3.4 Lockout/Tagout (LOTO), De-energization & Hazardous Energy Control

3.4 Lockout/Tagout (LOTO), De-energization & Hazardous Energy Control

Golden Rule of LOTO: One Person, One Lock, One Key. Every worker servicing or maintaining equipment must apply their own personal lockout device to energy isolating controls. No employee may assign, borrow, or delegate key control to another individual.

---

Scope and Regulatory Standards: 29 CFR 1926.417 & 1910.147

Hazardous energy control protects construction craftworkers from the unexpected energization, startup, or release of stored energy during servicing, repair, modification, or demolition of equipment and building systems.

• 29 CFR 1926.417 (Construction Electrical Standard): Requires that controls of circuits being worked on be deactivated and plainly tagged at all points where such circuits can be energized, and locked in the open position when feasible.
• 29 CFR 1910.147 (General Industry LOTO Standard): OSHA applies the technical principles of 1910.147 to construction operations via the General Duty Clause (Section 5(a)(1)) and Subpart K, establishing comprehensive requirements for written procedures, training, and stored energy dissipation.

Employee Classifications under LOTO

• Authorized Employee: A qualified person who locks out or tags out machines or equipment in order to perform servicing or maintenance. Only authorized employees are permitted to apply and remove LOTO devices.
• Affected Employee: An employee whose job requires them to operate or use a machine or equipment on which servicing or maintenance is being performed under LOTO, or whose job requires them to work in the area where servicing is being performed.
• Other Employees: Personnel working in the facility or jobsite who may pass through areas where energy control procedures are in progress.

---

The Seven Forms of Hazardous Energy

Construction equipment and facility mechanical systems store energy in multiple physical forms. A compliant LOTO program must address all seven hazardous energy categories:

---

The 7-Step Lockout/Tagout Execution Procedure

To ensure complete de-energization, authorized workers must strictly execute the standardized 7-step LOTO procedure in sequential order:

  +-------------------------------------------------------------------------+
  | 1. PREPARATION: Review machine-specific LOTO procedure & energy sources. |
  | 2. NOTIFICATION: Inform all affected & nearby personnel of shutdown.    |
  | 3. SHUTDOWN: Turn off equipment using standard operating controls.      |
  | 4. ISOLATION: Open all disconnect switches, valves & circuit breakers.  |
  | 5. APPLICATION: Attach personal padlocks & danger tags to isolators.    |
  | 6. STORED ENERGY RELEASE: Bleed air/hydraulics, block gravity, cap discharge.|
  | 7. ZERO ENERGY VERIFICATION: Perform "Try Step" & multi-meter voltage test.|
  +-------------------------------------------------------------------------+

Step 1: Preparation

The authorized employee reviews the written, machine-specific energy control procedure, identifying all energy sources, magnitude, isolating device locations, and required safety hardware.

Step 2: Notification

Formally notify all affected employees and supervisors that the machine is being taken out of service and that LOTO devices will be applied.

Step 3: Equipment Shutdown

Shut down the machine using standard operating controls (stop push buttons, selector switches, operator interfaces) to bring the equipment to a controlled rest.

Step 4: Energy Isolation

Physically operate all energy isolating devices (e.g., opening main electrical disconnect switches, closing manual ball valves, inserting blind flanges).

Important Regulatory Rule: Push buttons, emergency stop buttons, selector switches, and programmable logic controller (PLC) software interlocks are control circuit devices, NOT energy isolating devices! They can fail, short-circuit, or be bypassed. LOTO devices must be attached directly to the main mechanical/electrical disconnect.

Step 5: Application of Lockout/Tagout Devices

Attach standardized, substantial, individually keyed safety padlocks and standardized danger tags to each energy isolating device. Locks must hold the device in a secure "OFF" or "SAFE" position. Standardized tags must state: "DANGER: DO NOT OPERATE" and clearly show the authorized employee's name, department, contact number, and date.

Step 6: Dissipation / Restraint of Stored Energy

Relieve all residual or stored potential energy:

• Bleed pneumatic air tanks and hydraulic lines down to zero pressure gauge readings.
• Discharge high-voltage electrical capacitor banks.
• Insert mechanical safety blocks, pins, or props under elevated mechanical components subject to gravitational drop.

Step 7: Zero Energy State Verification (The "Try Step")

Verification is the single most critical step in preventing fatal accidents:

• Electrical Test (Three-Point Verification): Test the voltage tester on a known live power source, test the de-energized circuit conductors (phase-to-phase and phase-to-ground), and immediately re-test the tester on the known live source to verify instrument functionality.
• Mechanical "Try Step": Attempt to restart the equipment using normal operating push buttons and local start controls to confirm that no movement or startup occurs. Return controls to the "OFF" position after testing.

---

Group Lockout, Shift Changes & Emergency Removal Protocols

Group Lockout Procedures (29 CFR 1910.147(f)(3))

When multiple trades or workers service complex equipment:

• A primary authorized employee oversees the master lockout.
• Energy isolating devices are locked with master locks, and the keys are placed inside a group lockbox.
• Every individual authorized craftworker attaches their personal safety padlock to the exterior hasp of the lockbox.
• The equipment cannot be re-energized until every single worker removes their individual padlock from the box.

Shift and Personnel Turnover

Specific transfer procedures must ensure seamless continuity of energy control when shifts change. Oncoming workers must apply their locks before off-going workers remove theirs, or a master group lock must bridge the turnover.

Emergency Lock Removal Protocol (29 CFR 1910.147(e)(3))

If an employee leaves the jobsite without removing their personal safety lock, only a designated supervisor may remove the device, and strictly under the following mandatory 3-step sequence:

1. Verification of Absence: The supervisor must physically verify that the authorized employee who applied the lock is not on the jobsite or facility premises.
2. Reasonable Contact Efforts: The employer must make all reasonable efforts to contact the authorized employee (phone calls, emergency contact notification) to inform them that their lock is being removed.
3. Post-Removal Notification: The employer must ensure that the authorized employee is fully informed of the lock's removal before they resume work at the jobsite on their next shift.

---

Practical Field Scenarios & Common Exam Traps

Practical Field Scenario

A millwright is replacing bearings on a large industrial aggregate conveyor. The worker pushes the conveyor emergency stop button, clips a danger tag onto the button face, and crawls under the belt. In the control room, an operator resets the master PLC, restarting the conveyor.

• Catastrophic Failure: The millwright failed to isolate the main $480\text{ V}$ electrical disconnect switch, relied on a control circuit device (E-stop), did not apply a padlock, and did not perform zero energy verification.
• Compliant Procedure: The main disconnect must be locked open with a padlock, hydraulic belt tension bled to zero, conveyor counterweights mechanically blocked, and the start switch pressed to verify a zero energy state.

Common Exam Traps

• Trap 1: Believing an emergency stop button or light switch is an isolating device. OSHA explicitly prohibits using control circuit switches or E-stop push buttons for LOTO.
• Trap 2: Assuming a supervisor can remove a lock without attempting employee contact. Cutting a lock off simply to avoid job delays without fulfilling the 3-step OSHA verification protocol is a major willful citation.
• Trap 3: Skipping stored energy dissipation. Workers frequently isolate electrical breakers but forget gravitational counterweights or pressurized hydraulic lines, leading to crushing fatalities.