4.3 Control of Hazardous Energy — Lockout/Tagout (LOTO)

4.3 Control of Hazardous Energy — Lockout/Tagout (LOTO)

Quick Answer: OSHA's Control of Hazardous Energy standard (29 CFR 1910.147) governs the servicing and maintenance of industrial machines where the unexpected energization, start-up, or release of stored hazardous energy could cause severe injury or death. General industry employers must implement a written Energy Control Program comprising machine-specific procedures, rigorous employee training (Authorized, Affected, and Other employees), and annual periodic inspections. Machine isolation requires a mandatory 6-Step De-energization Sequence ending with zero-energy verification ("tryout"), and re-energization requires a mandatory 3-Step Startup Sequence. Lockout devices must be standardized, substantial, and individually identifiable ("one person, one lock, one key"), and push buttons or emergency stop switches are legally prohibited from serving as energy isolating devices.

In industrial manufacturing, food processing, warehousing, and automated assembly, machines utilize tremendous amounts of power. When a conveyor jams, a hydraulic press requires die replacement, or an electric motor needs bearing lubrication, workers must enter machine danger zones. If that machine unexpectedly cycles or releases trapped energy, the consequences are catastrophic—amputations, crushing fatalities, severe steam burns, and electrocution. OSHA estimates that compliance with 29 CFR 1910.147 prevents approximately 120 workplace fatalities and more than 50,000 disabling injuries every year.

+-----------------------------------------------------------------------------+
|                      THE EIGHT FORMS OF HAZARDOUS ENERGY                    |
|                                                                             |
|   1. ELECTRICAL      --> Line voltage, motor leads, capacitors, busbars     |
|   2. MECHANICAL      --> Rotating shafts, pinch points, moving belts        |
|   3. PNEUMATIC       --> Compressed air receivers, pneumatic cylinders      |
|   4. HYDRAULIC       --> High-pressure fluid lines, accumulators, rams      |
|   5. THERMAL         --> High-temperature steam, hot oil, cryogenic pipes   |
|   6. CHEMICAL        --> Corrosive acids, toxic gases, flammable solvents   |
|   7. GRAVITATIONAL   --> Elevated machine rams, counterweights, heavy dies  |
|   8. STORED MECH.    --> Compressed or stretched springs, tensioned cables  |
+-----------------------------------------------------------------------------+

---

1. Regulatory Scope, Purpose & Exceptions (29 CFR 1910.147)

OSHA standard 29 CFR 1910.147 applies to the servicing and maintenance of machines and equipment in general industry where employees are exposed to hazardous energy.

Scope Inclusions (When LOTO Applies)

LOTO applies whenever an employee performs servicing or maintenance—such as installing, setting up, adjusting, inspecting, modifying, lubricating, cleaning, or unjamming machines—and is required to:

1. Remove or bypass a safety guard or other safety protective device.
2. Place any part of their body into the machine's point of operation (where work is performed on the material).
3. Place any part of their body into an associated danger zone adjacent to the machine operating cycle.

Regulatory Exceptions (When 1910.147 Does Not Apply)

1. Normal Production Operations: Routine production is governed by Machine Guarding (29 CFR 1910 Subpart O), not LOTO, unless guards are bypassed.
2. Minor Servicing Exception: Minor tool changes, minor adjustments, and other normal servicing operations that take place during normal production are exempt from LOTO ONLY IF they are routine, repetitive, and integral to the production operation, and effective alternative protection (such as interlocked barrier guards or specialized hand tools) is utilized.
3. Cord-and-Plug Connected Equipment: Servicing cord-and-plug electric tools is exempt from LOTO if the equipment is completely unplugged from the energy source, and the plug remains under the exclusive, continuous control of the employee performing the service.
4. Hot Tap Operations: Specialized pressurized piping operations on natural gas or petroleum transmission lines where shutdown is infeasible, provided documented alternative employee protection procedures are followed.

---

2. Employee Classifications and Training Responsibilities

OSHA 29 CFR 1910.147(c)(7) establishes three distinct categories of employees who must receive specialized, documented training:

+-----------------------------------------------------------------------------+
|                     LOTO EMPLOYEE TRAINING HIERARCHY                        |
|                                                                             |
|   [ AUTHORIZED EMPLOYEE ]                                                   |
|   - The ONLY person trained and permitted to apply and remove LOTO devices. |
|   - In-depth training on energy sources, isolation devices, and procedures. |
|                                                                             |
|   [ AFFECTED EMPLOYEE ]                                                     |
|   - Machine operators and workers whose jobs involve equipment under LOTO.  |
|   - Trained on the purpose and use of the energy control procedure.         |
|   - STRICTLY PROHIBITED from attempting to restart locked-out machines!     |
|                                                                             |
|   [ OTHER EMPLOYEE ]                                                        |
|   - All other workers in the facility who may pass through LOTO areas.      |
|   - Trained to recognize LOTO hardware and never tamper with locks/tags.    |
+-----------------------------------------------------------------------------+

