Lockout Tagout Program

Chapter 18
LOCKOUT/TAGOUT PROGRAM
Contents
Approved by M.A. Scott
Rev. 10/13
18.1 Policy
18.2 Scope
18.3 Applicability
18.4 Exceptions
18.5 Roles and Responsibilities
18.6 Definitions
18.7 Required Work Processes
Work Process A. LOTO Program Quick Reference Map
Work Process B. Basic LOTO Rules
Work Process C. Cord-and-Plug Equipment
Work Process D. Simple LOTO by a LOTO Authorized Person
Work Process E. Complex LOTO by a LOTO Authorized Person
Work Process F. Complex LOTO Requiring a Responsible Individual
Work Process G. Group LOTO
Work Process H. Tagout Only
Work Process I. Subcontractor LOTO Permit
Work Process J. Shift Changes and Transfer of Control
Work Process K. Temporary Partial Restoration
Work Process L. LOTO Hardware
Work Process M. Training and Authorization
Work Process N. LOTO Procedures
Work Process O. Special Condition LOTO Lock Removal
Work Process P. Periodic Quality Assurance Inspections of LOTO Procedures
Work Process Q. Air Gapping
Work Process R. Interlock Systems
Work Process S. Administrative Control
Work Process T. LOTO Coordination
18.8 Source Requirements
18.9 Reference Documents
18.10 Appendices
Appendix A. Simple LOTO Memory Aid
Appendix B. Written LOTO Procedure Alternate Format
Appendix C. General LOTO Principles
NOTE:
. . . . . Denotes a new section.
. . . . . . . . Denotes the beginning of changed text within a section.
. . . . . . . . Denotes the end of changed text within a section.
____________________
18.1 Policy
All personnel who perform work on or near equipment in which the unexpected energization or start-up of the equipment, or
the release of stored energy, could cause injury shall personally lock out the equipment for the duration of their work.
18.2 Scope
1. Lockout/Tagout (LOTO) is required whenever construction, service, maintenance, modification, or demolition is
being performed on or near equipment in which the unexpected energization or start-up of the equipment, or the
release of stored energy, could cause injury to people.
2. Hazardous energy is any form of energy that can cause personal injury, including but not limited to:
a. Electrical
b. Mechanical
c. Rotational
d. Gravitational
e. Chemical
f. Pressure or vacuum
g. Hydraulic
h. Pneumatic
i. Non-ionizing radiation sources
j. Thermal
3. Lockout/Tagout (LOTO) is not required for each of the following situations:
a. Normal operations, also known as normal production operations or normal energized operations, where
the machine or equipment is utilized to perform its intended function and is covered by various chapters of
the ES&H Manual
i. Servicing or maintenance that take place during normal operations require LOTO only if:
1. A person is required to remove or bypass a guard, cover, or other safety device or
2. A person is required to place any part of his or her body into an area of a machine or piece
of equipment where work is actually performed upon the material being processed (point of
operation) or where an associated danger zone exists during a machines operating cycle
ii. Minor tool changes, adjustments, and other minor servicing activities that take place during normal
operations do not require LOTO provided that:
1. Such activities are routine, repetitive, and integral to the use of the equipment and
2. The work is performed using alternative measures that provide effective personnel
protection
b. Energized testing and troubleshooting (e.g., alignment, measuring, calibration, faultfinding) does not
require LOTO where the equipment must be energized to perform the tests.
c. Work on cord-and-plug-connected electrical equipment does not require LOTO controls when Work Process
C is followed.
d. Control of hazardous ionizing radiation is covered under the ES&H Manual Radiation Protection
Program.Work in radiation areas covered by credited control radiation safety systems does not require
LOTO controls when Work Process R is followed.
18.3 Applicability
This program is required for all Berkeley Lab employees, affiliates, students, visitors, and subcontractors who may be exposed
to hazardous energy while performing any construction, service, maintenance, modification, or demolition activity.
18.4 Exceptions
Persons performing work on projects or sites that do not fall under DOE jurisdiction are not required to follow the requirements
of this LOTO Program. However, an equivalent LOTO program meeting applicable regulatory requirements will apply.
Role Responsibilities
Environment/Health/Safety (EHS)
Division
Maintain, administer, and revise the LOTO Program as needed
Ensure that LOTO equipment is available and consistent with
Berkeley Lab standards
Develop and implement the Lockout/Tagout training courses
Periodically audit LOTO compliance
Qualified Persons Wear all required PPE and follow all required safe work practices
while performing the necessary operations and verifying the zero-
energy state of equipment to support the LOTO process
LOTO Affected Persons Follow all LOTO and safety requirements
Recognize when LOTO is being used, the general reasons for
LOTO, and the importance of not tampering with or removing a
lock and tag
LOTO Authorized Persons Recognize the conditions of work that require LOTO, assess all
hazardous energy sources, and use correct procedures and
materials to implement LOTO
Maintain control over the keys to their personal LOTO locks
Apply his or her own personal LOTO lock and tag when performing
servicing, maintenance, or modification work
Must NEVER apply a LOTO lock for anyone else
LOTO Responsible Individuals (RIs) Accountable for the safe execution of a complex or group LOTO
Conduct the LOTO briefing
Supervise the Qualified Person(s) in the execution of the LOTO
procedure
Manage all changes to the scope of work
Ensure all personnel performing work under the LOTO are LOTO
Authorized Persons and are personally locked out for their tasks
LOTO Procedure Evaluators Observe the performance of LOTO procedures for the purpose of
periodic quality assurance (QA) inspection
Verify that the LOTO procedures are adequate, are understood,
and are being followed by persons participating in the LOTO
Document the completion of the LOTO procedure inspections in
the EHS database
LOTO Approvers Review submitted LOTO procedures for completeness and
accuracy
Verify that the scope of work is clearly defined, is described in the
LOTO procedure, and that the LOTO Safe Zone established in the
LOTO procedures fully encompasses the scope of work
Approve LOTO procedures that meet all requirements in Work
Process N
LOTO Coordinators Maintain overall control of a set of LOTOs established during a
large project
Provide overall coordination with the project schedule
Resolve scheduling conflicts between different LOTOs and other
scheduled work
Ensure the various Responsible Individuals (RIs) are properly
informed of any changes that will impact their respective LOTO
procedures
Line management (including
supervisors, managers, and work
leads)
Prohibits employees from working on equipment requiring LOTO
until the worker is trained and authorized to perform LOTO
Generates and maintains written LOTO procedures where
required, and audits these LOTO procedures at least annually
Assigns and documents employee LOTO authorization, including:
o Designating specific equipment or categories of equipment
to be controlled
o Verifying that workers are qualified to perform the
necessary LOTO procedures
Determines the appropriate levels of training required for each
employee
Ensures consistent policy implementation and reinforcing LOTO
rules
Removes LOTO devices in case of a persons absence (Work
Process O)
Ensures that necessary LOTO hardware is available
Ensures that all outside contractors operating under the
supervision of the division are informed of and adhere to the
Berkeley Lab LOTO Program (Work Process I)
Ensures that periodic quality assurance (QA) inspections of LOTO
procedures are conducted
(Work Process P)
18.6 Definitions
Term Definition
Absent Person lock removal A procedure for the removal of a lock and tag by someone other than the
person who applied the lock and tag when that person is not present or
available to remove the lock
Administrative lock Any lock used for a purpose other than LOTO. The lock may serve a
safety function other than LOTO, a configuration-control function, or
other purpose. Can be any color except red.
Blocked A condition where a mechanical device is inserted into the energy path to
physically prevent movement. Most commonly used with moving parts.
Capable of being locked out An energy isolation is capable of being locked out if it has a means of
attachment to which, or through which, a lock can be affixed with the
device in the off or de-energized position, or it has a locking
mechanism built into it
Complex LOTO Any LOTO that does not meet the requirements for a simple LOTO is
called a complex LOTO. Requires an assigned Person In Charge and a
LOTO procedure.
Cord-and-plug-powered equipment Portable electric equipment, such as power tools, computers, printers,
appliances, etc., for which exposure to the hazards of unexpected
energization or start-up of the equipment is controlled by the unplugging
of the equipment from the energy source and by the plug being under
the continuous control of the employee performing the servicing or
maintenance
Credited control radiation safety
system
Specific definitions and requirements for radiation-generating devices,
radiation safety systems and credited controls are found in the ES&H
Manual Radiation Safety program; EH&S Procedure 730, Radiation
Generating Device Program; and EH&S Procedure 731, RGD Interlock
Program.
Dissipated A condition where all stored energy has been reduced to a nonhazardous
level. Pertains to energy-storing devices such as capacitors, pressure
receivers, accumulators, reservoirs, or springs
EHS Division Environment/Health/Safety Division
Energized Connected to an energy source or containing residual or stored energy
Energy isolation A mechanical device that physically prevents the transmission or release
of energy, including but not limited to the following:
Manually operated electrical circuit breaker
Manually operated disconnect switch
Manually operated switch by which the conductors of a circuit can
be disconnected from all ungrounded supply conductors, and no
pole can be operated independently
Manually operated valve
Flange blank
Pin or block
Any similar device used to block or isolate energy
Energy isolations shall be capable of being locked out. Push buttons,
selector switches, software interlocks, and control circuit type devices are
not energy isolations and cannot be used to isolate hazardous energy.
Exposure The condition of being subjected to a source of risk presented by
hazardous energy sources
Group LOTO A process to coordinate a complex LOTO so that LOTO Authorized
Persons only have to apply personal LOTO locks to a lockbox instead of
at each energy isolation
Group LOTO lock A LOTO lock used for the purpose of group LOTO. It is identified by a
group LOTO lock tag. The keys to group LOTO locks are controlled in a
LOTO lockbox.
Hazard zone The space near a source of hazardous energy where a person could be
harmed if the hazardous energy was suddenly or unexpectedly released,
such as the unexpected release of stored pressure, the unexpected
movement of a machine, the unexpected energization of an electrical
conductor, or the spray from a hazardous chemical that was
unexpectedly released
Hazardous energy Energy that is of such a magnitude that it is capable of causing harm to a
person
Hazardous energy control The process of systematically implementing mechanical means to
prevent hazardous energy from flowing to a person
Isolated A condition where a source of hazardous energy has been controlled by
physically stopping the energy path so that the energy cannot flow to
workers or equipment. The term isolated is commonly used with
electrical circuits and fluid lines.
Lockout/Tagout (LOTO) The method of applying a mechanical lockout device and a tag on an
energy isolation by a LOTO Authorized Person in accordance with
established procedures to control hazardous energies and prevent the
equipment from being operated until the lockout device is removed
Look-alike equipment Equipment that is similar in shape, size, and function that could lead a
person to lock out Item A but start working on Item B instead. Common
examples are:
North/middle/south pumps installed side by side
High-voltage switching stations with rows of switchgear
Sets of laboratory furnaces installed in a row
LOTO Affected Person A person whose job requires him/her to be near or around the hazard
zone (but not within the hazard zone) when equipment or an apparatus
is being maintained or serviced under a locked-out or tagged-out
condition
LOTO Approver The LOTO Approver is a person designated by the division to approve
LOTO procedures. LOTO Approvers must be authorized as a LOTO
Responsible Individual and have technical competence and familiarity
with the equipment or systems for which the LOTO procedure is written.
They must obtain additional technical assistance as required from
qualified persons who are more familiar with the systems involved.
LOTO Authorized Person A person who has completed the required LOTO training (general and
procedure-specific) and is authorized by the supervisor or work lead to
perform LOTO on energy isolation points to perform service or
maintenance. Only LOTO Authorized Persons shall apply locks and tags to
control hazardous energy.
LOTO Coordinator The LOTO Coordinator is a LOTO Approver who has been assigned by line
management to oversee and coordinate multiple LOTOs for a large
project, such as a maintenance outage or building energization
LOTO device A device or combination of devices that, when applied to an energy
isolation and fitted with a LOTO lock or a LOTO hasp:
1. Mechanically prevents the actuation of the energy isolation and
2. Holds fast to the energy isolation until the LOTO lock or LOTO
hasp has been removed
LOTO lock A keyed red padlock used only for the purpose of LOTO
LOTO lockbox A lockable box used to contain the key(s) of group LOTO locks during a
group LOTO procedure
LOTO procedure A formal written document, approved by a LOTO Approver, that details
the scope of work performed under the LOTO, the energy isolations to be
established, and all steps required to execute the LOTO
LOTO Procedure Evaluator A person trained as a LOTO Responsible Individual, and assigned to
inspect LOTO procedures (Work Process P)
LOTO Responsible Individual (RI) The LOTO Responsible Individual (RI) is a Person In Charge of a LOTO
who has been trained to properly execute and manage LOTO procedures
of a more complex nature than those allowed by a LOTO Authorized
Person.
The following instances of complex LOTO require an RI:
1. Group LOTO (Work Process G)
2. Tagout only (Work Process H)
3. Multiple employers (Work Process I)
4. Shift changes (Work Process J)
5. Temporary partial restoration (Work Process K)
LOTO Responsible Individual (RI)
lock
A LOTO lock applied by the LOTO responsible individual (RI) for the
purpose of controlling a complex or group LOTO. It is identified by an RI
LOTO lock tag. The keys to LOTO RI locks are controlled by the RI. LOTO
RI locks also function as personal LOTO locks for the RI.
LOTO Safe Zone The portion of a system that has been placed in a safe work condition by
executing the LOTO procedure
LOTO tag A distinctive, durable tag approved by Berkeley Lab to identify a lockout
device and the purpose of the lock. The LOTO tag is attached to the
LOTO lock shackle.
Different types of LOTO tags include:
Personal LOTO tag
RI LOTO tag
Group LOTO tag
Tagout-only tag
Normal production operations The utilization of a machine or equipment to perform its intended
production function
Person In Charge The designated person accountable for the safe execution of the lockout
Personal LOTO lock A LOTO lock issued to a LOTO Authorized Person for the purpose of
individual control. No other person has the key or means of opening it.
Qualified Person A person who, by reason of experience and instruction, has
demonstrated familiarity with the construction, installation, maintenance,
and operation of the equipment, installations, and the hazards involved,
has been designated by the supervisor or work lead to perform work on
equipment. This employee also is required to be current with all required
qualification training.
Qualified Electrical Person A qualified person specifically authorized to work on electrical systems.
For specific requirements, see the ES&H Manual Electrical
Safety program.
Safe work condition A condition whereby the equipment has been placed in a zero-energy
state and controlled to prevent re-energization through the process of
lockout. Equipment is not safe to work on until it is in a safe work
condition.
Servicing and/or maintenance Workplace activities such as constructing, installing, setting up,
adjusting, inspecting, modifying, maintaining, and/or servicing machines
or equipment. These activities include lubricating, cleaning, or
unjamming machines or equipment; and making adjustments or tool
changes where the employee may be exposed to the unexpected
energization or start-up of the equipment or release of hazardous
energy.
Setting up Any work performed to prepare a machine or equipment to perform its
normal production operation
Simple LOTO A process to establish a LOTO on equipment without a written LOTO
procedure.
The simple LOTO process is allowed only if all the following conditions are
met:
1. The equipment is fed from a single energy source that can be
isolated with a single isolation that is lockable, is readily
identifiable, and is in the same location as the equipment.
2. The equipment has no capacity for stored energy.
3. The equipment shutdown or start-up steps do not require a
particular sequence.
4. The work to be performed does not involve multiple crews,
multiple crafts, or multiple employers.
5. The work to be performed will be completed within one work
period (i.e., one shift or one day).
Stored energy source Any device capable of holding energy after equipment shutdown. This
includes, but is not limited to, capacitors, tanks, pipes, springs, and
flywheels.
Subcontractor LOTO Permit The subcontractor LOTO permit is a LOTO procedure designed for
subcontractors. It incorporates the standard Berkeley Lab LOTO
procedure format with a process to verify that subcontractors have
received the appropriate training and supervision prior to participating in
a LOTO.
Tagout only The placement of a LOTO tag directly on an energy isolation because the
energy isolation cannot accommodate a LOTO lock.
Trapped key interlock system An access control system where a key is held captive until a certain
condition is satisfied. When the key is released, it is carried to unlock
another enclosure or set of keys. The key is again held captive in the
new enclosure while the enclosure is unlocked.
Zero-energy state A condition reached when all hazardous energy sources to or within
equipment are isolated, dissipated with no possibility of re-accumulation,
and verified as absent through proper testing.

