Lockout Resources

OSHA DocumentationNIOSH DocumentationPreventing FatalitiesWorkplace SolutionsSelect Case SummariesWhite Papers and ArticlesLockout/Tagout FAQLockout/Tagout NewsLockout/Tagout SignsEnergy Source ReferenceTraining MaterialLibraryGlossarySitemap
Share & Bookmark Printer Friendly Home Page
Keeping Employees Safe!

Home » Lockout Resources » NIOSH Documentation » Preventing Fatalities

Preventing Fatalities

NIOSH

Preventing Worker Fatalities from Uncontrolled Release of Electrical, Mechanical, and Other Types of Hazardous Energy

This article, by The National Institute for Occupational Safety and Health (NIOSH), covers the prevention of death or injury of workers exposed to the unexpected or uncontrolled release of Hazardous Energy.

Hazardous Energy is any type of energy in sufficient quantity to cause injury to a worker. Common sources of hazardous energy include electricity, mechanical motion, pressurized air, and hot and cold temperatures. Hazardous energy releases may occur during the installation, Maintenance, service, or repair of machines, equipment, processes, or systems. Investigations conducted as part of the NIOSH Fatality Assessment and Control Evaluation (FACE) Program suggest that developing and following Hazardous Energy Control procedures could prevent worker injuries and fatalities.

This article describes five fatal incidents in which workers contacted uncontrolled Hazardous Energy during installation, Maintenance, service, or repair work. To prevent such deaths, the recommendations in this article should be followed by every employer, manager, supervisor, and worker who installs, maintains, services, or repairs machines, equipment, processes, or systems.

Background

Number of Workers Killed

No detailed national data are avail able on the number of workers killed each year by contact with uncontrolled Hazardous Energy. However, during the period 19821997, NIOSH investigated 1,281 fatal incidents as part of their FACE Program. Of these, 152 involved installation, Maintenance, service, or repair tasks on or near machines, equipment, processes, or systems. Because the FACE program was active in only 20 States between 1982 and 1997, these fatalities represent only a portion of the U.S. workers who were killed by contact with uncontrolled haz ardous en ergy.

Contributing Factors

Review of these 152 incidents suggests that three related factors contributed to these fatalities:

  • Failure to completely de-energize, isolate, block, and/or dissipate the energy source (82% of the incidents, or 124 of 152)
  • Failure to lockout and tagout energy control devices and isolation points after de-energization (11% of the incidents, or 17 of 152)
  • Failure to verify that the energy source was de-energized before beginning work (7% of the in cidents, or 11 of 152)

In a study con ducted by the United Auto Workers (UAW), 20% of the fatalities (83 of 414) that occurred among their members between 1973 and 1995 were attributed to inadequate Hazardous Energy control procedures - specifically, Lockout/Tagout procedures. The energy sources involved in these fatalities included kinetic, potential, electrical, and thermal energy [UAW 1997].

Current OSHA Regulations

Current Occupational Safety and Health Administration (OSHA) standards for general industry are established to prevent injuries and fatalities from contact with Hazardous Energy [29 CFR 1910.147]. This standard requires employers to "establish a program consisting of energy control procedures, employee training and periodic inspections to ensure that before any employee performs any Servicing or Maintenance on a machine or equipment where the unexpected energizing, startup or release of Stored Energy could occur and cause injury, the machine or equipment shall be Isolated from the Energy Source, and rendered inoperative."

Other OSHA standards for general industry cite the need for de-energizing electrical energy and locking and tagging electrical circuits and equipment before performing Maintenance and Servicing tasks. The following OSHA standards contain Lockout/Tagout-related requirements:

  • 1910.146 - Permit-Required Confined Spaces
  • 1910.177 - Servicing Multi-Piece and Single Piece Rim Wheels
  • 1910.178 - Powered Industrial Trucks
  • 1910.179 - Overhead and Gantry Cranes
  • 1910.181 - Derricks
  • 1910.213 - Woodworking Machinery
  • 1910.217 - Mechanical Power Presses
  • 1910.218 - Forging Machines
  • 1910.261 - Pulp, Paper, and Paperboard Mills
  • 1910.262 - Textiles
  • 1910.263 - Bakery Equipment
  • 1910.265 - Saw mills
  • 1910.269 - Electric Power Generation, Transmission, and Distribution
  • 1910.272 - Grain Handling
  • 1910.305 - Wiring Methods, Components, and Equipment for General Use
  • 1910.306 - Specific Purpose Equipment and Installations
  • 1910.333 - Selection and Use of Work Practices

OSHA standards for construction also contain requirements for protecting workers from electrical hazards [29 CFR 1926.416 and 29 CFR 1926.417]. These standards require that workers exposed to any part of an electrical power circuit be protected through de-energizing and grounding of the circuit or through appropriate guarding. These standards also require that all de-Energized circuits be rendered in operable and tagged out.

