Operator Reference
Confined Space & Lockout/Tagout
The two rules that kill operators most, summarized with the citation behind every line. A memory aid — not a replacement for your program, your permit, or your training.
First: does OSHA even cover you?
Most wastewater operators work for a city, a district or an authority — and federal OSHA does not directly cover state and local government employees. Whether these rules are enforceable against your utility depends entirely on which state you are in.
- 22 State Plans cover both private sector and state and local government workers. If you are in one of these, these rules apply to you through your state program.
- 7 State Plans cover only state and local government workers, leaving private employers under federal OSHA: Connecticut, Illinois, Maine, Massachusetts, New Jersey, New York, Virgin Islands.
- Everywhere else — states with no plan at all — a municipal utility's employees have no OSHA coverage for workplace safety, federal or state. These rules are still the recognized standard of care, and many employers follow them by policy, contract or insurance requirement. But they are not enforceable against your employer.
Counts are OSHA's own, from osha.gov/stateplans. Check your own state there — the list changes.
How to read the badges
- RULE
- Enforceable text from the Code of Federal Regulations. If OSHA has jurisdiction over your employer, this is law.
- GUIDANCE
- Non-mandatory CFR appendices and NIOSH publications. Authoritative and worth following, but not enforceable on its own.
- PRACTICE
- Common industry practice with no specific citation behind it. Sensible, widely taught, but check it against your own program.
Is it a permit space?
Two questions, in order. First, is it a confined space at all? Then, does it have any of the four characteristics that make it permit-required? A wet well, a digester, a manhole and a valve vault are all usually yes on both counts.
- A confined space is all three of theseRULE1910.146(b)
Large enough that you can bodily enter it and perform work; has limited or restricted means of entry or exit; and is not designed for continuous employee occupancy. All three must be true.
- It becomes permit-required with any one of theseRULE1910.146(b)
Contains or has the potential to contain a hazardous atmosphere; contains a material with the potential to engulf an entrant; has an internal configuration that could trap or asphyxiate an entrant by inwardly converging walls or a floor that slopes and tapers to a smaller cross-section; or contains any other recognized serious safety or health hazard. Only one is needed.
- Hazardous atmosphere includes the oxygen rangeRULE1910.146(b)
An atmosphere below 19.5% or above 23.5% oxygen is a hazardous atmosphere. So is a flammable gas at or above 10% of its lower flammable limit, or airborne combustible dust at or above its LFL — which the rule notes can be approximated as a concentration that obscures vision at five feet.
- This page covers general industry, not constructionRULE1910.146 · 1926 Subpart AA
29 CFR 1910.146 governs the operations and maintenance work most municipal wastewater staff do. Construction work — building or substantially rebuilding a station — falls under 29 CFR 1926 Subpart AA instead, which has different requirements. Know which one applies to the job in front of you.
Atmospheric testing
The order is not a suggestion and it is not arbitrary. It is written into the rule, and there is a physical reason for it.
- Test in this order: oxygen, then combustible gas, then toxicsRULE1910.146(d)(5)(iii)
This sequence is mandatory rule text, not an appendix recommendation. Test for oxygen content first, then for flammable gases and vapors, then for potential toxic air contaminants.
- Why oxygen comes firstGUIDANCE1910.146 App. B
Most combustible-gas sensors are catalytic bead type — they burn a sample of the gas to measure it, and that reaction needs ambient oxygen. In an oxygen-deficient atmosphere they read low, so a space can look safe for flammables when it is not. Reading oxygen first tells you whether to trust the combustible reading at all. The explanation lives in the non-mandatory appendix; the ordering requirement itself is in the rule.
- Sewers get continuous monitoring, not a single pre-entry testRULE1910.146(d)(5)(i)
The standard singles out sewers by name as the example of a space that cannot be isolated because it is part of a continuous system. Where isolation is infeasible, pre-entry testing is done to the extent feasible and then conditions must be continuously monitored in the areas where entrants are working.
if isolation of the space is infeasible because the space is large or is part of a continuous system (such as a sewer), pre-entry testing shall be performed to the extent feasible before entry is authorized and, if entry is authorized, entry conditions shall be continuously monitored in the areas where authorized entrants are working.
