What the OSHA lockout tagout rule protects workers from

Last updated 2026-07-09

What hazards does the OSHA lockout tagout rule actually protect workers from?

The lockout tagout rule exists to keep a machine still while a worker's hands or body are inside it. That's it. The standard lives at 29 CFR 1910.147, and its whole job is stopping equipment from moving, energizing, or dumping stored energy at the worst possible moment. ^[1]

Simple idea. Messier in practice.

A machine can hurt a worker across at least six energy categories, and 1910.147 covers every one:

• Electrical energy is the most common. A motor that looks off can still be live at the terminal block. Workers get electrocuted, burned, or thrown by arc flash when circuits aren't de-energized and locked.
• Hydraulic energy stays trapped in cylinders and accumulators long after the pump stops. A 3,000 psi press can drive a ram hard enough to take off a limb with the motor sitting dead.
• Pneumatic energy holds compressed air in lines and reservoirs. Bleed-down takes time. Skip it and a cylinder actuates into someone, or a component gets expelled like a projectile.
• Mechanical energy covers springs under load, flywheels coasting on inertia, and gravity-held parts like press platens and conveyor sections that drop.
• Thermal energy is steam lines, hot surfaces, and process fluid under pressure. Burns and scalds do the damage here.
• Chemical energy involves process chemicals that release pressure or react. For highly hazardous chemicals, 1910.119 applies alongside 1910.147, but routine maintenance still triggers LOTO.

The rule also guards against what OSHA calls unexpected energization: a coworker at the control panel who doesn't know you're inside the machine and hits start. A lock physically stops that. A tag only warns against it, which is exactly why OSHA's standard says that whenever a lockout device can be applied, it has to be used instead of a tag. ^[1]

How many workers does this standard actually protect, and what does the injury data say?

OSHA estimates that 29 CFR 1910.147 prevents about 120 deaths and 50,000 injuries every year. ^[2] Bureau of Labor Statistics data on fatal occupational injuries shows that contact with objects and equipment, the category holding caught-in and caught-between events, runs roughly 700 to 800 worker deaths a year in the U.S. ^[3] When machinery is involved, LOTO failures sit at the center of most of them.

The standard has ranked among OSHA's most-cited serious violations for manufacturing for well over a decade, and it landed on OSHA's top-ten most-cited list again in fiscal year 2023. ^[4] That tells you two things at once. The hazard is real and everywhere. And a lot of employers still get it wrong.

Amputations are the injury tied most directly to missing LOTO. OSHA's amputation National Emphasis Program, launched in 2015 and renewed since, targets the industries where workers are most likely to lose fingers, hands, or arms to machinery that wasn't guarded or locked out. Most amputation investigations find that no energy control procedure existed, or a worker bypassed the one that did. ^[5]

Which workers and industries does 29 CFR 1910.147 apply to?

The standard covers any authorized or affected employee who services or maintains equipment where unexpected energization could happen. Those two labels carry real weight.

An authorized employee is the person who applies the lock or tag and does the service work. An affected employee operates the machine or works in the area where LOTO is happening. Both need training, but the content splits. Authorized employees learn how to control energy. Affected employees learn why they must never try to restart equipment that's been locked or tagged. ^[1]

The reach is wide. General industry under 1910.147 covers manufacturing, food processing, printing, warehousing, utilities, and most non-construction workplaces. Construction has its own energy control provisions under 29 CFR 1926 subpart K for electrical work, but there's no single construction LOTO standard matching 1910.147's scope. Maritime and longshoring run under separate standards too.

Farm operations with 10 or fewer employees are partly outside OSHA jurisdiction. Most small manufacturers, machine shops, and bakeries are covered in full from day one.

One carve-out is worth memorizing. The standard doesn't apply to cord-and-plug equipment where unplugging is the only energy source and the plug stays under the control of the person doing the work. That covers a lot of simple power-tool tasks. It does not cover complex machinery with multiple energy sources.

What specific types of energy does lockout tagout protect workers from?