Forms of Hazardous Energy

Workers may be exposed to Hazardous Energy in several forms and combinations during installation, Maintenance, service, or repair work. A comprehensive hazardous Energy Control Program should address all forms of hazardous energy [NIOSH 1983]:

  • Kinetic (mechanical) energy in the moving parts of mechanical systems
  • Potential energy stored in pressure vessels, gas tanks, hydraulic or pneumatic systems, and springs (potential energy can be released as hazardous kinetic energy)
  • Electrical energy from generated electrical power, static sources, or electrical storage devices (such as batteries or capacitors)
  • Thermal energy (high or low temperature) resulting from mechanical work, radiation, chemical reaction, or electrical resistance
Case Reports

As part of the FACE Pro gram from 1982 through 1997, NIOSH in vestigated 152 fatal incidents in which workers contacted uncontrolled Hazardous Energy. The following case reports summarize five of these investigations.

Case No. 1 - Uncontrolled Kinetic Energy

A 25-year-old male worker at a concrete pipe manufacturing facility died from in juries he received while cleaning a ribbon-type concrete mixer. The victim's daily tasks included cleaning out the concrete mixer at the end of the shift. The clean-out procedure was to shut off the power at the breaker panel (approximately 35 feet from the mixer), push the toggle switch by the mixer to make sure that the power was off, and then enter the mixer to clean it.

No one witnessed the event, but investigators concluded that the mixer operator had shut off the main breaker and then made a telephone call instead of following the normal procedure for checking the mixer before any one entered it. The victim did not know that the operator had de-Energized the mixer at the breaker. Thinking he was turning the mixer off, he activated the breaker switch and energized the mixer. The victim then entered the mixer and began cleaning with out first pushing the toggle switch to make sure that the equipment was de-energized. The mixer operator returned from making his telephone call and pushed the toggle switch to check that the mixer was de-energized. The mixer started, and the operator heard the victim scream. He went immediately to the main breaker panel and shut off the mixer.

Within 30 minutes, the emergency medical service (EMS) transported the victim to a local hospital and then to a local trauma center. He died approximately 4 hours later [NIOSH 1995].

Case No. 2 - Uncontrolled Electrical Energy

A 53-year-old journeyman wireman was electrocuted when he contacted two Energized, 6.9-kilovolt buss terminals. The victim and two coworkers (all contract employees) were in stalling electrical components of a sulfur dioxide emission control system in a 14-compartment switch house.

The circuit breaker protecting the internal buss within the switch house had been tripped out and marked with a tag, but it had not been secured by locking. This procedure was consistent with the Hazardous Energy control procedures of the power plant.

The victim and his co workers were wiping down the individual compartments before a pre-startup inspection by power plant personnel. With out the knowledge of the victim and his coworkers, power plant personnel had Energized the internal buss in the switch house. When the victim began to wipe down one of the compartments at the south end of the switch house, he contacted the A-phase buss terminal with his right hand and the C-phase buss terminal with his left hand. This act completed a path between phases, and the victim was electrocuted.

A coworker walking past the victim during the incident was blown backward by the arcing and received first-degree flash burns on his face and neck. A second coworker at the north end of the switch house heard the explosion and came to help. He notified the Contractor's safety coordinator by radio and re quested EMS. The EMS responded in about 15 minutes and transported the victim to a lo cal hospital emergency room where he was pronounced dead [NIOSH 1994].

Case No. 3 - Uncontrolled Kinetic Energy

A 38-year-old worker at a county sanitary landfill died after falling into a large trash compactor used to bale cardboard for recycling. The cardboard was lifted 20 feet by a belt conveyor and fed through a 20- by 44-inch opening into a hopper. The hopper had automatic controls that activated the baler when enough material collected in the baling chamber. When the baler was activated, material in the chamber was compressed by a ram that entered the chamber from the side. Excess material above the chamber was trimmed by a shearer.