- Entrants may watch the testRULE1910.146(c)(5)(ii)
Authorized entrants or their representatives must be given an opportunity to observe the pre-entry and any subsequent testing. If you are going in the hole, you are entitled to watch the meter.
Gas limits
Four sources, four different numbers for the same gas, and they are not interchangeable. A ceiling may never be exceeded at any moment. An 8-hour TWA is an average across the shift. An alarm setting is where your meter should shout at you, well before either limit.
| Gas | OSHA general industry | OSHA construction | NIOSH | Sewer alarm (App. E) |
|---|---|---|---|---|
| Hydrogen sulfideH₂S | 20 ppm ceiling; 50 ppm peak for one 10-min period per shift, only if no other measurable exposure occurs. No 8-hr TWA. | 10 ppm as an 8-hour TWA | REL 10 ppm ceiling [10-min] · IDLH 100 ppm | Alarm at ≥ 10 ppm |
| Carbon monoxideCO | 50 ppm as an 8-hour TWA | 50 ppm as an 8-hour TWA (same) | — | Alarm at ≥ 35 ppm |
| OxygenO₂ | Acceptable range 19.5% – 23.5%. Outside that, the space is a permit space. | Must be at least 19.5% | — | Alarm below 19.5% |
| MethaneCH₄ | No PEL. Treated as a simple asphyxiant — controlled through the oxygen minimum and the explosion limits. | No PEL. Simple asphyxiant. | Flammable range 5.0% – 15.0% in air | Alarm at ≥ 10% LFL (≈ 0.5% by volume) |
- Your nose is not a gas detectorGUIDANCENIOSH Pocket Guide
H₂S smells like rotten eggs at low concentration and then stops smelling like anything. NIOSH puts it plainly in the Pocket Guide entry for hydrogen sulfide, where the listed synonyms include “Sewer gas”.
Sense of smell becomes rapidly fatigued & can NOT be relied upon to warn of the continuous presence of H₂S.
- General industry and construction differ in structureRULE1910.1000 Table Z-2 · 1926.55 Table 1
For H₂S the two standards are not just different numbers. General industry sets a ceiling you may never exceed plus a short peak allowance, and sets no 8-hour average at all. Construction sets an 8-hour average and no ceiling. A capital project — building a new lift station — may fall under the construction rules instead of the ones you work under day to day.
- The sewer alarm settings are more conservative on purposeGUIDANCE1910.146 App. E
Appendix E to 1910.146 recommends monitors that sound an audible alarm — not just show a reading — at these thresholds. They sit well below the enforceable exposure limits because a sewer atmosphere can change without warning. These are recommendations, not requirements.
The ventilation trap
This is the single most common way a wastewater crew gets a permit space wrong. Two different provisions get blurred together in the field, and the difference between them is the difference between a controlled hazard and an eliminated one.
- Ventilation controls a hazard. It does not eliminate it.RULE1910.146(c)(7)(ii)
The regulation says this outright in a note under the reclassification paragraph. You can run a blower all day and the space is still a permit space.
Control of atmospheric hazards through forced air ventilation does not constitute elimination of the hazards.
- Alternate entry under (c)(5) — what crews actually useRULE1910.146(c)(5)
If the only hazard is atmospheric and continuous forced air ventilation alone is enough to keep the space safe, you may use a lighter procedure instead of a full permit: no written permit and no attendant required. But you owe monitoring data supporting both of those conditions, testing in the mandatory order with a calibrated direct-reading instrument, ventilation from a clean source running the entire time, periodic testing during entry, immediate evacuation and investigation if a hazardous atmosphere shows up, and a signed dated written certification before entry begins.
- (c)(5) is off the table the moment there is a second hazardRULE1910.146(c)(5)(i)(A)
Engulfment from rising wastewater. A pump that could restart. An unguarded impeller. A converging or tapering configuration. Any one of those means the hazard is not purely atmospheric, and the full permit program applies — attendant, permit, the whole thing. This is where wet wells most often get mishandled.
