Executive Summary

The automatic transfer switch (ATS) is the most failure-prone component in an emergency power supply system — and the most consequential. A generator that starts perfectly is useless if the ATS does not transfer load within the required time window. NFPA 110 Section 6.2.1 mandates a 10-second maximum transfer time for Level 1 EPSS in healthcare and life-safety applications. This issue covers ATS testing requirements under NFPA 110, the specific transfer time rules by facility type, and the three ATS deficiencies most likely to trigger an immediate jeopardy citation during survey.

If your ATS maintenance program consists of "it transferred during the monthly test," you have gaps. This issue tells you what they are.

01
NFPA 110 ATS Requirements

ATS Testing Requirements
Under NFPA 110

NFPA 110 treats the automatic transfer switch as a critical component of the EPSS — not an accessory to the generator. The standard requires specific testing, maintenance, and documentation for transfer equipment that goes well beyond "it worked during the monthly test."

Chapter 8 of NFPA 110 requires that transfer switches be exercised as part of the monthly EPSS test. But the testing requirement is not simply "did it transfer?" — the requirement includes verifying transfer time, retransfer functionality, load pickup sequencing, and the ATS control logic itself.

ATS
NFPA 110 — Transfer Equipment
Sections 6.2, 8.3, and 8.4 — ATS Requirements
Active Requirement
Transfer Time (Level 1)
10 Seconds Maximum
Testing Frequency
Monthly (with EPSS test)
Maintenance
Per Manufacturer + Ch. 8
Section 6.2.1 — Transfer Time
Level 1 EPSS shall restore power to the load within 10 seconds of loss of normal power. This includes generator start time AND transfer switch operation. The 10-second window is measured from loss of normal source to load energization on the emergency source.
Section 8.3.1 — Transfer Switch Testing
Transfer switches shall be operated during each monthly EPSS test. Both automatic transfer and automatic retransfer shall be verified. Transfer time shall be measured and recorded.
Key Compliance Point
Monthly tests must verify both the transfer TO emergency power AND the retransfer BACK to normal power. Many facilities only verify the initial transfer and skip retransfer verification.

The 10-Second Rule: What Most Facilities Misunderstand

The 10-second transfer time requirement under NFPA 110 Section 6.2.1 is the most consequential timer in emergency power compliance. It is also the most commonly misunderstood. Here is what the 10-second window actually covers:

Common failure mode: Facilities set a 5-second time-delay-on-transfer (TDOT) in the ATS control logic, plus the generator takes 7 seconds to reach rated voltage and frequency. That is 12 seconds before the ATS can even begin the mechanical transfer — already over the 10-second limit before a single contactor moves. Review your TDOT settings. If your generator start-to-stable time plus TDOT exceeds 8 seconds, you have less than 2 seconds for the actual mechanical transfer. That is tight.

ATS Failure Citation Risk by Facility Type
Hospitals
Critical
Surgical Centers
Critical
Nursing Facilities
High
Data Centers
SLA-Driven
High-Rise / Commercial
Moderate
Action Items — ATS Testing Requirements
  • 01Measure and record actual transfer time during your next monthly EPSS test. Not "it transferred" — the actual elapsed time from utility loss simulation to load energization on emergency power. Use a stopwatch or data logger.
  • 02Review your ATS time-delay-on-transfer (TDOT) settings. Add TDOT + generator start-to-stable time. If the sum exceeds 8 seconds, you are at risk of exceeding the 10-second window once mechanical transfer time is added.
  • 03Verify both transfer and retransfer during monthly tests. Log retransfer time separately. Retransfer failures are a common finding that facilities do not catch because they end the test after the initial transfer.
  • 04Confirm your ATS is being maintained per manufacturer recommendations AND NFPA 110 Chapter 8. These are separate requirements — manufacturer maintenance alone does not satisfy the code.
02
Transfer Time Standards

Transfer Time Requirements
By Facility Type and Branch

Not all loads within a facility have the same transfer time requirement. NFPA 99 and NFPA 110 define different transfer time windows based on the branch circuit classification within the Essential Electrical System (EES). Understanding these distinctions is critical because a facility can be compliant on one branch and non-compliant on another — simultaneously.

