Health and Safety in Data Centre Construction and Operations

Arc flash

Arc flash is an electrical explosion produced by a fault current passing through ionised air between conductors. Incident temperatures can exceed 19,000°C — more than three times the surface temperature of the sun. The pressure wave, molten metal ejection, and thermal radiation produced by an arc flash event cause severe or fatal injuries at distances of several metres.

IEEE 1584 (Guide for Performing Arc-Flash Hazard Calculations) defines the engineering methodology for calculating incident energy at every point in an electrical distribution system. An arc flash hazard analysis to IEEE 1584 is required before any energised electrical work proceeds on a data centre construction site. The analysis output determines PPE arc rating requirements (cal/cm²), approach boundaries, and the minimum safe working distance for each circuit.

Working at height

Working at height is the leading cause of fatal accidents in UK construction, accounting for around half of all deaths reported annually to the HSE under RIDDOR. Data centre construction involves extensive elevated work: structural steel erection, suspended cable tray and busbar installation, raised floor system fitting, roof plant installation, and CCTV and fire detection infrastructure.

The Work at Height Regulations 2005 require that all work at height is properly planned, supervised, and carried out by competent persons. The hierarchy of controls — avoid, collective protection (guardrails, work platforms), personal fall protection (harness and lanyard) — applies in strict order. Mobile elevated work platforms (MEWPs) require operators to hold current IPAF certification for the relevant platform category. Tower scaffold erection requires PASMA-trained personnel.

Confined spaces

Data centres contain numerous confined or restricted spaces: UPS battery rooms, cable basement vaults, sub-floor voids, plant room access hatches, and cooling plant enclosures. The Confined Spaces Regulations 1997 require a safe system of work, trained entrants and attendants, and rescue arrangements before entry to any confined space begins.

Battery rooms present a specific atmospheric hazard. Valve-regulated lead-acid (VRLA) batteries can release hydrogen gas (H2) during abnormal charging conditions — particularly overcharge or equalisation charging. Hydrogen has a lower explosive limit (LEL) of 4% by volume in air. Battery room ventilation systems are designed to maintain hydrogen concentrations below 25% of LEL, but ventilation failures during construction (before permanent systems are commissioned) create explosion risk. Portable gas detection equipment capable of measuring H2 is required before battery room entry during construction.

Concurrent disciplines and interface management

Data centre construction schedules compress multiple disciplines into tight programme windows. Civil, structural, mechanical, electrical, fire protection, security, and IT commissioning teams frequently operate in adjacent or shared zones. The hazard interfaces between disciplines — a structural team working above a live cable installation team, or a gas suppression commissioning team working in a room where IT equipment is being racked — require formal interface controls. Permit-to-work systems, sequenced access zones, and daily pre-task briefings that address specific interface hazards are the principal controls available to the principal contractor.

Hot works

Welding, cutting, grinding, and brazing operations generate ignition sources in environments that may contain combustible materials — cable insulation, acoustic panels, cable tray coatings, and packaging materials. Hot works permits must specify the zone, the duration, the fire watch period (minimum one hour post-completion as a standard practice, though specific conditions may require longer), isolation of suppression systems in the immediate area, and the name of the responsible competent person. An authorised issuer — separate from the performing operative — must sign each permit.

Manual handling and lifting operations

Data centre construction involves the movement of heavy equipment that routinely exceeds safe manual handling limits: UPS battery strings (individual battery weights typically 20–65 kg), transformer assemblies, switchgear sections, cable drums (commonly 200–2,000 kg), and precision-cooledCRAC/CRAH units. All mechanical lifting operations are governed by LOLER 1998 and must be planned by a competent person, supervised, and carried out with equipment subject to a current thorough examination certificate. PUWER 1998 imposes parallel requirements on the work equipment (forklifts, pallet trucks, sack trucks) used in associated manual handling operations.

Noise

Construction-phase noise sources include core drilling, concrete breaking, steel fabrication, and the testing of installed generators and HVAC plant. Generator load bank testing produces sustained noise levels in excess of 100 dB(A) at 1 metre. The Control of Noise at Work Regulations 2005 set exposure action values at 80 dB(A) (lower — provide hearing protection on request, carry out audiometric testing) and 85 dB(A) (upper — mandatory hearing protection use, hearing protection zones to be established). Noise assessments are required before work begins for activities likely to exceed the lower action value.