Energy Type	Common Equipment	Injury Risk if Not Controlled
Electrical	Motors, control panels, conveyors	Electrocution, arc flash burns
Hydraulic	Presses, lifts, injection molding machines	Crush injuries, amputations
Pneumatic	Cylinders, air tools, automated lines	Struck-by from moving parts
Mechanical (stored)	Springs, flywheels, counterweights	Crush, impact injuries
Gravitational	Elevated dies, press rams, suspended loads	Crush fatalities
Thermal	Steam lines, ovens, hot process equipment	Burns, scalds
Chemical (process)	Reactors, pressurized tanks	Burns, toxic exposure

The rule requires that each energy source on a given machine be written down in an energy control procedure built for that specific machine. This isn't busywork. OSHA requires written procedures for every machine unless the equipment has no potential for stored or residual energy, has a single energy source that can be locked off, and isolating that one source fully de-energizes the machine. ^[1] That exception is narrower than most employers assume.

For equipment with multiple energy sources, the procedure has to name each isolating device, the type and magnitude of the energy, and the exact steps to reach a zero energy state. The workers who get hurt are the ones who don't know what they're up against, or who skip verification.

What does a compliant lockout tagout program actually require?

A compliant program under 1910.147 rests on four parts that stack on each other.

1. A written energy control program. This is the policy document. It sets the scope, the rules, and the techniques for energy control, plus the minimum requirements for training and periodic inspections. ^[1] You can't wave this off by saying your crew already knows the drill. OSHA wants it in writing.

2. Machine-specific energy control procedures. One for every covered machine. Each lists the equipment, the shutdown and isolation steps, the location and type of every energy isolating device, and the steps to verify zero energy. OSHA's 1910.147(c)(4)(ii) spells out the narrow conditions under which a single general procedure passes. Real shops rarely meet them.

3. Employee training. Authorized employees need hands-on training in the purpose and use of the procedure. Affected employees need enough to understand its purpose and the rule against restarting locked-out equipment. Retraining kicks in whenever there's reason to think a worker doesn't understand. ^[1] OSHA sets no minimum hours, but the training has to match the machinery and energy types in your building.

4. Periodic inspections. At least once a year, an authorized employee other than the one using the procedure has to review it and certify the result. The certification records the date, the equipment covered, the employees involved, and the inspector's name. ^[1] Small employers miss this piece more than any other.

The hardware (locks, hasps, lockout stations, tags) is required but secondary to the program. You can drop $500 on a beautiful lockout station and still get cited if you have no written procedures behind it.

Building a written LOTO program from scratch is where most small shops stall. SafetyFolio generates a documented energy control program tied to your equipment and industry in about 15 minutes, which beats staring at a blank Word document.

What is the difference between lockout and tagout, and when can you use tagout alone?

A lockout device is a physical lock, hasp, or equivalent that holds an energy isolating device in the off position and keeps the equipment from starting. A tagout device is a prominent warning tag on that same isolating device that says, in effect, do not operate.

Tagout alone is weaker. Full stop. A tag warns. A lock blocks. OSHA's standard is blunt about it: when an energy isolating device can be locked out, the program has to use lockout unless the employer can demonstrate that tagout gives equivalent protection. ^[1]

That equivalent-protection demonstration is hard to make. It means documenting extra measures like removing a valve handle, blocking a breaker in the off position, or opening a second disconnect. Most employers who think they qualify for tagout-only actually don't.

Here's the practical read. If the isolating device has a lockout hole or hasp point, you lock it. Tagout-only fits mainly on older equipment, roughly pre-1990, built before lockout capability was standard. Buy new equipment and there's almost no scenario where tagout-only holds up.

How often does OSHA cite lockout tagout violations, and what are the penalties?

Lockout tagout is one of OSHA's most-cited standards, year after year. In fiscal year 2023, 29 CFR 1910.147 drew more than 2,500 citations nationally and stayed in the top five for general industry. ^[4]

Penalty amounts turn on how the violation is classified:

• Serious violations carry a maximum of $16,550 per violation as of January 2024, and OSHA adjusts the figure for inflation each year. ^[6]
• Willful or repeated violations carry a maximum of $165,514 per violation. ^[6]
• Other-than-serious violations top out at $16,550 but usually land much lower.

OSHA also cuts penalties for small employers. Businesses with 25 or fewer workers typically get a 60% reduction, and those with 26 to 100 employees get 40% off. Even after the discount, a cluster of serious LOTO citations at a small manufacturer can run $20,000 to $50,000 once you count multiple violations in one inspection.

