Lockout/Tagout (LOTO): Energy Control Procedures and Compliance

Lockout/Tagout (LOTO) is the OSHA-mandated system for controlling hazardous energy during the servicing and maintenance of machinery and equipment. Governed primarily by 29 CFR 1910.147 for general industry, LOTO requirements establish how employers must isolate, dissipate, and verify the absence of electrical, mechanical, hydraulic, pneumatic, chemical, thermal, and gravitational energy before workers perform maintenance tasks. Failures in energy control are among the most consequential hazards in industrial workplaces — OSHA estimates that LOTO compliance prevents roughly 120 fatalities and 50,000 injuries annually (OSHA, Control of Hazardous Energy). This page covers the regulatory structure, procedural mechanics, classification distinctions, and documented points of contention in LOTO compliance.

• Definition and scope
• Core mechanics or structure
• Causal relationships or drivers
• Classification boundaries
• Tradeoffs and tensions
• Common misconceptions
• Checklist or steps (non-advisory)
• Reference table or matrix
• References

Definition and scope

Lockout/Tagout is the formal energy control practice that uses physical locking devices and warning tags to render equipment inoperative and incapable of releasing stored energy while maintenance, servicing, or unjamming tasks are performed. The governing standard, 29 CFR 1910.147, applies to general industry employers and covers any situation where the unexpected energization, startup, or release of stored energy could injure workers.

The scope of covered energy types is broad. OSHA's definition of hazardous energy under 1910.147 includes:

• Electrical energy — the most commonly cited type, covering both powered circuits and capacitive stored charge
• Mechanical energy — kinetic energy in rotating parts, springs under tension or compression, and gravity-actuated components
• Hydraulic and pneumatic energy — pressurized fluid and compressed gas systems
• Thermal energy — steam lines, heated process equipment, and cryogenic systems
• Chemical energy — pressurized chemical lines where accidental release creates hazard

The standard applies to employers in general industry across all 50 states. Construction, maritime, and agriculture fall under separate but parallel OSHA subparts. The 29 states and territories operating OSHA-approved State Plans must adopt standards at least as effective as federal OSHA's — most adopt 1910.147 verbatim or with marginal additions. The broader regulatory context for workplace safety governs how these standards are enforced across federal and state jurisdictions.

Core mechanics or structure

LOTO compliance operates through three interlocking structural elements: the written energy control program, machine-specific procedures, and trained authorized/affected employee roles.

Energy Control Program (ECP): Employers are required under 1910.147(c)(1) to establish, document, and implement an energy control program. The ECP is the overarching policy document that defines scope, rules, and responsibilities. It must address all forms of hazardous energy present at the facility.

Machine-Specific Procedures: For each piece of equipment with at least one energy source, a documented procedure must exist unless the equipment meets all six of the criteria in 1910.147(c)(4)(i) that permit an exception — criteria that include having a single energy source, a single lockout point, and no stored or residual energy. In practice, most industrial equipment does not qualify for this exception, making individual written procedures the norm.

Roles:
- Authorized employees — those who apply lockout/tagout devices and perform the servicing work
- Affected employees — those who operate the equipment under normal conditions and must be notified when LOTO is applied
- Other employees — any worker whose work area could be affected; must understand prohibitions against restarting locked-out equipment

Devices: Lockout devices — padlocks, hasps, valve covers, and electrical plug covers — must be individually keyed or combination-locked to each authorized employee. Tagout devices serve as warning labels when lockout is not physically feasible, but they carry a lower protection threshold: OSHA explicitly states that tagout programs provide less protection than lockout programs (29 CFR 1910.147(c)(3)(ii)).

Periodic Inspections: 1910.147(c)(6) requires at least one annual certification inspection of each energy control procedure, conducted by an authorized employee other than the one using the procedure. The inspection must be documented with the machine name, date, employees involved, and the name of the inspector.

