Lockout tagout injuries: causes, costs, and how to prevent them

Last updated 2026-07-10

How many people are injured by lockout tagout failures each year?

Roughly 120 workers die and 50,000 get hurt every year because someone failed to control hazardous energy, the exact hazard lockout/tagout (LOTO) exists to stop. That estimate comes from OSHA ^[1]. The agency hasn't published a newer systematic count, but the Bureau of Labor Statistics fatality census keeps showing machinery contact as one of the leading ways people die at work, and that's the bucket LOTO deaths fall into ^[2].

Here's the same story in dollars. OSHA estimates that full compliance with 29 CFR 1910.147 would prevent those 120 deaths and 50,000 injuries and save about $150 million a year in lost workdays, medical costs, and productivity ^[1]. That number is almost certainly low now, given how much medical costs have climbed since the original regulatory analysis was written.

Manufacturing carries the largest share of LOTO incidents. Agriculture, construction, and utilities all see real exposure too. Any workplace with equipment that stores, generates, or moves energy, whether electrical, hydraulic, pneumatic, chemical, thermal, or mechanical, has LOTO risk ^[3].

What types of injuries happen when lockout tagout isn't followed?

The injuries run brutal. Amputations top the list, usually when a worker reaches into a machine that restarts without warning. Crush injuries from unexpected movement, electrocutions, burns from arc flash or steam, and fractures from stored mechanical energy letting go all follow the same script ^[1].

Amputation is the signal injury for LOTO. OSHA's machine guarding standard at 29 CFR 1910.212 and the LOTO standard at 1910.147 overlap heavily in enforcement, because unguarded machinery during servicing is the number-one setting for finger, hand, and arm amputations in manufacturing ^[4]. OSHA runs an amputation-specific enforcement program, and a machine-related amputation almost always brings an inspector to your door.

Electrocution from unexpected energization happens less often but kills more reliably when it does. Arc flash during electrical work, where nobody applied LOTO before opening a panel, feeds the electrician and maintenance-worker fatality count. Stored hydraulic energy is the sneaky one. Workers rarely think of a raised cylinder or a pressurized line as "energized" the way they think of a live wire.

The pattern under almost every one of these is boring and consistent. Someone skipped a step, or a coworker who didn't know the work was happening flipped the machine back on.

What does OSHA's lockout tagout standard actually require?

The core standard is 29 CFR 1910.147, titled "The Control of Hazardous Energy (Lockout/Tagout)" ^[3]. It covers general industry. Construction runs on its own energy control rule at 29 CFR 1926.417, and maritime on 29 CFR 1915.89.

1910.147 rests on four pillars.

1. A written energy control program. You need one specific to your facility, not a downloaded template. It has to spell out the scope and purpose of the program, the rules for using it, and how it gets enforced ^[3].

2. Machine-specific energy control procedures. For each piece of equipment with hazardous energy, you need a written procedure that names every energy source, where it is, the type and magnitude of energy, and the exact steps to isolate and lock out each one. OSHA does let a single procedure cover multiple machines, but only when they're identical in energy sources and control sequence. That exception is narrow, and employers misapply it constantly ^[3].

3. Training. Authorized employees (the people who actually perform LOTO), affected employees (people who run equipment others lock out), and other employees (anyone else who might wander into the area) each need training pitched to their role ^[3]. Authorized employees need the most.

4. Periodic inspections. At least once a year, you have to audit each energy control procedure to confirm workers are following it. The audit has to be done by an authorized employee other than the one using the procedure, and it has to be certified in writing ^[3].

Tagout-only programs, where you hang a tag without a lock, are allowed only when a lock physically can't fit on the energy-isolating device. They demand extra protective steps, and OSHA treats them as less safe ^[3]. The practical rule is simple: if you can lock it, lock it.

For electrical work, 29 CFR 1910.333 adds requirements that run right alongside 1910.147, and NFPA 70E (the electrical safety standard from the National Fire Protection Association) gives the detailed technical guidance inspectors often reference, even though NFPA 70E itself is not a federal regulation.

Why is lockout tagout one of OSHA's most-cited violations?

29 CFR 1910.147 has landed in OSHA's top ten most-cited standards every year for over a decade. In federal fiscal year 2023 it was the fifth most-cited standard, with 2,554 citations issued ^[5].