1. The following is a reference guide to the rest of this document. Its intent is to guide the reader to the appropriate
work processes with a brief overview. Detailed requirements are found in the referenced sections.
2. An introduction to the core rules of LOTO is found in Work Process B, Basic LOTO Rules.
3. Cord-and-plug equipment is exempt from LOTO and may be controlled by anyone who has received basic
electrical safety training. See Work Process C, Cord-and-Plug Equipment.
4. LOTO processes that can be performed directly by a LOTO Authorized Person are found in the following:
a. Work Process D, Simple LOTO by a LOTO Authorized Person
b. Work Process E, Complex LOTO by a LOTO Authorized Person
5. LOTO processes of a complex nature require additional training. The following activities must be carried out by a
designated RI:
a. Work Process F, Complex LOTO Requiring a Responsible Individual
b. Work Process G, Group LOTO
c. Work Process H, Tagout Only
d. Work Process I, Subcontractor LOTO
e. Work Process J, Shift Change & Transfer of Control
f. Work Process K, Temporary Partial Restoration
6. Additional programmatic requirements are found in the following sections:
a. Work Process L, LOTO Hardware
b. Work Process M, Training and Authorization
c. Work Process N, LOTO Procedures
d. Work Process O, Special Condition LOTO Lock Removal
e. Work Process P, Periodic Quality Assurance Inspections of LOTO Procedures
7. The following work processes are commonly associated with energy control but are not integral to the LOTO
process. They describe how to properly integrate these work practices with the LOTO Program.
a. Work Process Q, Air Gapping
b. Work Process R, Interlock Systems
c. Work Process S, Administrative Control
d. Work Process T, LOTO Coordination

Figure A-1. Flowchart of the Major Elements of the LOTO Program

1. Lockout/Tagout (LOTO) is the process of establishing a safe work condition on equipment prior to performing
work. A safe work condition is when the equipment has been placed in a verified zero-energy state and positively
controlled to prevent unexpected re-energization.
2. Lockout/Tagout (LOTO) is required whenever construction, service, maintenance, modification, or demolition is
being performed on or near equipment in which the unexpected energization or start-up of the equipment, or the
release of stored energy, could cause injury to people or damage to equipment. This includes access to areas
where it would be unsafe unless the equipment were shut down and de-energized.
3. All persons performing work on locked out equipment shall apply their personal LOTO lock(s) to that equipment.
These persons shall be trained and authorized as LOTO Authorized Persons in accordance with Work Process M .
4. LOTO Authorized Persons shall only apply their own personal LOTO lock. No person shall ever remove another
persons personal LOTO lock, except under the restrictions of Work Process O , Special Condition LOTO Lock
Removal.
a. Note: The system operator control method found in OSHA 1910.269(d)(8)(v) is not applicable or
permitted at Berkeley Lab.
5. No person shall operate or attempt to operate any energy isolation to which a LOTO lock or tag is attached other
than during the initial challenge when establishing the LOTO.
6. For all LOTO devices, the LOTO Authorized Person applying the LOTO device must be knowledgeable about the
proper use and application of the device. LOTO devices that are improperly affixed, or that are used on energy
isolations for which they were not designed, may fail to prevent actuation of the isolation or fall off entirely. For
this reason:
a. Upon initially applying the LOTO device, the isolation is challenged to ensure that it will not operate.
b. After this initial challenge, other persons MUST NOT challenge the LOTO device unless all LOTO locks have
been removed. This is to prevent the unintentional energization when the LOTO device is improperly
applied.
c. If any person should suspect that a LOTO device has been improperly applied, they must immediately
contact the Person In Charge for resolution. If necessary, the Person In Charge must stop work and have
all LOTO Authorized Persons remove their personal locks in order to correct the discrepancy.
7. The LOTO Safe Zone is the extent of equipment that has been placed in a safe work condition. It is defined by the
energy isolations that were selected for the LOTO.
8. The LOTO Safe Zone must always encompass the entirety of the expected scope of work. If the scope of work is
expected to shift outside of the LOTO Safe Zone, then the work must be stopped and the LOTO must be changed
in order to accommodate the new scope of work.
9. All lockouts shall be established following the requirements in this program. Push buttons, selector switches,
software interlocks, and control circuits are not energy isolations and cannot be used to isolate hazardous energy.
10. The Person In Charge of a LOTO procedure must ensure that the LOTO Safe Zone always matches the scope of
work at any given time. Only LOTO Authorized Persons and Qualified Persons may perform the necessary
manipulation and testing required to establish the lockout. This includes equipment shutdown, operation of
isolation devices, releasing stored energy, and verification of de-energization. When work is finished, this
requirement also includes restoration, re-energization, and start-up of the equipment.

1. Cord-and-plug equipment refers to any utilization equipment that uses a plug and cord to connect to a source of
hazardous energy. While the most common application is with an electrical cord and plug, other applications
include any type of quick-disconnect fitting, such as for pneumatic tools.
2. Persons working under the cord-and-plug exemption are not required to be LOTO Authorized Persons. However,
persons that perform work on electrical equipment under the cord-and-plug exemption must be trained in
EHS0260, Basic Electrical Hazards and Mitigations. See the ES&H Manual Electrical Safety program for more
information.
3. Cord-and-plug equipment is exempt from LOTO controls when:
a. There is a single energy source
b. All hazardous energy is controlled by unplugging the equipment
c. The plug remains under the continuous positive and exclusive control of the worker performing the work
i. Positive Control: This requires that the plug be within arms reach of the worker.
ii. Exclusive Control: This requires that only one person is working on the equipment.
4. For cord-and-plug equipment that does not meet the exemption requirements, the LOTO process shall be applied.
5. Examples that meet the requirements for the cord-and-plug exemption:
a. A benchtop instrument with a 120 VAC, 15 Amp cord. It has no stored energy, and unplugging the cord
completely removes all hazardous energy from the device.
b. A welder with a 480 VAC, 100 Amp cord. It has no stored energy, and unplugging the cord completely
removes all hazardous energy from the device.
c. A bandsaw with a 120 VAC, 15 Amp cord. It has no stored energy, and unplugging the cord completely
removes all hazardous energy from the device.
d. A pneumatic wrench with a 100 psig hose and quick-disconnect fitting. It has no stored energy, and
unplugging the hose completely removes all hazardous energy from the device.
6. Examples that do not meet the requirements for the cord-and-plug exemption:
a. Rack-mounted instrument with a 120 VAC, 15 Amp cord. The cord plugs into a power strip located in the
back of the unit and is not accessible from the front. A simple LOTO is required.
7. A benchtop laser with 120 VAC, 15 Amp cord and an internal capacitor bank. The stored energy requires a
complex LOTO. Hard-wired electrical utilization equipment shall not be converted to cord-and-plug connection
unless it meets the requirements and intent of NFPA 70 National Electrical Code (NEC) Article 400.7 and 400.8.

