Diving Near Live Intakes: Lockout, Tagout and Isolation
By Walt Kesler, Power plant maintenance manager, nuclear-qualified. Reviewed by Amanda McCallister, editor.
Cathodic Protection & Anodes | Offshore & Subsea Diving I was standing on the forebay deck at a 1,200 MW Gulf Coast plant in 2012 when the lead dive supervisor told me he wouldn't send a diver in until I personally verified the intake gate isolation. I told him the remote indicator said closed, and he said, "Indicators lie. Put your hands on the stem." He was right. That job cost us a day. We walked the whole intake, tagged every energy source, and chained the gate operator in the closed position. I wrote the LOTO procedure myself that night. It wasn't a regulatory requirement that made me do it. It was the look on that diver's face when he said "Delta P doesn't care about your schedule." Commercial divers work around live intakes in power plants, water utilities, and industrial facilities every year. The hazard isn't the velocity of the water. It's static head. Once your body covers an opening, the full differential pressure across that area acts like a hydraulic press. No one on the surface can pull you off. Lockout, tagout, and positive isolation are the only controls that work.
Delta P Is Static Head, Not Suction
Operations teams talk about "Delta P" like it means fast water. It doesn't. The killer is the difference in water level across a barrier. A trash rack, a screen, a pipe opening — anything that separates water at one elevation from water at a lower elevation. When that barrier has holes, water moves, but the force that holds you is the static head once you seal the hole. Static pressure runs about 0.433 psi per foot of head, so a 10-foot differential is roughly 4.3 psi. That doesn't sound like much until you multiply it by the area of the opening. A 24-inch-diameter intake opening at that head will hold you with about 1,900 pounds of force. That's a one-ton weight on your chest. You aren't pulling away from that. Dynamic pressure, the velocity term, is different. Flowing water at 10 feet per second is only about 0.67 psi. That's a nudge, not a grip. The hazard is static head, which can be present even when the water looks calm. Many divers have been lost because a shut-off valve was opened remotely, or a motorized screen came into service while someone was inspecting it.
Lockout, Tagout, and the Valve That Leaks
The first rule is that a remote indication of a closed valve is not a lock. We've all seen it: red LED on a screen, stem half open. OSHA's lockout/tagout standard, 29 CFR 1910.147, requires that energy-isolating devices be physically locked and tagged. But in water service, a valve is not an energy-isolating device unless you verify it seals. Gate valves leak. Butterfly valves, especially old rubber-seat ones, leak. You cannot put a diver in front of a leaky valve and call it safe. Positive isolation means a physical barrier you can confirm. That's a blank flange, a double block and bleed, or a solid gate with a mechanical stop chained or locked in position. For a cooling water intake, that often means an intake gate or stop logs physically lowered into place and measured with a tape measure. Then you lock it out — the hoist, the gate, anything that moves. I call it the "trust no one" procedure. The operator turns off the pump breaker and locks it. You close the intake gate and lock the actuator. You drain the bay and watch the water level for 15 minutes. If it rises, you don't dive. You find the path. I remember a dive at a paper mill where a diver got pinned on a save-all lid because someone switched pumps without doing LOTO. He survived, but his shoulder was destroyed. The procedure wasn't the problem. The culture was.
Verification and the Dive Plan
The dive plan is your compliance document. Under 29 CFR 1910 Subpart T, commercial diving operations have to account for job hazards, and hydraulic energy from a live intake is a big one. I always require a separate "isolation verification" page in the dive plan. It lists every valve, gate, breaker, and barrier, the method of lockout, and two signatures: the plant operator and the dive supervisor. They walk the entire path together. Use lockout sheets that match the field tags. I've seen plants where the LOTO sheet says "Line A" and the field tag says "Pump 1 Discharge," and nobody knows what's what. The dive supervisor should be able to point at every item from the drawing. If he can't, the dive doesn't start. I also like to have a second person verify the isolation independently, not just the person who closed the gate. That's not in the regs, but it's the same logic as the two-person rule for high voltage. And for the dive itself: a standby diver with his own air, a dedicated tender who does nothing but watch the line, and communication that's tested before the diver goes over the side. The sad truth is some operators see LOTO as paperwork. It's not. It's the difference between a diver coming up and a diver being pried off a screen. I've never met a diver who wanted a shortcut. But I've met operators who think it'll be fine for 20 minutes. It won't be.
What Every Plant Can Do
If I were building a plant from scratch, I'd put a double block-and-bleed on every intake and an alarm on the gate position. Most plants aren't set up that way, so you work with what you have. Do a full LOTO drill before the dive team arrives. Get the paperwork done ahead of time. Find out which valves can't hold tight and replace them. The cheap stuff is the most important. A chain and a padlock cost less than $20. An isolation blank runs a few hundred dollars. A diver's life isn't an acceptable trade-off for saving four hours of outage. I've sat in roll-up meetings where someone complained about the cost of a canceled dive because the gate leaked. That's the same guy who would put a man in the water and call it "assessed risk." No. Every plant should have a written procedure for diving near intakes, reviewed at least once a year. Use the compliance standard as your baseline, then add the outside-the-regs details that keep people alive: no dive if the surface screen is in service, physical confirmation of remote valve position by a second person, and a hard rule that a leaking valve means no dive until it's blinded.
Frequently Asked Questions
Why can't a diver just swim away from an intake? Once the diver's body seals an opening, full static head acts on the area. At 10 feet of head on a 24-inch opening, that's about 1,900 pounds of force. Nobody swims against that. Is pulling the pump breaker enough to isolate an intake? No. The breaker stops the pump but doesn't guarantee the intake path is sealed. You have to close and verify the gate or valve, drain the bay, watch for leakage, and lock out every energy source. What is positive isolation for an intake? It's a physical barrier you can verify: a locked gate, stop logs, a blank flange, or a double block and bleed. If water can still leak, it's not positive. Do plant LOTO rules apply to the dive team? Yes. Plant LOTO controls the energy isolation, and the dive plan under OSHA Subpart T covers dive-specific hazards. The dive supervisor has to verify both before anyone goes in the water.