It stays there not because employers ignore LOTO outright. It stays there because the requirements are specific and procedural. Partial compliance is easy. Full compliance is hard to keep up. The conditions that draw citations look like this:

No written energy control program at all, or one that exists on paper but never got updated for the current equipment. Missing machine-specific procedures, usually because someone bought a new machine and nobody wrote the procedure for it. Annual audits that weren't done, or were done but never documented. Training records that show initial training but no retraining after an incident or a procedure change. Tagout used where locks would have fit fine.

The penalties are serious. A serious violation (one that could cause death or serious harm, where the employer knew or should have known) tops out at $16,550 per violation as of 2024 ^[6]. Willful or repeated violations reach up to $165,514 per violation. An inspection after a LOTO amputation or death routinely produces six-figure penalty proposals when a program has multiple gaps.

The lockout tagout standard is specific enough that even well-meaning programs get cited on paperwork. An annual inspection certification missing a date or the auditor's name is easy pickings for an inspector.

What are the most common root causes of lockout tagout incidents?

OSHA's look at LOTO fatalities and serious injuries points to the same short list of causes, and equipment malfunction isn't one of them ^[1].

Procedure not followed. The worker knew a procedure existed and skipped steps anyway, usually under time pressure. This is the single most common finding in incident investigations.

No procedure existed. Nobody ever wrote a LOTO procedure for that specific machine. This shows up over and over in smaller shops that added equipment without updating the safety program.

Procedure was inadequate. A procedure existed but missed an energy source. Think of a procedure that killed the main electrical disconnect but ignored a capacitor bank still holding charge, or a hydraulic system that never got bled down.

Communication failure. Multiple workers or contractors were on the job with no coordination about who locked out what. Contractor-employer coordination is spelled out in 1910.147(f)(2), and it gets missed all the time ^[3].

Inadequate training. The authorized employee didn't really understand the procedure, or was never trained on a machine the shop had recently acquired.

Equipment design. Some machines make LOTO genuinely hard because the energy-isolating devices weren't built for a lock. That doesn't excuse non-compliance, but it does mean some situations need an engineering fix before you can write a real procedure.

Time pressure drives most of these from behind. A maintenance worker being pushed to get a line running again is the worker most likely to cut a corner. That's a management and culture problem, not a paperwork problem, and no written program solves it by itself.

Which industries have the highest lockout tagout injury rates?

Manufacturing runs the highest absolute number of LOTO incidents, because it has the most machinery. Inside manufacturing, food processing, paper and printing, metals fabrication, and plastics carry particularly heavy exposure ^[1].

Absolute numbers hide something, though. The rate of machinery-contact deaths per 100,000 workers runs higher in agriculture (hydraulic and mechanical stored energy in equipment), oil and gas extraction, utilities, and construction ^[2].

Small businesses show up in LOTO injuries out of proportion to their size. Big employers usually have safety staff, formal programs, and regular audits. A 15-person metal fab shop often faces the same machinery hazards as a 500-person plant with a sliver of the safety infrastructure. OSHA's citation data keeps showing more program gaps at smaller employers ^[5].

Here's the LOTO injury burden by sector, drawn from OSHA and BLS data.

Sector	Primary LOTO hazard types	Relative injury burden
Manufacturing (general)	Electrical, mechanical, pneumatic	Highest absolute numbers
Food processing	Mechanical, pneumatic	High; frequent amputations
Agriculture	Mechanical, hydraulic	High fatality rate per worker
Utilities	Electrical, steam/thermal	High fatality rate per worker
Construction	Electrical, hydraulic	Moderate; governed by 1926.417
Oil and gas	Pressure, chemical, mechanical	Moderate but high severity

How do lockout tagout injuries get recorded and reported to OSHA?

Most LOTO injuries that mean days away from work, restricted duty, medical treatment beyond first aid, or any hospitalization are recordable under 29 CFR 1904 ^[7]. They go on your OSHA 300 log.

Any work-related death has to be reported to OSHA within 8 hours. Any in-patient hospitalization, amputation, or loss of an eye has to be reported within 24 hours ^[7]. Those reports can trigger an inspection. An amputation almost always does, because OSHA's National Emphasis Program on amputations specifically targets machinery-related incidents ^[4].

When an inspector shows up after a LOTO incident, they'll ask for your written energy control program, your machine-specific procedures, your training records, and your annual inspection certifications. If any of those are missing or half-done, the injury and the compliance gaps stack into a much heavier citation package than either would produce alone.

