NFPA 70E for Data Centers
Where "never de-energize" culture meets a standard built on de-energizing first. What 2027 changes for hyperscale, colocation, and enterprise facilities.
Dan Mercer, CSP — 35+ years EHS experience, trainer to Fortune 500 industrial and tech clients.
01The core tension: uptime culture vs. the hierarchy of controls
Data centers are the one industry where I regularly hear the quiet part said out loud: "We can't take an outage to do this work." The entire facility is engineered so that nothing ever loses power — redundant feeds, redundant UPS, redundant generators. That's precisely what makes 70E compliance hard: the engineering that guarantees uptime also guarantees that something nearby is always energized.
The standard's answer hasn't changed: infeasibility of de-energization must be demonstrated, not assumed, and "we'd lose redundancy" is a business argument that needs to be turned into a documented infeasibility determination before it justifies an energized work permit. What has changed in 2027 is the cost of doing that work energized — see below.
02The 2027 changes that hit data centers hardest
- The additional-person requirement. Energized work permits specifying shock or arc flash PPE now require a standby person, trained in emergency response, outside the boundary. In a facility running two-person critical environment teams per shift, this changes staffing math for every energized task.
- Battery systems scrutiny. The 2027 edition adds detailed battery risk-assessment requirements in Article 360, a new battery task entry in Table 130.5(C)(3), and new articles for dc hazards (Article 310) and EDLCs (Article 370) in a reorganized Chapter 3 — directly relevant to UPS strings and the lithium-ion BESS installations replacing VRLA rooms.
- PPE conformity assessment documentation. Large operators buying arc-rated PPE at fleet scale need the conformity assessment method in procurement specs — a paperwork change that's easy at purchase time and painful retroactively.
03The regulatory stack
| Activity | Governing OSHA standard | Where 70E fits |
|---|---|---|
| Facility electrical O&M (switchgear, UPS, PDUs) | 29 CFR 1910 Subpart S (1910.331–.335), 1910.137, 1910.147 | 70E is the recognized method for work practices, boundaries, PPE, and permits |
| Construction, fit-outs, commissioning | 29 CFR 1926 Subpart K | 70E informs qualified-person practices; commissioning at partially energized sites is the high-risk seam |
| Contractor work (the majority of data center electrical work) | Host/contract employer duties | 70E's 110.5 duties run both directions: hosts share known covered hazards, installation information, and violations they observe; contractors instruct their employees, follow the host's rules, and report hazards they discover that the host didn't flag, along with corrective measures. Where the host knows of covered hazards related to the contractor's work, a documented meeting between host and contract employer is required (110.5(C)) — that meeting record is where audits focus |
The contractor row is the one to read twice. Most data center electrical work is performed by contractors, and the host employer doesn't discharge its duties by hiring a qualified firm — the information exchange about hazards, and the coordination of programs, must be documented in both directions.
04Equipment and tasks where 70E does the work
- UPS systems and battery strings — DC exposure, stored energy, and (increasingly) lithium-ion thermal considerations layered on electrical hazards
- Switchgear operation and racking — breaker racking remains one of the highest arc-flash-energy routine tasks in the building
- Infrared inspection windows and MCC covers — thermography programs and when panel covers can and can't come off energized
- Generator paralleling gear and transfer switches — sources that return without warning; LOTO complexity across redundant paths
- Live-load balancing and PDU work — routine tasks that quietly drift into energized-work territory without a permit
05Implementation checklist for data center operators
- Rewrite the energized work permit process to include the additional-person requirement — and build it into CMMS scheduling, not just the form
- Re-examine infeasibility justifications: "concurrent maintainability" designs may make de-energization feasible more often than legacy practice assumes
- Update battery/BESS procedures against the Article 360 risk-assessment requirements
- Add conformity assessment method to PPE procurement specifications
- Audit host/contract employer documentation for two-way hazard information exchange
- Schedule delta training for critical facilities teams on the 2027 changes
06By the numbers
07The case every data center should brief
Contract electrician electrocuted inspecting an energized UPS cabinet
Victor Joe Gomez Sr., a contract electrician, died on August 1, 2024 while inspecting a UPS cabinet at the Tesla Gigafactory near Austin. OSHA's citations describe the data center industry's exact failure pattern: quality-control inspections performed on equipment that was not de-energized, employees near energized parts without PPE (OSHA says none was provided), and no prior hazard analysis, signage, or communicated safe work procedures for electrical testing work. Three serious violations at the $16,550 statutory maximum each.
UPS inspection is precisely the task classes "too routine to permit" — and it killed a qualified tradesman. If your commissioning and QA inspections don't flow through the same ESWC-or-permit gate as maintenance work, this case is your gap analysis. And note who died: a contractor, under host-employer coordination duties the 2027 edition tightens further.
Sources: Spectrum News · Confined Space (citation detail) · Full analysis in the Texas guide
08Real-world scenarios this maps to
A 2 a.m. window has a vendor electrician racking out a 3,000A breaker to service a static transfer switch. Racking is one of the highest incident-energy routine tasks in the building; the mitigation hierarchy is engineering first — remote racking, arc-resistant gear, maintenance-mode settings that cut clearing times — then the full arc flash suit, then the 2027 standby person outside the boundary. If your MOP template doesn't have a line item for the additional person, your maintenance windows are now under-planned.
A 2N facility justifies energized work with "we can't lose redundancy during the transfer." Read that twice: a topology designed so any component can be de-energized without dropping load is being used as the argument for never de-energizing anything. Concurrent maintainability is the infeasibility argument's kryptonite — your redundancy paths make electrically safe work conditions more achievable, not less. Auditors and, after an incident, OSHA will read it the same way.
Phase 2 energizes while Phase 1 runs production. Construction electricians under 1926 work meters from operating switchboards under 1910; five employers share one electrical room corridor. Energization milestones need to function as program milestones — boundaries redrawn, signage moved, every trade briefed on what went live this week — or the first "I thought that bus was still dead" event finds the gap.
09Where data center programs actually fail
- MOPs without electrical safety content — beautifully scripted switching sequences that never mention boundaries, PPE, or verification testing
- QA/commissioning inspections outside the permit system — the Tesla case pattern: "inspection" treated as exempt from de-energization logic
- Infeasibility by policy — blanket "we never de-energize" positions that no individual task assessment supports
- Vendor patchwork — OEM techs, electrical contractors, and staff sharing equipment with no documented hazard exchange
- Battery rooms in transition — VRLA procedures still posted while lithium racks with different stored-energy and thermal profiles fill the room
Uptime culture needs a written program, not tribal knowledge.
We develop complete, site-specific Electrical Safety Programs for data centers — built on NFPA 70E 2027, with infeasibility determinations, permit workflows, and contractor coordination written for critical-facility operations.
NFPA 70E training for critical facilities teams
Live classes for data center operations and EHS teams, current to the 2027 edition. Find training in your state.
Train your facilities team on the 2027 changes
Dan has trained teams at Fortune 500 industrial and tech clients. On-site and virtual classes for critical environments.