LOTO for Fuel Dispensers & Pumps: Complete Compliance Guide

Why Lockout/Tagout Is a Critical Safety Issue at Gas Stations

Fuel dispensers, submersible turbine pumps, and associated electrical equipment present serious hazards during servicing and maintenance. Unexpected energization — whether electrical, hydraulic, or pneumatic — can cause severe injuries or fatalities. OSHA's Control of Hazardous Energy standard, commonly called lockout/tagout (LOTO), exists specifically to prevent those incidents.

For gas station owners and operators, LOTO is not optional. It applies any time an authorized employee performs service or maintenance on equipment where the unexpected startup or release of stored energy could cause injury. That covers a wide range of everyday tasks: replacing a dispenser nozzle assembly, servicing a submersible turbine pump (STP), clearing a fuel line, or working inside a dispenser cabinet.

OSHA's LOTO standard is codified at 29 CFR 1910.147. Violations of this standard consistently rank among the top ten most-cited OSHA violations across all industries. A serious violation can carry a penalty of up to $16,550 per violation (as of January 15, 2025; 29 CFR 1903.15(d)). A willful or repeated violation carries a minimum of $11,823 and a maximum of $165,514 per violation (as of January 15, 2025; 29 CFR 1903.15(d)). At a multi-pump station, inspectors can cite each dispenser or piece of equipment separately, so exposure adds up quickly.

For a broader look at how OSHA requirements apply across your entire operation, see our guide on OSHA Requirements for Gas Stations: A Complete Guide.

Which Equipment Requires LOTO at a Fuel Station

Any equipment that could release hazardous energy during servicing falls under 29 CFR 1910.147. At a typical fuel retail site, that includes:

• Fuel dispensers — electrical power to the dispenser, hydraulic pressure in fuel lines, and pneumatic pressure in vapor recovery systems
• Submersible turbine pumps (STPs) — high-voltage electrical supply and pressurized fuel lines
• Dispenser junction boxes and wiring — electrical energy
• Vapor recovery equipment — pneumatic and vacuum pressure
• Canopy lighting circuits that share panels with dispenser circuits
• Car wash equipment — electrical, hydraulic, and pneumatic energy sources
• Air compressors and compressed-air systems

Note that routine tasks performed by operators — such as clearing a nozzle jam without opening the dispenser cabinet or resetting a dispenser from the POS — may fall under the "minor tool change" exception at 29 CFR 1910.147(a)(2)(ii). However, any task requiring entry into the dispenser cabinet, disconnection of fuel lines, or work on electrical components requires full LOTO compliance. When in doubt, apply LOTO.

The Six Core Steps of a LOTO Procedure

OSHA's standard at 29 CFR 1910.147(d) establishes a sequence that must be followed every time equipment is serviced. Your written Energy Control Program must document these steps for each piece of equipment at your site.

1. Notify affected employees. Inform all employees who operate or work in the area that the equipment will be shut down and locked out.
2. Identify all energy sources. For a fuel dispenser, this means electrical supply (typically 120V and sometimes 240V), pressurized fuel in the supply line, and any pneumatic vapor recovery connections. Review the equipment-specific energy control procedure before beginning.
3. Shut down the equipment. Use the normal stopping procedure — turn off the dispenser at the site controller or point-of-sale system, then de-energize at the local disconnect or breaker.
4. Isolate all energy sources. Open the electrical disconnect, close the fuel shutoff valve, and isolate any pneumatic lines. Each isolation point must be physically locked in the safe (de-energized) position.
5. Apply lockout or tagout devices. Each authorized employee performing the work applies their own personal padlock to each energy isolation point. If a lockout device cannot be applied (e.g., a valve that cannot accept a lock), a tagout device is used instead — but tagout alone provides less protection and must be supplemented with additional measures per 29 CFR 1910.147(c)(3).
6. Verify isolation and release of stored energy. Attempt to start the equipment using its normal controls to confirm it will not energize. Bleed or drain pressurized fuel lines. Verify with a voltage tester that electrical circuits are de-energized. Only after verification is it safe to begin work.

Restoring Equipment to Service

When work is complete, the sequence reverses: remove all tools and materials, ensure all employees are clear, remove each employee's personal lock (only the employee who applied it may remove it, except in documented emergency procedures), reinstall guards, and then re-energize in the reverse order of isolation. Notify affected employees that the equipment is back in service.