Here's the number that matters more. OSHA's estimates put the direct and indirect cost of a serious machinery injury well past $40,000 on average, and a fatality above $1 million once you fold in lost productivity, insurance, litigation, and regulatory costs. ^[2] A compliant LOTO program costs a fraction of either.

What are the most common lockout tagout violations OSHA finds?

Across years of enforcement data, the LOTO citation pattern barely changes. These are the ones that show up again and again:

No written energy control program at all. Small manufacturers skip it most. They run on informal habits that aren't written down anywhere. That's a citation under 1910.147(c)(1).

No machine-specific procedures. The employer has a generic policy but nothing that walks a worker through de-energizing and verifying zero energy on a specific press or conveyor. Cited under 1910.147(c)(4)(i).

No periodic inspections, or no records of them. The annual certification at 1910.147(c)(6) gets missed constantly. Inspectors ask for the last 12 months of records. No records, a citation.

Training gaps. Affected employees who can't say what LOTO means, or authorized employees never retrained after equipment changed.

Using tagout where lockout is required. The isolating device can be locked, but the employer relies on tags.

Workers bypassing the procedure. Servicing without locking out because "it only takes a second." This is the pattern most likely to come right before a fatality, and OSHA treats it that way.

Before an inspection, a compliance officer asks for two things first: your OSHA training records and your written program. Have both ready.

Does lockout tagout apply to electrical work specifically?

This one trips up a lot of maintenance crews. Short version: electrical work in general industry runs under 29 CFR 1910.333 for energized electrical work, and under 1910.147 for servicing and maintaining electrical equipment as part of broader machine service.

For most maintenance electricians in a plant, both standards are live at once. Replacing a motor or working inside a control panel as part of machine service pulls in 1910.147. Working on circuits that can't be de-energized, a much narrower situation, pulls in 1910.333 and NFPA 70E.

The rule of thumb OSHA uses: if the job is servicing or maintaining equipment where unexpected energization could injure someone, 1910.147 applies, whether the energy is electrical or something else. ^[1] The two standards aren't mutually exclusive. A worker can violate both on the same job.

If your crew also handles chemical process maintenance, the overlap between 1910.147, 1910.119 (Process Safety Management), and your hazard communication program is worth a sit-down with your safety team.

What are the specific steps workers must follow to lock out a machine?

1910.147 lays out a sequence for applying energy controls, and your machine-specific procedures have to follow it. The standard order:

1. Prepare for shutdown. Identify every energy source and read the machine-specific procedure before touching anything. 2. Notify affected employees that the equipment is coming down and going into lockout. 3. Shut down the equipment using normal stopping procedures. 4. Isolate the energy sources. Operate every energy isolating device to put the machine in a zero energy position. 5. Apply lockout or tagout devices to each isolating device, authorized employees only. 6. Release or restrain stored energy. Bleed hydraulic lines, discharge capacitors, block suspended parts, release spring tension, let thermal energy dissipate. 7. Verify zero energy state. Try to start the machine with the normal operating controls. If it won't start, you've hit zero energy. Return the controls to off.

Step 7 is the one people skip, and the one that kills them. The verification attempt is not optional. It proves every energy source was actually isolated, rather than proving locks got hung on what the worker assumed were all the isolating devices.

Removal reverses the sequence, and every authorized employee who applied a lock removes their own lock personally. Nobody removes another worker's lock except under OSHA's defined emergency removal procedure, which itself demands documentation. ^[1]

If your crew also runs forklifts and other powered industrial trucks through the same space, make sure your forklift certification program addresses how moving equipment interacts with active LOTO zones.

What written documentation does a small business need to comply with 1910.147?

Three documents carry most of your compliance load.

The energy control program. A policy-level document that sets your company's LOTO rules, names who owns the program, and states minimum training and inspection requirements. A few clear pages beat a 40-page template nobody opens.

Machine-specific energy control procedures. One per covered machine. OSHA gives a sample format in the appendix to 1910.147. Each procedure lists the equipment description and location, shutdown steps, the location of each energy isolating device (with type and magnitude), lockout and tagout application steps, stored-energy release steps, and verification steps. Add a photo or diagram of each isolating device if your workers aren't already fluent on the equipment.

Periodic inspection certifications. A written record per procedure, updated at least once a year, showing the inspection date, the equipment reviewed, the employees involved, and the inspector's name. Keep them. OSHA asks for the last year's worth.

