Field Safety

Lockout/Tagout for Oilfield Equipment: Energy Isolation That Works

Servicing a pump, compressor, or tank battery means working on stored energy: electrical, hydraulic, pneumatic, mechanical, or chemical. Lockout/tagout is the procedure that makes that safe. This guide covers the OSHA standard and how it applies to common oilfield equipment.

What lockout/tagout covers

Lockout/tagout is the OSHA standard for controlling hazardous energy: 29 CFR 1910.147. It applies to the servicing and maintenance of machines and equipment where unexpected energization or release of stored energy could injure a worker. That description covers a lot of oilfield equipment.

The list is long: pumps, compressors, mud systems, blenders, tank battery piping, winches, and the rest of the equipment a crew services. The rule does not cover normal production operations, where the equipment is running as designed and a worker is operating it. The moment servicing starts, the energy control procedure applies.

Energy sources on oilfield equipment include:

• electrical supply
• hydraulic and pneumatic systems
• mechanical energy: springs, counterweights, elevated loads
• thermal and chemical energy
• pressure stored in vessels and lines

Stored energy is what crews miss. The valve is closed but the line still holds pressure. The hose is off but the spring is still loaded. A tag says what happened. A lock says it stays that way.

Every source has to be isolated before work begins. Missing one is the same as missing all of them, because the first person to reach the forgotten source gets hurt. The rule targets servicing and maintenance: inspection, adjustment, cleaning, and repair, the work where hands go inside the machine or near moving parts.

The six-step procedure

The standard procedure follows a fixed sequence:

1. Notify affected employees that servicing is about to happen.
2. Shut down the equipment by normal means.
3. Isolate all energy sources with locks and tags.
4. Dissipate or restrain stored energy.
5. Verify the zero energy state: try to start it safely, and confirm pressure is bled.
6. Then perform the work.

The sequence has a logic. Notify first so nobody is surprised when the equipment stops. Shut down by normal means so the machine comes to rest the way it was designed to. Isolate everything so it cannot start again. Dissipate or restrain stored energy so nothing is waiting to release. Verify the zero energy state so the crew knows, not hopes, that the work can start.

After the work is done, the sequence runs in reverse: remove tools, restore guards, remove locks, and re-energize. Only authorized employees remove the locks, and only after the crew confirms the machine is ready.

Verification is the step that gets skipped under pressure. A pump that will not start because it is locked out is a good sign. A line that still reads pressure is a reason to stop. Zero energy means verified, not assumed. If the equipment will not verify, the crew stops and finds out why. Nobody works on a machine that has not been confirmed dead.

Group lockout

Only authorized employees apply and remove locks. Each worker applies a personal lock, so nobody is protected by someone else's padlock. When several people work on one machine, group lockout uses a group lockout device. The group's safety does not depend on one lock.

The last lock comes off only when every crew member has finished and removed their own. That rule prevents the classic accident: one worker finishes early, someone removes the lock, and the machine starts while another worker is still inside it. Personal locks are keyed individually, so one worker's lock cannot be opened with another worker's key.

A group lockout device holds all the personal locks together, so the machine stays isolated until the last person is clear. It is a small piece of hardware and a large piece of discipline.

Training and the annual inspection

The employer must provide training to three groups:

• authorized employees, who apply and remove locks
• affected employees, who work near the equipment
• all employees, who must understand tag limitations

A tag is a warning, not a physical restraint. Training covers the difference, and the reason every energy source gets isolated, not just labeled. Tags are part of the system, but they never substitute for a lock.

The standard also requires a periodic inspection: at least annually, a review of each energy control procedure, performed by an authorized employee other than the one who uses that procedure, with documented results.

The annual inspection finds procedures that drifted: a step added in the field, an energy source missed, a lock that never gets checked. It is a review of the procedure against the actual equipment, not a signature on a clipboard.

Coordination with the facility

Contractors and host employers must coordinate on lockout/tagout. The servicing company's locks and the facility's locks have to work as one system. When a service crew locks out a compressor at a tank battery where operator staff also work, there has to be one procedure, one set of rules, and agreement on who removes which lock.

Without coordination, one party's lock can come off while the other party is still inside the machine. The same coordination logic runs through permit-to-work systems, where isolation, gas testing, and handback are documented before the job starts.

Lockout/tagout is simple on paper: lock it, tag it, verify it, work on it, restore it. The crews that do it well treat the six steps as a ritual, not a formality. The padlocks and the paperwork are cheap. The alternative is not. The same discipline shows up across production, where tanks, separators, and compressors get serviced every day.

Sources and further reading

• OSHA 29 CFR 1910.147: The control of hazardous energy (lockout/tagout)