EES
NFPA 99 Essential Electrical System
Chapter 6.4 — Branch Transfer Time Requirements
2021 Edition
Life Safety Branch
10 Seconds Max
Critical Branch
10 Seconds Max
Equipment Branch
Delayed Connection
Life Safety Branch
Illumination of means of egress, exit signs, alarm and alerting systems, emergency communication systems, and generator set task illumination. Must transfer within 10 seconds. No exceptions.
Critical Branch
Task illumination and selected receptacles in patient care areas, nurse call systems, blood and bone banks, pharmacy operations, and clinical monitoring equipment. Must transfer within 10 seconds.
Equipment Branch
HVAC systems for surgical suites, elevator systems, supply and exhaust ventilation, medical air compressors. Permitted to use delayed automatic or manual transfer — typically sequenced after life safety and critical branches to manage generator loading.

The branch distinction matters because many facilities run all three branches through a single ATS. If that ATS fails, all three branches lose emergency power simultaneously. Facilities with separate ATS units per branch have better fault isolation — but also three times the maintenance and testing surface area.

Surveyor focus area: Joint Commission and CMS surveyors increasingly ask to see the one-line diagram showing which ATS serves which branch, and then verify that the recorded transfer time for each ATS meets the requirement for the most critical branch it serves. If one ATS serves both the life safety and equipment branches, the 10-second requirement governs the entire ATS.

Action Items — Transfer Time by Branch
  • 01Obtain or update your facility one-line diagram showing which ATS units serve which EES branches (life safety, critical, equipment). If your diagram is outdated or does not show this mapping, update it.
  • 02For each ATS, identify the most critical branch it serves. That branch's transfer time requirement governs the ATS. A single ATS serving life safety loads must meet the 10-second requirement regardless of other connected loads.
  • 03Verify that equipment branch loads are sequenced to connect after life safety and critical branches to prevent generator overload during initial transfer. Load shedding and sequencing settings should be documented in your testing records.
03
Survey Deficiencies

Common ATS Deficiencies That
Trigger Immediate Jeopardy

An "Immediate Jeopardy" (IJ) citation is the most severe finding a CMS surveyor can issue. It means the deficiency represents an immediate threat to patient health and safety. In the emergency power context, three ATS-related conditions trigger IJ citations more than any other:

1. ATS Fails to Transfer During Observed Test

If a surveyor observes or initiates a transfer test and the ATS does not transfer — the generator starts but the load never moves to emergency power — this is an immediate jeopardy finding in any facility with Level 1 EPSS classification. There is no grace period, no corrective action window, no mitigation available during the survey. The facility enters IJ status immediately.

This scenario is more common than facilities expect. ATS contactors that have not been properly maintained develop mechanical binding, contact welding, or control circuit failures that only manifest during an actual transfer event. Monthly exercise tests that use "test" mode rather than simulating an actual utility failure may not exercise the full transfer sequence — masking the failure until a surveyor (or an actual outage) reveals it.

Immediate Jeopardy trigger: CMS defines IJ as a situation in which the facility's noncompliance has caused, or is likely to cause, serious injury, harm, impairment, or death to a patient. An ATS that fails to transfer means life safety systems — exit lighting, fire alarm, nurse call, patient monitoring — lose power during an outage. This meets the IJ definition on its face.

2. Transfer Time Exceeds 10 Seconds for Life Safety Loads

A transfer that occurs but takes 14, 18, or 25 seconds still constitutes a deficiency. While not always cited as IJ (depending on the surveyor and the specific loads affected), transfer times exceeding 10 seconds for life safety branch circuits are consistently cited as Condition-Level deficiencies that require a Plan of Correction.

The fix is not always simple. Slow transfer times can result from generator start delays, ATS sensing relay calibration issues, excessive TDOT settings, or mechanical wear in the transfer mechanism. Diagnosing the root cause requires a technician with ATS experience and a data logger that can capture the full transfer sequence with millisecond precision.