Training records aren't explicitly required in writing by 1910.147, but the general duty clause and the plain reality of an inspection mean you should document them anyway. Record who was trained, on what, when, and by whom.

Small businesses that haven't started can build all three faster than they expect. SafetyFolio's safety program generator walks you through each machine and energy source in order, producing compliant written procedures without making you memorize the CFR citation behind every field.

For the wider picture of what OSHA asks of general industry employers, the OSHA basics hub is a solid starting point.

How does OSHA's lockout tagout rule relate to the General Duty Clause?

The General Duty Clause of the OSH Act, Section 5(a)(1), requires employers to provide a workplace "free from recognized hazards that are causing or are likely to cause death or serious physical harm." ^[7] OSHA uses it as a backstop when no specific standard covers a hazard.

For LOTO, the relationship cuts both ways. In most general industry settings, 1910.147 is specific enough that OSHA cites it directly. But when unexpected energization shows up in a spot 1910.147 doesn't squarely reach (certain agricultural machinery setups, or construction scenarios where 1926 leaves a gap), OSHA can and does reach for the General Duty Clause instead.

The takeaway for employers: skipping a written 1910.147 procedure doesn't put you in the clear if a worker gets hurt. OSHA can still cite the underlying recognized hazard. The standard is the floor, not the ceiling.

After any serious LOTO injury, an accurate incident report is required under 29 CFR 1904 if the event crosses the recordkeeping threshold. An amputation or in-patient hospitalization has to be reported to OSHA within 24 hours. ^[8]

Frequently asked questions

What does the OSHA lockout tagout rule protect workers from?

It protects workers from the unexpected startup, energization, or release of stored energy in machinery during servicing and maintenance. Covered energy types include electrical, hydraulic, pneumatic, mechanical (springs and gravity), thermal, and chemical energy. OSHA estimates the standard prevents about 120 deaths and 50,000 injuries per year. The rule is codified at 29 CFR 1910.147.

What is the difference between lockout and tagout?

A lockout device physically prevents an energy isolating device from being operated. A tagout device is a warning tag attached to the isolating device but provides no physical barrier. OSHA requires lockout whenever the equipment's isolating device is capable of being locked. Tagout-only programs are allowed only when lockout is physically impossible and the employer documents equivalent protective measures.

Which OSHA standard covers lockout tagout?

29 CFR 1910.147, titled "The Control of Hazardous Energy (Lockout/Tagout)," is the primary general industry standard. Electrical work practices for energized circuits are also covered by 29 CFR 1910.333. Construction has separate provisions under 29 CFR 1926 subpart K. For highly hazardous chemicals, 29 CFR 1910.119 (Process Safety Management) applies alongside 1910.147.

Does lockout tagout apply to small businesses?

Yes. 29 CFR 1910.147 applies to general industry employers of any size, including single-location small businesses, as long as workers service or maintain equipment where unexpected energization could cause injury. Farm operations with 10 or fewer employees are a partial exception to OSHA jurisdiction, but most small manufacturers, bakeries, and machine shops have no exemption.

How often are lockout tagout violations cited by OSHA?

29 CFR 1910.147 is cited over 2,500 times per year and consistently ranks among the top five most-cited general industry standards. The most common citations involve missing written programs, no machine-specific procedures, and failure to conduct or document annual inspections. Serious violations carry a maximum penalty of $16,550 per instance as of 2024.

What training do employees need for lockout tagout compliance?

Authorized employees (those who apply locks and perform service) need hands-on training specific to the energy types and equipment in your workplace. Affected employees (machine operators nearby) need training on the purpose of LOTO and the prohibition against restarting locked-out equipment. Retraining is required when procedures change or when an employee demonstrates insufficient understanding. OSHA does not specify minimum training hours.

What types of injuries does lockout tagout prevent?

Amputations are the most directly associated injury. Workers lose fingers, hands, and arms when machinery restarts unexpectedly during cleaning, unjamming, or maintenance. Electrocution, crush injuries, burns from steam or hot process fluids, and struck-by events from pneumatic cylinders are also common outcomes. OSHA's Amputation National Emphasis Program found that missing or bypassed LOTO procedures were a factor in the majority of investigated amputations.

What are the OSHA penalty amounts for lockout tagout violations?

