21.1 Lockout/Tagout, Electrical Safety & Arc Flash
Key Takeaways
- Each authorized employee applies their own lock and key to every energy isolating device, and only that person may remove their own lock.
- Lockout is verifying that the energy isolating device is physically secured, while tagout is a warning label that provides no physical restraint.
- Hazardous energy includes stored energy in pressurized lines, springs, elevated components, capacitors, and thermal sources, not only electricity.
- The verification step of trying to start the equipment after isolation is the step most often skipped and the one that catches an incomplete lockout.
- Arc flash boundaries and incident energy determine the arc-rated clothing required, and energized work requires a written permit and a qualified person.
21.1 Lockout/Tagout, Electrical Safety & Arc Flash
An operator reaching into a pump volute to clear a rag while the motor is on automatic control is one contact-closure away from an amputation. Lockout/tagout (LOTO) exists to make that impossible rather than unlikely.
The Energy Control Program
OSHA's standard for the control of hazardous energy requires:
| Element | Content |
|---|---|
| Written program | Scope, purpose, authorization, rules, techniques, and enforcement |
| Equipment-specific procedures | Written procedures identifying every energy source for each machine |
| Training | For authorized, affected, and other employees, with retraining on change |
| Annual inspection | A periodic review of each procedure by someone not using it |
| Devices | Locks and tags that are durable, standardized, substantial, and identifiable to the individual |
Who Is Who
| Role | Definition |
|---|---|
| Authorized employee | Performs the lockout and the servicing |
| Affected employee | Operates the equipment or works in the area; must be notified |
| Other employee | Anyone else in the area; must be trained not to restart locked-out equipment |
Lockout Versus Tagout
- Lockout applies a physical lock to an energy isolating device so it cannot be moved to the "on" position.
- Tagout applies a warning tag only — it provides no physical restraint and relies entirely on people obeying it.
Lockout is required wherever the energy isolating device is capable of being locked out. Tagout alone is permitted only where the device cannot accept a lock, and then only with additional safety measures providing equivalent protection.
The Six Steps
- Prepare. Identify every energy source for the equipment and the specific isolation points, using the written procedure.
- Notify all affected employees that the equipment will be shut down.
- Shut down using the normal stopping procedure.
- Isolate every energy source — open the disconnect, close and chain the valve, block the moving part.
- Apply locks and tags. Each authorized employee applies their own lock and keeps the only key.
- Release stored energy and VERIFY. Bleed pressure, block or lower elevated parts, discharge capacitors, allow thermal cooling. Then attempt to start the equipment using the normal controls, confirm it does not operate, and return the controls to off.
[!IMPORTANT] Step 6 verification is the step people skip, and it is the step that catches everything. Attempting to start the equipment is what reveals a second feed you did not know about, a control circuit powered from a different panel, a disconnect that did not actually open, or the wrong equipment locked out entirely. A lockout without verification is an assumption, not a control.
Restoring Service
Inspect the work area and remove tools, confirm all personnel are clear, remove each lock by the person who applied it, notify affected employees, and restore energy.
[!WARNING] Only the person who applied a lock may remove it. The exception procedure for removing another person's lock — used when someone has left the site with their key — requires verified absence of that employee, notification to them before they return to work, and authorization by a designated manager under a documented procedure. It is never a casual bolt-cutter decision, because the entire protection scheme depends on the certainty that a lock stays until its owner removes it.
Group Lockout and Shift Change
Group lockout uses a hasp or lockbox: the primary authorized employee applies the isolation lock and places its key in a lockbox, and every worker applies a personal lock to the lockbox. The box cannot open until the last worker removes their lock.
Shift transfer requires continuity of protection — the outgoing crew's locks are not removed until the incoming crew's locks are applied.
Hazardous Energy Is Not Only Electricity
| Energy type | Water and wastewater examples |
|---|---|
| Electrical | Motors, control circuits, capacitors, standby generators, backfeed from a VFD |
| Hydraulic | Pressurized water and sludge lines, hydraulic actuators |
| Pneumatic | Instrument air, air-operated valves, surge tanks, air-operated diaphragm pumps |
| Mechanical (stored) | Springs in valve actuators and check valves, flywheels, rotating equipment coasting down |
| Gravity | Elevated gates, weirs, rake mechanisms, suspended loads |
| Chemical | Chemical feed lines, residual chemical in a vessel |
| Thermal | Hot process piping, digester contents, blower discharge |
Draining and blanking a line is often required in addition to closing a valve, because a closed valve can leak and a chemical or process line under head is a real hazard even at low pressure. A blind flange or line blank is the positive isolation.
Electrical Safety
A qualified person is trained to recognize and avoid the electrical hazards present and is knowledgeable about the construction and operation of the equipment. Operators are generally unqualified persons for work inside energized equipment, and the boundary matters legally and practically.
Approach Boundaries
| Boundary | Meaning |
|---|---|
| Limited approach | Unqualified persons may not cross without a qualified escort |
| Restricted approach | Only qualified persons with appropriate PPE and a documented plan |
| Arc flash boundary | Where incident energy would cause a second-degree burn to unprotected skin |
Arc Flash
An arc flash is an explosive release of energy from a fault across an air gap. Temperatures at the arc can exceed those at the surface of the sun, and the pressure wave — the arc blast — can throw a worker across a room and rupture eardrums.
- Equipment must carry arc flash hazard labels stating the nominal voltage, arc flash boundary, and incident energy or PPE category.
- Arc-rated clothing is selected from the incident energy; ordinary work clothing can ignite and continue burning, which is why synthetic non-arc-rated fabrics are prohibited — they melt onto skin.
- Work de-energized. Energized work is permitted only where de-energizing introduces additional or increased hazards or is infeasible, and it requires an energized electrical work permit.
Grounding and GFCI
- Ground fault circuit interrupters are required for temporary power and are the primary protection for portable tools in the wet environments that characterize this industry.
- Assured equipment grounding conductor programs are the alternative where GFCI is not used.
- Cords and portable tools must be inspected before each use; a damaged cord in standing water is a lethal combination.
- Never bypass a GFCI because it "keeps tripping." A tripping GFCI is reporting a real leakage path.
An operator completes a lockout on a sludge pump: notifies affected employees, shuts down normally, opens the disconnect, and applies a personal lock. What critical step remains before beginning work?
A worker who applied a personal lock has left the site for the day with the key in their pocket, and the equipment is needed. What is the correct course of action?
Why is ordinary synthetic clothing specifically prohibited for work where an arc flash hazard exists?