---

3. Written Energy Control Program & Energy Isolating Devices

Employers must maintain a comprehensive written Energy Control Program consisting of three mandatory operational pillars:

1. Machine-Specific Energy Control Procedures: Documented, step-by-step procedures tailored to each specific machine or family of identical equipment detailing the exact sequence for shutdown, isolation, blocking, securing, dissipation, and verification.
2. Employee Training and Retraining: Initial training before assignment, with mandatory retraining triggered by changes in job assignments, changes in machines or energy control procedures, or when periodic audits reveal employee non-compliance.
3. Annual Periodic Inspections: Conducted at least annually by an authorized employee other than the one utilizing the procedure to review the procedure with authorized workers and ensure full compliance.

+-----------------------------------------------------------------------------+
|             ENERGY ISOLATING DEVICES VS. CONTROL CIRCUIT SWITCHES           |
|                                                                             |
|   VALID ENERGY ISOLATING DEVICES (EIDs)   PROHIBITED CONTROL DEVICES        |
|   (Physically disconnects power flow)     (Can fail via software/short)     |
|   +------------------------------------+  +-------------------------------+ |
|   | - Manual Electrical Disconnect     |  | - Push Buttons / E-Stops      | |
|   | - Circuit Breaker with Lockout Hasp|  | - Selector Switches           | |
|   | - Ball / Gate Line Valves          |  | - PLC Software Interlocks     | |
|   | - Blind Flanges / Pipe Blanks      |  | - Light Curtains / Sensors    | |
|   | - Engineered Mechanical Blocks     |  | - Relay Control Circuits      | |
|   +------------------------------------+  +-------------------------------+ |
|   * Rule: Control circuit devices CANNOT be used as energy isolating devices!|
+-----------------------------------------------------------------------------+

Energy Isolating Devices (EIDs) vs. Control Circuit Devices

• Energy Isolating Device (EID): A mechanical device that physically prevents the transmission or release of energy. Examples include a manually operated electrical disconnect switch, an industrial circuit breaker, a flanged pipe blank (slip blind), a bolted line valve, or an engineered safety block.
• Control Circuit Devices (PROHIBITED FOR LOTO): Push buttons, emergency stop (E-stop) buttons, selector switches, programmable logic controllers (PLCs), interlock switches, and software control logic are NOT energy isolating devices. Software bugs, short circuits, or relay welded contacts can cause control circuits to energize unexpectedly.

---

4. Hardware Specifications for Locks and Tags (29 CFR 1910.147(c)(5))

Lockout and tagout devices must be supplied by the employer and satisfy five strict regulatory criteria:

1. Standardized: Standardized within the facility by at least one criterion: color, shape, or size. In the case of tagout devices, print and format must be standardized.
2. Durable: Capable of withstanding the industrial environment (humidity, corrosive chemicals, UV exposure) for the maximum period of expected exposure.
3. Substantial: Lockout padlocks must be sturdy enough to prevent removal without the use of excessive force or specialized tools (e.g., bolt cutters). Tagout attachments must feature a non-reusable, self-locking nylon cable tie with a minimum unlocking strength of at least 50 pounds (22.7 kg).
4. Identifiable: Must clearly indicate the identity of the individual authorized employee who applied the device (name, employee ID, and contact details).
5. Exclusive Safety Purpose: Locks and tags must be used exclusively for controlling hazardous energy and never used for securing toolboxes, lockers, or general security gates.

[!IMPORTANT] The "One Person, One Lock, One Key" Principle: Each authorized employee must have their own unique lockout padlock with an individual key. No two workers may share a key, and duplicate keys must not be accessible to other workers. This ensures an employee is never placed in jeopardy by someone else removing their lock.

---

5. The Mandatory 6-Step LOTO De-energization Procedure

When preparing to service equipment, authorized employees must execute the following six steps in precise chronological sequence:

+-----------------------------------------------------------------------------+
|                  THE MANDATORY 6-STEP LOTO SHUTDOWN SEQUENCE                |
|                                                                             |
|   STEP 1: PREPARATION        --> Identify all energy sources, magnitudes,   |
|                                  hazards, and notify affected employees.    |
|              |                                                              |
|   STEP 2: SHUTDOWN           --> Orderly shutdown using normal controls.    |
|              |                                                              |
|   STEP 3: ISOLATION          --> Operate all primary Energy Isolating       |
|                                  Devices (throw disconnects, close valves). |
|              |                                                              |
|   STEP 4: DEVICE APPLICATION --> Affix standardized padlocks & tags to each |
|                                  Energy Isolating Device.                   |
|              |                                                              |
|   STEP 5: STORED ENERGY      --> Bleed, vent, ground, drain, block, or      |
|           DISSIPATION            mechanically restrain all residual energy. |
|              |                                                              |
|   STEP 6: VERIFICATION       --> "TRYOUT": Attempt restart on controls &    |
|           (CRITICAL STEP!)       test circuits with calibrated meters.      |
+-----------------------------------------------------------------------------+