1. The simple LOTO process is a LOTO that does not require a LOTO procedure. This process may be used by a
LOTO Authorized Person to establish a safe work condition prior to performing work. The LOTO Authorized Person
is responsible for determining whether the conditions for the simple LOTO process are satisfied. If these
conditions are not satisfied, then the LOTO Authorized Person shall follow the complex LOTO process.
2. Conditions: The simple LOTO process is allowed only if all of the following conditions are met:
a. The equipment is fed from a single energy source that can be isolated with a single isolation that is
lockable, is readily identifiable, and is in the same location as the equipment to be worked upon.
b. The equipment has no capacity for stored energy.
c. The equipment shutdown or start-up steps do not require a particular sequence.
d. The work to be performed does not involve multiple crews, multiple crafts, or multiple employers.
e. The work to be performed will be completed within one work period (shift or day).
3. The simple LOTO process does not require a written LOTO procedure. Instead, the LOTO Authorized Person is
responsible for determining what should be isolated and how to establish the LOTO. The LOTO Authorized Person
must therefore be intimately familiar with the steps described in this process. Appendix A is available as a short-
form memory aid to assist the LOTO Authorized Person in properly executing the LOTO.
4. In order to execute the simple LOTO process, the LOTO Authorized Person shall also be a Qualified Person on the
system. If a LOTO Authorized Person requires a simple LOTO but is not a Qualified Person on the system, the
LOTO Authorized Person may request assistance from a properly LOTO Authorized and Qualified Person. After the
Qualified Person establishes a safe work condition, the LOTO Authorized Person shall then apply their personal
LOTO lock. This process does not require a complex LOTO or LOTO procedure.
a. Only Qualified Electrical Persons, as designated in the ES&H Manual Electrical Safety program, may
perform LOTO on electrical equipment for the purpose of working on electrical circuits.
b. For other forms of hazardous energy, this qualification depends on line-management authorization.
5. Establish the LOTO.
a. Step 1 Identify energy source and related hazards/controls.
i. Assess the type, magnitude, and hazards of the energy to be controlled. If there is more than one
energy source, or if there is a source of stored energy, then the simple LOTO method may not be
used. Follow the complex LOTO method instead.
ii. Determine the appropriate method for controlling the source of hazardous energy. Methods for
energy isolation may include such things as circuit breakers, disconnect switches, or valves.
Remember that control circuits such as push buttons, selector switches, emergency stops,
contactors, and remotely operated valves are not energy isolations.
iii. Determine the appropriate safe work practices for performing the isolation and verification of zero-
energy state. Only a Qualified Person wearing proper PPE may operate the isolation and perform
verification of zero-energy state.
b. Step 2 Notify affected persons.
i. Notify all Affected Persons of the impending shutdown and lockout. These persons must be
informed that they are not to disturb the lockout device or attempt to restart the equipment until
they are informed that the lockout has been cleared and it is safe to resume normal operations.
c. Step 3 Shut down equipment.
i. Verify that it is safe to shut down equipment, then perform normal equipment shutdown. Turn off
or shut down the equipment using the established method for that equipment.
d. Step 4 Isolate energy source.
i. Identify the correct energy-isolation device before operation. Take steps to ensure that the means
used (disconnect, valve, etc.) for energy isolation correctly corresponds to the equipment on which
LOTO is being performed. Check the isolation label and match it to the label on the equipment.
Take special care with look-alike equipment.
ii. Isolate the energy source by operating the energy isolation (switch off, valve off, etc.).
e. Step 5 Apply LOTO lock and tag.
i. Equipment design may require performing the verification in Step 6 prior to the application of lock
and tag.
ii. Apply the required LOTO device to the energy isolation in such a way that it physically prohibits
operation of the energy isolation. Use a LOTO hasp if multiple LOTO Authorized Persons will
perform work. Apply the Personal LOTO lock and tag to the LOTO device. Write name, phone
number, and any other relevant information on the LOTO tag.
f. Step 6 Verify proper isolation.
i. Challenge the LOTO:
1. DO NOT ATTEMPT TO OPERATE THE ENERGY ISOLATION IF ANY OTHER LOTO LOCK IS
ALREADY APPLIED. DOING SO COULD RESULT IN INADVERTENT ENERGIZATION OF THE
SYSTEM AND EXPOSE PERSONNEL TO HAZARDOUS ENERGY.
2. EVERY TIME: Challenge your personal LOTO lock to ensure that the lock is fully latched.
3. ONLY IF YOU ARE APPLYING THE FIRST LOTO LOCK: Challenge the LOTO device to ensure
that it cannot be removed from the isolation.
4. ONLY IF YOU ARE APPLYING THE FIRST LOTO LOCK: Challenge the energy isolation to
ensure it will not operate.
ii. Attempt to start equipment:
1. Attempt to restart the equipment using the normal equipment controls.
2. Verify the equipment will not power up or start.
iii. Verify zero energy:
1. Test the energy source using appropriately rated instruments.
2. Any instrument used to test for voltage, pressure, or temperature shall be checked for
proper operation both before and after use on a known live source.
3. The test point must be directly connected to the energy isolation. There cannot be other
system components (such as check valves, contactors, other in-line switches or fuses)
between the test point and the isolation, as these may mask the presence of energy on a
deficient isolation.
4. All energy is to be treated as present until positively proven otherwise. This means that
applicable safe work practices and required PPE shall be used to perform the test for zero-
energy state.
6. Perform the Work
a. The lockout shall remain in place for the duration of work.
b. Other LOTO Authorized Persons may join the LOTO by applying their personal LOTO lock and tag.
c. The LOTO Authorized Persons must remain vigilant and ensure that the scope of work does not extend out
of the LOTO Safe Zone. If the persons performing work identify a task that falls out of the LOTO Safe
Zone, then work will be stopped and a decision will be made either to modify the LOTO or to forego the
work until the LOTO can be modified.
7. Release from LOTO
a. Step 1 Confirm It Is Safe to Re-energize
i. Confirm that the work for which the LOTO was applied has been completed and that it is safe to re-
energize equipment. Clear all tools and personnel. Check the work area to ensure that all tools,
debris, and personnel are at a safe distance from the equipment. Replace safety guards. Check the
equipment to ensure that any removed guards are reinstalled.
ii. Confirm that all employees are in a safe position. Ensure all persons remain clear of the
equipments point of operation or hazard zone.
b. Step 2 Remove LOTO Locks and Tags
i. Remove all personal LOTO lock(s) and tag(s) from the isolation. Each personal LOTO lock shall only
be removed by the LOTO Authorized Person who applied it.
1. Exception: If the person who placed the lock and tag is not available, the procedure for
Absent Person removal of LOTO devices shall be followed (Work Process O).
c. Step 3 Notify all Affected Persons that the LOTO has been released and equipment will be re-energized.
d. Step 4 Re-energize and restore the equipment to the normal condition.
8. Simple LOTO Continuing for More Than One Work Period
a. When a simple LOTO lasts for more than one work period, the LOTO Authorized Person must transition the
LOTO to a complex LOTO under Work Process E or Work Process F.
b. Alternatively, a logbook may be used to record the following and satisfy the requirements:
i. Names of all LOTO Authorized Persons participating in the LOTO
ii. Identification of the equipment locked out
iii. Identification of the energy isolation
iv. Purpose of the LOTO, including a brief description of the scope of work
v. Date and time LOTO was established
c. Equipment that will be placed out-of-service for an extended period of time should be controlled using an
administrative lock (Work Process S) instead of a LOTO lock when no work is being performed.
1. The complex LOTO process is triggered anytime the conditions for the simple LOTO (Work Process D) cannot be
met. It requires an approved written LOTO procedure and a designated Person In Charge who is accountable for
the safe execution of the LOTO.
2. For complex LOTOs involving group LOTO (lockbox), tagout only, multiple employers, temporary partial
restoration, or shift changes, Work Process F, Complex LOTO Requiring a Responsible Individual, must be
followed.
3. Every complex LOTO shall have an approved written LOTO procedure that meets the requirements of Work
Process N.
a. The LOTO procedure is a formal written document, approved by a LOTO Approver, which details the scope
of work performed under the LOTO and the energy isolations to be established.
b. The LOTO procedure also details, where required, the method of stored energy dissipation and any specific
sequence required for the shutdown.
c. The LOTO procedure must be printed out and completed every time the LOTO is performed and posted at
the jobsite or otherwise made available for LOTO Authorized Persons to reference.
4. In order to execute a complex LOTO, the LOTO Authorized Person should also be a properly Qualified Person on
the equipment. If a LOTO Authorized Person requires a complex LOTO but is not a Qualified Person on the
system, the LOTO Authorized Person must request assistance from a properly LOTO Authorized and Qualified
Person. After the Qualified Person establishes a safe work condition, the LOTO Authorized Person shall then apply
their personal LOTO locks.
a. Only Qualified Electrical Persons, as designated in the ES&H Manual Electrical Safety program, may
perform LOTO for the purpose of working on electrical equipment.
b. For other forms of hazardous energy, this qualification depends on line-management authorization.
5. Establishing the Complex LOTO
a. Step 1 Preparation
i. Print out and review the LOTO procedure. Verify that the scope of work to be performed is
described in the LOTO procedure, and that the LOTO Safe Zone is adequate for all planned work.
ii. If the LOTO procedure requires revision or is otherwise inadequate, STOP WORK and contact the
equipment owner to obtain the proper LOTO procedure.
iii. Determine whether you are a Qualified Person who has been trained to perform the isolations and
zero-energy verifications described in the LOTO procedure. If not, contact a Qualified Person and
have him or her assist you in executing the LOTO procedure.
b. Step 2 Notification
i. Notify all Affected Persons of the impending shutdown and lockout. Affected Persons must be
informed that they are not to disturb the lockout devices or attempt to start up the equipment until
they are informed that the LOTO has been cleared and it is safe to resume normal operations.
c. Step 3 Follow the LOTO Procedure
i. Shut down the equipment. Some LOTO procedures will have a required sequence to properly shut
down the equipment. This will be attached to the isolation checklist and must be followed exactly
as described.
ii. Using the isolation checklist, verify that all isolations have been established and that absence of
energy has been positively verified. It is not acceptable to only perform some of the isolations
listed on the LOTO procedure. For each isolation listed on the LOTO procedure, the simple LOTO
steps are followed, including:
1. Shutdown
2. Isolation
3. Application of locks and tags
4. Verification
iii. Some isolations may also require stored energy dissipation. The exact method of dissipation will be
described in the LOTO procedure.
iv. Sign off the LOTO procedure to indicate that the LOTO procedure has been established.
v. Post the completed LOTO procedure next to the work area.
6. Performing Work under a Complex LOTO
a. The lockout shall remain in place until work on the equipment is complete.
b. Other LOTO Authorized Persons may join the LOTO after obtaining clearance from the Person In Charge.
The LOTO Authorized Persons shall then apply their personal LOTO locks and tags to each of the energy
isolations listed in the LOTO procedure.
c. The Person In Charge of the LOTO must remain vigilant and ensure that the scope of work does not
extend beyond the LOTO Safe Zone. If the persons performing work identify a task that falls out of the
LOTO Safe Zone, then work will be stopped and a decision will be made either to submit a new LOTO
procedure for approval or to forego the work until the LOTO can be modified.
d. If it is necessary to temporarily remove only one or some LOTO devices before work is complete, such as
for testing or repositioning equipment, a Responsible Individual must be assigned according to Work
Process F before following Work Process K, Temporary Partial Restoration.
7. Releasing the Complex LOTO
a. Step 1 Confirm That It Is Safe to Re-energize.
i. Confirm that the work for which the LOTO was applied has been completed and that it is safe to re-
energize equipment. Clear all tools and personnel. Check the work area to ensure that all tools,
debris, and personnel are at a safe distance from the equipment. Replace safety guards. Check the
equipment to ensure that any removed guards are reinstalled.
ii. Confirm that all employees are in a safe position. Ensure all persons remain clear of the
equipments point of operation or hazard zone.
b. Step 2 Removal of Locks and Tags
i. Remove LOTO lock(s) and tag(s). Personal LOTO locks shall only be removed by the LOTO
Authorized Person who applied it, with the following exception: If the person who placed the
lock and tag is not available, the procedure for Absent Person removal of LOTO devices shall
be followed (Work Process O)
c. Step 3 Notify all affected persons that the LOTO has been released and equipment will be re-energized.
d. Step 4 Re-energize and restore the equipment to the normal condition.
e. Step 5 Sign off the LOTO procedure to indicate that the complex LOTO has been cleared. Place the
completed LOTO procedure in a location for safekeeping.

1. The Responsible Individual (RI) is a Person In Charge of a LOTO who has been trained to properly execute and
manage LOTO procedures of a more complex nature than those allowed under Work Process E.
2. The following instances of complex LOTO require a Responsible Individual:
a. Group LOTO (Work Process G)
b. Tagout only (Work Process H)
c. Multiple employers (Work Process I)
d. Shift changes (Work Process J)
e. Temporary partial restoration (Work Process K)
3. Designating an RI for a particular LOTO procedure triggers the following additional requirements:
a. RI LOTO locks
b. Formal LOTO briefing
4. RI LOTO Locks
a. An RI LOTO lock is a LOTO lock applied by the RI of a particular lockout. It is identified by the RI LOTO tag
attached to the LOTO lock. The RI LOTO locks enable the RI to maintain positive control of the isolations.
b. An RI LOTO lock applied to an energy isolation indicates that:
i. This particular isolation was performed for the purpose of LOTO
ii. All verification steps were completed satisfactorily and witnessed by the RI
iii. This particular isolation has been maintained under continuous positive control by the RI since
performing the verification steps
c. RI LOTO locks allow the RI to witness the verification of zero-energy state without passing on that
requirement to subcontractors.
d. RI LOTO locks also function as personal LOTO locks for the RI.
5. Formal LOTO Briefing
a. A formal LOTO briefing is the process of verbally communicating the detailed specifics of the LOTO to all
LOTO participants. This includes the Qualified Persons supporting the LOTO and the LOTO Authorized
Persons who will be adding their personal LOTO locks once the LOTO is established.
b. The LOTO briefing is always conducted in person by the Responsible Individual assigned to the LOTO
procedure.
c. The primary topics of the LOTO briefing are:
i. Detailed description of the scope of work
ii. Detailed description of the LOTO Safe Zone
iii. Overview of expected conditions, or expected future modifications to the LOTO to support the work
iv. Discussion over what additional LOTO processes will be employed (such as transfer of control,
temporary restoration for repositioning or testing, group lockbox, tagout-only conditions, etc.)
d. The LOTO briefing is a critical part of the LOTO process. All LOTO Authorized Persons must obtain a LOTO
briefing from the Responsible Individual prior to applying personal LOTO locks.
e. The LOTO briefing may be split into two parts:
i. The briefing performed just before establishing the LOTO. This briefing typically focuses on the
Qualified Persons supporting the LOTO.
ii. The briefing performed after the LOTO is established but before the LOTO Authorized Persons apply
their personal LOTO locks. This briefing typically focuses on the LOTO Authorized Persons.
f. The LOTO briefing is repeated at the beginning of each shift for any LOTO Authorized Person that needs to
apply their Personal LOTO Locks.
g. The LOTO briefing is performed before and after temporary partial restoration (Work Process K).
6. The Responsible Individual must identify conditions where additional measures may be required to ensure the
safety of all persons involved in the LOTO. These conditions include situations where the LOTO Safe Zone is
difficult to readily identify, or where multiple changes in scope result in transitions from one LOTO permit to the
next. Additional measures may include added supervision, special temporary marking of equipment, or additional
LOTO briefings.
7. Steps for implementing the Complex LOTO by a Responsible Individual
a. Print out and review the LOTO procedure. Verify that the scope of work to be performed is reflected on the
procedure, and that the LOTO Safe Zone is adequate for all planned work. If the LOTO procedure requires
revision or is otherwise inadequate, contact the equipment owner to obtain the proper LOTO procedure.
b. Using the LOTO procedure, follow all of the steps in the complex LOTO work process.
c. For each isolation, the Responsible Individual must place an RI lock as the first lock.
d. The Responsible Individual must brief all the LOTO Authorized Persons before they apply personal locks to
the isolations.
e. When the work has been completed and after each LOTO Authorized Person has removed his/her
respective personal LOTO locks from the isolations, the Responsible Individual removes the RI Lock from
the isolations, and returns the equipment to service.

1. A group LOTO is a process used to perform a complex LOTO with a lockbox. Instead of applying personal LOTO
locks to each energy isolation, the energy isolations are locked out with group LOTO locks. The keys to the group
LOTO locks are placed in the lockbox, which is then locked by the Responsible Individual (RI) and each LOTO
Authorized Person.
2. The RI may elect to use the Group LOTO process at any time to better facilitate the coordination of a LOTO.
Group LOTO is required when performing tagout only (Work Process H). Otherwise, group LOTO is not required
but may present a desirable solution to effectively manage a large number of persons or isolations.
3. Group LOTO Locks
a. A group LOTO lock is a LOTO lock used specifically for group LOTO. It is identified by the group LOTO tag
attached to the LOTO lock.
b. A group LOTO lock is applied by the RI to the each energy isolation during the execution of a group LOTO
procedure. The keys to the group LOTO locks are then placed in a lockbox, which is then locked with an RI
lock. Group LOTO locks are mandatory for the group LOTO method.
c. A group LOTO lock applied to either an energy isolation device or to another lockbox indicates that:
i. A particular isolation was performed for the purpose of group LOTO
ii. All verification steps were completed satisfactorily and witnessed by the RI
iii. This particular energy isolation has been maintained under continuous positive control by the RI
since performing the verification steps
4. Steps to Implement a Group LOTO
a. The RI determines that the group LOTO work process is appropriate.
b. The RI executes the written LOTO procedure as described in Work Process F.
c. Instead of RI Locks, the RI must apply group LOTO locks to the hasps on the energy isolations.
d. The RI shall place the group LOTO lock keys inside a lockbox.
e. The RI must lock the lockbox closed with an RI lock and tag on the outside of the lockbox.
f. The RI must attach the completed LOTO procedure to the lockbox.
g. The RI must brief all LOTO Authorized Persons before they apply personal locks to the lockbox.
h. All other workers performing work on the equipment satisfy themselves that the group LOTO procedure
has been completed, and then apply their personal LOTO lock and tag to the lockbox in a manner that
prevents access to the enclosed key(s) until all locks have been removed from the box.
i. When the work has been completed, and after each worker has removed his/her respective personal LOTO
lock from the lockbox, the RI removes their RI lock from the outside of the lockbox, obtains the group
LOTO lock keys from the lockbox, removes the group LOTO locks, and returns the equipment to service.
5. There are times where the RI must take additional measures to accommodate a LOTO Authorized Person who has
concerns about a group LOTO or who is not fully satisfied with the group LOTO method. The RI shall make
necessary arrangements to accommodate such requests.
a. Any LOTO Authorized Person may request to either witness the verification or reverification of zero-energy
state on some or all of the energy isolations. In this case, the RI must coordinate with a Qualified Person
to perform the requested verifications.
b. Any LOTO Authorized Person may request to not participate in the group LOTO and instead apply personal
LOTO locks directly to the isolations, next to the group LOTO locks. The LOTO must then be treated as a
complex LOTO under Work Process F. Under the direction of the RI, who must be physically present, the
LOTO Authorized Person must apply their personal LOTO locks to each energy isolation listed on the LOTO
procedure without exception.
6. Location
a. Once established, the LOTO lockbox must be kept in a location that is accessible to the LOTO Authorized
Persons participating in the group LOTO.
7. Pyramiding
a. One or more lockboxes can be referenced under a master complex LOTO procedure or another group
LOTO procedure. This is useful when managing lockouts with extensive scope and complexity.
b. There must be only one group LOTO procedure per lockbox. If it is necessary to group multiple LOTO
procedures under one master lockbox, each procedure must first be built into its own separate group
LOTO. When pyramiding lockboxes, each lockbox must have its own LOTO procedure attached to the
lockbox. The master lockbox LOTO procedure must reference each subordinate lockbox by a separate line
item on the isolation checklist.