Permit-to-work and electrical isolation

Regulation 13 of the Electricity at Work Regulations 1989 requires that adequate precautions are taken to prevent electrical equipment being made live during work on or near it. In a data centre, this means a formalised electrical isolation and permit-to-work (PTW) procedure covering every planned maintenance activity on the electrical distribution system.

A compliant PTW procedure identifies the specific circuit or equipment, documents the isolation points (with locks applied and keys retained by the working party), confirms dead testing with a calibrated voltage detector (Electrical Safety First GS38 compliant probes), and obtains written authorisation from the responsible engineer before work begins. The permit must be formally cancelled — not simply discarded — on completion of work and restoration of supply.

Arc flash in operational environments

Live electrical work in operational data centres — inserting or removing draw-out circuit breakers, operating bus transfer switches under load, racking IT equipment in partially loaded distribution boards — carries arc flash risk at incident energies calculated by IEEE 1584 analysis. The IEEE 1584:2018 revision introduced a revised calculation model that reflects empirical test data and typically produces different (often higher) incident energy values than the 2002 edition at medium-voltage levels. Operators must maintain a current arc flash hazard study aligned to the installed configuration, update it following any changes to fault level or protective relay settings, and ensure PPE compliance is verified before any energised switching activity.

Contractor management

Operational data centres depend on specialist contractors for routine maintenance of UPS systems, generators, cooling plant, fire suppression, security systems, and IT infrastructure. Each contractor introduces personnel who may be unfamiliar with the specific hazards and procedural controls of the facility. HSWA 1974 Section 3 requires that the occupier takes reasonable steps to ensure the health and safety of persons not in their employment who may be affected by the undertaking — which includes all contractors on site. Practical controls include mandatory site inductions before access, competence verification for critical activities (electrical, gas suppression, confined space entry), and monitoring of contractor compliance with site PTW procedures.

Lone working

Data centres operate continuously. Out-of-hours and weekend shifts often involve sole-occupied control rooms or facilities with minimal staffing. The Management of Health and Safety at Work Regulations 1999 require that lone working risk is specifically assessed. For environments containing electrical hazards, confined spaces, or gaseous suppression systems, lone working is not appropriate without compensating controls — remote monitoring, timed check-in procedures, or buddy systems for access to plant areas.

Gaseous suppression systems

Total flooding gaseous suppression systems — using agents such as FM-200 (HFC-227ea), Novec 1230, INERGEN, or CO2 — protect data halls and plant rooms. Each agent presents a distinct hazard profile for personnel. CO2 is the highest risk: at the design concentration required to suppress fires (34–75% by volume depending on application), CO2 produces rapid unconsciousness and death. CO2 systems must not be installed in normally occupied spaces and must be fitted with time-delay discharge and audible/visual pre-discharge warning.

Emergency discharge procedures — covering evacuation zones, safe muster points, re-entry protocols, and ventilation procedures before re-entry — must be documented, posted at entry points, and rehearsed at defined intervals. Inhibiting a suppression system for maintenance work requires a formal PTW and temporary compensating fire detection coverage.

Chemical hazards

Operational data centres contain multiple chemical hazard categories, each requiring a COSHH assessment. VRLA batteries contain sulfuric acid electrolyte (H⊂2;SO⊂4;) — spill response procedures, PPE, and eyewash stations are mandatory. Lithium-ion battery systems (increasingly deployed in UPS applications) present a thermal runaway and fire risk distinct from VRLA. Hydrofluorocarbon (HFC) refrigerants used in direct expansion cooling systems are classified as greenhouse gases and are subject to the F-Gas Regulations; handling requires F-Gas certified engineers. Carbon dioxide used in suppression systems constitutes an asphyxiation hazard in plant rooms where relief discharge might accumulate.

Near-miss reporting

HSE research establishes that approximately 3,000 near-miss events precede every workplace fatality in high-hazard industry sectors. Near-miss data represents the primary leading indicator available to safety management: it reveals failure modes before a harmful outcome occurs. Effective near-miss capture depends on low-friction reporting mechanisms, a non-punitive reporting culture, and visible management response to reported events. Paper-based reporting forms consistently suppress near-miss capture rates, particularly for low-consequence events that workers perceive as not worth the paperwork burden.

