Isolation and switching — the four functions of §537 (isolation, emergency switching, functional switching, maintenance switching)

The distribution-board-selectivity guide covers how protective devices work selectively together during a fault. This article covers a different distinction: not every switching device in an installation does the same thing, even though all of them "switch off" a circuit. §537 of IEC 60364-5-53 (and hence NEN 1010) distinguishes four functionally different purposes.

The four functions

• Isolation: a device that makes the installation, or part of it, fully dead for safe working — for example before opening a distribution board. An isolating device must break all live conductors (in a TN-C-S system, never the PEN conductor, which must never be interrupted), must be lockable in the open position or have a clearly visible, reliable position indication, and does not necessarily need to be rated to break load current (the load is often switched off with another device first, before the isolating device is operated).
• Emergency switching: a device that removes a danger as quickly as possible, operable with a single action and accessible at every place where the danger might occur. In an installation with multiple sources of supply (for example grid + PV inverter + standby generator), emergency switching must disconnect all sources simultaneously — disconnecting only the grid supply is insufficient if the installation can remain live via another source.
• Mechanical maintenance switching: a device that specifically prevents a machine or part of an installation from restarting unintentionally during non-electrical (mechanical) maintenance — for example cleaning or adjusting a moving part. This function does not necessarily break all poles and is usually located locally at the maintained part.
• Functional switching: the normal, everyday operation of a circuit or device (on/off during operation) — this device must be suitable for switching load current, but does not need to break all poles and gives no guarantee of complete isolation.

Why this distinction matters in practice

A common assumption is that a switch fulfilling one of these functions automatically fulfils the others too. It does not:

• An emergency stop button (emergency switching) does not need to break all poles and is therefore not a substitute for the isolating device before starting electrical work — after pressing an emergency stop, part of the installation can still be live.
• A functional on/off switch (for example a light switch or a motor starter) often does not break all poles and therefore does not provide reliable isolation for maintenance — even though switching it off "feels like" the circuit is safe.
• A maintenance switch on a machine prevents the mechanical motion from restarting unintentionally, but does not necessarily guarantee that all electrical parts of the machine are dead for work on the wiring itself.

Note: only a device explicitly designated as an isolating device and meeting the §537 requirements (all poles, lockable, reliable position indication) may be used as the basis for the five safety rules when working on installations — not any switch that can be turned "off".

Practical relevance

When assessing a distribution board or machine installation, it must be explicitly established which switching device fulfils which of the four §537 functions — an installation may perfectly well have an emergency stop button, a functional main switch, and a separate, lockable isolating switch, but it is a mistake to assume that one of these three automatically takes over the role of the other two.

Common mistakes

1. Using an emergency stop button as an isolating device before starting electrical work — an emergency stop does not need to break all poles and does not provide guaranteed, lockable isolation.
2. Switching off only the grid connection in an installation with multiple sources of supply (grid, PV, generator) and assuming the installation is then dead — emergency switching and isolation must cover all sources.
3. Mistaking a functional switch (light switch, motor starter) for an isolating device — functional switching often does not break all poles and is not designed to guarantee safe working conditions.

Related

• Distribution boards & selectivity — §536
• PEN conductor break — TN-C-S
• Emergency stop categories — IEC 60204
• LOTO — 5 steps