Permit-to-work systems

What is a work permit?

Most serious accidents during maintenance, facility shutdowns, and contract work occur during non-routine tasks, where conditions change, multiple companies are involved, and general safety assessments are insufficient. The work permit addresses this problem: it requires someone with authority and knowledge of the facility to analyze the specific task, verify that the necessary safety measures are in place, and expressly authorize its commencement, ensuring that the person performing the work is aware of and accepts the conditions. The INSST (National Institute for Safety and Health at Work) describes this system in NTP 562 as part of the preventive management of special work projects.

It is not an administrative procedure nor a transfer of responsibility. It is a communication and verification mechanism between the person familiar with the facility (the issuer), the person who will be working on it (the operator), and, when applicable, the supervisor (preventive officer, confined space attendant, fire watch officer). Its value depends on the checks being carried out on-site and at the time, not in an office hours beforehand.

In Spain, the obligation to establish a permit system is expressly stated in Royal Decree 681/2003 for work in areas with a risk of explosive atmospheres, and regulations for installations and work involving electrical hazards require the recording and authorization of certain tasks. Generally, this obligation stems from the duty to plan preventive measures, coordinate business activities, and ensure the presence of preventive resources in high-risk activities.

When is it used?

Each organization defines in its procedures which jobs require a permit. The usual ones are:

• Hot work . Welding, oxy-fuel cutting, grinding or any task with flame or spark outside of areas prepared for it, with a fire watchman.
• Confined space entry. With atmospheric monitoring, ventilation, external watchman, and rescue.
• High-risk work at heights. Roofs, structures, rope work, special scaffolding.
• Electrical work. De-energized interventions with lockout/tagout and authorized live-line work.
• Interventions in facilities with hazardous energy. Opening of process lines, pressure equipment , systems with lockout/tagout.
• Work in ATEX zones. Any activity with potential ignition sources in classified areas.
• Excavations and work with risk of contact with buried utilities. With prior location of pipes.
• Contract work in operating facilities. As an instrument for coordinating business activities.

Content and cycle of the permit

1. Identification: description of the work, exact location, equipment or facility, company and people performing the work, date and time of validity.
2. Risks identified for the specific task and for simultaneous activities in the area.
3. Previous measures verified on site: energy isolation and lockout, cleaning and purging, atmosphere measurement, ventilation, collective protections, signage, removal of flammable materials.
4. Personal protective equipment and required surveillance, communication and rescue equipment.
5. Signatures: issuer who authorizes, executor who accepts the conditions and, where appropriate, preventive resource or monitor.
6. Suspension conditions: changes in the installation, alarm, weather conditions, end of validity.
7. Closure: verification that the area is secure, removal of lockout devices, restoration of protections and signing of closure; the closed permit is filed as a record.

The duration of a permit is limited, usually to one shift or one day; if the work extends beyond that point, it is renewed with further checks. A permit does not cover work other than that described or areas other than the one specified.

Organizational application

• Permit system procedure. Defines the subject jobs, the models by job type, the people authorized to issue and their training, the deadlines and the archiving.
• Issuers. Production or maintenance managers who are familiar with the installation, trained in the system, and have the authority to deny authorization or to suspend.
• Performers. Own staff or contractors with the required training for the job; the permit is explained and signed on site.
• Coordination. Registration of active permits by zone to avoid interference between simultaneous work; integration with the coordination of business activities.
• Digitization. Electronic permits facilitate traceability, overlap control, expiration notices, and incident analysis, provided that verification continues to be done on-site.

Limits and common mistakes

1. Signing the permit in the office without checking the conditions on site.
2. Using a generic model that does not require verifying specific work measurements.
3. Long-term permits or renewed without new checks.
4. Issuing permits without real authority to deny or suspend them, or by people who are unfamiliar with the facility.
5. Understanding the permit as a substitute for risk assessment, training, or the presence of a preventive resource.
6. Do not close the permits, thereby losing control of the removed locks and the restored protections.

The work permit does not transfer responsibility from the issuer to the executor or vice versa: each company and each person retains the obligations assigned to them by Law 31/1995.

Regulatory framework and references in Spain

• Law 31/1995, articles 16, 24 and 32 bis . Preventive planning, coordination of business activities and presence of preventive resources.
• Royal Decree 681/2003, Annex II . Requires a work permit system for hazardous activities in areas with explosive atmospheres.
• Royal Decree 171/2004 . It develops the coordination of business activities, a framework in which permits for contracts are integrated.
• Royal Decree 614/2001 . Protection against electrical risk; assignment and authorization of work on electrical installations.
• NTP 562: Preventive management system: authorizations for special work (INSST) . Criteria for the design of a permit and authorization system.

In the process industry, permit-to-work systems are part of process safety management and are covered by regulations on major accidents (Royal Decree 840/2015). In the English-speaking world, they are known as permit-to-work, and in the United States, they are linked to energy lockout/tagout.