The Electricity at Work Regulations 1989 apply to data centres as directly as they apply to any power station or refinery. Yet many UK data centre operators are managing electrical work through informal controls that would not withstand HSE scrutiny — or survive an incident investigation.
The hazards are not hypothetical. Electrical work in a live data centre — on UPS systems, switchgear, PDUs, busbar, cooling plant — involves the same arc flash risk, the same isolation and reinstatement complexity, and the same potential for fatal injury as electrical work in any other high-voltage industrial environment. The regulatory framework reflects that. The control of work culture, in many facilities, does not yet.
What the law requires
The Electricity at Work Regulations 1989 are the primary statutory instrument governing electrical safety in the UK workplace. For data centre operators, the most directly relevant provisions are:
Regulation 12 requires that electrical equipment be de-energised before work begins, unless it is unreasonable to do so — and even then, the conditions under which energised work may proceed are tightly constrained.
Regulation 14 prohibits work on or near live conductors unless it is unreasonable to work with them dead, adequate precautions are in place, and it is reasonable to work live in the circumstances. This is a high bar. For most electrical maintenance tasks in a data centre, live working cannot be justified.
Regulation 8 requires adequate earthing of electrical equipment where danger may otherwise arise. In a data centre context, this is directly relevant to the reinstatement phase of any isolation — a stage that permit to work failures frequently occur.
These are not guidance notes. They are legal duties on the employer and, critically, on individuals — including competent persons and authorised engineers — who may themselves be prosecuted for breaches.
Where permits to work fit in
A permit to work is not a legal requirement under the Electricity at Work Regulations — but it is the mechanism that the HSE consistently recommends for demonstrating compliance when electrical work involves significant risk. HSE guidance is explicit that a permit does not make a job safe on its own. It is a control system, not a substitute for risk assessment and competence.
For data centre electrical work, a permit to work should at minimum:
- Define the precise scope and location of the work, with reference to a single-line diagram or equipment schedule
- Record the isolation measures applied, who applied them, and the test verification that proved dead before work began
- Identify who holds authority over the permit — and ensure that authority cannot be delegated informally
- Set clear limits on the work, including time limits and any conditions that would require the permit to be suspended and re-issued
- Control the reinstatement sequence, with a formal sign-off before equipment is returned to service
The reinstatement stage is where a disproportionate number of electrical incidents occur. A permit system that tracks isolation carefully but treats reinstatement as a formality is only half a system.
The multi-contractor problem
Large data centres — particularly those under construction or undergoing significant fit-out — typically operate with a principal contractor and multiple specialist subcontractors working in close proximity. Electrical contractors, cooling contractors, structured cabling teams, and fire suppression engineers may all be working in the same plant room on the same day.
Each of those contractors may have their own internal permit system. Without a site-level authority that holds a single view of all active isolations and all live permits, the risk is that one contractor's electrical isolation is disturbed by another contractor who has no visibility of it. This is not a theoretical scenario — it is a documented failure pattern in incident investigations across industrial sectors.
Good practice, supported by HSE guidance and the Institution of Engineering and Technology, requires a single point of authority for isolation management on a shared site. In practice, this means the principal contractor's permit to work system must be the controlling system — not one of several operating in parallel.
What auditors and inspectors look for
If the HSE visits following a reportable electrical incident under RIDDOR, or conducts a proactive inspection of a data centre site, the questions asked will be specific:
- Who holds the authority to issue electrical permits on this site, and what is their demonstrated competence?
- Can you show the current status of every active isolation — what is isolated, where, under whose authority, and since when?
- How is the reinstatement of electrical equipment controlled and recorded?
- What is the process when a contractor's scope of work changes after a permit has been issued?
- If a permit needs to be suspended — because of an emergency or an unplanned change — what happens to the isolation, and who decides when work can resume?
If any of those questions require significant time to answer, or require consulting several different people or systems, the control of work framework is not functioning as a single coherent system. That is the finding an inspector will record — and the gap that carries the risk.
The gap between procedure and practice
Research consistently shows that electrical accidents in industrial settings are caused predominantly by failures in safe working practice — not by equipment defects or installation faults. The procedure was known. The isolation step was skipped, or assumed rather than verified, or the reinstatement was carried out without formal confirmation that the work was complete.
A permit to work system addresses this gap by making each step explicit, sequential, and recorded. But a system that exists on paper — or in a shared drive that contractors are not consistently using — provides process compliance on paper while leaving the risk in place.
For UK data centre operators, the question is not whether a permit to work system is needed for electrical work. The Electricity at Work Regulations and HSE guidance settle that. The question is whether the system in place actually controls the work — or whether it documents it after the fact.
If you are reviewing your electrical permit to work arrangements for a UK data centre site, we would be glad to show you how Elisian supports permit issuers, authorised engineers, and principal contractors in maintaining control across complex, multi-contractor environments. Get in touch.