3. No Evidence of ATS Maintenance Program

The third IJ-adjacent finding is the absence of a documented ATS maintenance program. NFPA 110 Section 8.3 requires that transfer switch equipment be maintained according to the manufacturer's recommendations and Chapter 8's requirements. A facility that cannot produce maintenance records for its transfer switches — not just test records, but maintenance records showing inspection, cleaning, contact resistance testing, and torque verification — is exposing itself to a finding that compounds any other ATS issue found during survey.

MNT
ATS Maintenance Requirements
NFPA 110 Section 8.3 + Manufacturer Guidelines
Ongoing Requirement
Minimum ATS Maintenance Activities
Visual inspection of contacts and connections, contact resistance testing (milliohm), mechanical operation verification, control circuit testing, torque verification on power connections, exercise of manual transfer mechanism (if equipped), lubrication per manufacturer specs, and firmware/relay calibration verification.
Frequency
Per manufacturer recommendations or annually — whichever is more frequent. Most major ATS manufacturers (ASCO, Russelectric, Zenith, Cummins/Onan) recommend annual preventive maintenance with additional inspections after any transfer event involving a fault.
Action Items — Avoiding IJ Citations
  • 01Test ATS transfer in "live" mode — not just test/exercise mode — at least once per year. Simulating an actual utility loss exercises the full sensing and transfer logic, not just the contactor mechanism. Many ATS failures only appear during a full-sequence transfer.
  • 02Schedule annual ATS preventive maintenance separate from your monthly EPSS test. The monthly test verifies function; annual maintenance addresses mechanical wear, contact degradation, and control calibration.
  • 03Obtain manufacturer maintenance documentation for every ATS model in your facility. Confirm your maintenance program meets or exceeds manufacturer recommendations. If you cannot identify the ATS manufacturer or model, that is a finding waiting to happen.
  • 04Install or request transfer time data logging for every ATS serving life safety or critical branch circuits. Trend transfer times monthly. An ATS that transfers in 8 seconds today and 9.2 seconds next month is heading toward a failure — catch it before the surveyor does.

ATS Types and Their Failure Modes

Not all automatic transfer switches are created equal, and understanding the type of ATS installed in your facility directly affects your maintenance approach and failure risk profile. The two primary ATS mechanisms in emergency power applications are contactor-based (open transition) and bypass-isolation designs.

Contactor-based ATS units use electrically operated mechanical contactors to switch the load between normal and emergency sources. These are the most common type in healthcare and commercial applications. Their primary failure mode is mechanical: contactor tips develop pitting, carbon buildup, and increased contact resistance over thousands of operations. A contactor that has been transferring monthly for 15 years without maintenance will eventually develop enough resistance to cause voltage drop under load, or enough mechanical wear to slow the transfer beyond the 10-second window. The insidious part is that this degradation is gradual — the ATS transfers fine at 9.2 seconds, then 9.5, then 9.8, and one day it hits 10.4 seconds and you have a finding. Without trending, you never see it coming.

Bypass-isolation ATS units include a manual bypass mechanism that allows the load to be connected directly to either source while the ATS is de-energized for maintenance. This design is strongly recommended for Level 1 EPSS applications because it allows ATS maintenance without de-energizing critical loads. If your facility has a contactor-based ATS without bypass isolation serving life safety or critical branch circuits, any maintenance event requires either a planned outage of those circuits or deferral of the maintenance — and deferred maintenance is how ATS failures happen.

A third type, the static (solid-state) transfer switch, is increasingly common in data center and mission-critical applications. Static switches transfer in 4-8 milliseconds — orders of magnitude faster than mechanical ATS units — but they have different maintenance requirements centered on semiconductor cooling, capacitor health, and control system firmware. If your facility uses static switches, your maintenance program must reflect the manufacturer's specific requirements, which differ substantially from mechanical ATS maintenance.