1. Tagout only is the practice of applying a LOTO tag without a LOTO lock, where the physical construction of the
energy isolation does not accommodate the attachment of a lock.
2. Extra caution shall be exercised when using a tagout-only procedure. Tags may evoke a false sense of security.
Tags are warning devices and do not provide the physical restraint provided by a lock.
3. Criteria:
a. In the rare case that a device is not capable of being locked out, this Work Process H may be used,
subject to the following conditions:
i. A justifiable and verifiable need must be identified.
ii. Formal approval must be obtained from the immediate supervisor or other line management.
iii. Any energy isolation capable of being locked shall be locked WITHOUT EXCEPTION.
4. Examples of tagout-only situations include:
a. Circuit breakers actuated by handles mounted on the exterior of a panel door
i. When work is required inside the enclosure, opening the enclosure disconnects the actuating
handle from the breaker. This defeats the application of a LOTO lock on the handle, and there is
usually no physical means to apply a lock inside the enclosure, directly to the breaker.
ii. In this case, a tagout must be applied to the breaker inside the enclosure. Additional measures can
include removing the actuator-connecting bar or also tagging out the handle on the door. The
concern is that, should the door be closed, the handle could be operated, closing the breaker.
b. Street valves located in deep holes with no possible means of attaching a lockout device
c. Fuse removal
d. Blanking, blocking, blind flanging, or capping a pipe system
5. Performing a tagout-only procedure requires a secondary measure. At Berkeley Lab, the secondary measure
consists of utilizing a serialized LOTO tag, where a detachable stub has a matching serial number. The detachable
stub is placed in a lockbox, and the tagout-only procedure is performed like the group LOTO method.
6. Procedure
a. Tagout must only be conducted under group LOTO (Work Process G).
b. To tag out an isolation, the Responsible Individual must follow all the steps outlined in the group LOTO
work process, with the following changes:
i. The written LOTO procedure line item for the isolation to be tagged out must indicate:
1. That the isolation is TAGOUT ONLY
2. The serial number of the group LOTO tag (May be handwritten)
ii. Directly affix to the isolating device a serialized tagout tag with a detachable stub instead of a
group LOTO lock.
iii. The tag attachment means shall be capable of withstanding at least 50 pounds of force exerted at
a right angle to the disconnecting means surface.
iv. The tag attachment means shall be nonreusable, attachable by hand, self-locking, and
nonreleasable, equal to an all-environment-tolerant nylon cable tie.
v. Tear off the tagout tag stub and place it in the lockbox. Write the tag serial number onto the group
LOTO procedure.
vi. Complete the group LOTO procedure. Once the procedure is completed, the RI locks the box with
the RI lock. All persons performing work under the tagout will then apply their personal LOTO locks
to the lockbox.

1. The subcontractor LOTO permit is a LOTO procedure designed for subcontractors. It incorporates the standard
Berkeley Lab LOTO procedure format with a process to verify that subcontractors have received the appropriate
training and supervision prior to participating in a LOTO.
2. All subcontractors performing work for Berkeley Lab are required to conform to the Berkeley Lab LOTO Program.
This Work Process I contains additional requirements to ensure that subcontractors are adequately managed and
protected from hazardous energy exposures. The subcontractor LOTO permit process is in place to implement
these requirements.
3. Subcontractors include all construction and non-construction subcontractors, all vendors, and all manufacturer
representatives or other persons performing or participating in LOTO who are not covered under the Berkeley Lab
employee Job Hazards Analysis program and are therefore not subject to employee LOTO training and
authorization requirements.
4. All subcontractor LOTO permits require a designated LOTO Responsible Individual (RI) and are implemented by
following Work Process F, Complex LOTO Requiring a Responsible Individual. The Subcontractor LOTO permit
may waive the requirement for RI locks on a case-by-case basis.
5. The LOTO RI submits Subcontractor LOTO permit requests to the LOTO Permit Database. The requests are
reviewed and approved by the designated LOTO Approver who is responsible for the area involved. Prior to
participating in any LOTO, subcontractors must have an approved and printed subcontractor LOTO permit and
must be briefed by the designated LOTO RI.
6. Prerequisites for Obtaining a Subcontractor LOTO Permit
a. Subcontractors who require a LOTO permit shall first submit their company LOTO program or equivalent
company policy document to the EHS Electrical Safety Group. This document must be evaluated for basic
compliance to OSHA 1910.147 and NFPA 70E requirements. In the event of gaps in the subcontractors
LOTO program, the EHS Electrical Safety Program Manager may elect to either reject the submittal or
recommend specific corrections prior to acceptance.
b. In addition, the subcontractor company must submit a signed statement on company letterhead certifying
that all their employees have been trained as LOTO Authorized Persons in the context of OSHA
1910.147(c)(7). The statement must further specify that subcontractor employees, whether permanently
employed, temporarily employed, or sub-tier contracted, must not participate in a LOTO or perform work
at Berkeley Lab without obtaining this training.
c. Only electrically qualified subcontractors who have been separately and individually authorized by the EHS
Electrical Safety Program Manager may perform their own verification of zero voltage on electrical
lockouts. See the ES&H Manual Electrical Safety program for more information.
d. All subcontractors shall additionally receive a subcontractor LOTO orientation that covers the specific
process requirements used at Berkeley Lab (Work Process M).
7. Subcontractors/vendors are expected to provide their own LOTO equipment. Berkeley Lab may loan LOTO
hardware as needed to meet urgent operational necessities. All subcontractor LOTO hardware must meet the
requirements set in Work Process L.
8. RI Responsibilities for the LOTO Permit
a. The RI must ensure that all requirements of Work Process F are followed when implementing the LOTO
permit.
b. In addition, the Responsible Individual must in the course of the LOTO briefing ensure that all
subcontractors participating in the LOTO fully understand their responsibilities. Special emphasis must be
placed on the following:
i. Clearly defining the scope of work allowed under the LOTO permit
ii. Clearly defining the extent of the LOTO Safe Zone
iii. Specifying that any and all changes to the scope of work must be immediately communicated to
the Responsible Individual
iv. Specifying that all personnel participating in the LOTO must be personally locked out with a red
LOTO lock and tag for the duration of their work
v. Specifying that no new person can participate in the LOTO without first contacting the Responsible
Individual and obtaining the same LOTO briefing
c. Upon completion of the LOTO, the Responsible Individual must return the completed LOTO permit to the
EHS Division Electrical Safety Group.
9. EHS Division Responsibilities
a. The EHS Division Electrical Safety Group must review the contractor safety plan and ensure that it
provides a level of LOTO safety equivalent to this ES&H Manual program and 29 CFR 1910.147(c)(f).

1. Shift changes and transfer of control present additional challenges and barriers to proper communication. It is
imperative that the Responsible Individual (RI) makes every effort to sufficiently manage the scope of work and
the extent of the LOTO Safe Zone.
2. If equipment will remain locked out after the end of a shift, and work will continue by the oncoming shift, an
orderly transfer of LOTO devices between LOTO Authorized Persons from the outgoing and incoming shifts must
be performed.
3. If the simple LOTO method was used, a shift change does not require transitioning to a complex LOTO with an
assigned Responsible Individual if the alternate method of logbook entry in Work Process D is used.
4. The RI for the LOTO must manage all shift changes. Transfer of control from one RI to another must occur
separately from the shift change process to minimize confusion.
5. Shift Change
a. It is recommended, but not required, that all LOTO Authorized Persons in the off-going shift remove their
personal locks prior to going home at the end of the shift. The RI locks must stay in place to maintain
continuity of the lockout. The lead worker or supervisor may also maintain a personal lock as desired.
b. The RI must ensure that the oncoming shift is updated on the progress of work from the off-going shift.
All changes in scope of work and the LOTO Safe Zone during the previous shift must be thoroughly
explained to the oncoming shift.
c. Note that an administrative lock alone is not sufficient to maintain the integrity of a LOTO. As the LOTO
Authorized Persons from the off-going shift remove their personal LOTO locks, the RI must ensure that the
RI locks remain in place.
6. Transfer of Control
a. The off-going RI may transfer control of the LOTO to an oncoming RI at any time either before or after the
LOTO is completely established. Transfer of control is not permitted while the LOTO is being established or
during any modification, such as a field change or temporary restoration for testing or repositioning.
b. The off-going RI must thoroughly brief the oncoming RI on the status of the LOTO, including all isolations,
energy dissipation devices, scope of work, completion status of the work, and expected changes to the
LOTO that will be required as the work progresses. The oncoming RI must inspect all isolations related to
the LOTO and verify that the isolations are in place. At each energy isolation, the oncoming RI must apply
his or her RI lock first, and then the off-going RI must remove his or her lock.
c. When the oncoming RI is satisfied that he or she is fully briefed on all aspects of the LOTO, the oncoming
RI must agree to assume the role of RI for the LOTO. The off-going RI must then hand over the LOTO
procedure to the oncoming RI as part of the transfer. If transferring a group LOTO, the off-going RI must
also transfer all related lockboxes and procedures. Once transferred, the oncoming RI assumes all
responsibilities for the LOTO.
7. Re-verification of Zero Energy State
a. As long as the RI locks remain in place on the isolations (or if in the case of a group LOTO, the group locks
remain in place on the isolations, and the RI lock remains in place on the lockbox), then re-verification of
zero-energy state is not required at the beginning of each shift or upon transfer of control. Should any of
the RI locks be removed, re-verification of zero-energy state is required prior to allowing any LOTO
Authorized Person to apply their personal LOTO lock.

1. Temporary partial restoration is the process of restoring energy to a part of the system without clearing the
entire LOTO. This is only done for a short period of time, under continuous supervision by an assigned
Responsible Individual (RI).
2. This applies to a complex LOTO with two or more isolations and may be helpful when the equipment needs some
level of energized testing or repositioning. Examples include:
a. Energized testing
b. Troubleshooting and diagnostics
c. Rotation checks
d. Rotating or repositioning a device for inspection
e. Fan wheel balancing
3. RI Steps for Temporary Restoration for Testing or Repositioning
a. Notify the Affected Persons.
b. Perform a LOTO briefing with all LOTO Authorized Persons participating in the lockout.
c. Direct all LOTO Authorized Persons to stop work, replace required guards or establish a barricade around
the hazard zone, and clear the equipment of tools and materials.
d. Direct all LOTO Authorized Persons to remove their personal LOTO locks from the isolations that will be
temporarily energized.
e. Remove all stored energy dissipating devices (grounding/shorting conductors, hooks, or wands).
f. Remove the RI lock.
g. Energize and proceed with testing or repositioning.
h. Once the testing or repositioning is complete, reestablish the LOTO, following all steps in Work Process
F or Work Process G as required.
i. Apply the RI lock.
j. Perform a LOTO briefing with all LOTO Authorized Persons participating in the lockout.
k. Direct all LOTO Authorized Persons to reapply their personal LOTO locks to the isolations that were
temporarily energized.
l. Authorize continuation of work.

1. LOTO Locks
a. LOTO locks are required to be RED. Conversely, any RED padlock is considered a LOTO lock. RED locks
must not be used for any purpose other than LOTO.
b. LOTO locks are required to be keyed. Combination locks are not allowed at Berkeley Lab for the purpose
of LOTO.
c. LOTO locks must have only one key. There are to be no spare or emergency keys.
d. LOTO locks may be keyed alike so long as responsibility for the locks is not shared: The locks are in use
by only one person and the key to those locks are in the control of that person. If a set of locks is keyed
alike for this purpose, only one key may be issued for that set of locks, and all spare keys must be
destroyed.
e. LOTO locks must be substantial enough to prevent removal without the use of excessive force or unusual
techniques, such as the use of bolt cutters or other metal-cutting tools.
2. LOTO Tags
a. Only LOTO tags may be used with LOTO locks. A LOTO tag must always be used in conjunction with a
LOTO lock unless the energy isolation is not physically capable of being locked (see Work Process H).
Since the tag indicates the purpose and ownership of the lock, the tag must be attached to the lock
shackle, and never to the hasp or other LOTO device.
b. All LOTO tags must be red, white, and black; state Danger Do Not Operate; and must have a
statement prohibiting unauthorized removal of the lock.
c. LOTO tags, including their means of attachment, shall be substantial enough to prevent inadvertent or
accidental removal. LOTO tag attachment means shall be of a nonreusable type, attachable by hand, self-
locking, and non-releasable with a minimum unlocking strength of no less than 50 pounds and having the
general design and basic characteristics of being at least equivalent to a one-piece, all-environment-
tolerant nylon cable tie.
d. LOTO tags must be of a material suitable for their environment. LOTO tags used outdoors must be
resistant to weather and UV damage.
e. There are four types of LOTO tags:
i. Personal LOTO Tags: The LOTO Authorized Person performing LOTO must have his/her name and
phone number on the tag. Subcontractors must also have his/her company name on the tag. This
may be handwritten or permanently printed.
ii. Responsible Individual LOTO Tag: The RI LOTO tag must state Responsible Individual Lock or RI
Lock. The RI must have his/her name and phone number on the tag. This may be handwritten or
permanently printed.
iii. Group LOTO Tag: The Group LOTO tag must state Group LOTO. The RI must write his/her name
and phone number on the tag, and the LOTO procedure or permit number if applicable.
iv. Tagout Only Tag: The tagout-only tag must state Tagged Out. The RI must write his/her name
and phone number on the tag, and the LOTO procedure or permit number if applicable. The tagout-
only tags are one-time use and are serialized with detachable stubs. The stubs are detached and
placed into the lockbox.
3. LOTO Lockboxes
a. Lockboxes are standalone lockable boxes used for performing group LOTO. They come in a multitude of
shapes and sizes to suit the needs of various users. Some are permanently mounted while others are
portable.
b. Lockboxes must be of sturdy construction and materials and be suitable for their intended environment.
The lockbox must be constructed in such a way that permits multiple LOTO locks to be attached to the
outside of the enclosure, preventing it from being opened except by removal of every last LOTO lock. The
lockbox must be designed to securely contain the keys and not release them in the event of being shaken,
dropped, or pried open.
c. Many lockboxes come with a slot to insert keys after the box is already locked; however, this feature is
not used at Berkeley Lab.
d. Lockboxes must be fitted with a physical means to attach the completed LOTO procedure to the lockbox.
This can be integral to the lockbox construction or retrofitted to the lockbox. This feature must be
designed to display the front page of the LOTO procedure without folding or rolling, and must protect the
LOTO procedure from damage from the elements.
4. LOTO Devices
a. LOTO devices are mechanical attachments that affix to the energy isolation devices for the purpose of
LOTO. They come in a multitude of shapes and sizes to match the wide variety of energy isolations found
in the field.
b. LOTO devices shall be substantial enough to prevent removal without the use of excessive force or
unusual techniques, such as with the use of bolt cutters or other metal cutting tools.
c. Once applied to an energy isolation and fitted with a LOTO lock or LOTO hasp, the LOTO device must:
i. Mechanically prevent the actuation of the energy isolation and
ii. Hold fast to the energy isolation until the LOTO lock or LOTO hasp has been removed
d. The most common LOTO device is the LOTO hasp. The LOTO hasp is either applied directly to an energy
isolation capable of being locked out, or to another LOTO device. Since most LOTO devices only hold a
limited number of LOTO locks, the LOTO hasp is used to add multiple locks. LOTO hasps may be attached
to each other (i.e., daisy-chained) to accommodate as many locks as needed.
e. Other common LOTO devices include:
i. Cable LOTO devices
ii. Breaker LOTO devices
iii. Ball valve LOTO devices
iv. Globe valve LOTO devices
v. Custom LOTO devices
f. Energy isolations come in multitudes of configurations, and commercially available LOTO devices are
typically used to apply the LOTO lock and hasp combination. In some instances, however, no commercially
available LOTO device can fulfill the function. It is acceptable to custom design and build a LOTO device
that fits the application.

