Lockout/Tagout and Personal Protective Equipment for Critical Facilities

Why Lockout/Tagout and PPE Matter in Data Centers

Data centers contain some of the most hazardous electrical environments found in any commercial facility. Uninterruptible power supplies (UPS), switchgear, and distribution panels can carry hundreds of volts and thousands of amperes. A single mistake during maintenance can result in electrocution, severe arc-flash burns, or death. Two layers of protection prevent these outcomes: lockout/tagout (LOTO) controls the energy source, and personal protective equipment (PPE) limits injury if an incident still occurs. Neither layer replaces the other.

The Legal Framework

OSHA 29 CFR 1910.147 — The Control of Hazardous Energy — is the federal standard that governs lockout/tagout in general industry. It requires employers to establish a written energy-control program, train authorized and affected employees, and maintain equipment-specific written procedures for every piece of equipment that could unexpectedly release stored energy. Violations carry significant penalties and, more importantly, cost lives. Always verify current OSHA requirements directly, as standards are updated periodically.

NFPA 70E — Standard for Electrical Safety in the Workplace — complements OSHA by providing detailed guidance on arc-flash hazard analysis and PPE selection. NFPA 70E defines PPE Categories (1 through 4), each corresponding to a minimum arc-flash incident energy level measured in calories per square centimeter (cal/cm²). The higher the category number, the greater the required protection. Your facility's arc-flash study or equipment label will specify which category applies to a given task.

Lockout/Tagout: Step-by-Step

A complete LOTO sequence follows a defined order. Skipping or rearranging steps can leave stored energy in the system.

1. Identify all energy sources. Electrical panels, capacitor banks inside a UPS, and hydraulic or pneumatic actuators are all energy sources. Review the equipment-specific written procedure before touching anything.

2. Notify affected employees. Tell everyone in the area that the equipment is being de-energized. They must not attempt to restart it.

3. Shut down the equipment using normal stopping procedures (for example, press the stop button or open the breaker through its normal handle).

4. Isolate the energy source. Open (de-energize) every isolating device — breakers, disconnect switches, valves — identified in the procedure.

5. Apply lockout/tagout devices. Each authorized employee applies their personal lock to the isolating device using a hasp when multiple workers are present. A tag is attached to communicate that the device must not be operated. One lock = one employee; never share locks.

6. Release or restrain stored energy. Discharge capacitors, bleed hydraulic pressure, block parts that could move under gravity. A UPS contains large capacitor banks that retain dangerous voltage even after AC input is disconnected — always follow manufacturer guidance on capacitor discharge time.

7. Verify zero energy. Use a non-contact voltage tester (or appropriate meter) to confirm that no voltage is present at every point where work will occur. Test the tester on a known live source before and after verifying absence of voltage to confirm the tester itself is working.

To restore equipment, the sequence reverses: remove tools and materials, notify affected employees, remove LOTO devices in reverse order (each employee removes only their own lock), then re-energize.

PPE Selection for Data Center Hazards

PPE is selected based on the specific hazard, not personal preference. The hierarchy of controls places PPE last — after elimination, substitution, engineering controls, and administrative controls — but it is always required when residual risk remains.

Arc-Flash Hazards

Before working on or near energized electrical equipment, consult the arc-flash label on the equipment or the facility's arc-flash study. Select PPE that meets or exceeds the required NFPA 70E PPE category. At minimum this includes an arc-flash rated face shield, arc-rated (AR) gloves, arc-rated clothing, and insulated tools. Standard leather gloves and regular safety glasses are not arc-rated and are not acceptable substitutes.

Chemical Hazards

Battery rooms and chemical storage areas require chemical-resistant gloves and chemical splash goggles (not just safety glasses, which do not seal against splashes). Consult the Safety Data Sheet (SDS) for the specific chemical to confirm glove material compatibility.

Confined-Space Entry

Many data center subfloor and utility spaces qualify as permit-required confined spaces under OSHA 29 CFR 1910.146. Entry requires atmospheric testing, a trained attendant outside, a rescue plan, and appropriate respiratory and body protection depending on hazards identified.

Fall Protection

Work on raised equipment, ladders, or elevated platforms requires a hard hat to protect against falling objects, and harness or guardrail systems when working at heights that meet OSHA thresholds.

The Buddy Check

Before any energized or hazardous task begins, the authorized employee and a co-worker verify each other's PPE fit and procedure compliance. Check that gloves have no tears, face shields are lowered, and all LOTO locks are properly seated. A second set of eyes catches errors that fatigue or familiarity can cause you to miss. This practice is consistent with NFPA 70E recommendations and is standard in professional data center operations.

Critical Reminders

• Never assume equipment is de-energized because a breaker is open. Verify with a tester.
• Never remove another employee's lock. Only the employee who applied it removes it, except under documented emergency procedures approved by the employer.
• Tags alone (tagout) provide less protection than locks. Use locks whenever possible.
• Document every LOTO event on the equipment-specific procedure form and retain records per your employer's program.