Lockout/Tagout (LOTO)

Forensic analysis of LOTO fatalities reveals five primary causes. A "Platinum" safety culture specifically targets these failure points:
1. Failure to Stop Equipment: The operator assumes the machine is "off" because it isn't moving, but it is actually in a "dwell" cycle or standby mode.
2. Failure to Disconnect from Power Source: Turning off a control circuit (like a Start/Stop button or E-Stop) is NOT isolation. You must physically disconnect the energy (open the breaker, pull the plug).
3. Failure to Dissipate (Bleed) Residual Energy: Ignoring gravity, capacitors, or pressurized lines. A raised hydraulic arm can fall even if the pump is off.
4. Accidental Restarting: A coworker, unaware of the maintenance, tries to start the machine. This is prevented by the lock.
5. Failure to Clear Work Areas Before Restarting: Turning the machine back on while tools or people are still inside the danger zone.
In 2026, we emphasize that Control Circuit Devices (push buttons, selector switches) are NOT energy isolating devices. They can fail, short circuit, or be overridden by logic controllers.

OSHA strictly defines three categories of employees in a LOTO program:
1. Authorized Employee: A person who locks out or tags out machines or equipment in order to perform servicing or maintenance on that machine or equipment. They are the only ones legally permitted to apply and remove locks. They must receive comprehensive training on energy control procedures.
2. Affected Employee: An employee whose job requires them to operate or use a machine or equipment on which servicing or maintenance is being performed under lockout or tagout, or whose job requires them to work in an area in which such servicing or maintenance is being performed. They must be instructed in the purpose of the procedure and the prohibition against restarting machines.
3. Other Employee: An employee whose work operations are or may be in an area where energy control procedures may be utilized. They must be instructed about the procedure and the prohibition against restarting machines.
The Golden Rule: An Affected employee must never attempt to restart a machine that is locked out. If you see a lock, it means "Do Not Touch."

LOTO devices (locks and tags) must meet strict hardware specifications (29 CFR 1910.147(c)(5)):
1. Durable: Capable of withstanding the environment to which they are exposed for the maximum period of time that exposure is expected. Tags must not deteriorate or become illegible in wet or corrosive environments.
2. Standardized: Lockout and tagout devices must be standardized within the facility by at least one of the following criteria: Color, shape, or size. (e.g., "All Red Locks are for Electrical LOTO").
3. Substantial: Lockout devices must be substantial enough to prevent removal without the use of excessive force or unusual techniques (such as bolt cutters). Tagout devices must have an attachment strength of at least 50 lbs (non-reusable zip tie).
4. Identifiable: Lockout devices and tagout devices must indicate the identity of the employee applying the device(s).
Singular Use: LOTO locks must be used for no other purpose. You cannot use your LOTO lock to secure your toolbox or locker. This ensures that the sight of that specific lock triggers an immediate safety response.

Employers must develop, document, and utilize procedures for the control of potentially hazardous energy. This document is the Energy Control Procedure (ECP).
The ECP must be machine-specific (unless machines are identical) and include:
1. A specific statement of the intended use of the procedure.
2. Specific procedural steps for shutting down, isolating, blocking, and securing machines or equipment to control hazardous energy.
3. Specific procedural steps for the placement, removal, and transfer of lockout devices or tagout devices and the responsibility for them.
4. Specific requirements for testing a machine or equipment to determine and verify the effectiveness of lockout devices, tagout devices, and other energy control measures.
In 2026, "Generic" LOTO procedures are a citation magnet. If the procedure doesn't tell you exactly which valve to turn or which breaker to flip, it is non-compliant.

