Lockout/Tagout and Stored-Energy Control for Hydraulic Systems

Why Hydraulic Systems Demand Lockout/Tagout

Hydraulic circuits on heavy trucks and diesel equipment store enormous amounts of energy. A typical dump-truck hoist cylinder may hold fluid at pressures exceeding 2,000 psi, and that pressure does not vanish the instant you shut the engine off. Accumulators, trapped fluid in long hose runs, and gravity-loaded cylinders (such as a raised dump body) all represent stored energy that can move, crush, or inject with lethal force. OSHA standard 29 CFR 1910.147, "The Control of Hazardous Energy (Lockout/Tagout)," requires that all sources of hazardous energy be isolated and de-energized before any servicing or maintenance is performed. In a hydraulic system, that means mechanical energy (gravity loads), fluid pressure, and sometimes thermal energy must all be addressed before you touch a fitting, hose, or cylinder.

The Hydraulic Injection Hazard

High-pressure hydraulic fluid escaping from a pinhole leak can penetrate skin without leaving more than a small red mark. The fluid then spreads under the skin, causes tissue death, and becomes a medical emergency requiring surgery within hours. This is called a hydraulic injection injury. Workers have lost fingers, hands, and arms because they used a bare hand to check for a leak. The correct method is to use a piece of cardboard or paper — never skin — to find a suspected pinhole leak, and even then only after pressure has been reduced as much as safely possible. If injection is suspected, the patient must go to an emergency room immediately and tell staff it was a high-pressure fluid injection.

OSHA 29 CFR 1910.147: Core Requirements

The standard applies whenever employees perform servicing or maintenance where the unexpected energization or release of stored energy could cause injury. Key requirements include:

• Written energy-control program — the employer must have one.
• Equipment-specific procedures — each machine or system type should have a documented LOTO procedure.
• Authorized and affected employees — only trained, authorized technicians perform lockout. Affected employees are those who work in the area and must know that equipment is locked out.
• Hardware — each authorized employee must have their own individually keyed lock. Tags alone are not sufficient when lockout is feasible.
• Periodic inspections — the employer must audit procedures at least annually.

The Six-Step LOTO Sequence for Hydraulic Systems

Follow these steps in order every time, without shortcuts:

Step 1 — Notify affected employees. Tell everyone in the work area that the equipment is being shut down for service.

Step 2 — Identify all energy sources. For a hydraulic system this includes the prime mover (engine or electric motor), any accumulators, gravity loads (raised cylinders, suspended attachments), and any upstream hydraulic supply lines that might feed from another circuit.

Step 3 — Shut down the equipment. Follow the normal shutdown procedure for the engine or motor driving the hydraulic pump.

Step 4 — Isolate the energy source. Close all isolation valves or disconnect the power source. On mobile equipment this typically means turning the key to the off position and disconnecting or blocking any remote power feeds.

Step 5 — Apply lockout devices and tags. Place your personal lock on each isolating device (battery disconnect, valve, breaker). Attach a tag with your name, date, and reason for lockout. If multiple technicians are working, each person applies their own lock — the machine cannot be energized until every lock is removed.

Step 6 — Release and verify zero stored energy. This is the most commonly skipped and most dangerous step in hydraulic work. Cycle all control valves through their full range of motion to direct any trapped fluid back to tank. If an accumulator is present, follow the manufacturer's procedure to bleed it down. Lower any suspended loads to a safe resting position or install mechanical blocking. Then check the system pressure gauge — it must read zero before you proceed. Attempt to restart the machine (without removing your lock) to confirm it will not start.

Restoring Energy After Service

When work is complete, reverse the process in a controlled way: remove all tools and materials from the machine, ensure all personnel are clear, remove your lock and tag (only you may remove your own lock), and notify affected employees before re-energizing.

Case Studies: Real Consequences

Industry records document workers killed when a dump body fell because stored hydraulic pressure was not bled before a hose was disconnected. Others suffered degloving injuries from pinch points when a cylinder stroked unexpectedly during hose replacement. A third category involves technicians who skipped the gauge verification step, assumed the system was at zero, and received high-pressure fluid injection through a fitting they were loosening. In every case, a complete LOTO procedure with stored-energy verification would have prevented the injury. These are not rare events — they are predictable outcomes of skipped steps.

The Checklist Mindset

Professional aviation and surgical teams use checklists because memory alone is unreliable under the time pressure and distraction of real work environments. The same principle applies to hydraulic LOTO. Your written checklist is not a formality — it is the last barrier between you and a life-altering injury. Check every box, every time, and if a step cannot be completed as written, stop and get supervision before continuing.