Causal relationships or drivers

LOTO failures typically trace to four root cause categories, each linked to a distinct structural deficiency:

1. Absent or incomplete procedures — Equipment without a written LOTO procedure creates de facto improvisation by workers, who may miss secondary energy sources such as pneumatic accumulators or capacitor banks.

2. Inadequate training — 1910.147(c)(7) mandates training differentiated by role. Authorized employee training must cover recognition of hazardous energy types, methods of isolation, and the means to verify zero energy state. When training conflates authorized and affected employee roles, workers who should only observe may attempt unauthorized interventions.

3. Normalization of tagout substitution — In facilities that routinely substitute tags for locks due to equipment design constraints, the behavioral norm shifts toward treating tags as equivalent protection. OSHA's compliance directive CPL 02-00-147 addresses inspector guidance on this pattern.

4. Multi-energy and complex equipment — Systems with hydraulic accumulators, capacitors, or gravity-loaded components retain stored energy even after electrical isolation. Incident investigations reviewed by OSHA's accident data consistently show that residual stored energy — not the primary power source — is the active cause of injury in a substantial fraction of LOTO-related fatalities.

LOTO is also among the most frequently cited OSHA standards. The standard consistently appears in OSHA's annual top-10 citation list for general industry, with OSHA's 2023 enforcement data placing it among the top violations by citation count.

Classification boundaries

LOTO intersects with and must be distinguished from adjacent regulatory frameworks:

LOTO vs. Minor Tool Changes (1910.147(a)(2)(ii)): The standard exempts minor tool changes and adjustments that are routine, repetitive, and integral to production — but only when alternative protection measures provide equivalent safety. This exemption is narrow and frequently misapplied. The equipment must be continuously powered during the task by design, and the employer must demonstrate equivalent protection through means such as machine guarding or work positioning. See machine guarding requirements for the interaction between these two controls.

LOTO vs. Electrical Safety (29 CFR 1910.333): Electrical work under the National Electrical Safety Code (NFPA 70E) and OSHA's electrical safety standard at 1910.333 has overlapping scope with LOTO. Work on energized electrical equipment may be exempt from 1910.147 but must comply with 1910.333 and NFPA 70E's requirements for arc flash PPE, qualified worker designation, and energized electrical work permits. Electrical safety in the workplace covers the boundary conditions between these frameworks in detail.

General Industry vs. Construction: Construction LOTO falls under 29 CFR 1926.417, which is less prescriptive than 1910.147 and does not require written machine-specific procedures. Employers operating in mixed general industry/construction environments must track which standard applies to each task.

LOTO vs. Alternative Methods for Complex Equipment: OSHA's 1910.147(f)(1) addresses complex servicing situations — such as cord-and-plug equipment, hot tap operations, and testing during servicing — each with specific alternative control requirements that do not replicate standard LOTO.

Tradeoffs and tensions

Lockout vs. Tagout: The core tension in the standard is the permitted use of tagout where lockout is not feasible. Tagout relies on behavioral compliance — a tag can be removed by anyone. OSHA acknowledges this limitation explicitly in 1910.147(c)(3)(ii), requiring that tagout programs incorporate additional measures such as removing isolating circuit elements, blocking control switches, or opening extra disconnecting devices. Facilities that rely heavily on tagout face persistent compliance scrutiny because the additional measures are often undocumented or inconsistently applied.

Productivity vs. Procedure Completeness: Machine-specific LOTO procedures can add 10 to 30 minutes of preparation time per maintenance task, depending on energy source complexity. In high-volume production environments, there is documented organizational pressure to shortcut procedures or apply a single generic LOTO step in lieu of machine-specific requirements. This tension is a recognized enforcement pattern in OSHA's National Emphasis Program on Amputations, which targets facilities where machine guarding and LOTO deficiencies co-occur.