Filing the incident report correctly matters for two reasons. It's a legal requirement, and it's the front end of a real root-cause investigation. Plenty of small employers fill out the form to satisfy the law and then never use it to figure out what actually went wrong. That's a wasted chance, and it leaves the same conditions in place for the next person.

On the training side of recordkeeping (see osha training requirements), remember that employees have the right to see their own OSHA 300 log, and the annual summary (Form 300A) must be posted from February 1 to April 30 each year ^[7].

What does a compliant lockout tagout written program need to include?

A compliant written program under 29 CFR 1910.147(c)(1) has to cover several things.

Scope and purpose. A plain statement of who the program covers and what it's for.

Rules for authorized and affected employees. Who can apply locks, what affected employees do when a lock goes on, and what "other" employees do (short version: don't touch locked-out equipment).

Specific equipment procedures. These live inside the program or get referenced from it. Each one names the machine, every energy source and its location, the type and magnitude of energy, and the exact sequence to isolate, lock, verify de-energization, and restore ^[3].

Contractor coordination language. How your facility handles outside contractors on your equipment, including the requirement to exchange energy control information both ways.

Group lockout procedures. If more than one worker services a machine at the same time, you need a group lockout provision so each worker has their own lock on the device or on a group lockout box ^[3].

Shift change and transfer procedures. What happens to the locks when the maintenance shift changes before the work is finished.

Periodic inspection records. A template or process for certifying that the annual audits got done.

Writing the machine-specific procedures is the most labor-intensive part of the whole thing, and it's the part most employers skip or half-finish. A good procedure is specific enough that a trained employee who has never touched that machine could follow it and reach a safe, verified zero-energy state. If your procedure says "turn off the power," it isn't specific enough.

If you need to stand up a written LOTO program fast, SafetyFolio's program generator walks you through the required elements in about 15 minutes and produces a document you can actually use, not a generic template that gives you a false sense of compliance.

How should lockout tagout training be structured to prevent injuries?

The training structure under 1910.147(c)(7) splits workers into three groups.

Authorized employees need to understand the types and magnitude of hazardous energy in your facility, the methods used to isolate and control it, how to verify de-energization, and how to apply, transfer, and remove locks. Retraining is required when a new machine comes in, when an inspection turns up inadequate performance, or when there's reason to think the employee doesn't understand the procedure ^[3].

Affected employees need to understand that they can't operate equipment that's locked out or tagged out, and why. They don't need to know how to perform LOTO. They absolutely need to know never to override it.

Other employees need basic awareness of the program and the rule against messing with locked-out energy-isolating devices.

In practice the biggest gaps sit at the authorized-employee level. Generic LOTO training that isn't tied to your actual machines and procedures is a compliance weakness. OSHA's requirement implies facility-specific content, more than general hazardous energy awareness ^[3].

For workers building a broader safety credential, osha 30 training covers LOTO inside its electrical and machine guarding modules. It's a good foundation, but it is not a substitute for facility-specific authorized-employee training.

Documentation counts here. You need written records of who was trained, when, and on what. "We told everyone in a meeting" is not documentation. Inspectors will ask to see individual records.

How much does a lockout tagout injury actually cost an employer?

The bill for a single LOTO injury is big, and most of it is invisible at first. OSHA's cost estimator puts a single amputation at roughly $102,000 in direct costs (workers' compensation and medical) and about $1.1 million in indirect costs (lost productivity, replacement training, investigation time, higher insurance premiums, legal exposure), based on a direct-to-indirect ratio of about 1:10 ^[8].

That ratio traces back to research originally developed by the National Safety Council and built into OSHA's $afety Pays program, which lets employers calculate the sales revenue needed to cover an injury. For a business running a 3% profit margin, a $100,000 workers' comp payout takes $3.3 million in extra sales just to break even ^[8].

Stack penalties on top. OSHA fines for a LOTO incident with program deficiencies typically run from $15,000 to more than $150,000, depending on how many violations get cited and whether any land as willful or repeat ^[6]. Legal costs and civil litigation in a fatal incident can climb well into the millions.

Compliance, by comparison, is mostly labor time. Writing and maintaining machine-specific procedures, running annual audits, and keeping training records is real work, but it's small next to the liability. Physical lockout devices run $5 to $30 per lock and $50 to $200 for a multi-lock hasp. You can outfit a full lockout station for a medium shop for a few hundred dollars.

What should you do immediately after a lockout tagout incident occurs?

