Unauthorized LOTO Lock Removal Policy: A Step-by-Step Guide

Estimated Reading Time: 9 minutes

TL;DR: An unauthorized LOTO lock removal policy is the written procedure your employer follows when the authorized employee who applied a lock isn’t available to remove it. OSHA 1910.147(e)(3) requires three things: verify the employee is not at the facility, make all reasonable efforts to contact them, and make sure they know before they resume work. The procedure has to be documented, trained, and built into your energy control program.

An unauthorized LOTO lock removal policy is the written procedure you follow when an authorized employee leaves the facility with their lock still hanging on the equipment. OSHA does allow you to remove that lock. But only under the direction of the employer, and only if you developed and documented the procedure BEFORE you needed it.

It’s 4:45 on a Friday. Production wants the line back, and the one person whose lock is on the energy isolating device is 40 minutes down the road and not answering their phone. This is usually the moment a safety lead finds out their lockout program has a hole in it.

Key Takeaways

• 1910.147(e)(3) is the only path OSHA gives you for removing a lock that belongs to someone else, and it requires a written, trained procedure.
• Three elements are non-negotiable: verify the employee is off site, make all reasonable efforts to contact them, and confirm they have that knowledge before they return to work.
• A master key or duplicate key is not acceptable. OSHA’s position is that the lock gets destroyed, not opened.
• You have to demonstrate “equivalent safety,” which means your paperwork has to prove the removal was as safe as the employee doing it themselves.
• Lock removal lives inside your energy control program, not in a separate binder, and it gets reviewed in your annual periodic inspection.
• When people walk off with locks repeatedly, that’s a system problem, not a discipline problem.

What OSHA Says About Removing Someone Else’s Lock

The default rule in the control of hazardous energy standard is simple. Each lockout or tagout device gets removed by the employee who applied it. That’s the whole point of a personal lock… it belongs to one person, and that person controls it.

Then comes the exception. When the authorized employee who applied the device is not available to remove it, OSHA lets the employer direct the removal. But you only get that exception if specific procedures and training “have been developed, documented and incorporated into the employer’s energy control program.”

You also have to demonstrate that your procedure gives equivalent safety to the authorized employee removing it themselves. The rule spells out three elements your procedure has to include. Miss one and you don’t have the exception anymore… you have a violation.

That third element is the one people skip. And it’s the one that gets someone killed. An employee who believes their lock is still on that panel will put their hands right back into the machine.

Why a Master Key Will Get You Cited

Here’s the part they skip over. Buying a set of locks that all open with one master key feels like the practical fix.

It isn’t. It quietly destroys the entire basis of your lockout program.

OSHA addressed this directly in a 1995 standard interpretation on lock removal. The agency’s position is that padlocks must stay under the exclusive control of the authorized employee who applied them. A master key or duplicate key is NOT acceptable for removing that lock.

So what is acceptable? Destruction. OSHA says the lock may be removed with bolt cutters or equivalent means that destroy the lock, and only under the direction of the employer following the 1910.147(e)(3) procedure.

Read that again, because it’s backwards from what most people assume. Cutting the lock off is the compliant answer. Opening it with a spare key is the citation.

The reason is control… if a supervisor has a key to your lock, your lock never protected you in the first place.

This is also why “we keep a master key in the maintenance office for emergencies” is one of the fastest ways to turn a serious lockout tagout violation into a willful one. It’s documented evidence that you knew the rule and built a workaround.

How to Write Your Unauthorized LOTO Lock Removal Policy

Your unauthorized LOTO lock removal policy is a written section of your energy control program, not a standalone memo. Here’s the build, step by step.

1. Name who can authorize a removal. Pick a title, not a person. Plant manager, maintenance manager, safety manager. Put a backup title in there too, because the primary will be on vacation the day you need this.
2. Define “not available.” Off site and unreachable is not the same as “in the break room.” Write the threshold: the employee has left the facility AND cannot return within a reasonable time.
3. Write the verification step. Who checks, and how. Badge records, a phone call to their supervisor, a physical sweep of the area they were working in.
4. Write the contact attempts. Minimum number, methods, and time intervals. Two calls and a text over 30 minutes, then the emergency contact on file.
5. Write the equipment inspection. Before that lock comes off, someone walks the machine. Tools cleared, guards back on, nobody in the danger zone, controls neutral. OSHA’s typical minimal lockout procedures give you the restoration sequence to model.
6. Write the removal method. Bolt cutters or an equivalent that destroys the lock. Name who performs the cut and who witnesses it.
7. Write the notification step. How you flag that employee at the gate BEFORE they clock in. A note in the shift log doesn’t count if nobody reads the shift log.
8. Write the training requirement. Everyone who can authorize, verify, or perform a removal gets trained on this specific procedure.

Then test it. Walk through the whole thing on a Tuesday afternoon with a lock you bought for the purpose. If your procedure falls apart in a drill, it will fall apart at 4:45 on a Friday.