1. General Requirements
a. Only persons who have received the appropriate level of LOTO training may be authorized to perform
LOTO functions.
b. Specific training requirements, including EHS courses, prerequisites, required retraining and
authorizations, are listed in Table M-1.
c. Once the LOTO training is complete, specific line management authorization is required to perform the
LOTO functions.
d. LOTO Authorized Persons shall fulfill the course requirements of EHS0370, Lockout/Tagout for Authorized
Persons, to be repeated once every three years.
i. A person who has not completed the training requirements for LOTO Authorized Persons may be
considered a LOTO Authorized Person and participate in an established LOTO provided that:
1. The person is only accessing an area requiring LOTO and is not performing work.
2. The Responsible Individual performs a LOTO briefing.
3. The person applies a personal LOTO lock and tag under the direction of the Responsible
Individual.
4. The Responsible Individual personally escorts the person 100% of the time the person is in
the area requiring LOTO.
5. Each instance shall require prior approval of the Electrical Safety Program Manager and the
Responsible Individual for the LOTO. The person shall be considered a LOTO Authorized
Person for the specific instance.
e. LOTO Responsible Individuals shall fulfill the course requirements of EHS0373, Lockout/Tagout for
Responsible Individuals, to be repeated annually.
2. Line Management Authorization
a. Authorization to perform LOTO is covered by the ES&H Manual Safe Work Authorizations program.
b. Specific authorization is to be provided by the supervisor after the employee satisfies the EHS course
requirement and has received equipment-specific training. The supervisor must ensure that the employee
is thoroughly familiar with the equipment (within the context of his or her job function) and with the
energy-control procedures.
c. A practical exercise may be required by the supervisor to demonstrate proficiency. The content of this
exercise will depend on the types of hazardous energy control and the complexity of the procedures
steps.
d. Once the supervisor is satisfied that both the training and authorization requirements have been met, the
supervisor may authorize an employee to perform LOTO. This authorization stipulates the specific
equipment or types of equipment on which the LOTO Authorized Person may perform LOTO.
e. Line Managers who supervise persons that are required to perform LOTO must fulfill the online course
EHS0372, Lockout/Tagout Awareness for Line Management. Line Managers who are themselves LOTO
Authorized Persons are not required to take EHS0372.
3. Non-Berkeley Lab Employees, Students, Affiliates, and Visitor LOTO Procedures
a. All visiting scientists, engineers, affiliates, and students who work in areas in which LOTO is utilized are
considered Affected Persons and must complete the LOTO awareness training module included in
EHS0010, Overview of EH&S at LBNL.
b. Visiting scientists or students who perform service, maintenance, or equipment modification are required
to be trained as a LOTO Authorized Person.
4. Subcontractors.
a. Subcontractors performing LOTO at Berkeley Lab are required to:
i. Submit their companys LOTO program (or equivalent) to the EHS Electrical Safety Group,
ii. Complete the course EHS0379, Subcontractor Lockout/Tagout Orientation, and
iii. Obtain a subcontractor LOTO permit.
b. The subcontractor LOTO permit constitutes authorization to perform LOTO. See Work Process I for
requirements.

Table M-1. LOTO Training and Authorization Matrix
Role Training Class Authorization
LOTO Affected Person
Note: All Berkeley Lab
Employees and Affiliates are
considered Affected Persons
Prerequisite: None
EHS0010, Overview of EH&S at LBNL
None
LOTO Authorized Person Prerequisite: None
EHS0370, Lockout/Tagout for Authorized Persons,
repeat every three years
Authorized by line
management through an
approved Job Hazards
Analysis and/or Activity
Hazard Document
LOTO Responsible Individual Prerequisite: EHS0370 Lockout/Tagout for
Authorized Persons

EHS0373, Lockout/Tagout for Responsible
Individuals, repeat annually

LOTO Responsible Individuals do not have to
repeat LOTO Authorized Person training.
Authorized by line
management through an
approved Job Hazards
Analysis
LOTO Procedure Evaluator Prerequisite: Must remain authorized as a LOTO
Responsible Individual
None
LOTO Procedure Approver / Prerequisite: Must remain authorized as a LOTO Designated by division
LOTO Coordinator Responsible Individual director or designee, based
on suitable competency
Subcontractor LOTO
Authorized Person
Prerequisites: Subcontractor companys LOTO
program submitted to and accepted by the EHS
Electrical Safety Group.

EHS0379, Subcontractor Lockout/Tagout
Orientation, repeat annually
Authorized by Responsible
Individual through approved
subcontractor LOTO permit
Line Management Prerequisite: None

EHS0372, Lockout/Tagout Awareness for Line
Management, repeat every three years
None

1. A LOTO procedure is a formal document detailing all the steps required to establish the lockout. It is specific both
to the equipment or system and to the scope of work. A LOTO procedure is required for all complex LOTOs.
2. The LOTO procedure fulfills the following purposes:
a. It documents the scope of work permitted under the LOTO.
b. It documents the specific isolations established by the LOTO.
c. It serves as the primary communication document for all parties involved in the LOTO.
3. LOTO procedures can be written by anyone familiar with the equipment. However, they must be reviewed and
approved by a LOTO Approver with suitable competency in the equipment or systems for which the LOTO
procedure is written.
4. LOTO Approvers:
a. A LOTO Approver is a competent person who has been trained as a Responsible Individual and has been
designated by the division to approve LOTO procedures based on his or her level of technical knowledge
and familiarity with the systems involved.
b. The LOTO Approver must obtain technical assistance as required from Qualified Persons who are more
familiar with the systems involved.
c. Each division with LOTO procedures must designate one or more LOTO Approvers to meet the LOTO needs
of the division. Should a division not have the competency required, the EHS Division may provide
assistance in reviewing and approving LOTO procedures.
5. Developing a LOTO Procedure: The LOTO procedure writer must thoroughly investigate the scope of work and
perform a detailed hazardous energy analysis in order to establish the appropriate isolations. After writing the
LOTO procedure, it must be submitted for approval by an authorized LOTO Approver.
6. Determine the Scope of Work. Every LOTO procedure is dependent on properly identifying the scope of work. The
LOTO procedure writer must perform the following to ensure that scope of work is properly understood and
defined:
a. Contact the lead worker in charge of the job.
b. Have the lead worker describe in detail the scope of work, including all preparations and testing required.
c. Walk down the job site to identify other hazards in the area that may need to be addressed.
d. Ask detailed questions to determine whether other considerations are warranted.
7. Perform a Hazardous Energy Analysis. The LOTO procedure writer must perform a hazardous energy analysis to
identify the required isolations. Available documentation should be consulted, such as equipment drawings,
schematics, manuals, panel schedules, and process and instrumentation diagrams (P&IDs). In addition, the
system should be visually inspected to ensure all hazards are properly identified.
a. Identify hazardous energy sources and associated energy isolations
b. Identify proper test points for each of the energy isolations (to verify the absence of energy)
c. Determine PPE requirements for each of the energy isolations
d. Identify any source of stored energy
e. Determine suitable method to dissipate the stored energy
8. Determine Suitable Energy Isolations
a. Energy isolations shall be positive isolation devices such as a disconnect switch, circuit breaker, block
valve, or blocking pin.
i. Control actuators such as the emergency stop or the equipment controller shall not be used as
lockout isolation points.
ii. Contactors, diodes, interlock switches, check valves, and automatically controlled valves are not
positive isolation devices.
b. Energy isolations shall be capable (or made capable) of accepting an approved lockout device that
physically prevents the actuation of the energy-isolating device.
i. Where the desired isolation consists of removing a spool piece, removing fuses, lifting electrical
wires, or otherwise disconnecting an energy source without a lockable isolation, follow Work
Process H , Tagout Only, for that isolation.
c. Energy isolations must have an accessible test location to prove absence of energy. Interlocks, contactors,
diodes, check valves, or automatically controlled devices must not be positioned between the isolation
device and the test point used for verification of de-energization of the lockout point.
d. Energy isolations must be labeled clearly and uniquely, such as with an alphanumeric designator or a word
description of its function.
9. Determine Methods to Dissipate Stored Energy
a. Releasing Stored Energy
i. In the case of stored mechanical energy, vent valves, spring releases, blocking devices, or
equipment repositioning (as appropriate) must be utilized.
ii. In the case of stored electrical energy, approved grounding wands or discharge devices must be
used.
iii. Stored energy that cannot be released must be locked out.
b. Preventing the Re-accumulation of Stored Energy
i. If there is a possibility of re-accumulation of stored energy to a hazardous level, a method to
continuously discharge the energy shall be installed and maintained for the duration of the lockout.
ii. For electrical systems >600 V, temporary personal protective grounds are required.
iii. Other examples include the double-block-and-bleed method for high-pressure fluids where slow
leakage past an energy isolation valve can result in undetected repressurization of a section of
piping.
10. Determine Whether a Specific Sequence Is Required
a. Unless specifically stated otherwise, LOTO steps in the LOTO procedure may be performed in parallel or in
series. Either perform all steps in sequence for each isolation, completing all the steps for an isolation
before moving to the next isolation; or, equivalently, perform each step for all the isolations before
moving to the next step. Either way, use the LOTO procedure checklist to ensure that all steps are
positively completed for each and every energy isolation.
b. If a specific sequence is required for any part of the LOTO procedure, this sequence must be described in
a written checklist.
11. Write the LOTO Procedure
a. All Berkeley Lab LOTO procedures must follow the standard format included in the Lockout/Tagout (LOTO)
Procedure Template.
i. Implementation Period: Existing LOTO procedures are acceptable until FY16, after which they must
be converted to the standard format in the Lockout/Tagout (LOTO) Procedure Template.
b. Alternative formats specific to divisions or user facilities may be used, provided that they contain the
elements described in Appendix B .
12. Submit the LOTO Procedure for Approval
a. Only an authorized LOTO Approver may review and approve the LOTO procedure.
b. The LOTO Approver will examine in detail every aspect of the LOTO, and become familiar with the scope of
work and LOTO Safe Zone established by the LOTO procedure.
c. Once the LOTO Approver has become satisfied that the LOTO Safe Zone adequately matches the scope of
work, and all questions concerning the details of the LOTO are resolved, the LOTO Approver must approve
the LOTO procedure.
d. This approval may be in the form of a wet signature on a printed document or through an electronic
database with electronic signatures.
13. Grouping of LOTO Procedures
a. Grouping of LOTO procedures is not authorized, except for the purpose of periodic inspection in Work
Process P. LOTO procedures must not describe multiple scenarios where energy isolations are selected
based on different scopes of work. Instead, the LOTO procedure must establish only one LOTO Safe Zone,
where all energy isolations are performed. Multiple scenarios may only be addressed by creating separate
LOTO procedures.
b. Multiple scopes of work may be performed under the same LOTO procedure, provided that each scope is
described on the LOTO procedure and that the LOTO Safe Zone is adequate.

1. Normal LOTO Lock removal takes place following Work Process D, Work Process E, Work Process F, or Work
Process G. This work process describes LOTO lock removal under special conditions, such as lost keys or
unavailable personnel.
2. Personal LOTO Lock Removal
a. Any LOTO Authorized Person may remove his or her own personal LOTO lock. In the event the key to a
lock is lost or misplaced, the lock may be cut by the LOTO Authorized Person after obtaining verbal
permission from the Person In Charge of the LOTO.
b. In the event that a LOTO Authorized Person is absent, or otherwise unavailable to remove his or her
personal LOTO lock(s), the Responsible Individual (RI) may remove the LOTO lock(s) for the Authorized
Person, subject to the restrictions in this section.
c. If a Responsible Individual has not been assigned, then either the absent Authorized Persons supervisor
or the EHS Electrical Safety Program Manager (or his/her designee) may perform the task.
d. The following steps must be taken to remove an absent Authorized Persons personal LOTO lock(s):
i. Obtain a printed copy of the Absent Authorized Person LOTO Lock Removal Form.
ii. Verify that the absent Authorized Person who applied his or her personal lock(s) is not present at
the site.
iii. Make all reasonable efforts to inform the absent Authorized Person that his/her lockout or tagout
device needs to be removed.
iv. Make all reasonable efforts to inform the absent Authorized Persons supervisor that his/her
employees lockout or tagout device needs to be removed.
v. Permission to remove an absent Authorized Persons lock must be obtained from each of the
following parties:
1. The absent Authorized Person or the absent Authorized Persons line management and
2. The RI in charge of the specific LOTO, if assigned; or the EHS Electrical Safety Program
Manager and
3. A Berkeley Lab senior line manager for the division
vi. For subcontractors, additional requirements may exist in the subcontractors LOTO program. The
subcontractors LOTO program is on file with the EHS Electrical Safety Group. The EHS Electrical
Safety Program Manager or his/her designee must consult the subcontractors LOTO program and
follow any guidance therein prior to granting approval.
vii. After obtaining all required approvals, the RI (or EHS Electrical Safety Program Manager designee if
necessary) must remove the lock(s). If present, the Absent Persons supervisor must physically
witness the lock removal and must retain possession of the lock(s).
viii. Before the Absent Person returns to any work duty, the Absent Persons supervisor must ensure
that the person is presented with the removed lock and is informed of the reasons for the removal.
ix. The completed absent Authorized Person LOTO Lock Removal Form must be returned to the EHS
Electrical Safety Group for record keeping.
3. Responsible Individual (RI) Lock Removal:
a. In the event the key to an RI Lock is lost or misplaced, the RI may cut their own RI Lock.
b. In the event that a RI is absent, or otherwise unavailable to remove their RI Lock, a new RI may remove
the LOTO lock for them, subject to the following restrictions:
i. Follow all the requirements for removing an Absent Persons Personal LOTO Lock.
ii. A new RI must be assigned and the LOTO must be transferred to the new RI.
iii. The new RI must ensure that all aspects of the LOTO are properly managed.
iv. Assistance may be required from a LOTO Coordinator or from the EHS Electrical Safety Group.
4. Removing a Group LOTO Lock
a. Group LOTO lock removal requires extreme caution. Since the key to a group LOTO lock is normally kept
in a locked lockbox, a missing key suggests several alternatives. The lock could in fact belong to a
separate Group LOTO with its key in a separate lockbox. Therefore, all due diligence is required to ensure
that a separate active Group LOTO is not unknowingly defeated by cutting a group LOTO lock.
b. Assistance from a LOTO Coordinator or from the LBNL Electrical Safety Group is recommended.

