Worker safety and safe systems of work
147 lessons from 130 energy incidents, newest first, grouped by technology. Each is taken from the entry it links to, which has what happened and the sources.
Battery storage 8
A domestic battery store above the local inspection threshold should be checked by a licensed electrical contractor before it is used.
During battery storage construction, prepare an emergency response plan that covers partial energisation and multiple contractors on site.
Prompt evacuation procedures protect personnel during energy storage incidents.
First responder training on battery storage risks must occur before commissioning, since scheduled training had not taken place at the time of the incidents.
Forklift relocation of burning cabinets requires pre-agreed procedures with fire crews to limit escalation.
Repeated inverter failures and arc flash events at battery sites require prompt investigation and a safe operating plan while the cause remains unconfirmed.
Early generation battery storage sites must be reviewed against later guidance, as gaps in design or procedures may remain.
General building fire guidance may not cover battery thermal runaway. Check and add site specific water supply where it falls short.
Solar PV 25
Staff who try to contain a plant fire may be burned, so procedures should set when to withdraw and call the emergency services.
Ensure response crews have procedures for safely de-energising rooftop solar arrays.
Fire services should prepare specific procedures for isolating and suppressing fires in rooftop solar arrays.
Rooftop solar arrays must be isolated and verified de-energised before contact, as one firefighter received an electric shock from the solar panel system.
Training for solar panel incidents enables rapid response.
Maintain training for uncommon electrical and solar-related incidents.
Rooftop solar fires may need a second alarm response, so insurers should check that local crews have solar isolation training.
Fire suppression procedures should confirm all cabling, insulation and vegetation are fully extinguished.
Rooftop solar on occupied buildings should be installed by qualified contractors from a reputable company and kept on a regular maintenance schedule.
Smoke from a solar farm fire is visible off site, so operators should have set procedures to alert fire services and guide them on arrival.
Rescue crews need training on solar photovoltaic hazards, as crews had not been trained for the unique dangers of renewable energy sites.
Solar farm operators should share site hazard details with local rescue services in advance to address training gaps for renewable energy sites.
Establish rapid isolation procedures with the operator to de-energise arrays during nearby fires.
Water jets can conduct electricity from solar panels, so isolation procedures must be followed.
Evacuation procedures should be practised where solar installations are present on occupied buildings.
Clear evacuation procedures for public venues with rooftop solar reduce risk during electrical or thermal events.
An inverter in a shipping container can ignite and cause burns to nearby workers. Operators should review live working procedures and personal protective equipment before commissioning energised power electronics.
Ensure rapid isolation procedures for rooftop solar arrays during fire response.
A solar array with falling output and a repaired wiring fault needs continued monitoring even after a contractor leaves.
Ensure rapid isolation procedures for solar PV arrays during roof fires.
Do not rely on harnesses unless there are enough for every worker, the lanyards reach every work position and workers are trained to use them.
Novice workers need formal training and close supervision before working at height, not only shadowing.
A solar farm transformer housed in a container can be well alight before crews arrive, so isolation by the network operator and the solar contractor should be arranged at once.
Handover to the contractor on site should be clear once power is isolated and the fire service is leaving.
Adjust testing procedures and mirror aiming to minimise avian exposure to concentrated solar flux.
Wind (onshore) 31
Construction phase risk assessments and permits must stay separate from operational ones and be reviewed at each contractor change.
Wind turbine fires at height require close work with the operator to extinguish and secure the site, so joint procedures should be in place before an event.
Sites under construction need tested rescue plans for height incidents, given delays in reaching workers.
High work at 60 to 70 metres in turbines needs verified personal protective equipment and training.
Keep falls during construction on a clear path to the safety regulator while the cause remains unknown.
Work at height on a wind turbine needs a fall-arrest system that is attached before a worker leaves a protected platform.
Where a hand or arm can enter a machine, guarding and a clear stop procedure should be in place before the task starts.
Heavy machinery on wind farm construction sites can cause fatal injury, so operators must keep all workers outside moving plant exclusion zones.
Lockout-tagout procedures must apply to all subcontractors on high-voltage wind farm equipment.
A reported turbine explosion with burns to workers requires the scene to be preserved for investigation.
Construction contractors must maintain safety protocols during turbine assembly after a fatality at the Sussex site.
Authorities should publish the mechanism of fatal incidents so other contractors can address similar risks.
Confirm operator training and equipment suitability each day before moving loads over 27,000 kg.
A regulatory investigation follows every fatal fall from height. Record and review all prior height safety checks at the site.
A separate fatality during onshore turbine assembly shows repeat events across sites, so insurers should check whether prior incidents at similar assets prompted procedure updates.
A turbine that falls into a field can leave debris beyond the pad, so exclusion and recovery plans should cover neighbouring land.
After damage to turbine equipment, warnings should cover shock, fire and explosion risk to workers and the public.