- Reclassification under (c)(7) is a different thing entirelyRULE1910.146(c)(7)
Reclassifying a space to non-permit status requires that it pose no actual or potential atmospheric hazard and that every hazard inside be eliminated — not controlled. If entry is needed to eliminate those hazards, that entry happens under the full permit program first. Requires a written, signed, dated certification. If a hazard comes back, everyone exits and the space is reevaluated.
The attendant
Attendant duties are widely misunderstood, and the misunderstanding is usually in the direction that gets a second person killed.
- The attendant stays outside until relievedRULE1910.146(i)(4)
The attendant remains outside the permit space during entry operations until relieved by another attendant. Not until the job looks finished, and not until something goes wrong — until another attendant takes over.
- An attendant may only enter to rescue under narrow conditionsRULE1910.146(i)(4) · (k)(1)
All of the following must be true: the employer's permit space program allows attendants to participate in rescue, the attendant is trained and equipped as a rescuer under the rescue paragraph, and the attendant has been relieved by another attendant first. Absent all three, the attendant does not go in.
- More than 60% of confined space deaths are would-be rescuersGUIDANCENIOSH Pub. 86-110
This figure comes from a 1986 NIOSH Alert that documented 16 confined space deaths. It is the reason the attendant rules read the way they do.
More than 60% of confined space fatalities occur among would-be rescuers.
Rescue
- Retrieval systems are required for vertical spaces over 5 feetRULE1910.146(k)(3)(ii)
A mechanical device must be available to retrieve personnel from vertical type permit spaces more than five feet deep. That covers most wet wells and most manholes. The only exception is where the retrieval equipment would increase the overall risk of entry or would not contribute to rescuing the entrant.
- Chest or full body harness, line attached at the center of the backRULE1910.146(k)(3)(i)
Each authorized entrant wears a chest or full body harness with a retrieval line attached at the center of the back near shoulder level, above the head, or at another point which the employer can establish presents a profile small enough for successful removal.
- You cannot simply assume the fire department is your rescue planRULE1910.146(k)(1)(i)
The standard does not forbid using an outside service, but it requires the employer to evaluate a prospective rescue service's ability to respond in a timely manner and to actually perform the rescue, and to inform them of the hazards they may face. An unevaluated phone call is not a rescue plan.
- Rescue teams practice at least every 12 monthsRULE1910.146(k)(2)(iv)
Affected employees must practice permit space rescues at least once every 12 months, by means of simulated rescue operations in which they remove dummies, manikins or actual persons from the actual permit spaces or from representative spaces.
Lockout/tagout: the sequence
29 CFR 1910.147 states these steps must be done in this order. Step 6 is the one that gets skipped.
- 1. Prepare for shutdownRULE1910.147(d)(1)
The authorized employee knows the type and magnitude of the energy, the hazards it presents, and the method of controlling it.
- 2. Shut the equipment downRULE1910.147(d)(2)
Use the established procedure for an orderly shutdown, so that stopping the equipment does not itself create a hazard.
- 3. Isolate itRULE1910.147(d)(3)
Physically locate and operate the energy isolating devices so the equipment is isolated from every energy source.
- 4. Apply the locks or tagsRULE1910.147(d)(4)
Affixed by authorized employees. A lockout device holds the isolating device in the safe or off position. A tagout device is attached at the same point the lock would have gone, or as close as safely possible in an obvious position.
- 5. Release stored energyRULE1910.147(d)(5)
All potentially hazardous stored or residual energy must be relieved, disconnected, restrained, or otherwise rendered safe. If it can re-accumulate to a hazardous level, verification of isolation continues until the work is done or the possibility no longer exists.
- 6. Verify isolation before starting workRULE1910.147(d)(6)
This is its own mandatory step, separate from and after releasing stored energy. The rule does not prescribe how — try-start, voltage tester, pressure gauge at zero — only that verification happens and that the method fits the energy type. Trusting the lock without verifying is the common field failure.