On the day of the incident, cardboard jammed at the conveyor discharge opening. Without stopping, de-energizing, or locking out the equipment, the victim rode the conveyor up to the discharge opening to clear the jam. He fell into the hop per and the baling cycle was automatically activated, amputating his legs. The victim bled to death before he could be removed from the machine [Colorado Department of Public Health and Environment 1994].

Case No. 4 - Uncontrolled Potential Energy

The 32-year-old owner of a heavy equipment Maintenance business died after a wheel and tire assembly exploded during repair work. The victim was re moving the assembly from a test roller when it exploded and struck him with the flying split rim of the wheel.

The test roller was a large, two-wheeled cart that carried about 60,000 pounds of concrete weights. The roller was used in highway construction to test road surfaces for proper compaction. The victim had been working as a sub Contractor to re pair the wheel and tire assembly, which had been smoking earlier in the day and was believed to be rubbing against the concrete weights. The assembly consisted of a two-piece outside rim and an inside ring retainer that was held together and mounted on the axle by 20 wheel bolts and nuts. Normal air pressure for the mounted tire was 70 psi.

The victim raised and Blocked the roller. Without discharging the air from the tire and using no personal protective equipment, he began to remove the wheel nuts using a pneumatic impact wrench. He had no training or experience with this type of work or in the Servicing of this type of wheel. He did not realize that only some of the bolts held the wheel tire assembly to the axle. The remainder held the outer half of the rim to the in side half, se curing the tire to the wheel. As the victim re moved the nineteenth wheel nut, the pressurized air in the tire discharged explosively, causing the split rim to fly off the wheel and strike him. He died from cerebral contusions and lacerations [Minnesota Department of Health 1992].

Case No. 5 - Uncontrolled Kinetic and Thermal Energy

A 33-year-old janitorial worker died after he was trapped inside a linen dryer at a hospital laundry while cleaning plastic debris from the inside of the dryer drum. The cleaning task (which usually took 15 minutes to an hour) involved propping open the door to the dryer with a piece of wood and entering the 4- by 8-foot dryer drum. The melted debris was re moved by scraping and chiseling it with screw drivers and chisels. The dryer was part of an automated system that delivered wet laundry from the washer through an over head conveyor to the dryer, where it was dried during a 6-minute cycle with air temperatures of 217° to 230°F. The system control panel was equipped with an error light that was activated if the dryer door was open, indicating that the dryer was out of service.

On the night of the incident, the victim propped the door open and entered the dryer drum without de-energizing or locking out the dryer. He began to clean the inside of the drum. Although the error light had been activated when the door was propped open, the signal was misinterpreted by a coworker, who restarted the system. When the system was restarted, the overhead conveyor delivered a 200-pound load of wet laundry to the dryer, knocking out the wooden door prop, trapping the victim inside, and automatically starting the drying cycle. The victim remained trapped inside until the cycle was completed and was discovered when the load was discharged from the dryer. He died thirty minutes later of severe burns and blunt head trauma [Massachusetts Department of Public Health 1992].

Conclusions

Review of the NIOSH FACE data indicates that three related factors con tribute to injuries and deaths that occur when workers perform installation, Maintenance, service, or repair work near Hazardous Energy sources:

  • Failure to completely de-energize, isolate, block, and/or dissipate the hazardous energy source
  • Failure to lockout and tagout energy control devices and isolation points after the hazardous energy source has been de-energized
  • Failure to verify that the hazardous energy source was de-energized before beginning work

These fatalities could have been prevented if comprehensive Hazardous Energy control procedures had been implemented and followed.

Recommendations

NIOSH recommends that employers implement the following steps to prevent injuries and deaths of workers who must work with Hazardous Energy in their jobs:

  1. Comply with OSHA regulations.
  2. Develop and implement a hazardous energy control program.
  3. Identify and label all hazardous energy sources.
  4. De-energize, isolate, block, and/or dissipate all forms of hazardous energy before work begins.
  5. Establish lockout/tagout programs that:
    • require workers to secure energy control devices with their own individually assigned locks and keys - only one key for each lock the worker controls;
    • require that each lock used to secure an energy control device be clearly labeled with durable tags to identify the worker assigned to the lock;
    • make sure that the worker who installs a lock is the one who removes it after all work has been completed; and
    • if work is not completed when the shift changes, workers arriving on shift should apply their locks before departing workers remove their locks.
  6. Verify by test and/or observation that all energy sources are de-energized before work begins.
  7. Inspect repair work before reactivating the equipment.
  8. Make sure that all workers are clear of danger points before re-energizing the system.
  9. Train ALL workers in the basic concepts of hazardous energy control.
  10. Include a hazardous energy controll program with any confined-space entry program.
  11. Encourage manufacturers to design machines and systems that make it easy to control hazardous energy.