Taking down a tall fire-damaged turbine needs specialist contractors and close work with the safety regulator.
Put in place and follow a safe system of work that keeps workers clear of parts that can fall.
Machinery guarding and isolation must be verified on every item of equipment during wind farm construction when multiple contractors work on site.
Remote wind farm sites need pre-planned air ambulance access so an injured worker can reach specialist care quickly.
Principal contractors must verify that crews follow written safety rules on site.
Wind turbine operators and contractors should maintain clear emergency response protocols and rescue equipment for medical emergencies occurring at height.
Coordination between site owners, contractors and local emergency services in advance of work at height can speed up rescue response times.
Findings from the safety authority investigation, once published, should be shared with other wind farm operators and contractors.
Until a cause is known, similar machines should be checked only under the operator's own procedures, not on the basis of a short public report.
Work at height on wind turbines requires strict lockout tagout before electrical tasks, as live faults can prove fatal.
Repeat fatal falls at sites owned by the same operator require immediate review of access and contractor controls.
Ground workers can be hit by a falling boom, so exclusion zones must extend beyond the load drop area to the full boom reach.
Record and close out safety concerns from workers before further vehicle use on site roads.
Joint rescue drills must involve every contractor and subcontractor on site rather than separate drills by each firm.
Wind (offshore) 7
Collision by a service operation vessel damaged a turbine, so operators should review approach procedures and exclusion zones around offshore turbines.
Service vessel collision at an offshore wind farm carries risk of damage, so insurers should check crew training records for close-quarters manoeuvring.
A reported court finding of duty breaches is a prompt to review how contractor work is planned and supervised, without treating the short report as a full account.
An offshore wind turbine struck by a vessel must be isolated at once to avoid further damage or hazard to shipping.
Crew transfer vessels near turbines must have collision avoidance protocols, as the Njord Forseti struck a turbine at Borkum Riffgrund 1.
Maintenance procedures should require a further check that power is off before a repair begins.
After a serious maintenance injury, equipment and procedures should be reviewed promptly.
Grid infrastructure 57
Fire services need procedures for incidents involving transformer oil and equipment that may still be live.
Review inspection and maintenance procedures for automatic circuit reclosers and similar equipment.
Ensure rapid isolation procedures for transformers following operational faults to limit fire spread.
Keep access routes and isolation procedures ready so fire crews can work without delay.
Treat isolation and permit controls as essential before any work on a transformer that may still hold energy or oil.
Clearance procedures at fire damaged substations must allow rapid investigator access to avoid extended outages.
Keep a clear procedure for isolating damaged grid equipment while emergency crews stand by.
Rapid isolation of a high-voltage line after a transformer fire can restore power within an hour, so test isolation procedures regularly.
Equipment testing at extra high voltage substations requires strict exclusion zones for non-essential personnel, as fires can cause fatal injuries to workers on site.
Substation fire can interrupt supply to thousands of customers, so operators should verify redundant feeds and rapid isolation procedures.
Live lines from a transformer fault can ignite parked cars and trees, so utilities must ensure responders have rapid electrical isolation procedures before fire attack.
Downed live cables at a substation fire create an electrocution risk for fire crews, so utilities must enable rapid de-energisation protocols.
After an electrical fire, cooling and hotspot checks must finish before handover, so fire crews and network staff need joint procedures.
Burns and smoke inhalation can worsen after the scene, so injured workers need prompt specialist care and follow-up.
A cable failure inside a substation can produce arc flash, a loud bang and fire even when the event stays on the site.
Ensure rapid isolation procedures are in place for unauthorised access events.
Transformer maintenance can injure multiple workers at once, so site plans must cover several casualties and routes to more than one hospital.
Fire at grid infrastructure near an event halted a concert, so planners should map nearby stations and rehearse power loss procedures.
High-voltage live equipment requires a safety zone and hose sprays from a distance to avoid electrocution risk.
Transformer stations require strict isolation and lockout during maintenance because an explosion occurred while work was under way.
Substation arc flash from an arc fault can cause multiple worker injuries, so operators should enforce safe working distances and arc flash protective equipment.
Initial reports of substation arc flashes may be logged as explosions, so utilities should issue rapid clarification to emergency services.
Urban substations require pre-agreed protocols with police and fire for road closures during arc flash investigations.
Treat fire and smoke under high-voltage lines as a known trip risk in operating procedures and protection settings.
Agree isolation, permits and emergency arrangements before maintenance or temporary equipment is installed at a substation.
Pre-plan shutdown procedures for substations to limit disruption to local supply.
Work beside live overhead lines needs enforced clearance controls for vehicles and contractors.
A conductor cut outside a substation boundary can still start a fire inside the site if it falls onto structures.
Fire suppression systems using CO2 must have robust leak detection and alarm procedures.