Get the injured worker medical care first. That's not a compliance step, it's a human one. Then secure the scene so nothing shifts before the investigation, and notify OSHA if the incident hits the reporting thresholds (fatality within 8 hours; in-patient hospitalization, amputation, or loss of an eye within 24 hours) ^[7].

Then investigate. Not to assign blame. To understand the actual sequence of events. What was the task? What was the energy source? Was a written procedure in place? Was it followed? Was the employee trained? Had this machine thrown a near-miss before? Those questions surface the system failures, which matter more than the immediate cause.

Fix the immediate hazard before the equipment goes back online. If a procedure was inadequate, rewrite it. If the employee wasn't trained on that machine, train them and document it. If the energy-isolating device won't take a lock, get an engineering solution in.

Update your OSHA 300 log within 7 calendar days of learning about a recordable injury ^[7]. Post the 300A summary each year.

Review the whole LOTO program after a serious incident, more than the procedure for the one machine. A gap in one spot usually signals gaps elsewhere. OSHA expects you to have looked, and it matters in any inspection or citation negotiation that follows.

Are there OSHA lockout tagout requirements for small businesses specifically?

There's no small-business exemption to 29 CFR 1910.147. If one employee services machinery, the standard applies ^[3]. The requirements scale on their own, because the number of machine-specific procedures you need tracks how many machines you have. The written program, the training, and the annual inspection apply no matter how small the company is.

OSHA's On-Site Consultation Program, run through state agencies, offers free and confidential safety consultations to small and medium-sized businesses ^[9]. A consultant comes to your facility, reviews your LOTO program, flags the gaps, and gives you time to fix them, all without triggering an inspection or a penalty. Take part, correct what they find, and you can qualify for SHARP (Safety and Health Achievement Recognition Program), which comes with inspection exemptions for a set number of years ^[9].

Small employers who do get cited for LOTO should know OSHA holds informal conferences where you can discuss the citations, show evidence of correction, and sometimes negotiate lower penalties. The agency also runs a small-employer penalty reduction schedule, though the reductions vary by area office.

The practical move: don't wait for an inspection or an injury. A basic LOTO program, even an imperfect one, cuts both injury risk and citation exposure hard. An employer with a program that has a few gaps sits in far better shape, legally and ethically, than an employer with nothing at all.

Frequently asked questions

How many people die from lockout tagout failures each year?

OSHA estimates about 120 workers die each year from failures to control hazardous energy, the hazard LOTO is designed to prevent. The Bureau of Labor Statistics fatality census tracks the broader machinery-contact category, which includes LOTO-preventable deaths, consistently in the hundreds annually. The 120-death figure comes from OSHA's regulatory impact analysis for 29 CFR 1910.147.

Is lockout tagout required by OSHA for all businesses?

Yes, with no small-business exemption. 29 CFR 1910.147 applies to general industry employers any time workers service or maintain machinery where unexpected energization or startup could cause injury. Construction has a parallel requirement at 29 CFR 1926.417 and maritime at 29 CFR 1915.89. If even one worker services equipment, the standard applies to you.

What is the OSHA penalty for a lockout tagout violation?

Serious LOTO violations carry a maximum penalty of $16,550 per violation as of 2024. Willful or repeated violations max out at $165,514 per violation. An inspection following a LOTO-related amputation or fatality routinely results in multiple citations and penalty proposals in the five to six-figure range, especially when a written program or training records are missing.

What is the difference between lockout and tagout?

Lockout means physically placing a lock on an energy-isolating device so it cannot be re-energized until the lock comes off. Tagout means placing a warning tag on the device without a lock. OSHA strongly prefers lockout because a tag can be removed. Tagout-only is permitted under 1910.147 only when the energy-isolating device cannot accommodate a lock, and it requires additional protective steps.

What injuries are most common in lockout tagout incidents?

Amputations are the most recognized LOTO injury, usually from machinery restarting while a worker's hand or arm is inside. Crush injuries, electrocutions, burns from arc flash or steam release, and fractures from stored mechanical or hydraulic energy letting go are also common. Fatalities usually involve electrocution or catastrophic machinery movement.

How often does OSHA cite employers for lockout tagout violations?

29 CFR 1910.147 has been in OSHA's top ten most-cited standards every year for over a decade. In federal fiscal year 2023 it ranked fifth with 2,554 citations. The most common deficiencies are missing written programs, absent or incomplete machine-specific procedures, no annual inspection records, and inadequate training documentation.