Written Energy Control Program Requirements

29 CFR 1910.147(c)(1) requires every employer to establish a written energy control program. For a gas station, this document must:

• State the scope, purpose, and rules of the program
• Identify the means of enforcing compliance
• Include equipment-specific energy control procedures for each type of equipment at the site
• Define the roles of authorized employees (those who perform LOTO) and affected employees (those who operate the equipment)

Equipment-specific procedures must identify: the type and magnitude of hazardous energy, the method of isolating each energy source, and the type of lockout/tagout hardware required. A generic "turn off the breaker" instruction does not meet the standard. For a fuel dispenser, the procedure should identify the specific breaker panel location, the breaker number, the fuel shutoff valve location, and the steps to verify de-energization.

When a Tagout-Only Program Is Used

Some older dispenser designs or isolation points cannot physically accept a lockout device. In those cases, tagout is permitted under 29 CFR 1910.147(c)(3), but the employer must demonstrate that tagout provides equivalent protection. This typically requires additional measures such as removing a fuse, blocking a valve open, or using a chain and lock on a valve handle. Document these supplemental measures in the equipment-specific procedure.

LOTO Hardware: What Your Station Needs

OSHA requires that lockout and tagout devices meet specific criteria under 29 CFR 1910.147(c)(5):

Each authorized employee must have their own uniquely keyed padlock. Keys must not be shared. Locks must be identified — by name tag, color coding, or engraving — so it is always clear whose lock is on a device.

Training Requirements Under 29 CFR 1910.147(c)(7)

OSHA requires training for three categories of employees:

• Authorized employees (those who perform LOTO): Must understand the type and magnitude of hazardous energy at the site, the methods for isolation, and the full LOTO procedure.
• Affected employees (those who operate equipment that is locked out): Must understand the purpose of LOTO and must not attempt to restart or re-energize locked-out equipment.
• Other employees who work in areas where LOTO is used: Must understand that they must not interfere with lockout or tagout devices.

Retraining is required whenever there is reason to believe an employee does not understand the procedure, when procedures change, or when an inspection reveals deficiencies. Training records must be maintained and should document the employee's name, the date of training, and the subject matter covered.

For context on how LOTO training fits into your broader employee safety program, see our article on New Employee Orientation Checklist for Gas Stations (2026).

Annual Periodic Inspections

29 CFR 1910.147(c)(6) requires that each energy control procedure be inspected at least annually by an authorized employee other than the one using the procedure. The inspection must:

• Review the procedure with each authorized employee
• Certify in writing that the inspection was performed, including the date, the equipment inspected, the employees involved, and the name of the inspector

This certification record must be maintained. An annual inspection is also an opportunity to update procedures when equipment has been modified or replaced — for example, after a dispenser upgrade or the installation of new outdoor payment terminals.

Group Lockout and Contractor Work

Group Lockout Procedures

When multiple authorized employees work on the same piece of equipment simultaneously — common when a dispenser technician and an electrician are both involved in a repair — a group lockout procedure under 29 CFR 1910.147(f)(3) applies. A primary authorized employee coordinates the lockout, applies a group lockout hasp, and each individual employee applies their own personal lock to the hasp. No one's lock is removed until that employee's portion of the work is complete.

Outside Contractors

When you hire outside contractors — dispenser service technicians, STP repair companies, or electrical contractors — 29 CFR 1910.147(f)(2) requires that you inform them of your energy control program and any site-specific hazards, and that you understand and coordinate with their LOTO procedures. This coordination must be documented. Do not assume a contractor's generic LOTO program covers your site's specific equipment layout.

This is especially important given that fuel dispenser service often involves both the dispenser manufacturer's certified technicians and your own employees working in proximity. Dispenser manufacturers such as Gilbarco and Dover Fueling Solutions (Wayne brand) publish equipment-specific service procedures that should be incorporated into your site's energy control procedures.

LOTO and Electrical Safety: The Overlap

Fuel dispensers operate in classified electrical areas under NFPA 30A and the National Electrical Code. The electrical hazards associated with dispenser service are compounded by the presence of flammable vapors. This means that LOTO at a fuel site is not just about preventing unexpected startup — it is also about preventing ignition sources in a hazardous atmosphere.

Before opening any dispenser cabinet, confirm that the fuel supply is shut off and that the area has been ventilated. Use only intrinsically safe or explosion-proof test equipment when verifying de-energization in classified areas. For a deeper look at the electrical safety framework that surrounds LOTO at fuel sites, see our guide on Electrical Safety at Gas Stations: Fuel Dispenser & Tank Equipment Guide.

