LOTO at the Pump: Mastering Lockout/Tagout Beyond the Basics

Why LOTO at a Fuel Station Is Different From Any Other Workplace

Lockout/tagout (LOTO) — the practice of isolating hazardous energy before anyone services equipment — is required under OSHA's Control of Hazardous Energy standard at 29 CFR 1910.147. Every employer covered by that standard must have a written energy control program, machine-specific procedures, and trained authorized and affected employees. Gas stations add a layer of complexity that most LOTO guides ignore: the energy sources at a fuel dispenser or submersible turbine pump (STP) are not just electrical. They include stored hydraulic pressure in fuel lines, gravity-fed fuel head from a tank that may hold thousands of gallons, and — in vapor-recovery systems — pressurized vapor pathways. A procedure that only cuts the circuit breaker is incomplete and potentially fatal.

This article builds on the foundational requirements covered in our complete LOTO compliance guide for fuel dispensers and pumps and goes deeper into site-specific procedure writing, multi-energy-source isolation, contractor coordination, and the documentation an OSHA inspector will expect to see.

The Regulatory Framework

29 CFR 1910.147 — The Core Standard

OSHA's hazardous energy control standard applies to any employer whose workers service or maintain machines or equipment where the unexpected energization, startup, or release of stored energy could cause injury. At a fuel station, that covers:

• Fuel dispensers (electrical, hydraulic/fuel-pressure, and vapor energy sources)
• Submersible turbine pumps and line leak detectors
• Shear valves and emergency shutoff valves
• Automatic tank gauge (ATG) probes and sensors inside USTs
• Vapor recovery equipment and compressors
• Car wash equipment, compressors, and HVAC units on the same site

OSHA Penalty Exposure

LOTO violations are among the most frequently cited OSHA standards nationally. A serious violation carries a maximum penalty of $16,550 per violation (as of January 15, 2025; 29 CFR 1903.15(d)). A willful or repeated violation carries a maximum of $165,514 per violation, with a floor of $11,823 — meaning OSHA cannot settle a willful citation below that minimum (29 CFR 1903.15(d), as of January 15, 2025). A single inspection that finds missing machine-specific procedures, untrained employees, and inadequate locks can generate multiple citations that stack quickly.

Note also that gas stations (NAICS 4471) are partially exempt from routine OSHA 300/300A/301 recordkeeping under 29 CFR 1904 Subpart B, Appendix A — but that exemption does not reduce penalty exposure for safety violations, and fatality and hospitalization reporting under 29 CFR 1904.39 still applies in full.

Related Standards That Interact With LOTO

For a broader look at how these standards fit together, see our complete guide to OSHA requirements for gas stations.

Understanding the Energy Sources at a Fuel Dispenser

Electrical Energy

Dispensers are fed from a dedicated circuit — typically a sub-panel in the equipment room. The circuit breaker is the primary electrical isolation point. However, simply switching off the breaker is not sufficient if the breaker is not locked in the off position with a hasp and padlock. Breakers must be capable of being locked out; if your panel uses breakers that cannot accept a lock, a breaker lockout device must be installed before any service work begins.

Stored Hydraulic / Fuel-Pressure Energy

When the STP is de-energized, fuel remains in the dispenser's internal piping under residual pressure. This pressure must be relieved before disconnecting any fuel-side component. The procedure for doing so — typically opening a test port or allowing the internal valve to bleed down — must be written into the machine-specific LOTO procedure for that dispenser model. Skipping this step is a leading cause of fuel spray injuries during dispenser service.

Gravity Head

Even with the STP off and line pressure relieved, fuel in the underground piping can flow by gravity if the tank is at a higher elevation than the dispenser or if a check valve fails. The written procedure must address how the line is isolated — typically through the emergency shear valve at the dispenser base and the product line isolation valve at the tank.

Vapor Energy

Vapor recovery lines and, where still required by state programs, vapor compressors represent a pressurized vapor pathway. Isolating vapor-side components requires closing vapor-line valves and verifying pressure has equalized before opening any fitting.