1. A LOTO procedure quality assurance (QA) inspection consists of an evaluator observing the performance of a
LOTO procedure by a LOTO Authorized Person and completing an inspection checklist on an EHS database.
2. The evaluator must be trained as a LOTO Responsible Individual. However, the evaluator must not be a
participant in the LOTO procedure being evaluated, either as the Responsible Individual or a LOTO Authorized
Person.
3. The evaluator must correct any deviations or inadequacies observed on the spot. Following the QA inspection,
there must be a review of each employees responsibilities under the LOTO procedure that was inspected.
Specifically, the evaluator must be able to determine whether the inspected procedures are:
a. Adequate
b. Understood
c. Being followed by persons participating in the LOTO
4. All LOTO procedures at the Berkeley Lab are subject to periodic QA inspection. The EHS Division will coordinate
the Laboratory-wide LOTO Procedure QA Inspection Program and certify that the inspections have been
completed. To meet this requirement, each division is responsible for conducting QA inspections of its LOTO
procedures and submitting the results to the Electrical Safety Group for record keeping.
5. Grouping of LOTO Procedures
a. For the purpose of periodic QA inspections, LOTO procedures may be assigned to groups that share the
same or similar:
i. Procedural steps for shutting down, isolating, blocking, securing, and dissipating stored energy in
machines or equipment
ii. Procedural steps for the placement, removal, and transfer of the lockout or tagout devices as well
as the responsibility for them and
iii. Requirements for testing a machine or equipment to determine and verify the effectiveness of
LOTO devices and other control measures
b. A grouping of individual LOTO procedures meeting these criteria would be considered one procedure for
periodic QA inspection purposes.
6. During the FY14FY15 implementation period, the following sampling schedule is the minimum QA inspection
requirement:
a. All LOTO procedures embedded in an Activity Hazard Document must be inspected annually.
b. Subcontractor LOTO permits will be sampled at three permits per month for a total of 36 permits annually.
c. Divisions with a large number (100 or more) of equipment-specific LOTO procedures must inspect at a
rate of 10% of active procedures, or a minimum of 36 procedures, whichever is greater.
d. Divisions with a small number (10 to 99) of equipment-specific LOTO procedures must inspect at a rate of
33% of active procedures, or a minimum of 10 procedures, whichever is greater.
e. Divisions with less than 10 equipment-specific LOTO procedures must inspect all active LOTO procedures.
f. Inactive procedures (LOTO procedures that have not been used in over 12 months) must be flagged by
the division for either reapproval or certification at the next use.

1. Air gapping is the process whereby the sources of hazardous energy are physically removed from the work area
to such an extent that Lockout/Tagout is not feasible and not necessary. It is a natural step during either the new
construction or the demolition phases of a project. It is also applicable when machinery is temporarily relocated
from its normal installation area to a separate work area for repair, servicing, or maintenance.
2. Air gapping shall not be used as a substitute for LOTO controls, where LOTO controls are feasible. Where
application of a lock is not feasible (such as for the removal of fuses, spool pieces, or other methods), Work
Process H, Tagout Only, must be used.
3. Requirements for Air Gapping
a. All energy sources must be physically and visibly separated from the work area.
b. This separation must be visible without opening any cabinets or manhole covers, etc.
c. The minimum separation distance is five feet.
i. For electrical systems, this includes the conduit, cable tray, or other cable-supporting device.
ii. Where a five-feet air gap is not achievable but LOTO is not feasible, additional controls must be
implemented to prevent an unplanned reconnection of the energy source. These controls shall be
approved by the EHS Electrical Safety Group on a case-by-case basis.
d. Air gapping must be a documented part of the overall job plan.
4. Except for temporary relocation of machinery, quick-disconnects or other temporary disconnections of wiring,
piping, or waveguides are not considered suitable for air gapping.
5. New Construction
a. During new construction, work will proceed through various stages. At some point, energy sources are
connected and the LOTO process comes into effect. Until that point, air gapping is sufficient.
b. LOTO is required to perform the initial connection or tie-in to the energy source. After this time, all work
performed downstream of the energy source on equipment requires the application of LOTO controls.
c. The transition from work under an air gap to work under LOTO must be managed under a documented
energization and/or commissioning plan.
6. Demolition
a. For demolition projects, LOTO is required to perform the initial demolition of the energy tie-ins.
b. After initial disconnection, the conduit or piping must be removed at least five feet from the tie-in point,
and in a way that cannot be immediately reconnected. After this point in time, the LOTO can be cleared,
and LOTO controls are no longer applicable in the work area.
c. The transition from work under LOTO to work under an air gap must be managed under a documented
decommissioning plan.
7. Temporary Relocation
a. For work performed on equipment that has been physically removed from the normal installation area,
LOTO is not required.
b. LOTO is required to perform the initial disconnection.
c. LOTO must remain in place to control the energy to the cables, pipes, or waveguides that are still in the
area, unless these are made safe through enclosing, insulating, capping, blanking, or other methods
suitable for the environment to prevent inadvertent release of energy.
d. Any person performing work in the installation area must be personally locked out depending on their
exposure.
e. Prior to reinstalling the equipment, the LOTO must be re-established.
f. The transition from work-under-LOTO to work-not-requiring-LOTO and vice-versa must be documented
and managed in the work plan.

1. Interlock systems are designed to automate certain safety functions and prevent injury during normal operation
of equipment or some anticipated abnormal conditions. Interlocks consist of one or more devices engineered to
detect an undesired condition and shut down the equipment or otherwise remove the immediate hazard.
Interlocks are often electrical switches but can be mechanical in nature. Interlocks are often applied to area
hazards where the hazard is unlikely to be recognized in time to prevent injury.
2. Interlocks are not a substitute for LOTO controls and shall not be used or otherwise relied upon for the purpose of
protecting persons performing servicing or maintenance on equipment. Additionally, an interlock cannot serve as
a LOTO energy isolation point since it does not constitute a positive energy isolation.
a. Exception: Credited Control Radiation Safety Systems
i. Credited control radiation safety systems are essentially interlock systems designed to protect
personnel against radiological hazards. Radiological hazards covered by 10 CFR 835 are exempt
from the scope of 10 CFR 851. 10 CFR 835 establishes credited control radiation safety systems
designed for some of the radiological hazards at Berkeley Lab. They provide interlocked access
controls to ionizing radiation area enclosures without requiring the LOTO of the radiation
generating device (RGD).
ii. This exception applies only to the area protected by the credited control radiation safety system.
iii. This exception applies only to the radiological (ionizing radiation) hazard and not to other types of
hazardous energy (e.g., high voltage, radio-frequency radiation, lasers, or cryogens) within the
protected area, even though they may also be interlocked in conjunction with the RGD.
iv. Specific definitions and requirements for RGDs, radiation safety systems, and credited controls are
found in the ES&H Manual Radiation Safety program, EH&S Procedure 730 (Radiation Generating
Device Program), and EH&S Procedure 731 (RGD Interlock Program).
3. Trapped Key Interlock Systems
a. A trapped key interlock system is an area access control system where a key is held captive until a certain
condition is satisfied. Common types of trapped key interlock systems include Kirk keys and Castell locks,
named after the inventors. When the condition is satisfied and the key is released, the key is carried to
unlock another enclosure or set of keys. The key is again held captive in the new enclosure while the
enclosure is unlocked. The trapped key interlock system is permanently installed on the equipment.
b. Trapped key interlocks serve the primary purpose of enforcing a specific sequence. At Berkeley Lab, they
are usually found in accelerator applications to prevent unauthorized access to hazardous areas. They are
also commonly found in high-voltage applications, also to prevent unauthorized access.
c. A trapped key interlock system may be used in conjunction with the Berkeley Lab LOTO Program, but by
itself does not meet the requirement for personal LOTO. To use the system with LOTO, there must be at
least one token key that can be kept on a person or locked in a lockbox. Ways to incorporate trapped key
interlocks and also meet the requirements of the LOTO program include:
i. Limiting the number of LOTO Authorized Persons to the number of token keys available. Each
person accessing the controlled area must keep the token key on their person while in the area.
ii. Place at least one token key in a lockbox, then use the group LOTO procedure.
d. A properly designed trapped key interlock system can significantly strengthen a LOTO procedure by
making it physically impossible to violate key steps in the required sequence.
e. Trapped key interlock systems where the last key is held captive in a lock do not meet the requirement for
LOTO but can still be used to enforce the required sequence. In this case the LOTO process simply
overlaps the trapped key interlock system.
f. Trapped key interlock systems do not eliminate the need to follow all steps in the LOTO process, including
the need for written LOTO procedures and verifying the absence of energy.
g. Bypassing or defeating a trapped key interlock is expressly forbidden.

1. Administrative Locks
a. A careful distinction must be made between LOTO controls and various other locking practices, collectively
referred to as administrative locking. While LOTO locks are placed by individual workers to protect
themselves against inadvertent energization of equipment, administrative locks are used when there is the
need to provide operational control (control of a system, utility, or facility).
b. Any lock that is used for a purpose other than LOTO is called an administrative lock. Administrative locks
may serve a safety function other than LOTO, a configuration-control function, or any other purpose.
Unlike LOTO lock keys, the keys to administrative locks may be controlled by one or more individuals.
c. Administrative locks can be common locks with more than one key, so that anyone with access to the keys
can open the control point as needed. The lock is not specific to an individual, but to a specialized working
group or trade. Administrative tags, likewise, are also common to multiple people and do not need to have
an individuals name shown.
d. Administrative locking does not provide individual personal protection for workers and is not a substitute
for personal LOTO.
e. An administrative lock shall not be red and shall not be labeled with a danger tag or sticker, or any other
marking that resembles a LOTO marking. Conversely, a LOTO lock cannot be used as an administrative
lock.
f. Administrative locking may be used in conjunction with LOTO locks and using the same LOTO devices. For
example, a controlling department may apply an administrative lock to a LOTO for the purpose of
controlling the start-up of the equipment.
g. Persons who have applied administrative locks shall not perform work or enter a hazardous zone without
first applying personal LOTO locks.
2. Tag On
a. Some systems, such as sump pumps, emergency lights, and refrigerators, must be shut down in a
controlled manner. An informational tag may be placed on their isolations to warn the user against
accidental de-energization. The use of a LOTO tag is not permitted for this purpose.
b. When a circuit breaker, disconnect switch, or energy-securing device is readily accessible to any
employee, the circuit breaker or disconnect switch may be tagged to indicate that it is not to be turned
off.
c. The energy-securing device must not be locked by any means that would prevent the device from being
used as an emergency disconnect.
d. The tag must include the name of the responsible person and an alternate, date, and phone number.

1. Some large projects or events require the coordination of multiple LOTO procedures. These events include major
maintenance outages, emergency outages, initial building energization, or other large projects.
2. The increased complexity may require the assignment of an overall LOTO Coordinator to ensure that conflicts in
schedule, outage planning, and required energized events do not lead to confusion.
3. The assignment of a LOTO Coordinator is a line-management decision. The LOTO Coordinator must be a
designated LOTO Approver assigned by line management for a specific project, outage, or time period.
4. The LOTO Coordinator must maintain overall control of the LOTOs established during the time period covered by
the event.
5. The LOTO Coordinator must participate in project planning and periodic update meetings to ensure that all
scheduling conflicts affecting the LOTOs are resolved satisfactorily.
6. The LOTO Coordinator is not assigned the duties of Responsible Individual for the LOTOs. The LOTO Coordinator
must instead ensure the various Responsible Individuals are properly informed of any changes that will affect
their respective LOTO procedures. This can include a change in shutdown or start-up times, an unexpected
temporary restoration of power, or a change in the scope of work.
7. Conversely, all Responsible Individuals must keep the LOTO Coordinator informed of changes that may affect the
overall project schedule.
8. The LOTO Coordinator is considered a LOTO Affected Person for all LOTOs on the project and therefore must be
notified as required in Work Process D, Work Process E, and Work Process F.

10 CFR 851.21, Hazard Identification and Assessment
29 CFR Part 1910.147, The Control of Hazardous Energy (Lockout/Tagout)
29 CFR Part 1910.269, Electric Power Generation, Transmission, and Distribution
29 CFR Part 1910.333, Subpart S, Electrical, Selection and use of work practices
29 CFR Part 1926, Safety and Health Regulations for Construction
NFPA 70E, Standard for Electrical Safety in the Workplace

Document Number Document Title Document Type
07.02.003.001 Safe Work Authorizations Program
07.07.011.001 Electrical Safety Program Program
07.07.018.001 Laser Safety Program
07.08.001.001 Radiation Protection Program
07.07.021.001 Machine Safeguarding Shop and
Laboratory Machine Safety
Program
07.07.006.001 Confined Spaces Program
Other Nonmandatory Reference Documents
California Code of Regulations, Title 8, Chapter 4, Subchapter 7, General Industry Safety Orders, Section 3314,
The Control of Hazardous Energy for the Cleaning, Repairing, Servicing, Setting-Up, and Adjusting Operations of
Prime Movers, Machinery and Equipment, Including Lockout/Tagout
California Code of Regulations, Title 24, Part 3, California Electrical Code
OSHA Instruction CPL 02-00-147, The Control of Hazardous Energy Enforcement Policy and Inspection
Procedures
ANSI/ASSE Z244.1, Control of Hazardous Energy, Lockout/Tagout and Alternative Energy Control Measures

18.10 Appendices
Appendix B. Written LOTO Procedure Template

This form is intended as a memory aid for the LOTO Authorized Person performing a simple LOTO. Specific requirements,
cautions, and instructions can be found in Work Process D.
1. Establish the LOTO.
Identify energy source and related hazards/controls.

Notify affected persons.

Shut down equipment.

Isolate energy source.

Apply LOTO lock and tag.

Verify proper isolation.
Challenge the LOTO.
Attempt to start equipment.
Verify zero energy.*
* Only an authorized Qualified Electrical Worker (QEW) may perform electrical testing >50 V.
2. Perform the Work.
3. Clear the LOTO.
Confirm it is safe to re-energize.
Equipment is in safe condition.
Employees are in safe position.
Remove LOTO locks and tags.