1. Step 1: Preparation for Shutdown: The authorized employee reviews the machine-specific procedure to identify all energy types, hazards, and isolation methods, and formally notifies all affected employees that the machine is being shut down and locked out.
2. Step 2: Machine Shutdown: The machine is shut down using its normal operating controls (e.g., stopping switch, stop push button).
3. Step 3: Machine Isolation: All primary energy isolating devices are physically operated to decouple the equipment from all power sources (e.g., switching main electrical disconnect to OFF, closing line valves).
4. Step 4: Lockout/Tagout Device Application: The authorized employee affixes assigned, standardized lockout padlocks and warning tags to each energy isolating device in a manner that holds the device in a safe, de-energized position.
5. Step 5: Stored Energy Control (Dissipation/Restraint): All residual or stored secondary energy must be safely released, dissipated, or restrained:
   • Bleeding down pneumatic air lines and hydraulic reservoirs.
   • Grounding high-voltage electrical capacitors and busbars.
   • Inserting certified mechanical safety blocks beneath elevated press dies or counterweights.
   • Venting trapped chemical or high-pressure steam piping.
6. Step 6: Verification of Isolation ("Tryout"): The most critical safety step. The authorized worker must physically verify that the machine is at a Zero Energy State by:
   • Operating local start buttons or selector switches to ensure the machine will not move (then returning controls to OFF).
   • Testing electrical circuits with a calibrated, functioning test meter (using the live-dead-live testing protocol).

---

6. The Mandatory 3-Step Re-energization / Startup Procedure

Once servicing is complete and the equipment is ready to be returned to service, the authorized employee must follow the mandatory 3-step sequence:

+-----------------------------------------------------------------------------+
|                  THE MANDATORY 3-STEP RE-ENERGIZATION SEQUENCE              |
|                                                                             |
|   STEP 1: INSPECT MACHINE & WORK AREA                                       |
|   - Remove all nonessential tools, spare parts, and test equipment.         |
|   - Ensure machine components are intact and reinstall all safety guards!   |
|                                                                             |
|   STEP 2: CHECK PERSONNEL & NOTIFY EMPLOYEES                                |
|   - Verify all employees are safely positioned away from the danger zone.   |
|   - Formally notify affected employees that LOTO devices are being removed. |
|                                                                             |
|   STEP 3: REMOVE LOTO DEVICES & RESTORE ENERGY                              |
|   - Each authorized worker removes their own personal padlock and tag.      |
|   - Operate energy isolating devices to restore power to the machinery.     |
+-----------------------------------------------------------------------------+

1. Step 1: Inspect Machine and Work Area: Inspect the work zone to ensure all tools, rags, jacks, and test meters have been removed, machine components are mechanically intact, access panels are secured, and all machine guards have been fully reinstalled.
2. Step 2: Check Personnel and Notify Affected Employees: Visually survey the machine area to ensure all personnel are safely positioned outside danger zones, and formally notify affected employees that LOTO devices are being removed and equipment is restarting.
3. Step 3: Remove LOTO Devices and Re-energize: Each authorized employee personally removes their own lockout lock and tag from each energy isolating device, and operates the EIDs to restore operating power.

---

7. Special Complex Lockout Situations

Group Lockout Procedures (29 CFR 1910.147(f)(3))

When complex machinery requires servicing by multiple trades, crews, or outside contractors, a Group Lockout procedure must provide individual protection equivalent to personal lockout:

• A primary authorized employee isolates all machine EIDs and places the keys to those padlocks inside a Group Lockbox.
• Every authorized employee working on the equipment must attach their own personal padlock to the group lockbox before starting work.
• The lockbox cannot be opened, and the machine cannot be re-energized, until the very last worker finishes work and removes their personal padlock.

Shift and Crew Changes (29 CFR 1910.147(f)(4))

Facilities must maintain specific written handover procedures to ensure continuous de-energization during shift changes. The oncoming authorized employee applies their personal lock before the outgoing authorized employee removes theirs (direct lock-to-lock exchange), preventing any unmonitored window of energization.

Emergency Lock Removal Protocol (29 CFR 1910.147(e)(3))

Under OSHA law, an applied lockout device may be removed ONLY by the authorized employee who applied it. If that employee is absent from the facility, the employer may remove the lock ONLY if the written procedure follows these strict mandatory steps:

1. Verification of Absence: Management verifies that the authorized employee is not present in the facility.
2. Reasonable Contact Efforts: Management makes all reasonable efforts to contact the employee (phone call, emergency contact) to inform them their lock is being removed.
3. Notification Before Resuming Work: Management ensures the employee is fully informed of the lock removal before they resume work at the facility on their next shift.