The Annual Lockout Inspection Must Be Done by Someone Who Doesn't Use the Procedure. At a Site With One Mechanic, Who Is That?
OSHA 1910.147(c)(6) requires an annual lockout/tagout inspection by an authorized employee not using the procedure. Multi-site operators struggle to staff it.
Corporate sends the quarterly reminder: periodic lockout/tagout inspections are due at every site that has energy control procedures. At the largest plants, the answer comes back quickly. There is a maintenance supervisor, a safety coordinator, and half a dozen authorized employees who can swap roles. At a small branch facility the answer is different. There is one mechanic who writes the procedures, performs the lockouts, and trains the operators. The site manager signs the inspection form because the form needs a signature and the mechanic is the person who knows what the machine requires. On paper the inspection happened. Whether it met the standard is a separate question, and it is one a head office rarely asks.
This post is about that single requirement, the periodic inspection in 29 CFR 1910.147(c)(6), and why it is one of the paragraphs in the control of hazardous energy standard that is hardest to carry out consistently across a portfolio. It is not a general introduction to lockout/tagout; our earlier post on one lockout standard across many sites covers the wider program.
What the paragraph requires
The standard, titled The control of hazardous energy (lockout/tagout), has the employer conduct a periodic inspection of the energy control procedure at least annually, to make sure the procedure and the requirements of the standard are being followed. Several details in the way OSHA describes this inspection matter for a multi-site operator.
The inspection must be performed by an authorized employee other than the one or ones using the energy control procedure being inspected. That is the independence requirement, and it is the part that causes trouble at small sites. The person who is inspected cannot be the person who inspects.
The inspection is also a review of the procedure in practice, not only a look at a document. It exists to correct any deviations or inadequacies identified. Where lockout is used, it includes a review between the inspector and each authorized employee of that employee's responsibilities under the procedure being inspected. OSHA's materials note that group meetings are acceptable for that review. Where tagout is used, the review extends to affected employees as well as authorized ones, and it covers the additional training elements in paragraph (c)(7)(ii).
Finally, the employer must certify that the inspection was done. The certification identifies the machine or equipment on which the energy control procedure was being used, the date of the inspection, the employees included in the inspection, and the person who performed it.
I have limited this description to what OSHA's own published summary of the paragraph states. Read the full text of 1910.147(c)(6) before building a program around it.
Where the requirement strains at scale
The paragraph is written around a single employer and a single procedure. Each part of it quietly assumes a local resource that a portfolio does not have everywhere.
The independent inspector is a staffing question. A plant with a maintenance department can designate an authorized employee from a different crew or a different shift. A site with one or two authorized employees cannot do that without borrowing someone. The usual fixes are to send an authorized employee from a nearby location, or to have a regional person travel for the purpose. Both work, but both have to be planned, because the inspection date moves from "whenever the site gets to it" to "whenever someone can travel." If that planning is not done, the fallback is the site manager signing a form after a conversation with the mechanic, which is exactly the situation the independence rule is meant to prevent.
A second trap sits inside the same sentence. The standard describes an authorized employee. A person is authorized under the standard by virtue of being the one who locks out or tags out machines to perform servicing or maintenance. A regional safety manager who has never locked out the particular machine, or who has not been trained on this site's procedure, is a poor choice for this role even if they are senior. Corporate needs to decide in advance who is qualified to inspect, and that decision should be written down.
The certification is per machine, not per site. The standard asks for the machine or equipment to be named on the certification. A site with sixty energy-controlled machines has sixty procedures to inspect over the year. A corporate dashboard that shows "Site 14: periodic inspection complete" tells you almost nothing if that status was set after inspecting two machines. At the portfolio level, the useful question is how many procedures exist at each site, how many were inspected in the last twelve months, and who inspected them.
