Why LOTO Violations Stay in OSHA's Top 10
OSHA's Control of Hazardous Energy standard — 29 CFR 1910.147 — has ranked among the top 10 most-cited standards in general industry every year for over a decade. In fiscal year 2025, it generated thousands of citations across manufacturing, food processing, warehousing, and utilities. It is persistently cited because it demands documented, auditable processes — not just physical locks.
Most LOTO violations aren't the result of workers ignoring safety. They're the result of programs that were never fully built: a binder of generic procedures, training sign-off sheets nobody can locate, and annual audits that got skipped during peak production season. OSHA compliance inspectors know exactly what to ask for. If you can't produce it in minutes, you're cited.
Below are the five citations that appear most consistently in LOTO enforcement actions — what OSHA looks for, how facilities fail, and how to close each gap.
Violation #1: Failure to Establish an Energy Control Program
Failure to Establish an Energy Control Program
The energy control program is the foundation of LOTO compliance. 1910.147(c)(1) requires every employer to establish, document, and utilize an energy control program whenever employees are engaged in service or maintenance activities where unexpected energization could occur. The program must cover the purpose and rules of the energy control procedure and what employees can expect when equipment is locked out.
OSHA compliance officers ask for the written program on arrival. If it doesn't exist — or exists only as a brief policy statement without substantive content — it's a citation. The program must address: the scope of the standard's coverage at your facility, the rules for machine servicing, the enforcement mechanism, and how exceptions (if any) are handled.
- No written program exists at all — relying on informal verbal training
- A generic policy statement exists but doesn't address facility-specific machines or processes
- Program was written years ago and never updated when new equipment was added
- Program exists only in corporate headquarters; plant-level supervisors have never seen it
- The program references procedures that don't exist or can't be located
- Write a facility-specific energy control program that covers scope, purpose, and enforcement
- List every covered machine category and reference the applicable equipment-specific procedures
- Define roles: authorized employees, affected employees, other employees
- Store the program where supervisors and OSHA inspectors can access it immediately
- Review and update the program whenever equipment, processes, or personnel change
Violation #2: Inadequate Lockout/Tagout Procedures
Missing or Generic Machine-Specific Energy Control Procedures
1910.147(c)(4)(ii) requires documented, equipment-specific energy control procedures for each machine or piece of equipment. The written procedure must identify: the steps to shut down, isolate, block, and secure the machine; the steps to place, remove, and transfer lockout/tagout devices; and requirements for testing the machine after lockout to verify the effectiveness of energy control.
OSHA allows one exception: employers may use a single procedure for multiple machines if the machines are similar in type and have the same type and magnitude of energy — and meet all six conditions in 1910.147(c)(4)(i). In practice, most manufacturing equipment has multiple energy sources, different isolation points, or unique stored-energy characteristics that disqualify this exception.
The most common failure here: procedures exist but are generic. "Turn off the main disconnect switch and apply lock" is not a compliant procedure for a machine with hydraulic, electrical, and pneumatic energy sources. OSHA expects step-by-step instructions specific to that machine's actual energy isolation points.
- Generic "lockout all energy sources" procedures used across all machines
- Procedures exist for major equipment but not for smaller maintenance machines
- Procedures don't identify residual/stored energy sources (hydraulic accumulators, capacitors, springs)
- Written procedures are stored centrally and not available at the point of use
- Procedures were correct at installation but not updated after equipment modifications
- New equipment added to facility without creating an LOTO procedure
- Create a machine inventory: every piece of equipment that requires service or maintenance
- Write an equipment-specific procedure for each machine, listing every energy source and isolation point
- Include residual energy release steps (bleed hydraulics, discharge capacitors, block gravity)
- Add zero-energy verification steps — the attempt-to-start check must be documented
- Post or store procedures at the equipment; update immediately when machines are modified
Violation #3: Insufficient Employee Training
Inadequate Training Documentation and Retraining Triggers
1910.147(c)(7) requires training for three groups of employees: authorized employees (who perform LOTO), affected employees (who operate or work in areas where equipment is locked out), and other employees (anyone else who works in areas where LOTO is used). Each group has different required knowledge. Authorized employees must understand the type and magnitude of energy hazards for the specific equipment they work on. Affected employees must understand the purpose and why they cannot restart locked-out equipment.
Initial training must be documented. Retraining is required whenever: there is reason to believe an employee doesn't understand the program, procedures change, or an inspection reveals deficiencies. The training certification must include the employee's name, the date of training, and the subject of the training — a sign-off sheet alone is not sufficient if it doesn't identify what was covered.
