Food and Beverage LOTO: 1910.147 Compliance for Sanitation and Wet Environments

Published May 11, 2026 by LOTO Compliance

Plant floors in dairy, brewery, beverage, bakery, and packaged food run on a rhythm that no other industry shares. Production stops, sanitation comes in, CIP and COP cycles run, and production starts back up, often inside an eight-hour window. LOTO has to ride that rhythm without becoming the thing that slows it down or the thing that fails when production pushes back. We see the failure pattern on most pre-audit walkthroughs: hardware corroded shut, sanitation crews running their own locks without host coordination, machine-specific procedures missing the steam side or the glycol side, and a written program copied from a dry-goods plant that never named caustic.

This guide is the food and beverage cut of OSHA 1910.147 from a senior EHS lens. It pairs with our broader periodic inspection checklist and the FY2025 citation breakdown for the audit-day view. For the equipment-specific cut on conveyors that feed every packaging line in this sector, see the conveyor LOTO procedures piece.

The Energy Sources a Food Plant Carries

OSHA 1910.147(c)(4)(ii)(B) requires a written procedure to name every type of energy and the method to isolate it. On a dry packaging floor, that list runs short: electrical, pneumatic, sometimes gravitational. A wet-side process floor adds at least four more categories that need their own isolation strategy.

The miss most often is on the secondary sources. The electrical disconnect gets locked because it is the obvious step. The pneumatic regulator with 80 psi upstream of a clutch on a case packer, or the glycol return line still circulating through a chiller jacket, is the source that creates surprise motion or thermal exposure during a sanitation reach-in. Every machine-specific procedure on a food line needs the secondary list spelled out at the asset level.

CIP, COP, and the Servicing Question

Clean-in-place runs caustic at roughly 1 to 4 percent concentration, acid at 0.5 to 2 percent, at temperatures from 150 to 185 degrees Fahrenheit, at line pressures that exceed normal product flow. The chemistry alone is a hazard that operating guards do not control. When sanitation has to open a valve manifold, break a tri-clamp, swab a fill nozzle, or inspect inside a vessel after CIP, that is servicing under 1910.147(a)(2)(i) and full LOTO applies.

The minor servicing exception at 1910.147(a)(2)(ii) is narrow. To use it, the task has to be routine, repetitive, integral to production use, and the employee has to be protected by an alternative measure that controls the hazard. CIP rarely satisfies the alternative measure test because the chemical and thermal hazards persist after the cycle ends. The line still holds residual caustic. The jacket still holds steam pressure or hot condensate. Treat CIP changeovers as a LOTO event and budget the time. Plants that try to wedge sanitation between production runs with informal isolation are the ones that show up in OSHA fatality reports under 1910.147(d).

Hardware Built for Washdown

Lockout hardware on a food floor takes a beating that no other environment matches. Caustic strips paint off carbon steel hasps inside three months. Peracetic acid pits cheap aluminum. Daily 180 degree washdown shortens lock cylinder life by half. Spec the hardware accordingly:

• Hasps and scissor lockouts: stainless steel or hot-dipped galvanized. No painted carbon steel.
• Padlocks: brass or stainless body, weep holes for water egress, key retention rated for IP65 or better. Master Lock S31KA, Brady SafeKey, or equivalent.
• Valve lockouts: match the valve. Ball valve covers for quarter-turn stainless, chain lockouts for gate valves, dedicated covers for butterfly valves. Avoid universal valve covers on dairy and brewery floors.
• Tags: polyethylene or polyester laminate, not vinyl. Caustic dissolves vinyl tag faces inside a month.
• Storage stations: sealed wall-mount near the line, not a maintenance cart that crosses the sanitation envelope.

An annual hardware replacement line on the safety budget is normal in this sector. Plants that try to extend hardware life past the corrosion point end up with hasps that bind, locks that fail to open, and procedures that get bypassed because the hardware does not work. That is a 1910.147(c)(5)(i) durability gap and it shows up in the citation log.

Sanitation Contractors and Host Coordination

Most large food plants run sanitation through a third-party contractor (Kelmac, PSSI, Fortrex). 1910.147(f)(2) puts joint responsibility on both employers. The host informs the contractor of plant procedures and the chemicals on site. The contractor informs the host of its own LOTO program. Each side honors the other's locks. In practice that breaks down three ways:

1. Contractors arrive with off-color personal locks and no plant orientation. Inspectors note the gap immediately. Fix: every sanitation employee picked up by the contract gets host-specific orientation, signs a procedures acknowledgement, and is issued a host-style lock under a documented authorized-employee roster.
2. Group lockout boxes are not used during changeover. One supervisor lock controls energy while individual sanitation employees rotate in and out. That is a chain-of-custody gap. Fix: a group lockout box at each line, with the line lead managing keys and the night supervisor verifying.
3. Procedures live in the contractor's binder, not at the equipment. 1910.147(c)(4)(iii) requires written procedures and most inspectors read that as "available at the work location." Fix: machine-specific procedures posted at the line, in English and Spanish on most floors, signed off by host EHS and the contractor's site supervisor.

This is the most common audit gap we see on third-party sanitation arrangements. ECPL builds host-contractor coordination into our annual audit and gap analysis deliverable specifically because the failures are so predictable.