Procedures drift between inspections. A machine is replaced, a guard is modified, a new line is installed, and the procedure on the wall describes equipment that is no longer there. The periodic inspection is the one moment the standard forces a comparison between the paper and the floor, and the inspection is only as good as the inspector's willingness to find a gap. At a site where the inspector is a colleague of the person being inspected, the incentive to find nothing is real. This is a human problem, not a standards problem, and it is worth designing for.
Why a head office should care about a paperwork rule
An annual inspection can feel like the kind of obligation that only matters if an inspector asks for the certification. In practice, the certification record is what shows whether the program was operating at all. When OSHA investigates a serious energy release at one location, the review of whether the periodic inspection was done, who did it, and what it found is a natural place to look. If the same pattern is visible at other locations, an observation about one site can become a question about your whole program. Our post on repeat citations across establishments describes how the same gap appearing in more than one place changes the conversation.
That is the portfolio risk. It is not that any single inspection is difficult. It is that the evidence of the program lives in dozens of binders, signed by dozens of people, with no common way of knowing which of them meets the independence requirement.
Designing a portfolio-level approach
A workable approach does not centralize the inspection itself, because the inspector has to understand the machine. It centralizes the rules around it and the visibility of the result.
Start by deciding who counts as an eligible independent inspector, and say so in the corporate energy control program in plain terms: an authorized employee, trained on the procedure type, who does not use the procedure being inspected. Then identify the sites where that person does not exist locally and arrange a standing swap, so that two nearby small sites inspect each other's procedures on a calendar. A swap is cheaper than a regional specialist and has the side benefit of spreading good practice between locations.
Next, standardize the certification record so that the four elements the standard names are always captured in the same fields: the machine, the date, the employees included, and the inspector. A common format makes it possible to count procedures inspected rather than sites completed. Include a field that records deficiencies found and corrective actions taken, because an inspection that never finds anything at a site with sixty procedures is itself a signal worth examining.
Finally, give someone at the corporate level the job of reading the results. The purpose is not to second-guess every inspection. It is to notice patterns: a site that reports every procedure inspected on the same afternoon, an inspector who is also the primary user of the procedures, a site with no deficiencies for several years running. None of those facts proves anything on its own, but each is a reason to ask a question before an outside party asks it for you.
If you are accountable for this across many locations and want to see the procedure inventory, inspection calendar and certifications for every site in one place, request a demo or talk to sales to see how WorkSafely Enterprise approaches it. The requirement itself does not change either way: someone independent has to look at the procedure as it is actually performed, and the record has to say who.
This post describes one paragraph of one federal standard in general terms and is not legal advice. State-plan states may have their own requirements, and the current text of 29 CFR 1910.147 controls.
Related reading: Lockout/Tagout: One Standard, Many Sites | Repeat Citations Across Establishments | Training Records Across Sites
OSHA standards cited
- 29 CFR 1910.147
General Industry Standards
Always verify current OSHA standards at osha.gov. This article reflects standards in effect at the date of publication.
Not sure where you stand?
Take the 5-minute compliance assessment. Answer a few questions about your business and get a prioritized list of what OSHA expects, free.
Related Articles
Continue learning about OSHA compliance and workplace safety
Energy Control
One Lockout/Tagout Program, Forty Sites: Where Standardization Actually Breaks
A corporate lockout/tagout program satisfies 29 CFR 1910.147 only if the machine-specific procedures underneath it exist at each site. Here is where multi-site rollouts fail inspection.
Respiratory Safety
The Beard Rule Is Written Once and Enforced Differently at Every Site: 1910.134(g) Across a Multi-Location Operation
29 CFR 1910.134(g) bars facial hair under tight-fitting respirators and requires a seal check every donning. Why it splits across sites and how to align it.
Equipment Safety
Weekly Press Inspections Under 1910.217(e): One Certification Record per Press, Across Every Plant
29 CFR 1910.217(e) requires weekly press testing and a signed certification record. Across many plants, that record is the first thing missing at inspection.