Lockout/Tagout Procedures for Electrical Systems

Lockout/tagout (LOTO) is the federally mandated safety framework for controlling hazardous energy during service, maintenance, and repair of electrical equipment. Governed primarily by OSHA standard 29 CFR 1910.147, the procedure protects workers from unexpected energization or startup of machinery and equipment. Electrical systems present particular LOTO complexity because energy can be stored in capacitors, inductors, and uninterruptible power supplies even after a circuit breaker is opened. This page covers the definition and regulatory scope of electrical LOTO, the step-by-step mechanism, common application scenarios, and the decision boundaries that determine which protocol applies in a given situation.

Definition and scope

Lockout/tagout is defined by OSHA 29 CFR 1910.147 as "the control of hazardous energy sources" during servicing and maintenance activities where the unexpected energization, startup, or release of stored energy could cause injury. The standard distinguishes between two control devices:

• Lockout device: A physical lock — padlock, circuit breaker lock, or hasp assembly — that holds an energy-isolating device in the de-energized position. Lockout is the preferred method wherever the isolating device is capable of being locked.
• Tagout device: A prominent warning tag affixed to the energy-isolating device when a lock cannot be applied. Tagout provides warning only and does not positively prevent re-energization.

OSHA estimates that LOTO compliance prevents approximately 120 fatalities and 50,000 injuries annually in US workplaces. In the electrical context, the standard applies to all energy forms present in electrical systems: electrical, thermal, mechanical (from motor-driven equipment), hydraulic, pneumatic, chemical, and gravitational energy stored in elevated components.

The National Electrical Code (NEC) does not itself contain LOTO procedures but establishes the disconnect and overcurrent protection requirements — such as NEC Article 110.25 (lockable disconnecting means) and Article 230.205 — that form the physical infrastructure on which LOTO programs depend. NFPA 70E, Standard for Electrical Safety in the Workplace, issued by the National Fire Protection Association, supplements OSHA's framework by providing detailed risk assessment and arc flash boundary calculations that directly inform LOTO planning.

The scope of 29 CFR 1910.147 covers general industry. Construction operations fall under 29 CFR 1926.417, which imposes equivalent lockout/tagging requirements. Maritime and shipyard employment references OSHA's 29 CFR 1915 series. For a broader view of the regulatory landscape governing electrical work, see the regulatory context for electrical systems.

How it works

A compliant electrical LOTO procedure follows a structured sequence defined in the employer's written energy control program, which is itself a mandatory element under 29 CFR 1910.147(c)(1). The procedure breaks into 8 discrete phases:

1. Preparation — The authorized employee identifies all energy sources (voltage levels, capacitive storage, UPS circuits) and reviews the equipment-specific written procedure.
2. Notification — All affected employees (those who operate or work in the area of the equipment) are informed that LOTO is being applied and that the machine will be shut down.
3. Shutdown — Equipment is brought to a normal stopped condition using the established stopping procedure.
4. Isolation — All energy-isolating devices — circuit breakers, disconnect switches, fused disconnect switches, or line valves — are operated to isolate the equipment from its energy source(s).
5. Lockout/tagout application — The authorized employee affixes their assigned lock (and/or tagout device) to each energy-isolating device. Where multiple trades work simultaneously, group lockout hasp assemblies allow each worker to apply a personal lock; the equipment cannot be re-energized until every lock is removed.
6. Stored energy release — Residual energy is dissipated or restrained. For electrical systems this includes discharging capacitor banks, bleeding hydraulic pressure from electrically actuated systems, blocking spring-loaded actuators, and waiting for inductors to decay. Capacitors in large variable frequency drives (VFDs) can hold charge at 600–800 V DC for several minutes after disconnect.
7. Verification — The authorized employee tests the equipment using a calibrated voltage tester to confirm zero energy state. NFPA 70E Section 120.5 describes this as the "test before touch" principle.
8. Work performance and release — Work is performed. Upon completion, tools and materials are removed, guards reinstated, affected employees notified, and locks removed in the reverse sequence — only by the same authorized employee who applied them, unless the employer's program establishes a documented transfer procedure.

Common scenarios

Panel and switchgear maintenance: When servicing a distribution panel or switchgear assembly, the upstream feeder disconnect is locked out. Because bus bars may remain energized downstream of the locked breaker depending on the panel configuration, voltage testing at each terminal is required before contact — a scenario addressed in detail on arc fault and ground fault protection pages.

Motor circuit servicing: Motor branch circuits require isolation at both the motor disconnect and the branch circuit overcurrent device. Back-EMF from coasting motors can generate re-energization voltages on the load side of a disconnected circuit. The written procedure must identify the specific motor disconnect (NEC Article 430.102 requires one within sight of the motor) as the primary isolation point.

Variable frequency drives and soft starters: VFDs present a unique hazard because their internal DC bus retains charge after the input is isolated. Manufacturer data sheets for industrial VFDs from brands including Allen-Bradley and ABB specify minimum wait times — typically 5 minutes — before DC bus voltage falls below 50 V. The equipment-specific LOTO procedure must document this discharge interval.

Transformer secondary circuits: Isolation of a transformer's primary disconnect does not necessarily de-energize the secondary if the transformer is part of a parallel or looped distribution system. Complete isolation requires confirming the secondary bus is not back-fed through a tie breaker or automatic transfer switch.

Temporary construction power: Temporary electrical systems and construction power involve frequent circuit modifications; 29 CFR 1926.417 requires equivalent lockout/tagging controls even for temporary distribution panels.

Decision boundaries

Several classification boundaries determine which LOTO protocol — or exemption — applies.

Lockout vs. tagout: Lockout is required whenever the energy-isolating device is capable of being locked. Tagout-only programs are permitted under 29 CFR 1910.147(c)(3) only when the employer can demonstrate that tagout provides equivalent safety through "at least one additional safety measure" such as the removal of an isolating circuit element, blocking of a controlling switch, or opening of an extra disconnecting device. OSHA holds that tagout programs do not provide the same level of protection as lockout programs, and enforcement guidance favors lockout wherever physically feasible.

Minor tool changes vs. full LOTO — the cord-and-plug exception: Under 29 CFR 1910.147(a)(2)(ii), equipment that is cord-and-plug connected is exempt from the full procedure if the plug is under the exclusive control of the employee performing the service. This exception applies only when unplugging the cord provides complete energy isolation — it does not apply where residual stored energy exists in the equipment downstream of the plug.

Hot work (energized electrical work) vs. LOTO: NFPA 70E Section 130.2 establishes that energized electrical work is permitted only when the employer can demonstrate that de-energizing creates a greater hazard (e.g., interrupting life-support equipment) or is infeasible due to equipment design. When energized work is permitted, the arc flash hazard category determines the personal protective equipment (PPE) class — not LOTO — and a separate energized electrical work permit is required. The National Electrical Authority home resource covers the full hierarchy of electrical safety frameworks that situate LOTO within the broader risk control structure.

Group vs. individual lockout: When more than one authorized employee works on the same equipment simultaneously, 29 CFR 1910.147(f)(3) mandates a group energy control procedure. Each authorized employee must apply their own personal lock to a group lockout hasp. Shift changes require a documented transfer procedure ensuring continuous lockout protection.

Complex and multi-energy source equipment: Where equipment has more than one energy source, the written procedure must identify every isolation point. OSHA's compliance directive CPL 02-00-147 provides enforcement guidance on how inspectors evaluate the adequacy of written procedures for complex machinery, including multi-bus electrical distribution systems.