These recommendations are described in more detail in the following sections.

1. Comply With OSHA Regulations

Employers and workers must comply with OSHA regulations for controlling Hazardous Energy during Maintenance and installation work (see 29 CFR 1910.146, 1910.147, 1910.177, 1910.178, 1910.179, 1910.181, 1910.213, 1910.217, 1910.218, 1910.261, 1910.262, 1910.263, 1910.265, 1910.269, 1910.272, 1910.305, 1910.306, 1910.333, 1926.416, and 1926.417).

OSHA standards and accepted safe work practices require employers to ensure that all Hazardous Energy sources are de-Energized before work begins. If these sources can not be de-energized, OSHA requires employers to protect workers with insulation, guarding, and appropriate personal protective equipment.

2. Implement a Hazardous Energy Control Program

Employers should develop and implement a written hazardous Energy Control Program that, at a minimum:

  • describes safe work procedures,
  • establishes formal lockout/tagout procedures,
  • trains all employees in the program, and
  • enforces the use of the procedures (including disciplinary action for failure to follow them).

Hazardous Energy control programs should outline the following safe work practices:

  • Identify tasks that may expose workers to hazardous energy.
  • Identify and de-energize all hazardous energy sources, including those in adjacent equipment.
  • Lockout and tagout all en ergy-isolating devices to prevent inadvertent or unauthorized reactivation or startup.
  • Isolate, block, and/or dissipate all hazardous sources of stored or residual energy, including those in adja cent equipment.
  • Before beginning to work, verify energy isolation and de-energization, including that in adjacent equipment or energy sources.
  • After work is complete, verify that all personnel are clear of danger points before re-energizing the system.

Hazardous Energy control among workgroups must be coordinated when multiple employers are involved in large projects and when shift changes occur during such activities. Outside contractors should work with the facility owner to make sure that an adequate hazardous Energy Control Program is implemented specifically for contract workers.

3. Identify and Label All Hazardous Energy Sources

Employers should use jobsite surveys to ensure that all Hazardous Energy sources (including those in adjacent equipment) are identified before beginning any installation, Maintenance, service, or repair tasks. Hazardous energy includes mechanical motion, potential or Stored Energy, electrical energy, thermal energy, and chemical reactions. Energy-isolating devices such as breaker pan els and control valves should be clearly labeled [NIOSH 1983].

4. De-energize, Isolate, Block, and/or Dissipate All Forms of Hazardous Energy

All forms of Hazardous Energy should be de-Energized, Isolated, Blocked, and/or Dissipated before workers begin any installation, Maintenance, service, or repair work. The method of energy control depends on the form of energy involved and the available means to control it. En ergy is considered to be isolated or blocked when its flow or use cannot occur [NIOSH 1983].

To isolate or block energy, take the following steps:

  • Disconnect or shut down engines or motors that power mechanical systems.
  • De-energize electrical circuits by disconnecting the power source from the circuit.
  • Block fluid (gas, liquid, or vapor) flow in hydraulic, pneumatic, or steam systems by using control valves or by capping or blanking the lines.
  • Block machine parts against motion that might result from gravity (falling).

Some forms of energy must also be Dissipated after a system has been de-Energized. System components such as electrical capacitors, hydraulic accumulators, or air reservoirs may retain sufficient energy to cause serious in jury or death - even though the component has been de-energized, Isolated, or Blocked from the system and locked out.