Lockout/tagout: the rules people get wrong
- Lockout is the default; tagout is the justified exceptionRULE1910.147(c)(2)(ii) · (c)(3)
If an energy isolating device is capable of being locked out, the employer must use lockout unless they can demonstrate that tagout will provide full employee protection. Tagout on a lockable device requires additional physical measures — removing an isolating circuit element, blocking a controlling switch, opening an extra disconnect, removing a valve handle — because the rule treats a tag as inherently weaker than a lock.
- “One employee, one lock, one key” is a shorthand, not a citationRULE1910.147(f)(3)(ii)(D)
The phrase does not appear in the regulation. What the regulation actually requires for group work is that each authorized employee affix a personal lockout or tagout device to the group lockout device, group lockbox or comparable mechanism when they begin work, and remove it when they stop. Same principle, different wording — worth knowing if someone asks you to cite it.
- Group lockout needs an accountable personRULE1910.147(f)(3)(ii)
Primary responsibility is vested in one authorized employee for a set number of workers under a group device. That person must be able to determine the exposure status of each individual group member. When multiple crews or departments are involved, an overall job-associated coordinator is assigned.
- Removing an absent employee's lock takes a written procedureRULE1910.147(e)(3)
The device is removed by the employee who applied it. If that person is unavailable, removal by the employer requires a documented procedure already in the energy control program, and it must include verifying the employee is not at the facility, making all reasonable efforts to contact them, and ensuring they know before resuming work at that facility. All three are minimums. You do not cut a forgotten lock on the fly.
- Shift change needs an orderly transferRULE1910.147(f)(4)
Specific procedures must ensure continuity of protection during shift or personnel changes, including provision for the orderly transfer of device protection between off-going and oncoming employees. The rule requires the procedure to exist but leaves the mechanics to the employer.
- The cord-and-plug exception requires exclusive controlRULE1910.147(a)(3)(iii)(A)
Unplugging the equipment only counts if the plug stays under the exclusive control of the employee doing the work. In their pocket, in their sight, tagged as theirs. A cord pulled and left lying on the floor is not covered.
- The procedure gets inspected annuallyRULE1910.147(c)(6)
At least annually, by an authorized employee other than the ones using the procedure being inspected — no self-inspection. Deviations must be corrected, and the employer certifies the inspection identifying the equipment, the date, the employees included, and who performed it.
Stored energy in a wastewater plant
The regulation's stored-energy language is generic and names none of these. Applying it to specific plant equipment is interpretation, so treat the list as a prompt for your own walkdown rather than a citation.
- VFD and drive capacitorsPRACTICE
DC bus capacitors in a variable frequency drive can hold a lethal charge after the disconnect is locked. Wait the manufacturer's specified discharge time or verify zero voltage by measurement before opening the enclosure. This also intersects NFPA 70E, a separate consensus standard.
- Trapped pressure in a force mainPRACTICEconcept per 1910.146(b)
A force main segment isolated by closed valves can still hold pressurized wastewater. Double block and bleed — closing and locking or tagging two in-line valves, then opening and locking or tagging a drain or vent valve between them — is the standard method. That phrase is defined in the confined space rule and the concept carries directly across.
- Hydraulic and pneumatic systemsPRACTICE
Bleed and vent to atmosphere, then confirm at a gauge reading zero. Do not infer pressure from valve position.
- Gravity and elevated componentsPRACTICE
Block or chock anything that can fall or swing — a raised slide gate, a bar screen, a lifted pump. Restrain it mechanically rather than relying on the hoist.
- Springs and tensioned assembliesPRACTICE
De-tension or mechanically block before disassembly.
Read the actual rule
Everything above is a summary. These are the sources, free and public.
- 29 CFR 1910.146 — Permit-Required Confined SpacesThe full rule, including Appendix C's worked sample program titled “Sewer entry” and Appendix E on sewer system entry.
- 29 CFR 1910.147 — The Control of Hazardous EnergyLockout/tagout in full.
- OSHA State PlansFind out whether your state covers public employees, and who enforces it.
- NIOSH Pocket Guide — Hydrogen sulfideExposure limits, IDLH, and the note about smell fatigue.
- NIOSH Alert 86-110 — Fatalities in Confined SpacesThe 1986 Alert behind the rescuer statistic. Sixteen case studies.