Version control failures

Risk Assessments and Method Statements (RAMS) are living documents that must reflect current site conditions, installed equipment states, and any changes to scope. Paper RAMS distributed to site teams have no version control mechanism. Operatives frequently sign documents that have been superseded by a later revision — an HSE enforcement officer reviewing paperwork after an incident will identify this as a management failure. Document control on large projects involves dozens of RAMS covering different activities; maintaining current versions across subcontractor teams without a digital system is practically unachievable.

Permit-to-work ambiguity

Handwritten PTW documentation introduces ambiguity that digital systems eliminate by design. Handwritten isolation point references can be misread; authorisation signatures may be illegible; permit duration extensions may not be clearly recorded; and returned permits may not reach the controlling engineer before the next shift begins work on an incomplete isolation. Any of these failures can result in a live circuit being worked on without adequate protection.

Near-miss under-reporting

Paper reporting forms create friction that disproportionately suppresses low-consequence near-miss reports. The operatives most likely to observe near-miss events — those working in plant areas, on elevated platforms, or performing maintenance activities — face the highest practical barrier to paper reporting: locating a form, completing it legibly, returning it to the site office, and trusting that management action will result. Mobile digital reporting reduces this friction to a photograph and a brief description submitted from the location of the event.

Lost audit trails

Physical H&S documentation is vulnerable to loss, damage, and selective availability. Enforcement investigations, civil litigation, and insurance assessments following an incident may require documentation going back three to seven years. Paper records stored in site containers, facility manager filing cabinets, or subcontractor offices provide no guarantee of completeness or accessibility. The Limitation Act 1980 sets a three-year limitation period for personal injury claims from the date of knowledge; employer liability records must be retained accordingly.

No real-time visibility

Paper systems give site managers and facility safety officers no real-time view of current H&S status. Active permits cannot be monitored centrally. The number of workers in a specific zone at a given time is unknown without a physical walk. Training expiry dates are discoverable only by manually reviewing filing systems. Audit scores from monthly safety inspections are available only after manual collation. Management decisions about where to deploy safety resource are made without current information.

Digital permit-to-work

Electronic PTW systems enforce workflow sequence: a permit cannot progress to the authorised state without all isolation points being confirmed, relevant certificates attached, and an authorised approver having signed electronically. Active permits are visible on a central dashboard in real time. Extensions require re-authorisation through the same controlled workflow. Permit cancellation on work completion is system-enforced and time-stamped. The full permit history — including all changes of state and approver identities — is retained in an immutable audit log.

RAMS management

A digital document management module for RAMS maintains a single current version of each document, notifies relevant personnel when a new version is approved, and captures electronic acknowledgement with a timestamp and named user record. Outdated versions are archived rather than destroyed, preserving audit trail continuity. Version history is visible to any authorised user without requiring access to physical filing.

Incident and near-miss reporting

Mobile-first incident reporting — accessible from any iOS or Android device — eliminates the friction that suppresses near-miss capture. Location data, photographs, witness details, and initial cause classification can be captured at the point of occurrence. The report is immediately visible to the responsible manager, who can assign investigation tasks and track corrective action closure through the same system. RIDDOR-reportable incidents can be flagged at report creation, triggering the appropriate escalation workflow.

Contractor management portal

A contractor management module verifies competence before access is granted: CSCS card status, IPAF certification category and expiry, gas suppression technician accreditation, F-Gas certification, and any facility-specific induction completion. Access credentials can be issued digitally and revoked immediately if a contractor fails a re-induction or presents expired certification. All contractor activity on site is attributed to named individuals with verified competence records.

Training records and competency tracking

Training records held in a digital system generate automatic alerts when certifications approach expiry. A competency matrix view shows, for any given role or activity, which personnel are currently competent and which require renewal. Gap analysis reporting identifies exposure before a certification expires rather than after an enforcement enquiry reveals the gap.

Safety audits and inspections

Digital audit tools present inspection checklists optimised for the specific environment — data hall, plant room, roof, battery room — and capture photographic evidence against specific checklist items. Non-conformances generate corrective action tasks with assigned owners and target dates. Overdue corrective actions escalate automatically. Audit score trends are visible on management dashboards, enabling comparison across sites, contractors, and time periods.

Real-time safety dashboards

A consolidated safety dashboard aggregates active permits, open incidents, near-miss trends, audit scores, and training compliance status into a single real-time view. H&S managers and senior leadership gain visibility of current safety performance without requiring physical site presence or manual data collation. Leading indicators — near-miss rate, audit completion rate, permit closure compliance — are tracked alongside lagging indicators — incident frequency rate, RIDDOR-reportable events.