Maintain rapid response and isolation procedures for infrastructure incidents to limit damage.
Treat live substation equipment as a serious injury risk for workers and anyone else on site.
Substation equipment must be proved isolated before work, since a contractor was struck by 12,000 volts in an explosion.
An internal fault can blow a door off its hinges in an electrical room, so arc flash containment and blast venting must be assessed.
Loss of traction supply can strand trains in tunnels for hours, so evacuation procedures should be exercised with emergency services.
Sensitive equipment such as lifts and escalators can be affected by momentary voltage fluctuations and may require reset or rescue procedures.
Hospitals should maintain clear procedures for extended loss of grid and generator power during emergencies.
Repair contractors and spare equipment should be lined up early so a destroyed substation does not leave a long outage.
Work in underground electrical vaults can injure workers even when they are able to leave under their own power, so rescue access and medical response need to be planned in advance.
Maintain clear procedures for rapid de-energisation when emergency services attend live electrical assets.
Incorrect earthing during substation switching can trigger an arc flashover, so operators must add independent verification of earth connections before energising.
A fault in a substation switch can cause an arc flash and immediate shutdown, so operators should inspect switches on a fixed schedule.
Substation operators must follow their own monitoring procedures during maintenance to stop insulation failure.
Equipment failure at one substation can cut supply to 73,000 customers until midnight, so spare capacity and fast isolation procedures are essential in dense urban grids.
A transformer fire at a substation can cut power to multiple suburbs, so operators should check isolation procedures and backup supply routes.
A transformer fire at a substation releases burning dielectric fluid that requires environmental cleanup, so retain a contractor and maintain contact routes with the regulator.
Concerns raised by staff and contractors about site conditions should be tracked to closure with clear deadlines.
Training for technicians should cover the higher arc risk of working near live equipment in damp conditions.
A transformer fire at a substation requires rapid de-energisation before fire crews enter, so operators must confirm isolation procedures work under load.
Fire at live electrical infrastructure needs special protocols, so fire services should maintain safe fighting procedures.
A transformer explosion at a grid substation can create a visible arc flash over a wide area without starting a fire, so operators should fit remote monitoring to detect early signs of insulation failure.
Check segregation between substation sections so a fault on one 138 kV bay does not produce a sustained arc flash across multiple items.
Prepare for rapid public attention after an arc flash at a city substation because the blue light is visible over long distances.
Public restoration times should be updated as the number of customers still off supply falls, and the cause should be left as unknown until it is established.
Fire and police attended a live substation fire with no injuries, so joint training with emergency services supports safe response near energised gear.
Fire crews need foam for vehicle fires started by electrical equipment, so joint training with the network operator should cover electrical transformer incidents.
Transformer fire at a substation can delay firefighting for 20 minutes due to electrocution risk, so operators should rehearse rapid de-energisation with local fire services.
A ruptured transformer can spill mineral oil containing PCBs, so sites should hold pre-planned spill response procedures and containment kits.
Data centre 15
Maintain redundant power paths and rapid temporary supply procedures for data centre facilities.
Match local training and equipment to the hazards expected at a large data centre, including electrical plant.
Hot work such as welding on a multi-building construction site needs a permit, a fire watch and ready extinguishing means.
Large construction campuses need evacuation and medical plans that can move injured workers off site quickly, including by air.
Treat electrical work at a data centre under construction as live until isolation is proved, and keep permit-to-work and lock-out controls in place.
Extra training and quality checks after an incident can reduce the chance of a repeat, even where redundancy limits the effect on services.
Review breaker coordination settings and operational procedures at all critical data centre facilities on a recurring basis.
Ensure cross-agency data sharing platforms have documented contingency procedures that can be activated immediately.
Fire suppression and response procedures must account for safe access delays after battery fires.
Ensure regular training and adherence to arc flash safety standards such as NFPA 70E.
Main and backup power at a data centre can fail together, so dependent operators still need their own downtime procedures.
Prepare manual fallback procedures for critical business functions.
Live testing of new distribution equipment must be avoided through proper planning and isolation procedures.
Clear communication and defined responsibilities between contractors are essential when multiple parties control power sources.
Permits to work must confirm isolation of all possible supply paths before energised work begins.
Hybrid co-located 3
Operators should verify the extent of lithium battery fires themselves before updating procedures.
A fire in a battery enclosure injured a worker during normal operation, so exclusion zones and safety protocols must stay in place at all times.
Opening a battery container after inert gas suppression can trigger thermal event and explosion, so procedures must set safe stand-off distances before doors are opened.
Other 1
Blasting and explosives work at a remote generation site needs a written plan, exclusion zones and a competent person in charge before work starts.
Behind these lessons. Of the 130 incidents these lessons come from, the paid record names the root cause for 94 and the part that failed for 69, with the companies involved and every source. See what a subscription opens or read a complete record.