Notify affected persons that LOTO has been released and equipment will be re-energized.

Re-energize and restore equipment to normal condition.

Appendix B. Written LOTO Procedure Alternate Format
In accordance with Work Process N, if the standard LOTO procedure format is not used, an alternate format may be used
provided it contains the following components:
1. Administrative Information. This includes information such as approval dates, locations, project name,
persons involved, and other tracking information.
2. Scope of Work. This must clearly describe the scope of work covered by the LOTO procedure. The scope
statement should be detailed and accurate enough to match the list of isolations in the isolation checklist. The
target reader for the scope statement is the LOTO Authorized Person who is consulting the LOTO procedure to
determine whether his/her task falls within the scope of work allowed by the procedure.
3. Energy Isolation Checklist. This section must identify each energy isolation in a checklist format. Each
isolation must be presented on a single line item with the following information:
a. Equipment or Load Being Isolated
i. This is a description of the load that names or otherwise designates in English the exact item being
isolated.
ii. Examples are:
1. #2 Chill Water Pump Motor
2. Air Handling Unit 71-AHU-041
3. Room 3210 Lighting Circuit
4. Panel 450A2A
5. Main Fresh Water Supply to B15
b. Unique Alphanumeric Designator of the Energy Isolation
i. This is the number or designator found on the energy isolation itself. Breakers are typically
identified by their location in an electrical panel. Valves often have metal tags with a stamped
alphanumeric designator.
ii. Examples:
1. 321A34A-14
2. CH-12-RET
c. Energy Type and Magnitude. This is a descriptive classification of the type of energy. For electrical
sources, this is typically voltage, voltage type (AC/DC), and arc flash energy data.
d. Isolation Position. This is typically LOCKED OPEN, LOCKED CLOSED, TAGGED OPEN, and TAGGED
CLOSED. Other descriptors can be used for special circumstances.
e. Initial Boxes for the Person In Charge. The Person In Charge initials these boxes to establish and
clear each energy isolation.
4. Stored Energy Continuous Dissipation Device Checklist. This section identifies each stored energy
continuous dissipation device in a checklist format. Each stored energy continuous dissipation device must be
listed on a single line item with the following information:
a. Equipment or energy source being dissipated
b. Dissipation point
c. Stored energy type
d. Stored energy magnitude
e. PPE
f. Initial boxes for the Person In Charge to establish and clear each dissipation device.
5. LOTO Sequence. Where a specific sequence is required to establish the LOTO, a step-by-step shutdown,
switching, and/or valving checklist must be added to the LOTO procedure.

1. This Berkeley Lab LOTO Program establishes procedural steps to ensure that:
a. The equipment is completely de-energized and
b. The energy isolations remain under positive control to prevent re-energization during the performance of
the work
2. Lockout/Tagout (LOTO) is therefore composed of two principal process components: de-energization and control.
De-energization removes all energy sources from the system, while control prevents re-energization.
3. De-energization is the process of removing all energy from a system and achieving a zero-energy state. It
includes three subcomponents: isolation, dissipation, and verification.
a. Isolation is simply the process of disconnecting or blocking all sources of energy that normally power the
system. This can include opening a breaker or shutting a valve. Equipment with multiple sources of energy
must have all its sources identified and isolated.
b. Dissipation is the process of releasing any remaining stored energy once the primary sources have been
isolated. This can include discharging a capacitor bank, depressurizing a hydraulic accumulator, or
passivating a chemical tank. Where a system is capable of re-accumulating stored energy even after the
initial dissipation, then a method must be employed to continuously discharge stored energy.
c. Verification is the process of ensuring, through testing, measuring, or another suitable method, that the
energy isolations and the dissipation of stored energy have been effective. This can include a voltage
measurement, a pressure test, or a visual verification of immobility. Proving a negative presents special
challenges, so in all cases a functional test of the instrument is required both before and after testing the
system for absence of energy.
4. Control is the process of ensuring that equipment remains in a zero-energy state after the de-energization has
been performed. While locks form the core of the control function, the application and use of locks is governed by
three principles:
a. LOTO Procedure
i. A LOTO procedure is a formal document that details the required isolations, stored-energy
dissipation methods, all steps required to achieve a zero-energy state, and the scope of work
allowed under the lockout.
ii. Building a suitable LOTO procedure (Work Process N) is an essential prerequisite. It begins with a
detailed hazard analysis. Unidentified hazards can result in a system that has not been placed in a
zero-energy state and can have fatal consequences.
iii. For the most basic LOTO condition, called the simple LOTO, a LOTO procedure is not required. For
all other LOTOs, the complex or group LOTO methods must be employed, and both require a LOTO
procedure.
b. Assigned Person In Charge
i. All lockouts have an assigned Person In Charge who is accountable for the safe execution of the
lockout.
ii. All LOTO Authorized Persons locking onto the LOTO must understand the extent of the LOTO Safe
Zone. The Person In Charge is accountable for sufficiently communicating the LOTO Safe Zone.
c. Personal Lockout
i. One fundamental requirement of the Berkeley Lab LOTO Program is that every person performing
work under a LOTO must be personally locked out.
ii. Furthermore, no person is ever authorized to apply someone elses personal LOTO lock or tag.
iii. Except under the restrictions of Work Process O, no person is ever authorized to remove someone
elses personal LOTO lock or tag.
iv. While some lockout methods can include a variety of tools such as lockboxes, it remains that no
isolation can be removed without first having every single person remove his/her personal locks.
Any system or combination of lockout devices must meet this basic requirement.
5. Distinctive Markings
a. Although LOTO devices are designed with a minimum physical strength, it is still possible to defeat them
with excessive force or tools. Additionally, in the event that a LOTO device was improperly applied, the
device may not perform its intended function, which is to prevent actuation of the energy isolation.
b. For this reason, LOTO hardware components are designed with very distinctive markings and colors, which
are described in Work Process L. These clearly identify the components as LOTO-related so that persons
with very limited knowledge of the process will understand that they are not to tamper with LOTO
components.
6. Graded Approach
a. The Berkeley Lab LOTO Program employs a graded approach to controlling hazardous energy. The
processes described in this document are layered to provide increasing levels of controls to match
increasing levels of hazards.
b. The graded approach is reflected both in the different levels of training as well as the different levels of
documentation, planning, approval, and supervision to execute a LOTO.
c. Table C-1 shows how the various controls are matched to the hazards.

Chapter 19
PERSONAL PROTECTIVE EQUIPMENT (PPE)
Contents
Approved by Mike Wisherop
Revised 02/13

19.1 Policy
19.2 Scope
19.3 Applicability
19.4 Exceptions
19.6 Definitions
Work Process A. PPE Flowchart
Work Process B. General PPE Requirements
Work Process C. Procurement of PPE
Work Process D. Authorization and Qualification to Use PPE
Work Process E. Specific PPE Requirements
19.10 Appendices
Appendix A. PPE and Food/Drink Requirements and Responsibilities Tables
Appendix B. FAQs about Reducing Personal Protective Equipment (PPE) Requirements and Changing the No-
Food/Drink Policy in Technical Areas
NOTE:
. . . . . Denotes a new section.
. . . . . . . . Denotes the beginning of changed text within a section.
. . . . . . . . Denotes the end of changed text within a section.
____________________

19.1 Policy
Lawrence Berkeley National Laboratory (Berkeley Lab) personal protective equipment (PPE) requirements are established for
each technical area based on the specific hazards of the area. PPE requirements for each technical area are listed on the
Berkeley Lab technical area entrance placard, which can be downloaded from the Laboratorys Chemical Hygiene and Safety
Plan. These area PPE requirements are in effect for the entire technical area.
A risk-based approach is applied to use of PPE at Berkeley Lab:
Higher-hazard technical areas such as chemistry labs and machine shops have area PPE requirements specified by the
Environment, Health, Safety, and Security (EHSS) Divisions subject matter experts (SMEs) through corresponding
hazard control programs.
Lower hazard technical areas have their area PPE requirements, if any, specified by the area safety lead (ASL).
Technical areas that fall between these two categories, such as electronic shops and optics labs, have their area PPE
requirements specified by the ASL with consultation from the EHSS Division.
19.2 Scope
This programs scope includes Berkeley Lab technical areas, such as laboratories, shops, mechanical rooms, construction
projects, and maintenance areas.
19.3 Applicability
This program applies to all Laboratory employees, subcontractors, vendors, visitors, and affiliates who work in or travel through
technical areas.
19.4 Exceptions
Exceptions to this policy must be approved by the EHSS Division Director using the process described in the Guidelines for
Exceptions to Policy on Personal Protective Equipment and Food in Technical Areas.
Roles Responsibilities
Area Safety Leaders
Determine (through consultation with supervisors ,work leads who authorized
operations, and/or EHSS) the area PPE requirements for their assigned low and
medium hazard technical areas (see Appendix A)
Ensure that entrances are posted with these minimum requirements
Line Management
Reviews operations within a technical area and determines process-dependent
PPE requirements over and above the area PPE requirements for that area
Re-evaluates PPE requirements whenever the work or the physical layout
changes
Coordinates with the area safety leader to ensure that the hazards associated
with his or her operations are reflected in the entrance placard
Ensures PPE is available for workers as required
Workers
All workers in technical areas, including area safety leaders, supervisors, and work
leads, are responsible for:
Knowing the PPE requirements for technical areas in which they work
Complying with the applicable PPE requirements
Informing others in the area of these requirements
EHSS Liaisons and
SMEs
EHSS Liaisons are the first point of contact for the ASL to provide consultation for
medium hazard technical area PPE selection.
EHSS SMEs may be asked by the Liaison to provide specific PPE consultation in their
area of expertise.
EHSS Division Director Must approve exceptions to this policy
19.6 Definitions
Term Definition
PPE Personal protective clothing and equipment worn by workers designed to protect the
body from injury by hazardous agents, conditions, or materials.
head protection Protective helmet worn when working in areas where there is a potential for injury to
the head from falling objects or electrical shock
face protection Safety devices such as a face mask, face shield, or other splatter guard worn over all
or part of the face to protect from injury or exposure to flying particles, molten metal,
liquid chemicals, biological materials, chemical gases or vapors, or potentially injurious
light radiation
eye protection Safety devices such as safety glasses or goggles worn over the eyes to prevent injury
or exposure to flying particles, molten metal, liquid chemicals, biological materials,
chemical gases or vapors, or potentially injurious light radiation
foot protection Protective footwear worn when working in areas where there is a danger of foot
injuries from falling or rolling objects, or objects piercing the sole, and where an
employees feet are exposed to electrical hazards or chemical spills
hand protection Gloves or other protective devices worn on the hand to prevent injury to the hand or
direct skin contact with sharp edges, rough, hot, or cold surfaces, and exposures to
electrical hazards, biological materials, or chemical hazards
skin protection Protective clothing such as a lab coat, gown, smock, coveralls, or uniform designed to
keep personal clothing, forearms or other exposed skin protected from contamination
or injury by chemical, biological, or radiological materials or exposure to other hazards
technical area Technical areas generally include laboratories, shops, workrooms, and similar areas.
Offices, conference rooms, food preparation, and consumption areas such as the
cafeteria, kitchenettes, and break rooms are generally not technical areas.