As of January 2024, serious LOTO violations carry a maximum penalty of $16,550 per violation. Willful or repeated violations top out at $165,514 per violation. Small businesses with 25 or fewer employees typically receive a 60% penalty reduction. A single OSHA inspection finding multiple serious violations can still result in $20,000 to $50,000 in total penalties even after reductions.

Does lockout tagout apply to cord-and-plug equipment?

Not if all of these conditions are met: the equipment is cord-and-plug connected, unplugging is the only way to de-energize it, there is no stored energy, and the plug stays under the exclusive control of the employee doing the work. If any of those conditions isn't met, 1910.147 applies. Most complex machinery with multiple energy sources does not qualify for this exception.

How often are lockout tagout procedures required to be reviewed?

At least once per year per procedure. A certified review must be performed by an authorized employee who is not the one routinely using the procedure. The employer must create a written certification recording the date, the machine or equipment covered, the employees involved, and the certifying inspector's name. This is one of the most commonly missed compliance requirements in small manufacturing.

What stored energy hazards must be addressed during lockout tagout?

All of them. After isolating the energy source, workers must release or restrain any residual stored energy before work begins. That means bleeding hydraulic and pneumatic lines, discharging capacitors, blocking or lowering suspended loads such as press rams or conveyor sections, releasing spring tension, and allowing thermal dissipation of hot surfaces or steam. Verification by attempting to start the machine follows stored energy release.

Can an employer remove a worker's personal lockout device?

Only under a specific, documented emergency procedure. An employer cannot simply remove another person's lock because the employee left or is unavailable. The emergency removal procedure must involve verification that the authorized employee is not in the area, notification of the employee before they return to work, and documentation of the removal. This is an area where shortcuts lead to fatalities.

What written documents does a lockout tagout program require?

Three main documents: a written energy control program (policy level), machine-specific energy control procedures (one per covered machine), and annual inspection certifications for each procedure. Training records aren't explicitly required in writing by 1910.147, but OSHA inspectors routinely request them and the absence creates compliance risk. All three should be kept on site and available to inspectors on demand.

Does the lockout tagout standard apply to construction workers?

Not directly. 29 CFR 1910.147 covers general industry. Construction has separate electrical safety provisions under 29 CFR 1926 subpart K, but there is no single construction-specific LOTO standard that mirrors 1910.147's scope. For construction workers servicing equipment with multiple energy sources, OSHA may cite the General Duty Clause. Some state-plan states have adopted broader construction LOTO rules.

Sources

1. OSHA, 29 CFR 1910.147 - The Control of Hazardous Energy (Lockout/Tagout): Scope, lockout vs. tagout requirements, written program, machine-specific procedures, training, and annual inspection certification requirements
2. OSHA, Lockout/Tagout Fact Sheet (OSHA 3120): OSHA estimates 29 CFR 1910.147 prevents approximately 120 deaths and 50,000 injuries per year, and estimates the cost of serious machinery injuries and fatalities
3. Bureau of Labor Statistics, Census of Fatal Occupational Injuries Summary: Contact with objects and equipment accounts for roughly 700-800 worker deaths per year in the U.S.
4. OSHA, Commonly Used Statistics (Top 10 Most Cited Standards): 29 CFR 1910.147 appeared in OSHA's top-ten most-cited standards list in FY2023 with more than 2,500 citations
5. OSHA, Amputation National Emphasis Program (NEP) CPL 03-00-019: Majority of amputation investigations find missing or bypassed LOTO procedures as a contributing factor
6. OSHA, Penalties (Federal Civil Penalty Inflation Adjustments): Serious violation maximum $16,550 per violation; willful or repeated maximum $165,514 per violation as of January 2024
7. OSH Act of 1970, Section 5(a)(1) - General Duty Clause: Employers must provide a workplace free from recognized hazards likely to cause death or serious physical harm
8. OSHA, 29 CFR 1904 - Recording and Reporting Occupational Injuries and Illnesses: Amputation or in-patient hospitalization requires report to OSHA within 24 hours
9. OSHA, 29 CFR 1910.333 - Electrical Safety-Related Work Practices: Electrical safety-related work practices standard for energized electrical work in general industry
10. OSHA, Lockout/Tagout e-Tool: OSHA guidance on lockout/tagout procedures, authorized vs. affected employee roles, and compliance steps