1910.212 — the mechanical plant is full of unguarded rotating equipment.
Electrical safety programs stop at the switchgear. The fan wall next door has fifty exposed impellers behind a door somebody can open with a quarter-turn latch, and the standard that covers it is not 70E.
One or more methods of machine guarding shall be provided to protect the operator and other employees from hazards created by point of operation, ingoing nip points, rotating parts, flying chips and sparks. Guards must be affixed to the machine where possible and secured elsewhere if not, and must not themselves create a hazard.
§ The machines in a data center
| Equipment | The hazard | The usual gap |
|---|---|---|
| Fan wall / EC fan array | Multiple exposed impellers; adjacent fans keep spinning | Access door interlocks that only kill the one fan |
| Air handler belt drives | Nip points, sheaves | Guard removed for belt-tension check and left off |
| Cooling tower fan and gearbox | Drive shaft, coupling, fan blades | Access hatch with no interlock at all |
| Pumps & couplings | Rotating coupling, shaft | Coupling guard missing after a seal replacement |
| Generator radiator fan | Large blade, high inertia | Runs on auto-start with nobody expecting it |
| Air compressor | Belt drive, hot surfaces | Sits in a corner, never inspected |
In a fan array, opening one fan’s access panel exposes an impeller that backdrives from the pressure of the fans still running. It is turning, it has no power applied, and locking out that fan’s circuit does not stop it. This is an energy-control failure dressed as a guarding question, and it has taken fingers.
§ Where guarding meets energy control
Removing a guard to perform service puts you squarely into 1910.147. The guard was the protection; once it is off, lockout is.
Stored and residual energy — a large fan or cooling tower drive coasts for a long time. Verification means observing zero motion, not counting to ten.
Auto-start is the data center specific risk. BMS-commanded equipment starts on setpoint with nobody at a switch. Generator radiators, fan walls and pumps all do this. Lockout has to reach the control path, not just the local disconnect.
Interlocks are not lockout. A door interlock is a guard. It is defeatable, it is not a locking device, and it does not satisfy 147.
The population at risk is not the mechanical team — they know the plant. It is the electrician pulling a circuit in an air handler gallery, and the vendor tech who opened a fan panel to read a nameplate.
Concurrent maintainability makes this worse, not better. The whole design intent is that the equipment next to the one you are working on keeps running.
A coupling guard left off a chilled water pump after a mechanical seal replacement, six months earlier, in a room electricians walk through daily. Nobody removed it maliciously and nobody put it back — the work order closed without a guard-reinstallation step.
LOTO is not just electrical
1910.147 covers every hazardous energy source in the building. Our 8-hour and 16-hour classes build the electrical annex on Article 120 and show how it sits inside the wider energy control program.
See the schedule Bring it onsite