Common LOTO Failures at Fuel Retail Sites

OSHA inspections and incident investigations at fuel retail sites reveal recurring failures. Avoid these:

• No written energy control program. Many small operators rely on verbal instructions. This does not meet 29 CFR 1910.147(c)(1).
• Generic procedures that don't identify specific equipment. A procedure that says "turn off the power" without identifying the specific breaker or disconnect does not comply.
• Shared padlock keys. Each authorized employee must have a uniquely keyed lock. Sharing keys defeats the purpose of individual accountability.
• Failure to address stored energy. Pressurized fuel lines must be bled before work begins. Failing to do so is a common cause of fuel spray injuries.
• No annual inspection records. The certification requirement at 29 CFR 1910.147(c)(6) is frequently overlooked.
• Contractor coordination gaps. Assuming a contractor handles their own LOTO without coordinating with your program violates 29 CFR 1910.147(f)(2).
• Tagout used where lockout is feasible. If a lockout device can be applied, it must be used. Tagout is only acceptable when lockout is not feasible.

LOTO Compliance Checklist for Gas Station Operators

• ☐ Written Energy Control Program exists and is current
• ☐ Equipment-specific procedures written for each dispenser, STP, car wash, and other covered equipment
• ☐ Each authorized employee has a uniquely keyed personal padlock
• ☐ Breaker lockout devices, valve lockout devices, and hasps are on hand and fit your specific equipment
• ☐ Tagout tags meet OSHA durability and standardization requirements
• ☐ All authorized employees have documented LOTO training
• ☐ All affected employees have documented awareness training
• ☐ Annual inspection of each energy control procedure is documented with a signed certification
• ☐ Contractor coordination procedure is documented and followed
• ☐ Group lockout procedure is documented for multi-employee tasks
• ☐ Emergency lock removal procedure is documented (for situations where the authorized employee is unavailable)
• ☐ LOTO procedures are reviewed and updated after any equipment modification or replacement

Recordkeeping and Documentation

OSHA does not specify a retention period for LOTO training records in 29 CFR 1910.147, but best practice — and the expectation of OSHA compliance officers — is to retain records for the duration of employment. Annual inspection certifications should be retained for at least three years to demonstrate a pattern of compliance.

Note that gas stations (NAICS 4471) are partially exempt from routine OSHA 300/300A/301 injury and illness recordkeeping under 29 CFR 1904 Subpart B, Appendix A. However, this exemption does not reduce your obligation to maintain LOTO program documentation, training records, or annual inspection certifications. Fatality and hospitalization reporting under 29 CFR 1904.39 still applies regardless of the partial exemption.

Next Steps: Building or Auditing Your LOTO Program

1. Inventory your hazardous energy sources. Walk every dispenser island, the STP vault, the electrical room, and any car wash equipment. Document every energy isolation point for each piece of equipment.
2. Write or update your Energy Control Program. If you don't have one, start with OSHA's model program available at osha.gov. Customize it for your site's specific equipment.
3. Write equipment-specific procedures. Each dispenser model, each STP configuration, and each other covered piece of equipment needs its own procedure with specific isolation points identified.
4. Purchase and assign LOTO hardware. Ensure every authorized employee has their own padlock. Verify that lockout devices fit your specific breaker panel and valve types.
5. Train all employees. Document training with sign-in sheets and content summaries. Schedule retraining whenever procedures change or new equipment is installed.
6. Conduct your first annual inspection. Have an authorized employee other than the procedure user review each procedure and certify the inspection in writing.
7. Establish a contractor coordination protocol. Before any outside technician begins work, exchange LOTO program information and document the coordination.
8. Review after any incident or near-miss. A near-miss involving unexpected energization is a signal that your procedure has a gap. Investigate and correct before the next service event.

Sources

• 29 CFR 1910.147 — Control of Hazardous Energy (Lockout/Tagout): osha.gov
• 29 CFR 1903.15(d) — OSHA Civil Penalties: law.cornell.edu/cfr/text/29/1903.15
• 29 CFR 1904 Subpart B, Appendix A — Partial Exemptions from Recordkeeping (NAICS 4471): law.cornell.edu
• OSHA Publication 3120 — Control of Hazardous Energy (Lockout/Tagout): osha.gov
• NFPA 30A — Code for Motor Fuel Dispensing Facilities and Repair Garages
• NFPA 70 — National Electrical Code (Article 514, Motor Fuel Dispensing Facilities)