The execution of LOTO follows a strict 6-step sequence.
Step 1: Preparation. The authorized employee must investigate the equipment to identify all energy sources (electrical, hydraulic, pneumatic, etc.) and the methods to control them. Notify all affected employees that LOTO is about to begin.
Step 2: Shutdown. Turn off the machine using the normal operating controls (stop button, toggle switch). This is a controlled shutdown to prevent damage or instability.
Step 3: Isolation. Operate the energy-isolating devices to physically separate the machine from its energy sources. This means opening circuit breakers, closing valves, or disconnecting lines. *Remember: A push button is NOT an isolation device.*

Step 4: Application. Apply the lockout and/or tagout device to the energy-isolating device. The lock must hold the device in the "Safe" or "Off" position. Tags should be applied with the lock.
Step 5: Stored Energy Control. All potentially hazardous stored or residual energy must be relieved, disconnected, restrained, and otherwise rendered safe.
- Electrical: Discharge capacitors (grounding).
- Hydraulic/Pneumatic: Bleed pressure from lines.
- Gravity: Block or pin elevated parts that could fall.
- Mechanical: Release tension in springs or block rotating parts.
Step 6: Verification ("The Try"). Verify that isolation and de-energization have been accomplished. Press the "Start" button to ensure the machine does not start. Check gauges to ensure zero pressure. *Return the controls to the "Off" position after testing.* This step saves lives.

When multiple authorized employees work on the same machine, a Group Lockout procedure is required.
The Primary Responsibility: One authorized employee is designated with primary responsibility for the lockout.
The Lockbox Method: The primary authorized employee applies a single lock to the machine's energy isolation point. The key to that lock is placed inside a Group Lockbox. Every other authorized employee places their own personal lock on the outside of the lockbox.
The Logic: The machine cannot be re-energized until the primary lock is removed. The primary lock cannot be removed (because the key is trapped) until every single authorized employee has removed their personal lock from the box. This ensures that the last person to leave is protected just as much as the first.
No Piggybacking: Never trust someone else's lock. If your lock is not on the box, you are not protected.

The continuity of LOTO protection must be maintained during shift or personnel changes.
The Hand-Off: There must be an orderly transfer of lockout/tagout device protection between outgoing and incoming employees to minimize exposure to hazards.
Direct Handoff: The incoming employee applies their lock and tag before the outgoing employee removes theirs.
Master Lock Method: If there is a gap between shifts, the supervisor may apply a "Departmental Lock" or "Master Lock" to ensure the machine stays isolated until the next shift arrives. The incoming shift then applies their personal locks and the Master Lock is removed.
Verification Repeat: The incoming shift must re-verify the zero-energy state (Step 6) before beginning work. Never assume the previous shift did it correctly.

In situations where lockout or tagout devices must be temporarily removed to test or position the machine (e.g., jogging a conveyor belt), a specific sequence must be followed (1910.147(f)(1)):
1. Clear the machine of tools and materials.
2. Remove employees from the machine area.
3. Remove the lockout or tagout devices.
4. Energize and proceed with testing or positioning.
5. De-energize all systems and reapply energy control measures (Steps 1-6) to continue servicing.
This "Temporary Removal" is highly dangerous. It requires the same level of vigilance as the initial shutdown. You cannot just "leave the lock off" because you might need to test it again in 10 minutes.

When outside contractors perform servicing or maintenance, Mutual Information Exchange is required (1910.147(f)(2)).
Host Employer Responsibilities: Must inform the contractor of their LOTO procedures and any specific hazards of the machinery.
Contractor Responsibilities: Must inform the host employer of their LOTO procedures.
Harmonization: The host employer must ensure that their employees understand and comply with the restrictions and prohibitions of the contractor's LOTO program. For example, if the contractor uses a different color lock, the host employees must know what it means.
When in doubt, the "Stricter" standard applies. If the contractor has a more rigorous procedure than the host, the host employees must respect it.

Periodic Inspection: The employer must conduct a periodic inspection of the energy control procedure at least Annually. This audit must be performed by an authorized employee other than the one(s) utilizing the energy control procedure being inspected. It is designed to correct any deviations or inadequacies.
Emergency Lock Removal: If the authorized employee who applied the lock is not available to remove it (e.g., they went home sick), the employer may remove the device only if:
1. Verification that the authorized employee is not at the facility.
2. All reasonable efforts are made to contact the authorized employee.
3. The authorized employee is informed before they resume work at that facility.
This is a "Nuclear Option" and should be used only in absolute necessity, with sign-off from Plant Management.