The short answer: The Canadian standard for a workplace electrical safety program is CSA Z462, Workplace electrical safety, which is harmonized with NFPA 70E but written for the Canadian regulatory context. It makes an electrically safe work condition the default, requires a shock and arc-flash risk assessment before any energized work, applies the hierarchy of risk control before it reaches PPE, and proves through training that each worker is qualified. CSA Z462 is a consensus standard, not a law. The enforceable duty comes from the province or territory that governs the workplace (through its OHS act and regulations) or, for federally regulated workplaces, from the Canada Labour Code Part II and the Canada Occupational Health and Safety Regulations (COHSR), Part VIII Electrical Safety. Installation itself follows CSA C22.1, the Canadian Electrical Code.
Is NFPA 70E the standard used in Canada?
No. Canadian employers work to CSA Z462, not NFPA 70E, and they install to the Canadian Electrical Code (CSA C22.1) rather than the US National Electrical Code. CSA Z462 is harmonized with NFPA 70E, so the structure of the two documents is deliberately similar, but Z462 is the version written for Canadian workplaces and referenced by Canadian guidance such as the Canadian Centre for Occupational Health and Safety (CCOHS). Adopting Z462 is a sound engineering decision, but it is worth being precise about what gives the program its legal force, because the standard itself is not the law.
In Canada, occupational health and safety is split by jurisdiction. Most workplaces fall under a provincial or territorial OHS act and its regulations, and each of those regimes carries a general duty on the employer to protect workers from recognized hazards, of which arc flash and electric shock are clear examples. Federally regulated workplaces (interprovincial transport, telecommunications, banking, and similar sectors) instead fall under the Canada Labour Code Part II and the COHSR. CCOHS publishes guidance that references CSA Z462:21 and CSA C22.1, but CCOHS guidance is not itself enforceable. So the program is built to Z462, and the duty to run it comes from whichever OHS regime governs the site.
What has to be in an electrical safety program?
The program has to establish deenergized work as the norm, define who is qualified, set the risk-assessment and control process for the exceptions, provide and maintain the right protective equipment, and hold itself accountable through training and auditing. Those are the load-bearing pieces of a CSA Z462 program, and each one maps to a duty a Canadian regulator can inspect against. The table later in this article condenses them; the paragraphs here explain the two that employers most often get wrong.
The first is the default. CSA Z462, like the OHS regimes that stand behind it, treats an electrically safe work condition as the plan and energized work as a justified, documented exception. Under the federal COHSR, for example, Part VIII requires electrical equipment to be isolated before work and sets out guarantees of isolation, which is the same logic a provincial regime applies through its own electrical provisions. A program that treats energized work as routine has inverted the standard. The correct posture is that establishing the deenergized state is the first control, and any energized task has to clear a justification test before it proceeds.
The second is who does the work. CSA Z462 restricts work on or near exposed energized parts to a qualified worker: someone trained to recognize the hazards, understand the approach boundaries, and use the safe work practices and PPE for the task. Qualification in this sense is specific to the task and the equipment, not a job title or a trade card. A licensed electrician is not automatically qualified for a particular energized task on a particular piece of gear unless they have been trained and authorized for that work under the program.
| Program element | What it requires | Where the duty sits in Canada |
|---|---|---|
| Electrically safe work condition as default | Deenergize and verify before working unless a justification shows it cannot be done | Provincial OHS regulation; COHSR Part VIII (federal) |
| Qualified workers only on energized parts | Only trained, authorized workers work on or near exposed energized parts | CSA Z462; provincial OHS competency duties |
| Shock and arc-flash risk assessment | Assess shock and arc-flash hazards before energized work; identify boundaries and incident energy | CSA Z462 (referenced by CCOHS) |
| Hierarchy of risk control | Eliminate, substitute, engineer, use warnings and administrative controls, then PPE | CSA Z462; general OHS duty |
| Protective equipment | Arc-rated and insulating PPE suited to the task; inspected and maintained | CSA Z462; provincial PPE regulation |
| Training and re-evaluation | Train and authorize workers; retrain when equipment, procedures, or role change | Provincial OHS regulation; COHSR (federal) |
How do you decide whether work can be done deenergized?
Start from the assumption that it can, then require a documented justification to do anything else. Under both the provincial regimes and the federal COHSR, inconvenience, production pressure, and the time it takes to shut down are not acceptable reasons to work on live parts. The recognized grounds for energized work are narrow: that deenergizing would introduce a greater hazard, such as shutting down life-safety ventilation or emergency lighting, or that it is genuinely infeasible because of equipment design or an operational limitation. Most tasks that get done live could be done dead with better planning.
When energized work does clear that bar, the program moves into risk assessment. CSA Z462's method calls for a shock risk assessment that identifies the voltage and the approach boundaries around exposed parts, and an arc-flash risk assessment that determines the incident energy, or the appropriate PPE category, and the arc-flash boundary. Those outputs are what a supervisor signs off on when authorizing energized work, and they are what tell the qualified worker which protective equipment and which boundaries apply. The assessment converts a vague sense that a task is dangerous into specific numbers that drive the controls.
The program should also make the assessment reusable. Because incident energy and boundaries depend on the equipment's available fault current and the protective device's clearing time rather than on the individual worker, the results belong on the equipment itself, on an arc-flash label, and in the procedure for the task, so the next qualified worker does not start from zero. That is how the assessment stops being a one-time document and becomes an operating input: the label states the exposure, the procedure states how to control it, and the permit records that a supervisor weighed the justification against those known numbers before the work went ahead.
Why does the hierarchy of control come before PPE?
Because PPE is the last layer, not the first, and a program that leads with it is guarding against the consequence instead of removing the cause. CSA Z462 requires applying the hierarchy of risk control: eliminate the hazard first, then substitute, then use engineering controls, then awareness and administrative controls, and only then arc-rated PPE. Elimination, in electrical work, usually means creating an electrically safe work condition, which is why deenergizing sits at the top of the hierarchy and PPE sits at the bottom.
The operational point is that arc-rated clothing and insulating gloves reduce the severity of an event that has already started; they do nothing to stop it from starting. A worker in a 40 cal/cm² flash suit standing in front of energized 600-volt gear is still exposed to the arc flash and arc blast, only with a better chance of surviving it. So the program should treat every requirement for heavy PPE as a signal to ask whether the task could have been done deenergized, and it should make that question part of the energized-work authorization rather than an afterthought. PPE is the control you rely on when the higher controls could not be applied, not the control you reach for first.
How do you keep the program credible over time?
Tie it to training, provisioning, and auditing, because a program is only as real as the last time someone checked it against the floor. The provincial OHS regulations, and the COHSR federally, require workers to be trained for the electrical work they do, and they require protective equipment to be maintained in safe condition. Insulating gloves that are never tested and a qualification that is never refreshed are gaps that an incident, or an inspector, will find.
Effective programs close the loop three ways. They keep a current record of who is qualified for which tasks and equipment, and they re-evaluate when the equipment, the procedures, or a person's role change. They provision and test the protective equipment on a schedule, so the arc rating on the label still means something. And they audit the field work against the written program, because the failure mode is almost never the absence of a program: it is a program that exists on paper while energized work happens without the assessment, the boundaries, or the qualified worker the program requires. Because each province and territory adopts its own OHS regulations and its own edition of the Canadian Electrical Code, the final step is always to confirm the specific duties with the regulator that governs your workplace. The value of CSA Z462 is realized only when the document on the shelf matches the decision a worker makes in front of a live panel.