Group Lockout Mechanics: When multiple authorized employees must simultaneously work on the same equipment, 1910.147(f)(3) requires a group lockout procedure that ensures each worker's personal lock remains on the energy isolation point for the duration of their work. Coordinating multi-shift group lockout — particularly during shift changes where one crew completes partial maintenance — creates administrative complexity that facilities manage inconsistently.

Standardization vs. Facility-Specific Needs: OSHA's performance-based language in 1910.147 permits flexibility in how employers document and execute energy control. That flexibility, while accommodating diverse equipment types, creates compliance ambiguity: two facilities with procedurally identical programs may receive different citation outcomes during inspection depending on inspector interpretation of terms like "capable of being locked out."

Common misconceptions

Misconception: A single facility-wide LOTO procedure satisfies the standard.
The standard at 1910.147(c)(4)(i) requires machine-specific procedures for equipment that has more than one energy source, more than one lockout point, or any stored energy. A generic facility-level procedure does not satisfy this requirement for covered equipment. OSHA citations under 1910.147(c)(4) — failure to develop machine-specific procedures — are among the most common LOTO citations.

Misconception: Turning off a machine is equivalent to lockout.
De-energizing equipment without physically applying a lock at the energy isolation point does not constitute lockout. Equipment can be remotely re-energized, accidentally restarted, or contain stored energy that the power-off state does not eliminate. Verification of zero energy state — physically attempting to restart the equipment after lockout is applied — is a required step under 1910.147(d)(6).

Misconception: Tagout provides equivalent protection to lockout.
OSHA's own regulatory text states that lockout is the preferred method and that tagout alone, when lockout is feasible, does not meet the standard's requirements. Tagout is permitted only when the energy isolation point cannot accommodate a lock, and then only with supplemental protective measures.

Misconception: The annual inspection requirement can be satisfied by reviewing the written procedure.
1910.147(c)(6)(i) requires a hands-on inspection — the certifying employee must observe the energy control procedure being performed on the actual equipment. Paper-only reviews do not satisfy this element.

Misconception: LOTO applies only to electrical hazards.
The standard covers all forms of hazardous energy. A hydraulic press with a locked-out electrical circuit can still cause fatal injury if its hydraulic accumulator retains pressure. Effective energy control requires identifying and addressing every energy source, not just the primary electrical supply.

Checklist or steps (non-advisory)

The following sequence reflects the procedural steps codified in 29 CFR 1910.147(d), presented as reference steps, not as a substitute for facility-specific written procedures:

1. Identify all energy sources — Review the machine-specific LOTO procedure to identify all energy types, isolation points, and stored energy locations for the specific equipment.

2. Notify affected employees — Inform all affected employees that servicing is beginning and that the equipment will be taken out of service.

3. Shut down the equipment — Follow the machine's normal stopping procedure to bring it to a complete stop.

4. Isolate all energy sources — Operate all energy isolation devices (circuit breakers, valves, disconnects) to the safe/off position.

5. Apply lockout or tagout devices — Each authorized employee applies their personal lock (or tag with supplemental measures) to every isolation point identified in the procedure.

6. Release or restrain stored energy — Dissipate, restrain, or otherwise render safe all residual energy: discharge capacitors, bleed pneumatic lines, block elevated machine members, release spring tension.

7. Verify zero energy state — Attempt to operate the equipment using normal controls to verify it cannot be energized. Return controls to the off position after verification.

8. Perform the servicing task.

9. Restore to service — clear tools and materials — Confirm all tools, spare parts, and non-essential items are removed from the equipment area.

10. Restore to service — remove LOTO devices — Each authorized employee removes their own lock or tag. No employee may remove another worker's lockout device except under the specific procedures defined in 1910.147(e)(3).

11. Notify affected employees — Inform affected employees that equipment is being restored to service before energizing.

12. Re-energize and verify normal operation.

Reference table or matrix

The workplace safety resource index provides navigation to related standards covering machine guarding, electrical safety, and related physical hazard controls that interact with LOTO compliance requirements.