Does lockout tagout training need to be specific to my facility?

Yes. OSHA's training requirement under 1910.147(c)(7) is not satisfied by generic hazardous energy awareness. Authorized employees need training on the specific types and magnitudes of energy at your facility and the specific procedures for the machines they service. Generic online training can supplement facility-specific training but cannot replace it for authorized employees.

What is an authorized employee under the OSHA lockout tagout standard?

An authorized employee is a worker who locks out or tags out machines or equipment to perform servicing or maintenance. This person must be trained on the energy sources of the equipment they work on, the methods to control those energy sources, the specific steps in the energy control procedure, and how to verify that de-energization has actually happened before starting work.

Do contractors working on my equipment need to follow my lockout tagout program?

Yes. 29 CFR 1910.147(f)(2) requires host employers and outside contractors to exchange information about their respective energy control procedures and make sure workers stay protected. You're responsible for ensuring contractors on your equipment follow either your LOTO procedures or their own procedures that provide equal protection. This is a frequently missed requirement, especially at small businesses.

How often do lockout tagout procedures need to be reviewed or updated?

OSHA requires an annual certification of each energy control procedure, done by an authorized employee other than the one using it. Beyond the annual audit, update procedures whenever a machine is modified, a new energy source is added, an incident or near-miss reveals a gap, or a review shows workers aren't following it correctly. The annual audit must be documented in writing.

Can I use tagout only instead of lockout?

Only if the energy-isolating device cannot be locked. 29 CFR 1910.147 makes clear that lockout is the preferred method because it provides a higher level of protection. If you use tagout only, you must document why lockout is infeasible, and you must implement additional protective measures to achieve equivalent protection. Inspectors scrutinize tagout-only programs closely.

What are the reporting requirements if a worker is injured in a lockout tagout incident?

Any work-related fatality must be reported to OSHA within 8 hours. Any in-patient hospitalization, amputation, or loss of an eye must be reported within 24 hours. These reports can be made by phone to the nearest OSHA area office or online at osha.gov. Most LOTO injuries that cause days away from work are also recordable on the OSHA 300 log within 7 calendar days of learning about them.

What free resources does OSHA offer to help small businesses with lockout tagout compliance?

OSHA's On-Site Consultation Program provides free, confidential safety reviews to small and medium-sized businesses through state-level consultants. These visits are separate from enforcement and do not result in citations. Employers who correct all identified hazards may qualify for SHARP recognition, which includes inspection priority exemptions. Contact your state's consultation program through osha.gov.

Sources

1. Bureau of Labor Statistics, Census of Fatal Occupational Injuries: Machinery contact is consistently one of the leading causes of workplace fatalities in the United States
2. OSHA, 29 CFR 1910.147, Control of Hazardous Energy (Lockout/Tagout): Requirements for written energy control programs, machine-specific procedures, training, annual inspections, and lockout vs. tagout
3. OSHA, National Emphasis Program on Amputations in Manufacturing Industries (CPL 03-00-019): Machinery-related amputations are a primary target of OSHA's amputation enforcement initiative and routinely trigger inspections
4. OSHA, Top 10 Most Frequently Cited Standards, FY2023: 29 CFR 1910.147 was the fifth most-cited OSHA standard in FY2023 with 2,554 citations
5. OSHA, Civil Penalty Policy and OSHA Penalty Amounts: Serious violations carry a maximum penalty of $16,550 per violation; willful or repeated violations up to $165,514 per violation as of 2024
6. OSHA, 29 CFR 1904, Recording and Reporting Occupational Injuries and Illnesses: Fatalities must be reported within 8 hours; in-patient hospitalization, amputation, or eye loss within 24 hours; 300 log entries within 7 calendar days
7. OSHA, $afety Pays Program Estimator: Single amputation direct cost estimated at roughly $102,000; indirect costs approximately 10 times direct costs; sales revenue needed to offset injury costs calculated by profit margin
8. OSHA, On-Site Consultation Program: Free and confidential safety consultations for small and medium-sized businesses; separate from enforcement; SHARP recognition available after hazard correction
9. OSHA, 29 CFR 1910.333, Selection and use of work practices (electrical safety): Electrical safety work practice requirements that run alongside 1910.147 for electrical servicing tasks
10. OSHA, 29 CFR 1926.417, Lockout and tagging of circuits (construction): Construction-specific energy control requirements parallel to 1910.147