The employer must conduct a periodic inspection of the energy control procedure at least annually.
2. Machine Guarding
Wastewater plants are full of exposed rotating and reciprocating equipment: bar screen rakes, screw conveyors, belt drives, clarifier drive mechanisms, chain and flight collectors, belt press rollers, and pump couplings.
- Guards must be in place before equipment is energized and must not be removed to observe operation.
- Guard all points of operation, nip points, rotating parts, and belt and chain drives.
- A missing guard is an immediate stop-work condition — report and tag it out rather than working around it.
- Belt filter presses deserve specific mention: the roller nip points can pull in a hand instantly, and the guards and emergency stops on those machines exist because people have lost limbs.
3. Fall Protection
Treatment plants are built with open tanks, elevated walkways, clarifier bridges, digester roofs, wet well hatches, and ladder access to everything.
The trigger height. In general industry (29 CFR 1910 Subpart D), fall protection is required at unprotected sides and edges four feet or more above a lower level. This is lower than the six-foot trigger that applies to construction work under 29 CFR 1926, and mixing the two up is a common error.
The Hierarchy
- Eliminate the exposure — do the work from grade if possible.
- Passive protection — guardrails with top rail, mid rail, and toe boards; covers over openings, secured and labeled.
- Fall restraint — a system that prevents reaching the edge at all.
- Personal fall arrest — used when a fall cannot be prevented, and requiring all three of: a rated anchorage, a full body harness, and a connector (lanyard with shock absorber, or self-retracting lifeline), plus adequate clearance below and a prompt rescue plan for a suspended worker.
Additional plant-specific requirements:
- Open tanks and pits four feet or more deep must be guarded by railings, covers, or equivalent protection.
- Hatches and openings must be covered or guarded whenever the cover is off — never leave an open hatch unattended, even briefly.
- Ladders must be inspected before use, extend the required distance above a landing, and be used facing the ladder with three points of contact. Never carry loads up a ladder by hand.
- Walking surfaces at a wastewater plant are frequently wet, greasy, algae-covered, and icy. Housekeeping and non-slip surfaces are genuine fall controls, and slips and falls on the level cause more lost-time injuries at treatment plants than falls from height.
- Inspect harnesses and lanyards before every use and remove from service any component that has arrested a fall.
4. Personal Protective Equipment Programs
PPE is the last line of defense, applied after engineering and administrative controls, not instead of them. The employer must conduct a hazard assessment to determine what PPE each task requires, then provide it and train on its use.
| Hazard | Protection |
|---|---|
| Splash, spray, chemicals, debris | Safety glasses with side shields; goggles plus a face shield for chemical handling |
| Noise | Plugs or muffs. An exposure at or above an 85 dBA eight-hour time-weighted average triggers a hearing conservation program with monitoring, audiometric testing, and training. Blower rooms and dewatering rooms routinely exceed it. |
| Respiratory hazards | Requires a written respiratory protection program including medical evaluation, fit testing, training, cartridge selection, and maintenance. An air-purifying respirator is never acceptable in an oxygen-deficient or IDLH atmosphere — that requires supplied air or SCBA (Section 8.1). |
| Hands | Glove material matched to the chemical per the safety data sheet; cut-resistant gloves for screenings and debris |
| Feet | Slip-resistant safety-toe boots; chemical-resistant boots for chemical areas |
| Head | Hard hats where overhead hazards or lifting operations exist |
| Biological exposure | Gloves, eye protection, and rigorous hand washing before eating, drinking, or smoking; keep vaccinations current per the utility's program |
Maintaining safety equipment is itself a Need-to-Know line item: gas detectors must be bump tested before each use and calibrated on schedule, eyewashes and safety showers flushed and inspected weekly, fire extinguishers inspected monthly, SCBA cylinders kept at pressure, and retrieval tripods and harnesses inspected and kept ready.
Two maintenance workers are servicing a sludge pump. One applies a personal lock to the disconnect. What is required of the second worker, and why?
An operator must work near the unguarded edge of an open aeration basin walkway five feet above the water surface at a general industry treatment plant. At what height does fall protection become mandatory in this setting?
An operator plans to enter a partially ventilated wet well wearing a half-face air-purifying respirator with organic vapor cartridges. Why is this unacceptable?