The Citations That Hit Food and Beverage Hardest

OSHA's annual top-10 list does not break out 1910.147 by NAICS, but the inspection record (available through the agency's enforcement database) shows the food and beverage cuts cluster around four sub-paragraphs.

• 1910.147(c)(4)(i): failure to develop or document machine-specific procedures. The plant-wide energy control program exists, but the asset-level procedures are missing on half the lines.
• 1910.147(c)(6)(i): failure to conduct annual periodic inspections. Or inspections performed but not documented with the authorized employee, certifier, date, and machine name required by (c)(6)(ii).
• 1910.147(c)(7)(i): training gaps on authorized employees. Sanitation contractor training is the failure mode here, not host maintenance.
• 1910.147(d)(6): verification of zero-energy state. The "try it" step is skipped or done on the electrical side only. Pneumatic and thermal verification gets missed.

For audit prep, the practical move is a two-day walkthrough that pulls one procedure per major equipment category, walks it against the equipment with the operator and the maintenance lead, and grades each step. That is the structure ECPL runs on every gap analysis in this sector. The deliverable is the redlined procedure list and the hardware replacement plan, with priority order on the lines most exposed to sanitation crew turnover.

What to Do This Month

If you run a wet-side process floor and you have not pulled the LOTO program apart in the last twelve months, four moves give you the highest return:

1. Inventory the energy sources on each line and confirm every secondary source (pneumatic, glycol, steam, hydraulic) is named on the procedure. Stop the inventory at the procedure binder; do not assume the binder matches the line.
2. Walk the sanitation changeover with the contractor supervisor, host EHS, and the line lead. Watch one full LOTO cycle and document what happens, not what the procedure says happens.
3. Audit the hardware on every line. Replace anything corroded, painted-carbon-steel, or vinyl-tagged. Budget for annual replacement going forward.
4. Sample five procedures and run the 1910.147(c)(6) periodic inspection on each. Document the inspection per (c)(6)(ii) with date, machine, authorized employee, and certifier name.

If any of the four exposes a gap you cannot close internally, that is the call point. ECPL runs gap analyses, builds machine-specific procedures, trains authorized and affected employees, and delivers the documentation package that closes the (c)(6) and (c)(7) sub-paragraphs in one visit. Locations are Chicago, Detroit, and Indianapolis with national travel, and the assessment is free.

Frequently Asked Questions

Does CIP (clean-in-place) count as servicing under 1910.147?

Yes, in most cases. CIP cycles use caustic and acid at temperatures and pressures that create chemical and thermal hazards beyond the operating envelope. If sanitation has to bypass a guard, open a valve manifold, or break a vessel seal, that is servicing under 1910.147(a)(2)(i) and full LOTO applies. The minor servicing exception at (a)(2)(ii) almost never holds for CIP because the chemistry itself introduces hazards a guard interlock does not control.

How do you keep lockout hardware functional in a wet, washdown plant?

Stainless or coated brass hasps, scissor lockouts rated for IP65 or better, and locks with corrosion-resistant cylinders. Cheap painted-steel hasps rust through inside a quarter on a dairy floor or beverage line. The hardware has to survive caustic, peracetic acid, and 180 degree Fahrenheit washdown without binding. Annual hardware replacement is a budget line, not a gap. Store devices in a sealed station near the equipment, not in a maintenance cart that gets sanitized once a week.

What energy sources get missed most often on a food line?

Compressed air for case packers and palletizers, steam and condensate on kettles and pasteurizers, glycol on chillers, residual hydraulic on lifts and tippers, and stored mechanical on bottle elevators. Electrical disconnects get locked because they are obvious. The pneumatic regulator with 80 psi sitting upstream of a clutch, or the glycol return line still under pressure, is the source that creates the surprise motion during a sanitation reach-in.

How does LOTO work with sanitation contractors on the floor?

1910.147(f)(2) requires both the host employer and the contractor to inform each other of LOTO procedures and to honor each other's locks. In practice, the plant issues sanitation crew their own personal locks under a documented program, runs them through host-specific training, and the night supervisor verifies group lockout boxes during the changeover. Contractors using their own off-color locks without coordination is a citation pattern in third-party sanitation arrangements.

Do beverage and dairy plants need different LOTO than dry packaging?

The standard is the same; the practical procedures look different. Wet-side plants run CIP, have more thermal and chemical energy, and use stainless valves with quarter-turn handles that need physical lockouts engineered for the valve. Dry-side packaging leans harder on pneumatic and stored mechanical isolation. The written program covers both, but the machine-specific procedures and the hardware on the floor have to match the actual equipment, not a generic template.

What about quick changeovers and minor servicing exceptions on packaging lines?

Quick changeovers (size parts, web changes, label rolls) can fall under the minor servicing exception at 1910.147(a)(2)(ii) when the task is routine, repetitive, integral to use, and protected by an alternative measure such as a fixed guard, interlock, or control reliable circuit per ANSI B11.0. The exception fails the moment an operator reaches past a guard or bypasses an interlock. Documented task analysis, signed by safety and the line lead, decides what qualifies and what does not.