Lockout Tagout Requirements: A Side-by-Side of OSHA 1910.147 and the EU Framework

Control of hazardous energy is a fixture on OSHA's Top 10 most cited standards list, ranking number five in FY2024^[1], with 2,177 violations recorded in FY2025^[5]. The standard has not changed materially since 1989. So why do the citations keep climbing? Because most sites run lockout tagout procedures that drift, miss energy sources, or, for international operators, fail to translate cleanly from one regulatory framework to another.

This post answers what lockout tagout requirements actually look like under the two frameworks that govern most industrial sites. The US framework is 29 CFR 1910.147^[1]. The EU framework is built around the Machinery Directive 2006/42/EC^[2] and the harmonised standard EN ISO 14118^[3], with member-state transposition (DGUV in Germany, SUVA in Switzerland, BAuA in Germany too on the workplace side) layered on top. For corporate safety leads running programmes across both jurisdictions, the gaps between them are where audits go wrong.

Three questions decide how a multi-jurisdiction programme is structured:

1. Which framework is the legal anchor for each of your sites?
2. Where do the two frameworks actually diverge in practice, not just in wording?
3. Which procedural artefacts do you maintain in parallel, and which can be unified?

Part 1: Is Lockout Tagout a Legal Requirement?

In both the US and the EU, yes, but the legal route is different.

In the US, OSHA 29 CFR 1910.147 makes the control of hazardous energy a federal regulation under the Occupational Safety and Health Act^[1]. The regulation is prescriptive. It tells the employer what a written energy control procedure must contain, who can apply and remove a lock, and how often the procedure must be inspected.

In the EU, the obligation comes from two directions. The Machinery Directive 2006/42/EC places a design obligation on the manufacturer to enable safe energy isolation on the equipment they put on the market^[2]. The Workplace Directive 89/391/EEC, transposed into national law in each member state, places the corresponding workplace obligation on the operator. EN ISO 14118 is a harmonised standard that gives presumption of conformity to both sides on the question of preventing unexpected start-up^[3]. EN ISO 14118 itself is not law. Following it is the most defensible way for a site to demonstrate that it meets the underlying legal obligation.

A site in DACH that reads only OSHA 1910.147 and asks "is this enough?" is asking the wrong question. The auditor on site will reference DGUV Vorschrift 3^[6], SUVA guidance, or BAuA workplace publications, not 29 CFR.

Part 2: The Two Frameworks in 60 Seconds Each

OSHA 1910.147 has six required elements for every written energy control procedure. Machine identification. Energy source inventory. Shutdown sequence. Isolation method. Stored energy release. Verification of zero energy state. Plus the role distinction between an authorised employee, who applies and removes locks, and an affected employee, who works on or near the equipment but does not apply locks. The standard requires annual periodic inspection of each procedure.

The EU framework arrives at the same destination by a different route. EN ISO 14118 names six methods for preventing unexpected start-up, with energy isolation by means of disconnection and locking as the primary one^[3]. EN 60204-1 governs the electrical equipment requirements that sit underneath that^[4]. The vocabulary used on the floor is "instructed person" and "skilled person" rather than authorised and affected employee. Periodic review is required, but the cadence is governed by the general risk assessment obligation rather than a federally specified annual cycle.

Both frameworks expect the same physical outcome on a machine: every energy source identified, every isolation point locked, zero state verified, named workers responsible. The wording, the citation numbers, and the documentation format differ.

Part 3: Where the Frameworks Actually Diverge

The table below maps the practical differences side by side. Use it when you are translating a US-written procedure for European review, or vice versa.

For the underlying process that both frameworks reference, see our guide to the six (and more) steps of lockout tagout.

Part 4: Terminology That Trips Up Multi-Site Programmes

The single most common failure mode on cross-jurisdiction audits is vocabulary, not substance. A US procedure references "authorised employee" and "lockout/tagout". A European auditor reads "instructed person" and "energy isolation". The site has trained the same people to the same standard, but the document does not say so in the language the auditor uses.

A second terminology hazard is the phrase "lockout/tagout" itself. In OSHA usage, the slash indicates two procedures that can substitute for each other under defined conditions. In some EU translations, the slash reads as a single combined concept and loses the substitution logic. Spell it out on EU-facing procedures: "lockout, with tagout permitted only where lockout is technically not possible and the alternative provides equivalent protection".

Part 5: The DACH-Specific Overlay

The Machinery Directive and EN ISO 14118 give the framework. The day-to-day audit references in DACH come from national documents.

In Germany, DGUV Vorschrift 3 governs electrical installations and equipment^[6], and DGUV Regel 100-500 covers the operation of work equipment. In Switzerland, SUVA publications and ESTI guidance for electrical work are the operative references. In Austria, AUVA publications and the ArbeitnehmerInnenschutzgesetz apply.

For a US-anchored programme being deployed across DACH, none of these documents will appear in your corporate procedure as written. The site will need to add a regulatory citation block that names the local document, with a brief explanation of how the procedure satisfies it. Two paragraphs at the front of each procedure handles this without rewriting the body.

