The short answer: Electrical work in Canada should be done deenergized. To create that state, CSA Z460, Control of hazardous energy: Lockout and other methods, sets the lockout process: prepare for shutdown, notify affected workers, shut down, isolate each energy source, dissipate stored energy, apply each worker's lock and tag, and verify a zero-energy state before work begins. When a task genuinely cannot be done deenergized, CSA Z462, Workplace electrical safety, requires an energized electrical work permit that documents the justification, the shock and arc-flash risk assessments, the boundaries, and the PPE. Both are consensus standards; the enforceable lockout duty comes from the provincial OHS regulation or, federally, from the Canada Labour Code Part II and the COHSR, Part VIII Electrical Safety.
When is energized electrical work actually allowed?
Only when deenergizing would create a greater hazard or is genuinely infeasible, and never merely because it is faster or cheaper. This is the same default that runs through CSA Z462 and through the OHS regimes that enforce it. Additional-hazard cases are things like interrupting life-support ventilation, emergency alarms, or ventilation serving a hazardous location. Infeasibility means the equipment genuinely cannot be shut down for the task, not that shutting it down is disruptive. Diagnostic work such as testing and troubleshooting has to be done with the circuit live by its nature, and the standards treat those specific tasks differently, but replacing a component, landing a wire, or servicing a fixture almost always can be done deenergized with planning.
The first control is therefore a habit of asking whether the task truly requires energized parts, because the answer reframes the whole job. If the work can be done dead, it becomes a lockout problem governed by CSA Z460. If it genuinely cannot, it becomes a permit-and-PPE problem governed by CSA Z462. For federally regulated workplaces, the COHSR Part VIII builds the same fork into law: it requires electrical equipment to be isolated before work, sets out guarantees of isolation, and where live work occurs it requires controls including an appointed safety watcher stationed where work is performed on or near live electrical equipment.
What is an energized electrical work permit and what must it contain?
An energized electrical work permit is the document that authorizes justified energized work and records the controls, and CSA Z462 requires it when a worker will cross the restricted approach boundary or interact with equipment in a way that raises the likelihood of an arc flash. It is the gate that forces the decision to be deliberate and approved rather than made alone at the panel.
In practice the permit captures a defined set of elements: a description of the circuit, the equipment, and its location; a description of the work; the justification for why it must be done energized; the safe work practices to be used; the results of the shock risk assessment and the arc-flash risk assessment, including the boundaries and the incident energy or PPE category and the required PPE; the means to restrict unqualified persons from the area; evidence that a job briefing was completed; and the approval signatures of the authorizing person. CSA Z462 also exempts a defined set of tasks from needing a signed permit, notably testing, troubleshooting, and voltage measurement by qualified workers using appropriate safe work practices and PPE. The justification and sign-off lines are the point of the permit: they are where an organization decides, on the record, that this specific energized task is warranted.
The shock risk assessment on that permit turns on the approach boundaries, and they are worth understanding because they govern who may get how close. CSA Z462 defines a limited approach boundary, which an unqualified person may not cross without a qualified escort and appropriate protection, and a closer restricted approach boundary, which only a qualified person using shock protection may cross because of the increased risk of contact and arc-over. The permit is triggered when work crosses that restricted approach boundary, so the boundaries are not abstract lines: for a given voltage they decide the distance at which the permit, the qualification, and the shock PPE all become mandatory. The federal COHSR reinforces the same idea from the legal side, setting out required clearance distances from live electrical parts by voltage range in its schedule.
How do you lock out and verify an electrical circuit?
Disconnect and isolate every source, dissipate stored energy, lock and tag each isolating device, and then verify a zero-energy state before anyone touches the parts. CSA Z460 frames this as a defined sequence: prepare for shutdown, notify all affected workers, shut the equipment down, isolate the system from each energy source, dissipate any residual or stored energy, apply lockout and tagout devices, verify isolation, perform the work, and then remove the devices in a controlled way. Each worker exposed to the hazard applies their own individually keyed lock, so no one else can re-energize the system while that worker is at risk.
The verification step is the one that most often decides whether the lockout was real, because it is the only point where the assumption that the power is off gets tested against the actual conductor. CSA Z460 describes verifying the zero-energy state by means such as operating the controls to confirm no response, inspecting the isolating devices, and using test equipment appropriate to the energy. For an electrical circuit, that means a qualified worker uses a voltage tester to confirm the absence of voltage at the point of work, and confirms the tester itself is working before and after the check, because a meter that has failed can display a reassuring zero on a live conductor. That false-dead reading is one of the ways experienced workers are killed on circuits they believed were safe.
One point often causes confusion. CSA Z460 is the general control-of-hazardous-energy standard covering all energy sources, while CSA Z462 is the electrical-specific standard, and the two are meant to work together on an electrical task: Z460 governs isolating and verifying the energy, and Z462 governs the electrical-specific risk assessment, boundaries, and PPE if any part of the work is done energized. The enforceable duty behind both comes from the OHS regime that governs the site. CCOHS summarizes the CSA Z460-20 lockout sequence, and for federally regulated workplaces the COHSR Part VIII sets the isolation, guarantee-of-isolation, safety-watcher, and live-test requirements directly in law.
Who is allowed to do this work?
Only a qualified worker, and being told to go ahead is not qualification. CSA Z462 restricts work on or near exposed energized parts to a qualified person: someone trained to recognize the hazards, understand the approach boundaries, and use the safe work practices and PPE for the specific task and equipment. The provincial OHS regulations carry an equivalent competency duty, and the federal COHSR requires a safety watcher where live work is performed and controls on who may perform live tests. That structure is deliberate: the permit forces the justification, the qualification requirement decides who may hold it, and the verified lockout under CSA Z460 is what makes deenergized work the safer default the standards intend. Because each province and territory adopts its own OHS regulations, confirm the exact lockout, permit, and competency requirements with the regulator that governs your workplace.