1. Minimum Area PPE Requirements. Minimum area PPE requirements for specific technical areas are as follows:
a. Laboratories where chemicals or biological materials are stored or handled: Protective eyewear (e.g., safety
glasses with side shields), long pants, and closed-toe shoes must be worn at all times. Additional PPE may be
necessary when handling chemicals or biological materials (e.g., goggles, lab coat, and chemically resistant
protective gloves for handling hazardous chemicals). Consult the following for more details:
i. Chemical Hygiene and Safety Plan
ii. Job Hazards Analysis
iii. Any formal authorizations
b. Machine, welding, and craft shops where a potential hazard exists: Protective eyewear (e.g., safety glasses
with side shields), long pants, and closed-toe shoes must be worn at all times. Additional PPE may be necessary
when handling chemicals or other hazardous materials (e.g., goggles, shop coat, and chemically resistant
protective gloves for handling hazardous chemicals) or when performing other tasks. Consult the following for
more details:
i. Chemical Hygiene and Safety Plan
ii. PUB-3000, Chapter 25, Machine Safeguarding Shop and Lab Machine Safety
iii. Job Hazards Analysis
iv. Any formal authorizations
c. Other technical areas (e.g., microscope rooms, electronics shops, assembly shops): The area safety lead, and
when appropriate EHSS, may perform a hazard analysis of the work being performed in the area to determine the
types of PPE required. PPE selected to control the hazards in the area must be documented on the areas door
signs or prominently posted to be visible from all approaches to the task requiring specific PPE. Before the hazard
assessment and PPE controls are listed on the door sign, the minimum PPE requirement is safety glasses with
side shields, long pants, and closed-toed shoes. For additional help, see Appendix A, PPE Responsibilities
Table, and Appendix B, PPE Selection FAQs.
d. Visitors and others walking through a technical area but not performing work in that area must wear the
minimum area PPE, but generally are not required to wear additional PPE that is assigned to those who are
performing operations in the technical area.
e. Protective clothing is not a substitute for adequate engineering controls.
f. Appendix B to 29 CFR 1910, Subpart I, provides non-mandatory compliance guidelines for making a hazard
assessment to determine the type of PPE needed for activities and operations.
g. PPE requirements may be temporarily suspended for special tours of a particular technical area. Hazardous work
may not take place nor may hazardous conditions exist while PPE requirements are suspended. A written
description of the area(s) covered, the conditions necessary, and duration of the suspended PPE requirements
must be authorized by the principal investigator (PI) or line manager and communicated to all impacted workers.
2. Protective Clothing
a. Criteria for Issue. To protect their health and safety, employees who work with hazardous materials are issued
protective clothing. EHSS is available for consultation as needed. The Chemical Hygiene and Safety Plan gives
additional guidance for the selection and use of PPE.
b. Foot Protection
i. Berkeley Lab policy requires workers to wear protective footwear when working in areas where there is
risk of foot injuries due to falling or rolling objects, objects piercing the sole, or work-related fatigue, or
where workers feet are exposed to electrical hazards. When safety shoes are required, they must meet
the specifications of American Society for Testing and Materials (ASTM) F2413-05. Some examples of work
that requires safety shoes are working in shops, equipment handling, and construction jobs. Workers
exposed to hot, cold (cryogenic), corrosive, or poisonous substances, or who work in abnormally wet
locations must wear safety shoes of adequate construction and type for the specific work area. For
laboratory activities, minimum PPE required by the Chemical Hygiene and Safety Plan includes closed-toe
footwear. Open-toe shoes and sandals are not permitted in laboratories. Footwear appropriate to work
activities and conditions must be worn at all times.
ii. Berkeley Lab encourages the wearing of protective footwear by making it available on site for employees
to purchase at cost from a manufacturer's shoe-mobile. When protective footwear is required by Berkeley
Lab policy, the department requesting the footwear will contribute an amount toward the cost, as
determined each year by the Office of the Director. However, if the employee selects protective footwear
for which the total cost (including sales tax) exceeds this amount, the difference must be paid by the
employee. The supervisor authorizing the purchase will complete a Safety Shoe Issuance Form. The
manufacturer's shoe-mobile sells protective footwear without a supervisor's authorization when employees
wish to purchase it through the low-cost program (cash, check, or credit card). Safety shoes and fatigue-
reducing insoles are furnished by Berkeley Lab for certain off-site operations when a formal hazard
evaluation has established the need for foot protection. Additional information about the Berkeley Lab
protective footwear program can be obtained at the EHSS Division's Personal Protective Equipment Web
site.
c. Hand Protection
i. The Laboratory provides proper hand protection to employees exposed to known hand hazards, such as
from absorption of harmful substances, severe cuts, lacerations or abrasions, chemical burns, contact with
biological materials, and extreme temperatures. Supervisors must obtain suitable hand protection and
must ensure that it is used. The Chemical Hygiene and Safety Plan provides guidance for the selection of
chemically resistant gloves. Central Stores stocks a variety of hand protection. Gloves may also be
purchased through the eProcurement system. Individual departments are responsible for maintaining a
supply of adequate hand protection.
ii. An Industrial Hygienist can assist with selecting appropriate hand protection.
d. Head Protection
i. The Laboratory provides hard hats that meet ANSI Standard Z89.1 (2003) for Laboratory employees who
work in conditions where there is a potential for head injury from falling or flying objects or when there is
a danger from exposed electrical conductors (29 CFR 1910.135). Hard hats are available through the
eProcurement system, or from Central Stores.
ii. The Laboratory employee responsible for oversight of day-to-day operations at a job site is also
responsible for specifying when head protection is required. This person is usually the construction
superintendent. Head protection is required in the following situations:
1. Anytime there is a danger of falling or flying objects
2. Overhead construction is in progress
3. Any area near exposed electrical conductors where a danger of arcing may exist
4. Any excavation or trench where loose rock or soil could pose a danger by falling from the
excavation face
5. Any area around a crane lift or similar situation where objects being swung, dropped, etc., may
present a danger
6. Whenever the construction superintendent or other responsible employee has reason to believe
danger exists
iii. A sufficient number of hard hats will be maintained at the site for visitors.
e. Eye Protection
i. All persons must wear safety glasses, goggles, or a face shield whenever they run a reasonable probability
of eye injury resulting from work being performed. Staff must use appropriate eye or face protection when
exposed to hazards from flying particles, molten metal, liquid chemicals, acids or caustics, biological
materials, chemical gases or vapors, or potentially injurious light radiation. Eye protection with side
shields must be used when there is a hazard from flying objects. Some work areas (e.g., chemical
laboratories and workshops) are designated as eye-hazard areas. In these areas, the eye-protection
requirement must be posted at each entrance (i.e., listed in the required PPE section of the area caution
sign).
ii. Berkeley Lab provides appropriate eye-protection devices for employees assigned to tasks that expose
them to an eye-injury hazard.
iii. When prescription safety glasses are issued, the Health Services optometrist completes a Notification of
Issue of Safety Glasses form for the individual receiving the safety glasses and sends a copy to the
individuals supervisor. The form specifies the conditions under which the employee must wear safety
glasses.
iv. The individual is responsible for wearing eye protection devices at all times in eye-hazard areas and
whenever his or her work poses a reasonable probability of eye injury.
v. All eye-protection devices issued by the Laboratory must comply with ANSI Standard Z87.1 (2003); these
eye protection devices are marked Z87. Where there is a possibility of a hazard from flying particles, the
eye protection must meet the High Impact Testing Requirements of Z87.1 (this eye protection is marked
Z87+). When in use as eye-protection devices, safety glasses must have side shields or must be worn
with safety goggles carrying the same ANSI approval.
vi. Four types of eye-protection devices are available:
Personal prescription safety glasses are issued through the Health Services Group.
Goggles, face shields, etc., may be purchased through the eProcurement system or from Stores.
Temporary nonprescription safety glasses are provided to visitors in eye-hazard areas.
Laser-safety eyewear is provided to employees by their division. The Laser Safety Officer, ext.
5256, will provide consultation regarding the appropriate type of eyewear and where to obtain it.
(See Chapter 16, Laser Safety, for information on obtaining eyewear approved for protection
against laser light and for information on required medical examinations.)
1. The Laboratory requires suitable equipment to protect employees from hazards in the workplace, as prescribed in 29
CFR 1910.132. The EHSS Division advises on PPE required for a task, but the supervisor of the operation must obtain
this equipment and see that it is used.
2. Protective clothing is purchased from approved vendors through the eProcurement system or through Stores (Building
79) with a valid account or work order number.
3. All Berkeley Lab full-time employees who engage in eye-hazard operations are eligible to obtain prescription safety
glasses at Laboratory expense. Potential eye-hazard operations are those that produce flying particles (e.g., using
machining equipment or portable power tools), that involve the handling of hazardous liquids (e.g., in chemical labs,
plating shops, and plastic shops), or that involve exposure to intense light (e.g., working with ultraviolet light).
Prescription or nonprescription dark glasses are available only upon completion of a Request for Tinted Safety Glasses
form by the supervisor. This form is available from Health Services in Building 26.
4. The Health Services Group optometrist is available for consultation regarding occupational eye protection. Personnel
requiring prescription safety glasses or laser-safety glasses should schedule an examination with the optometrist, who
issues all safety glasses and screens individuals for use of laser-safety glasses. Damaged prescription safety glasses or
frames issued by the Laboratory are replaced or repaired as necessary. The Health Services Group optometrist makes all
adjustments and repairs to these safety glasses.
1. Supervisors authorize PPE use for their employees through the Job Hazards Analysis (JHA) system. The supervisor of an
operation is responsible for determining when PPE is needed and what PPE is suitable and must ensure that all
employees and visitors use PPE when in active technical areas.
2. Employees are qualified for PPE use based on the type of work that they perform. Employees who work in laboratories
are trained in the use, maintenance, storage, and limitations of PPE by taking the Chemical Hygiene and Safety training
(EHS0348). Employees who work in technical areas other than laboratories are trained in the use, maintenance, storage,
and limitations of PPE by taking the Personal Protective Equipment training, EHS0161.
EHSS Program Link
Asbestos Work http://www.lbl.gov/ehs/ih/forms/AsbestosMgmtPlan.pdf
Beryllium Work http://www.lbl.gov/ehs/pub3000/CH04.html#412
Biosafety http://www.lbl.gov/ehs/pub3000/CH26.html
Chemical Safety http://www.lbl.gov/ehs/chsp/html/materials.shtml#PPE
Construction Sites PPE are specified on the JHA
http://www.lbl.gov/ehs/pub3000/CH10.html#106
Cryogenics http://www.lbl.gov/ehs/pub3000/CH29/CH29.html#29d
Electrical Work http://www.lbl.gov/ehs/pub3000/CH08/CH8.html#8.6.3
Fall Protection http://www.lbl.gov/ehs/pub3000/CH30-
quickstart.htmlhttp://www.lbl.gov/ehs/pub3000/CH30/CH30.html
Hearing Protection http://www.lbl.gov/ehs/pub3000/CH04.html#45
Laser Areas http://www.lbl.gov/ehs/pub3000/CH16.html#165a
Lead Work http://www.lbl.gov/ehs/pub3000/CH04.html#411
Machine Safeguarding http://www.lbl.gov/ehs/pub3000/CH25.html#_Work_Process_A
Radioactive Materials Work http://www.lbl.gov/ehs/pub3000/CH21.html
Respiratory Protection http://www.lbl.gov/ehs/ih/forms/respirator.pdf
Welding, Joining, and Thermal
Cutting
http://www.lbl.gov/ehs/pub3000/CH33.html#wpd
10 CFR 851.22, Hazard Prevention and Abatement
10 CFR 851.23, Safety and Health Standards
10 CFR 851.24, Functional Areas
10 CFR 851.25, Training and Information
10 CFR 851.26, Recordkeeping and Reporting
29 CFR 1910, Subpart I, Personal Protective Equipment
Document Number PUB-3000 Reference Title Type
07.07.024.001 Chapter 19 Personal Protective Equipment Program
Other References
PUB-3000, Chapter 4, Section 4.7 Chemicals
PUB-3000, Chapter 4, Section 4.13 Respiratory Protection
PUB-3000, Chapter 4, Section 4.5 Noise
PUB-3000, Chapter 4, Section 4.8 Asbestos
PUB-3000, Chapter 4, Section 4.11 Lead
PUB-3000, Chapter 8 Electrical Safety
PUB-3000, Chapter 10 Construction Safety Manual Administrative Policies
PUB-3000, Chapter 16 Laser Safety
PUB-3000, Chapter 21 Radiation Safety
PUB-3000, Chapter 25 Machine Safeguarding Shop and Lab Machine Safety
PUB-3000, Chapter 26 Biosafety
PUB-3000, Chapter 29 Safe Handling of Cryogenic liquids
PUB-3000, Chapter 30 Fall Protection Program
PUB-3000, Chapter 33 Welding, Joining, and Thermal Cutting

19.10 Appendices
Appendix A. PPE and Food/Drink Requirements and Responsibilities Tables
Institutional Minimum Area PPE Requirements and Responsibilities
All task-specific PPE requirements in PUB-3000 and PPE requirements in formal authorizations or division ISM plans take
precedence over this table. Incidental chemical use refers to:
Cleaning with common cleaning solvents such as acetone, ethanol, isopropanol, or methanol
Working with aqueous non-corrosive (2<pH<12.5) solutions, such as diluted bleach, that do not contain strong toxins
Temporary task-generated area hazards include machine tool use, soldering, and wire-cutting.

Technical area
Party responsible to set minimum
area PPE requirements
PUB-3000 PPE
exceptions
allowed?
Relative risk
level
Chemistry lab/dedicated chemical storage area Chemical Hygiene and Safety Plan Yes High
Machine, craft, welding, or sheet metal shop PUB-3000, Chapter 25 Yes High
Areas controlled for radioactive contamination
(e.g., designated work area, contamination area,
etc.)
RPG (work authorization) No High
Biosafety Level 1 (BL1) or Biosafety Level 2 (BL2)
laboratory
Area safety leader with EHSS
consultation
NA Medium
Other technical area with incidental chemical use Area safety leader with EHSS
consultation
NA Medium
Other technical area with temporary task-
generated area hazard
Area safety leader with EHSS
consultation
NA Medium
Other technical area with no chemical use or
machine tools
Area safety leader NA Low

Institutional Food and Beverage Requirements
Incidental chemical use refers to:
Cleaning with common cleaning solvents such as acetone, ethanol, isopropanol, or methanol
Working with aqueous non-corrosive (2<pH<12.5) solutions, such as diluted bleach, that do not contain strong toxins
Temporary task-generated area hazards include machine tool use, soldering, and wire-cutting. Covered food and closed drink
containers may be transported through technical areas where food and beverage are not allowed.

Technical area
Are food and beverages allowed? Relative risk level
Chemistry lab/dedicated chemical storage
area
No High
Machine, craft, welding, or sheet metal shop No (exceptions allowed per PUB-3000, Chapter
25)
High
Areas controlled for radioactive
contamination (e.g., designated work area,
contamination area, etc.)
No High
Biosafety Level 1 (BL1) or Biosafety Level 2
(BL2) laboratory
No Medium
Other technical area with incidental chemical
use
Yes (with area safety leader approval and EHS
consultation)
Medium
Other technical area with temporary task-
generated area hazard
No (during task) Medium
Other technical area with no chemical use or
machine tools
Yes (with area safety leader approval) Low

Appendix B. FAQs about Reducing Personal Protective Equipment (PPE) Requirements and Changing
the No-Food/Drink Policy in Technical Areas
Who makes the decision about area PPE requirements?
It is based on risk. In technical areas with no area hazards, the area safety lead decides. In technical areas with minimal area
hazards, the area safety lead decides in consultation with the EHSS Division. Area PPE requirements in higher-hazard spaces
are set by Berkeley Lab policy.
I already have a PPE exception approved by EHSS. Is this still valid?
Yes. Existing approved PPE exceptions remain valid.
How do I go about modifying the area PPE requirements in my space?
Contact your division safety coordinator to get started. He or she will be familiar with the interpretations and will know who to
contact in the EHSS Division if they need to be consulted.
I have some chemicals in my technical area (solvents, glue, etc.), but it is not a full chemistry lab. Can I modify the area PPE
requirements in my space?
This area may qualify for reduced area PPE requirements. Talk with your Division Safety Coordinator to verify. Remember that
task-based PPE requirements still apply!
Can I designate a space within a chemistry or biology lab for lower area PPE requirements?
Yes. You will need to demonstrate that this area really does have minimal area hazards. Part of this demonstration will be
showing that there is an effective separation, through some kind of physical barrier, space or other demarcation from the other
laboratory hazards. Another part will be to show that you have effective controls in the lab to maintain this separation.
What if the area is a mixed room and there is no area safety leader?
Consider dividing the mixed room into several technical areas with one or more area safety leader(s). Consult with the
appropriate division safety coordinator(s) to assist. If this cannot be done, then the most conservative regime should apply to
the entire space.
Can you give examples of temporary task-generated area hazards?
Soldering, saw cutting, lifts, cutting wire are some examples.
I work in a lab that has no chemical use or task-based hazards (we test electronic equipment). Can I keep a cup of coffee at my work
station in the lab?
Ask your area safety leader first. There might be non-safety reasons why coffee would not be allowed in the lab.
Why arent there more clear definitions of area PPE requirements?
We recognize the great diversity of technical areas at Berkeley Lab and realize that a single rule would not be able to meet the
real risks in all of these different situations. Also, we want to encourage risk analysis and understanding rather than simply
following rules.

_____________________
<< Chapter 18 || Table of Contents || Chapter 20 >>

http://www.lbl.gov/ehs/pub3000/pub3000c.html
_____________________
<< Chapter 17 || Table of Contents || Chapter 19>>

Lockout Tagout Program

Caricato da

Informazioni sul documento

Descrizione originale:

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Lockout Tagout Program

Caricato da

Copyright:

Formati disponibili

Chapter 18

Potrebbero piacerti anche