This is the Develop stage of the Safety Management Cycle doing exactly what it’s supposed to do. You identified a gap, and now you’re building the process that closes it before it bites you.

What to Document Every Time You Cut a Lock

Documentation is how you demonstrate equivalent safety. Without it, you removed someone’s lock and you have a story. With it, you have a procedure that worked.

Build a one-page lock removal form and make it mandatory. Every field on it exists to answer a question an OSHA compliance officer will ask you.

• Date, time, and equipment or energy isolating device
• Name of the authorized employee whose lock was removed
• Who authorized the removal, by title
• Verification method used to confirm the employee left the facility
• Every contact attempt: time, method, and result
• Who inspected the equipment before re-energizing, and what they confirmed
• Who cut the lock, and who witnessed it
• Date and time the employee was notified, and by whom
• The employee’s signature acknowledging notification when they return

That last signature closes the loop. It’s the proof of element three.

And keep the purpose straight. You’re not documenting this to cover yourself. You’re documenting it so you can count how often it happens, spot which crews and shifts it happens on, and fix whatever is causing people to leave with locks on.

If you’d rather start from something built, the LOTO energy control procedures templates include forms you can adapt instead of building from a blank page.

Building the Procedure Into Your Energy Control Program

Lock removal isn’t a standalone policy. It has to connect to the rest of your program or it won’t hold up.

Start by separating two things people constantly blur together. A planned hand-off at shift change is NOT an exception removal, and they need different procedures.

Group lockout adds another layer. When a personal lock sits on a group lockbox, the same exception applies… you can’t cut a group lock just because the crew went home. Your group lockout tagout procedure needs to say explicitly that no lock leaves the box except through the group procedure or the e(3) exception.

Then wire it into the rest of the program. Your lockout tagout training requirements have to cover this procedure for every authorized employee.

Your annual periodic inspection reviews whether it’s being followed. And your full lockout tagout program implementation plan is where all of it lives together.

One more thing. If you’re cutting locks off every other week, stop writing better forms and go look at the system.

People don’t leave locks on because they’re careless. They leave locks on because the shift ends before the job does, or because there’s no clean hand-off at 3 p.m., or because nobody ever taught them what to do when the work isn’t finished.

Fix that, and the exception goes back to being an exception.

Frequently Asked Questions About Unauthorized LOTO Lock Removal

Can a supervisor cut off an employee’s lock?

Only under the employer’s documented removal procedure, never on a supervisor’s own judgment. The procedure must verify the employee is off site, document all reasonable contact attempts, and guarantee the employee is told before returning to work. Without a written, trained procedure, that removal violates 1910.147(e)(3).

Is it legal to use a master key to remove a LOTO lock?

No. OSHA’s standard interpretation states that padlocks must remain under the exclusive control of the authorized employee, and a master or duplicate key is not acceptable for removal. The compliant method is destroying the lock with bolt cutters or equivalent means, performed under employer direction using the documented exception procedure.

What does “not available” actually mean under 1910.147(e)(3)?

OSHA requires verification that the authorized employee is not at the facility, and your written policy should define that threshold clearly. Being off site and unreachable within a reasonable time qualifies. An employee on a break, in a meeting, or elsewhere in the building does not… go find them instead.

Do we have to notify the employee before they come back to work?

Yes, and it’s a required element, not a courtesy. The rule says you must ensure the authorized employee has knowledge that their device was removed before they resume work at the facility, so catch them at the gate or the time clock. An employee who thinks their lock is still on will trust protection that no longer exists.

How often should we review our lock removal procedure?

At minimum, during your annual periodic inspection of energy control procedures required by 1910.147(c)(6). Review it after every single use too, while the details are still fresh. Each removal is data telling you something about your shift changes, your job planning, or your training gaps.

Does the exception apply to group lockout locks?

Yes. A personal lock on a group lockbox gets exactly the same protection as one hanging on a disconnect, because it protects the same person. It can only come off through your written group lockout procedure, or through the 1910.147(e)(3) exception with all three required elements satisfied.

Now It’s Your Turn

Your unauthorized LOTO lock removal policy exists for one reason. So that the worst day in your plant doesn’t turn into a fatality because someone got impatient with a padlock at 4:45 on a Friday.

Here’s what to do this week:

1. Pull your energy control program and search it for the words “not available.” If that section isn’t there, you don’t have the exception.
2. Write the three elements into a draft procedure: verification, contact attempts, notification before return.
3. Build the one-page removal form and decide who authorizes, who cuts, and who witnesses.
4. Train every authorized employee and every supervisor who could be standing there at 4:45.
5. Run one drill before you need it for real.

If you want a head start on the forms and procedures, the All-Access Resource Library has templates you can adapt to your facility instead of starting from a blank page.

And if you’re building your entire energy control program from scratch and you’re tired of guessing what “good” looks like, that’s the kind of thing we work through together inside the Safety Leadership Academy.

You got this, Safety Friend.