Part 6: Periodic Inspection - Same Idea, Different Cadence

OSHA 1910.147(c)(6) requires an annual periodic inspection of each energy control procedure^[1]. The inspection has to be conducted by an authorised employee other than the one using the procedure, and a written record must be kept.

The EU framework requires periodic review of the underlying risk assessment, which by extension means periodic review of the energy control procedure. There is no codified annual cadence in primary law. In practice, harmonised industry guidance and most DACH auditors have settled on an annual cycle, so a site running on a longer cadence will need to defend it.

The trigger that should drive an update is the equipment change order, not the calendar. A motor replacement should not close out without a check on whether the isolation method changed. A guard relocation should not be signed off without confirming the procedure still reads correctly. For the audit-checklist detail, see our guide to conducting a LOTO periodic inspection.

Part 7: Multi-Site Programmes - What to Standardise, What to Localise

The answer is not "standardise everything" and it is not "localise everything". It is a clean split between the two.

Standardise the engineering layer. Energy source taxonomy. Isolation point identification methodology. Kit composition standards by energy type. Visual conventions for tags and signage. These are the parts of the programme where consistency across sites actually saves money and reduces audit risk. Differences here create training overhead and procurement waste with no compliance benefit.

Localise the documentation layer. Regulatory citations on the cover sheet. Role terminology in the body. Named training records traceable to the local regulation. Language of the procedure itself. These are the parts of the programme that have to read correctly to the auditor in front of you, and the auditor in front of you reads a different regulation depending on the country.

For a deeper integration with permit-to-work systems, see our guide to integrated LOTO and PTW.

Part 8: Where Digital LOTO Simplifies a Two-Framework Programme

Paper procedures decay because the cost of updating them is high. Running paper across two regulatory frameworks compounds the problem. Every change has to be made in two places, with translations that the next auditor will read carefully.

Digital procedure libraries solve a specific subset of this. A master procedure can carry regional variants without duplicating content. Role labels can be presented in the language of the site running the procedure. Sign-off workflows can route to the correct named role per jurisdiction. Audit-trail data can be exported in the format the auditor requests, formatted for OSHA on Tuesday and for DGUV on Wednesday.

Digital LOTO is not required to comply with either framework. It is the practical answer when the manual overhead of running both gets too high for a small EHS team to maintain reliably. Our sister brand Zentri covers this on its digital LOTO platform.

Part 9: Where The Lock Box Fits

The hardware is largely framework-neutral. A ball valve lockout, a circuit breaker lockout, or a padlock does the same job in Ohio and in Stuttgart. Two practical exceptions matter on procurement.

First, hazardous-area zones. Sites with ATEX classifications need device material claims that the supplier can document, and US-spec hardware sometimes carries non-sparking certifications that do not translate cleanly into the EU declaration of conformity format. Worth a per-SKU conversation at quote stage.

Second, signage and tags. Tag language, signage convention, and the regulatory citation on the printed tag itself need to match the local audience. A US-printed tag that cites "OSHA 1910.147" in a German plant is not wrong, but it is also not what the local auditor wants to see.

For multi-site kit standardisation across DACH and EU operations, send us your energy-type breakdown and we will propose a kit standard you can pair with each site procedure. Browse our full lockout device range and our LOTO padlock range for the hardware that sits inside both frameworks.

Ready to Standardise Across Jurisdictions?

Contact The Lock Box with your site list and energy types per site, and we will return a kit standardisation review that satisfies each local audit.

For the digital procedure layer that handles regional variants, role-label translation, and per-jurisdiction audit exports, request a Zentri demo.

The point of a multi-jurisdiction lockout programme is not the documentation library. The point is that the maintenance technician on shift in either country goes home at the end of the day. A procedure that satisfies both frameworks, paired with a kit that matches the procedure, is the only version of this work that actually protects the person on the floor.

References

1. OSHA. 29 CFR 1910.147 - The Control of Hazardous Energy (Lockout/Tagout). Occupational Safety and Health Administration. https://www.osha.gov/laws-regs/regulations/standardnumber/1910/1910.147
2. European Union. (2006). Directive 2006/42/EC of the European Parliament and of the Council on machinery. EUR-Lex. https://eur-lex.europa.eu
3. International Organization for Standardization. EN ISO 14118: Safety of machinery - Prevention of unexpected start-up. ISO. https://www.iso.org
4. International Organization for Standardization. EN 60204-1: Safety of machinery - Electrical equipment of machines. ISO. https://www.iso.org
5. Nugent, M. (2026). Why Your Lockout Procedures Stop Matching Reality Within 12 Months. ISHN. https://www.ishn.com/articles/115325-why-your-lockout-procedures-stop-matching-reality-within-12-months
6. Deutsche Gesetzliche Unfallversicherung. DGUV Vorschrift 3: Elektrische Anlagen und Betriebsmittel. DGUV. https://www.dguv.de