Energy can be Dissipated by taking the following steps:

  • Vent fluids from pressure vessels, tanks, or accumulators until internal pressure is at atmospheric levels. However, do not vent vessels or tanks containing toxic, flammable, or explosive substances directly to the atmosphere.
  • Dis charge capacitors by grounding.
  • Release or block springs that are under tension or compression.
  • Dissipate inertial forces by allowing the system to come to a complete
  • stop after the machine or equipment has been shut down and isolated from its energy sources.
5. Establish Lockout/Tagout Programs Requiring Individually Assigned Locks and Keys to Secure Energy Control Devices

Lockout/Tagout programs should be based on the principle of only one key for each lock the worker controls. This means the following:

  • Workers are assigned individual locks operable by only one key for use in securing energy control devices** (breaker panels, control valves, manual override switches, etc.).
  • Each worker maintains custody of the key for each of his or her assigned locks.
  • Each lock is labeled with a durable tag or other means that identifies its owner.
  • When work is performed by more than one worker, each worker applies his or her own lock to the energy-securing device. Scissors-type hasps made of hardened steel are avail able to facilitate the use of more than one lock to secure an energy control device.
  • All de-energized circuits and systems are clearly labeled with durable tags.
  • The worker who installs a lock is the one who removes it after all work has been completed [NIOSH 1988].
  • If work is not complete when the shift changes, workers arriving on shift apply their locks before departing workers remove their locks.

Because tags can be easily removed, they are not a substitute for locks. Workers are safest with a program that uses both locks and warning tags to prevent systems from being inadvertently re-Energized [NIOSH 1988].

**Use of master keys should be reserved for unusual circumstances when the worker is absent from the work place. However, if master keys are necessary, keep them under supervisory control. List the proper procedures for using them in the written program for controlling hazardous energy.

6. Verify that All Energy Sources are De-energized Before Work begins

Employers should establish and enforce company policies requiring workers to verify that all energy sources are de-Energized before work begins. This verification should ensure that all energy sources (including Stored Energy) are controlled (that is, de-energized, Isolated, Blocked, and/or Dissipated) before work begins. Appropriate testing equipment should be required as needed.

7. Inspect Repair Work Before Re-energizing The Equipment

To ensure that equipment will operate as expected when it is re-Energized, employers should require qualified persons to inspect completed installation, Maintenance, service, or repair work. The inspection should verify that installation, repairs, and modifications were performed correctly and that the correct replacement parts were used. When equivalent or updated parts must be substituted for original parts, the system may need to be modified. Re-energized equipment should be closely monitored for several operating cycles to ensure that it is functioning correctly and safely.

8. Make Sure That All Persons Are Clear Of Danger Points Before Re-energizing The System

Employers should develop procedures to verify that all persons are clear of danger points before re-energizing the system. Locks and tags should be removed only by the workers who in stalled them - and only after workers have been cleared from the danger points. This may require visual inspections and searches of areas around machinery or electrical circuits to assure that workers will not be exposed to the release of Hazardous Energy when equipment is re-Energized. Workers should be informed about impending equipment start-up with warning devices they can see and hear. Such devices will help assure that workers are clear before equipment is re-energized.

9. Train Workers In The Basic Concepts Of Hazardous Energy Control

Employers should train ALL workers in the basic concepts of Hazardous Energy control, including energy isolation, locking and tagging of control devices, verifying de-energization, and clearing danger points before re-energizing equipment. Workers whose duties involve installation, Maintenance, service, or repair work should be trained in the detailed control procedures required for their particular equipment. This training should enable workers to identify tasks that might expose them to hazardous energy and the effective methods for its control.

10. Include a Hazardous Energy Control Program With Any Confined-space Entry Programs

When work requires entry into confined spaces such as utility vaults or tanks, employers should incorporate a hazardous Energy Control Program as part of their confined-space entry program - according to OSHA standards [29 CFR 1910.146 and 1910.147] and published NIOSH guidelines [NIOSH 1979, 1987].

11. Design Machines and Systems That Make It Easy to Control Hazardous Energy

Employers should encourage manufacturers to design control valves, switches, and equipment that are easy to access and lock out.

Acknowledgements

Principal contributors to this Alert were Paul Moore and Tim Pizatella of the NIOSH Division of Safety Research (DSR). Injury data were provided by the Health and Safety Department, International Union, United Auto Workers (UAW). Cases presented in this Alert were contributed by Georjean Madery, formerly of the Minnesota Department of Health; Lyle McKenzie, Colorado Department of Health; and Jon Lifvergren, formerly of the Massachusetts Department of Health. Stephanie Pratt, DSR, provided data analysis, and Larry Reed, Division of Physical Sciences and Engineering, provided many helpful comments and suggestions. Dwayne Smith, formerly of DSR, provided the first working draft of this Alert.

Source: www.cdc.gov/niosh


last modified: December 05, 2013   Printer Friendly   Top