- Training occurred once at onboarding; no records of what was covered or when
- Sign-off sheets exist but don't specify the subject matter or equipment covered
- Affected employees and other employees received no training — only authorized workers did
- No mechanism to identify when retraining is due after equipment changes or personnel turnover
- Contract workers and temporary employees excluded from training records
- Training content hasn't been updated to reflect new machines or procedure revisions
- Implement role-based training that covers all three employee categories with documented content
- Capture: employee name, date, subject matter, equipment covered, and trainer name on every record
- Define retraining triggers in your program and track them — don't rely on memory
- Include contractors and temp workers; their training is your compliance responsibility on your site
- Audit training records annually; identify gaps before OSHA does
Violation #4: Failure to Conduct Periodic Inspections
Missing Annual Energy Control Procedure Inspections
1910.147(c)(6) requires a periodic inspection — at least annually — of each energy control procedure. This is not a policy review. It is a documented inspection of the actual procedure being used on actual equipment, performed by an authorized employee other than the one who uses the procedure. The inspection must verify that the procedure is adequate and that employees know their responsibilities.
The certification record for each inspection must include: the machine or equipment on which the energy control procedure was used, the date of the inspection, the employees included in the inspection, and the name of the authorized employee performing the inspection. Four required data points — all of which must be documented and retained.
This requirement is the most commonly under-documented part of LOTO programs. Even facilities with solid written procedures and trained employees often fail here because annual inspections require scheduling, record-keeping, and follow-through — all of which collapse under production pressure.
- No annual inspections performed — the requirement wasn't known or was overlooked
- Inspections performed but not documented — verbal confirmation doesn't satisfy OSHA
- Documentation exists but missing one of the four required data points
- Inspection performed by the same person who uses the procedure (not allowed)
- Annual inspection covers the written program only — not the machine-specific procedures
- New equipment added after the annual cycle; its procedure has never been inspected
- Create a schedule: one annual inspection per machine per year, tracked to completion
- Assign inspectors who are authorized employees but not the procedure's regular user
- Capture all four required data points on every inspection record
- Trigger inspections automatically when they come due — don't rely on manual calendar reminders
- Include new equipment in the inspection schedule from the day it's added to your LOTO program
Violation #5: Improper Use of Lockout/Tagout Devices
Procedural Shortcuts and Non-Compliant Hardware
1910.147(c)(5) sets requirements for lockout/tagout devices: they must be individually identified (uniquely assigned to each authorized employee), durable (withstand environmental conditions for the expected period of use), standardized within the facility, and substantial (sufficient strength to prevent inadvertent removal). Additionally, 1910.147(d) specifies the sequencing requirements for applying and removing devices.
Device violations often arise from operational shortcut culture — shared locks, tagout-only programs on lockable isolation points, removed locks during shift changes without the releasing employee performing the required verification steps. These are the violations most likely to precede an injury or fatality.
The tagout-only issue is significant: OSHA requires that when tagout is used instead of lockout, the employer must demonstrate that tagout will provide equivalent protection. In practice, that requires additional procedural controls and documentation that most tag-only programs don't provide.
- Workers sharing locks — "whoever needs the machine gets the master key"
- Tagout-only programs on equipment that could be locked out (weaker protection, harder to justify)
- LOTO hardware indistinguishable from operational locks (same color, style, or location)
- Locks removed by supervisors when workers are absent without required verification steps
- Group lockout hasp not used — one lock applied for the entire crew
- Hardware not inspected or replaced when damaged; durable requirement not met
- Issue personal, individually keyed padlocks to every authorized employee — no shared locks
- Standardize LOTO hardware: distinctive color (typically red or orange), unique design, used only for LOTO
- Require group lockout hasps for any multi-worker LOTO — each person applies their own lock
- Document the lock-removal procedure for absent employees; require supervisor authorization and verification
- Use lockout wherever physically possible; reserve tagout for isolation points that can't be locked
- Audit hardware condition annually and replace worn or damaged devices
How to Avoid All Five Violations
The five violations above share a common root cause: LOTO compliance requires sustained, documented process execution across dozens of machines, hundreds of employees, and months of time — and paper-based programs can't keep up. Here's the compliance infrastructure that closes all five gaps:
The fastest path from "we have a LOTO binder" to "we can pass an OSHA inspection without notice" is moving to a digital LOTO management system that enforces the workflow, schedules the inspections, and generates the documentation automatically.
Automate LOTO Compliance with Prelion
Prelion's LOTO Tracker was built to close every gap that generates OSHA citations: equipment-specific procedures, role-based training records, automatic annual inspection scheduling, and a complete audit trail — without the binder. Most facilities are audit-ready within one week of onboarding.