Writing a Machine-Specific LOTO Procedure

29 CFR 1910.147(c)(4) requires a documented procedure for each piece of equipment unless the employer can demonstrate that all six conditions for a "simple machine" exception are met. Fuel dispensers almost never meet all six conditions because they have more than one energy source. Your written procedure must include, at minimum:

1. Equipment identification — dispenser number, location (island, position), and make/model
2. Authorized employees — job titles permitted to perform the isolation
3. Hazardous energy types and magnitudes — voltage, fuel pressure range, vapor pressure
4. Location of each energy isolation point — circuit breaker number, shear valve location, product line valve location, vapor valve location
5. Step-by-step isolation sequence — the order matters; electrical first, then hydraulic bleed-down, then mechanical isolation
6. Verification steps — how the authorized employee confirms zero energy state (test meter for electrical; visual/tactile check of bleed port for hydraulic)
7. Restoration sequence — how to re-energize safely after work is complete

Sample Isolation Sequence for a Fuel Dispenser

Locks, Tags, and Hardware Requirements

29 CFR 1910.147(c)(5) specifies that lockout devices must be:

• Individually keyed — one key per lock, one lock per authorized employee
• Durable enough to withstand the environment (outdoor fuel environments require weather-resistant locks)
• Standardized in color, shape, or size across the facility
• Substantial enough to prevent removal without excessive force

Tags alone — without a lock — are permitted only when the employer can demonstrate that locking is not feasible for a specific energy isolation point, and additional protective measures must compensate. At fuel dispensers, circuit breakers can almost always be locked; tagout-only programs are difficult to justify and invite citation.

Every authorized employee must have their own padlock. Sharing locks defeats the purpose: if a second technician arrives and the first has left, the second cannot verify the first's lock is still protecting them. Group lockout hasps allow multiple locks when more than one person is working on the same equipment simultaneously.

Training Requirements and Documentation

29 CFR 1910.147(c)(7) requires training for three groups:

• Authorized employees — those who perform the lockout. Must understand the type and magnitude of hazardous energy and the methods to control it.
• Affected employees — those who operate equipment that may be locked out, or who work in areas where LOTO is used. Must understand that they may not restart locked-out equipment.
• Other employees — anyone else whose work may bring them near locked-out equipment. Must understand that they may not attempt to restart or re-energize.

Retraining is required whenever there is reason to believe an employee does not understand the procedures — for example, after an incident, after a procedure change, or after a new dispenser model is installed. Document every training session with the date, topics covered, trainer name, and employee signatures. Retain these records for the duration of employment; OSHA does not specify a minimum retention period for LOTO training records under 1910.147, but retaining them through employment plus a reasonable period is standard practice.

Contractor and Vendor Coordination

Dispenser service is frequently performed by outside technicians — from the dispenser manufacturer's service network, an independent service organization, or your petroleum equipment contractor. 29 CFR 1910.147(f)(2) requires the on-site employer and outside employer to inform each other of their respective LOTO procedures and to ensure that each employer's employees are protected.

In practice, this means:

• Brief every outside technician on your site's energy isolation points before work begins
• Require contractors to use their own locks in addition to any site locks
• Confirm that the contractor's procedure addresses all energy sources at your specific dispenser configuration — a generic manufacturer procedure may not account for your site's vapor recovery setup or non-standard piping
• Document the coordination in writing — a contractor sign-in log that includes a LOTO briefing acknowledgment is sufficient

This coordination requirement is especially important during dispenser upgrades or EMV retrofit work, when multiple trades may be on-site simultaneously. For broader context on managing equipment service at your site, see our fuel dispenser maintenance schedule and inspection checklist.

Periodic Inspection of Energy Control Procedures

29 CFR 1910.147(c)(6) requires at least an annual inspection of each energy control procedure by an authorized employee other than the one using the procedure. The inspection must:

• Verify that the procedure is adequate and that employees know how to use it
• Be certified in writing with the machine or equipment name, the date, the employees involved, and the name of the inspector

This annual certification is one of the first documents an OSHA compliance officer will request. A common finding is that operators have written procedures but have never conducted — or documented — the required annual review.