The Retransfer Problem

One of the most overlooked ATS testing requirements is retransfer verification — confirming that the ATS successfully transfers the load back to the normal utility source after the generator test concludes. NFPA 110 Section 8.3.1 requires that both transfer and retransfer be verified during each monthly test. In practice, many facilities monitor the initial transfer to emergency power, confirm the generator is carrying the load, and then end their active observation. The retransfer happens automatically when the test concludes, but nobody is watching or recording the retransfer time.

Retransfer failures are more common than initial transfer failures for a mechanical reason: during the test, the ATS contactors have been in the emergency position for 30+ minutes. The normal-source contactor has been de-energized and stationary. When the retransfer command is issued, that contactor must overcome static friction and any contact surface oxidation that developed during the test period. In older or poorly maintained units, this can cause a slow retransfer, a partial retransfer (one phase transfers, others do not), or a complete failure to retransfer.

A retransfer failure means the load remains on the generator indefinitely after the test. This drains fuel, runs the generator outside its intended duty cycle, and — if nobody notices — can result in a fuel exhaustion event that leaves the facility without any emergency power until someone discovers the situation. Document retransfer time on every monthly test. It takes 10 seconds of additional observation and one additional data point on your test log.

ATS Maintenance: What the Annual Service Should Include

The annual ATS preventive maintenance service is separate from and additional to the monthly EPSS test. The monthly test verifies function; the annual service addresses the physical condition of the equipment. A comprehensive annual ATS service should include:

This service typically takes 2-4 hours per ATS unit and should be performed by a technician with specific ATS training — not general electrical maintenance staff. The manufacturer's maintenance manual should be the governing document for the service scope, supplemented by NFPA 110 Chapter 8 requirements.

Single Points of Failure: The One-ATS Problem

Many facilities — particularly smaller hospitals, nursing facilities, and ambulatory surgical centers — have a single ATS serving all three EES branches (life safety, critical, and equipment). This creates a single point of failure: if that ATS fails, the entire emergency electrical system is lost regardless of whether the generator is running perfectly. There is no partial failure mode — one ATS failure means complete loss of emergency power distribution.

Facilities with a single-ATS configuration should treat that ATS as the most critical component in the emergency power system, because it is. The maintenance frequency should be annual at minimum, with a strong argument for semi-annual service. Contact resistance trending should be quarterly if the unit is older than 10 years. And the facility should have a documented contingency plan — what happens if the ATS fails during an actual emergency? Is there a manual transfer procedure? Who is trained to execute it? How long does manual transfer take? These are questions the surveyor may ask, and "we have never thought about that" is not an answer that goes well.

Issue #003 Compliance Checklist

Print, share with your facilities team, or use as a self-audit guide. Check items off as you confirm compliance.

  • NFPA 110
    Measure and record actual transfer time (utility loss to load energization) during monthly EPSS test. Verify ≤10 seconds for Level 1.
  • NFPA 110
    Verify both automatic transfer AND automatic retransfer during each monthly test. Document retransfer time separately.
  • ATS Settings
    Review TDOT settings on all ATS units. Confirm TDOT + generator start time leaves sufficient margin for mechanical transfer within 10-second window.
  • Branch Mapping
    Verify one-line diagram accurately shows which ATS units serve which EES branches. Confirm life safety and critical branch ATS units meet 10-second requirement.
  • Maintenance
    Confirm documented annual ATS preventive maintenance program exists for all transfer switches. Verify it meets manufacturer recommendations.
  • Maintenance
    Verify ATS contact resistance testing has been performed within the past 12 months. Document results and compare to baseline values.
  • Testing Mode
    Conduct at least one annual ATS test using full utility-loss simulation (not test/exercise mode) to verify complete sensing and transfer logic.
  • Trend Data
    Establish transfer time trending for all ATS units. Flag any unit showing transfer time increase of >0.5 seconds between consecutive tests.
Uptime Compliance Services

Do Not Wait for the Surveyor to Find Your ATS Problem

Transfer switch failures are the leading cause of immediate jeopardy citations in emergency power. Our compliance gap report includes ATS transfer time verification, maintenance program review, and branch circuit mapping — the exact items surveyors check first.

Request a Gap Report Schedule Onsite Audit
The Compliance Brief
← Issue #002 All Issues Issue #004 →