The lockout lock is the most literal object in safety: it represents one person’s life, and only that person holds the key. OSHA makes the rule simple — locks may be removed only by the employee who applied them — and then makes the exception precise: a documented emergency-removal procedure for the rare moment a lock must come off without its owner.
This guide explains the rule, when the emergency procedure may and may not be used, the lost-key routine that protects everyone, and the records that keep both legitimate. Get this wrong and a "helpful" supervisor can create the exact incident the standard exists to prevent.
The rule: only the employee who applied the lock removes it
Under 1910.147, each authorized employee’s lock is removed only by that employee after they complete their work, and the machine is not returned to service until every lock is off and every worker is clear. This is not bureaucracy — it is the guarantee that nobody is working under a lock someone else decided was done.
The same principle holds in group lockout: every worker removes their own personal lock, the primary employee removes the equipment locks only after confirming the group lockbox is empty and all personnel are clear.
The exception: a documented emergency-removal procedure
OSHA allows lock removal without the owner only through a documented, site-specific emergency procedure — and only when the situation genuinely requires it: the employee cannot be reached, the job cannot wait, or a locked-out condition is blocking a safety response. The standard is strict, so the procedure must be written, trained, and followed to the letter:
- Confirm the employee is not on site — call, check the plant, verify the vehicle and work area — and document the attempts.
- Verify no one is working under the protection of that lock: check the job scope, the area, and the group lockout roster.
- Remove the lock by authorized means (cutting or unlocking) under the direct control of a trained authorized employee or supervisor, and document who did it and when.
- Notify the employee before they return to work that their lock was removed and the machine has been (or is being) serviced.
- Close the loop in the record — the event, the reason, the authorization, and any retraining needed.
Emergency removal is documented, never improvised. Follow Tegis on Google for the rules that protect your locks.
The lost-key routine
A lost key is not an emergency, but it has a safe routine. Never ask a coworker to open someone else’s lock, and never let a supervisor "just cut it" on convenience. Instead:
- Use the same documented removal process — verification the employee is not present, authorization by a trained lead or supervisor, documented removal.
- Issue the employee a replacement from their assigned keyed-different set and record the change so key control stays intact.
- Debrief the employee on return; a lost key is often a signal of a bigger problem worth discussing, not punishing.
- Audit key sets quarterly: every authorized employee should hold exactly their own key, no spares floating in a drawer.
What continuity and out-of-service locks can and cannot do
Separate from personal locks, plants sometimes use continuity locks (holding a lockout through shift change or parts-wait) or out-of-service locks (preventing startup on decommissioned equipment). OSHA permits these as long as no one is exposed to hazardous energy while they are used — but the moment servicing resumes, authorized employees must apply proper personal lockout per the procedure. They are supporting tools, not substitutes for the personal-lock rule.
Shift changes are not lock removal
A change of shift does not authorize removing another person’s lock — it requires transferring protection by overlap. Oncoming employees apply their locks before off-going employees remove theirs, so the machine is never without a lock representing every exposed worker. See the contractor and shift-change guide for the full handover pattern.
The records that protect you
Whether a lock was removed by its owner at job end or through the emergency procedure, the record matters. Log the machine, date, time, the person removing, and the authorization for any non-owner removal. Keep it near the incident and the training file — an inspector who sees a documented, properly authorized removal understands the program; one who sees nothing assumes the worst.
Key takeaways
- Only the employee who applied a lock may remove it — no exceptions, no “helpfulness.”
- Emergency removal requires a written, trained procedure: confirm absence, verify no one is under the lock, remove under authorization, and notify the employee.
- A lost key is handled through the same documented process with key-control follow-up — never an informal cut.
- Continuity and out-of-service locks are supporting tools only; servicing resumes require proper personal lockout.
- Shift changes transfer protection by overlap — they are not an excuse to remove locks.
Frequently asked questions
Is it legal to cut a lockout lock?
Only through your documented emergency-removal procedure, after verifying the employee is not present and no one is working under that lock — and the removal must be authorized and recorded. Cutting a lock for convenience is a violation and can create the exact hazard the lock exists to prevent.
What if an employee forgets their key at end of shift?
Follow the same documented removal process rather than improvising: confirm the employee is off site, have an authorized lead or supervisor remove the lock, record it, and notify the employee before they return. Then restore key control with a replacement.
Can a supervisor remove a worker’s lock?
Not casually. The personal-lock rule gives removal authority to the employee who applied the lock. A supervisor may remove a lock only through the documented emergency-removal procedure, with the same verifications and records as anyone else.
What if we cannot reach the employee at all?
That is exactly the emergency-removal scenario. Follow the written procedure in order — document your attempts to reach them, verify no one is under the lock, remove under authorization, and notify them on return. The process exists so this situation has a safe, defensible path.