LOTO and UST Work: Where the Standards Intersect

Work on underground storage tank equipment — replacing an STP, servicing a line leak detector, or pulling an ATG probe — triggers LOTO requirements for the electrical and mechanical energy sources involved, and simultaneously may trigger the confined space entry standard at 29 CFR 1910.146 if the work requires entry into a dispenser sump or tank manway. These two standards must be applied together; LOTO alone does not satisfy confined space entry requirements, and a confined space permit alone does not substitute for energy isolation.

The STP is the most hazardous single piece of equipment at most fuel stations from a LOTO standpoint. It operates at significant electrical voltage, moves large volumes of flammable liquid under pressure, and is located in a confined space. The machine-specific LOTO procedure for STP work must address the electrical disconnect at the STP control panel, the product line isolation valve, and the vent path for residual fuel in the riser pipe before the pump is lifted.

Common LOTO Deficiencies Found During OSHA Inspections

• No written energy control program — the most fundamental deficiency; required by 1910.147(c)(1)
• Generic procedures that don't identify specific isolation points — "turn off the breaker" without specifying which breaker number and panel location
• No hydraulic/fuel-pressure isolation step — treating dispensers as electrical-only equipment
• Shared locks or master-keyed locks — defeats the one-employee/one-lock requirement
• No annual procedure inspection records — procedures exist on paper but have never been reviewed
• Affected employees not trained — cashiers and attendants who could inadvertently restart equipment have received no LOTO awareness training
• Contractor coordination not documented — no record that outside technicians were briefed on site procedures

Building an Audit-Ready LOTO Program

An audit-ready program has five components that can be produced on demand:

1. Written energy control program — the site-level policy document covering scope, responsibilities, hardware standards, and training requirements
2. Machine-specific procedures — one procedure per covered piece of equipment, stored at or near the equipment or in a readily accessible binder
3. Training records — signed attendance sheets or electronic records for every authorized and affected employee, with dates and topics
4. Annual inspection certifications — signed and dated for each procedure, each year
5. Hardware inventory — a log of all locks, hasps, and tags issued, to whom, and when

Action Items: 30-Day LOTO Program Review

• ☐ Pull your written energy control program and confirm it covers all energy types present at your dispensers and STP equipment
• ☐ Audit machine-specific procedures for every dispenser, STP, vapor recovery compressor, and car wash unit — confirm each identifies all isolation points by location, not just by type
• ☐ Verify that every authorized employee has their own individually keyed padlock and that no master keys exist
• ☐ Check annual inspection certifications — if any procedure has not been reviewed and certified within the past 12 months, schedule the inspection immediately
• ☐ Confirm that affected employees (cashiers, attendants) have received LOTO awareness training and that records are on file
• ☐ Review your contractor coordination process — add a LOTO briefing acknowledgment to your contractor sign-in sheet if one is not already there
• ☐ Identify any dispenser sumps or tank manways where LOTO work could also trigger confined space entry requirements under 29 CFR 1910.146, and confirm you have a permit-required confined space program in place
• ☐ Confirm that circuit breakers for all dispensers can physically accept a lockout device; order lockout adapters for any that cannot

Sources

• 29 CFR 1910.147 — OSHA Control of Hazardous Energy (Lockout/Tagout): osha.gov
• 29 CFR 1910.146 — Permit-Required Confined Spaces
• 29 CFR 1910.303, 1910.333 — Electrical Safety Standards
• 29 CFR 1903.15(d) — OSHA Civil Penalty Schedule (as of January 15, 2025): law.cornell.edu/cfr/text/29/1903.15
• 29 CFR 1904 Subpart B, Appendix A — OSHA Recordkeeping Partial Exemptions (NAICS 4471): law.cornell.edu
• NFPA 30A — Code for Motor Fuel Dispensing Facilities and Repair Garages: nfpa.org
• OSHA Publication 3120 — Control of Hazardous Energy (Lockout/Tagout): osha.gov