Section 537 Isolation & Switching — BS 7671:2018+A4:2026 changes

Section 537 sits in Part 5 of BS 7671 ("Selection and Erection of Equipment") and provides the rules for the devices that interrupt the supply to a circuit. Chapter 46, Section 462 (Isolation) and Section 463 (Switching off for mechanical maintenance, emergency switching and functional switching) all hand off to 537 for selection of the actual physical device. The structure follows the four switching functions defined in Section 463 — a switch fit for one function is not automatically fit for another, and using a functional switch as an isolator is a direct Section 537 breach.

A device complying with Section 537 must be suitable for the function it is being relied on to perform. The four functions are defined in Section 463 and realised by the device requirements in Section 537.

1. Isolation (Section 537.2) — disconnecting an installation or circuit from every source of live supply for safety, with a means of securing the disconnection. Required before any work on dead conductors under Regulation 13 of the Electricity at Work Regulations 1989.
2. Switching for mechanical maintenance (Section 537.3.2) — switching off so non-electrical work (cleaning, adjusting, lubricating) can be carried out safely. The device must cut the full load current and be secured in the off position.
3. Emergency switching (Section 537.3.3) — switching off to remove unexpected danger. The device must operate in a single action, be readily accessible at the point of danger, and disconnect the supply quickly.
4. Functional switching (Section 537.4) — the ordinary on/off used by the operator in normal use. Functional switches need not be securable but must be suitable for the most onerous duty cycle they will see.

One physical device can satisfy more than one function if it meets the most demanding requirement. A switch-disconnector with a lockable handle that breaks full load current can serve as isolation, mechanical maintenance switching and (if positioned correctly) emergency switching all at once. A semiconductor functional switch alone cannot — semiconductors are not isolators.

Section 537.2.1 sets out the headline requirement: every installation must have a means of isolating it from each source of energy. Breaking load current is not required (an isolator need not be operable on load), but the device must reliably interrupt every line conductor and, in the systems specified, the neutral as well. When open, the contacts must satisfy the isolation distance of the relevant product standard — typically BS EN 60947-3 for switch-disconnectors or BS EN 60898 / 60947-2 for circuit-breakers suitable for isolation.

Section 537.2.4 also requires the means of isolation to be identifiable. On a distribution board this is the circuit list and permanent labelling; on a remote isolator a durable label naming the circuit it isolates. Inspectors under Section 642 will check the labelling matches what the device actually controls — a mismatched label is a Code C2 finding on an EICR.

Emergency switching lets somebody confronted with unexpected danger — fire, electric shock, entanglement, runaway motor — cut the supply immediately. Section 537.3.3 defines both the device characteristics and where the operator must be able to reach it.

Functional switching is the ordinary control of the load in normal operation — the light switch, the contactor energising the heater, the smart relay closing the curtain motor. Section 537.4 says functional switches must be suitable for the most onerous duty they will see, matched to the load characteristics (resistive, inductive, capacitive, motor, discharge lighting, LED driver) and to the expected switching frequency.

The most common Section 537.4 EICR failure is a 6 A plate switch being relied on to isolate a circuit. Plate switches are not isolators — they don't satisfy 537.2 contact-gap requirements and can't be reliably secured open. This is a Code C2 finding.

BS 7671:2018+A4:2026 was published on 15 April 2026 and brings Section 537 up to date with technologies that were rare or non-existent in 2018. The headline changes concentrate around remote and smart switching, the formal incorporation of EV charge points and battery energy storage systems into the isolation framework, and alignment of solar PV DC isolation with mainstream Section 537 language.

1. Remote and smart switching — A4:2026 recognises that isolators, emergency switches and maintenance switches may be operated remotely (app, BMS, cloud), but a local manually operable means at the point of work must still satisfy the relevant Section 537 sub-clause. Software locks alone are not isolation.
2. EV charge points — Section 722 has been updated and Section 537 cross-references to it. Every EV charge point must have a means of isolation accessible to the user, and where the EVSE includes DC fault current protection, the isolation requirement applies in addition, not instead.
3. Battery energy storage systems (BESS) — A4:2026 introduces explicit clauses requiring a DC isolator between the battery and the inverter, and a separate AC isolator between the inverter and the consumer unit. Section 537 governs both; both must be securable open.
4. Solar PV — A4:2026 aligns Section 712 language with Section 537. A DC isolator is required adjacent to the inverter, and for rooftop arrays a means of DC isolation accessible to firefighters at low level is required where the array does not incorporate equivalent rapid shutdown.
5. TN-C-S (PNB) — the new Protective Neutral Bonding earthing arrangement clauses reinforce Section 537.2.2: the means of isolation must not break the PEN conductor.
6. AFDDs — where an AFDD provides both protective and isolation functions, Section 537.2 requirements still apply to the isolation function (contact-gap, securable open, identifiable).

Section 537 names three closely related device families and electricians commonly confuse them. The product standards (BS EN 60947-3 and BS EN 60947-2) define them precisely.

A semiconductor device — even a high-quality solid-state relay or a smart contactor — is never a 537.2 isolator on its own. Off-state leakage cannot satisfy the isolation contact-gap requirement. Where a smart relay sits in series with a mechanical isolator, the mechanical isolator does the isolation; the smart relay does functional switching under 537.4.

A4:2026 brought EV charge points decisively into the isolation framework. Section 722 cross-references Section 537 explicitly. Every EV charge point installation must include a means of isolation operable by the user, the installer for maintenance, and an emergency responder.

For the full A4:2026 changes specific to EV charging, including the integral DC protection options and PME (PNB) earthing arrangements, see our Section 722 EV charging A4:2026 changes guide.

Battery energy storage systems (BESS) — home batteries, commercial storage, hybrid PV/battery systems — were not properly addressed in the 2018 edition. A4:2026 brings them in and Section 537 governs the isolation devices. The risk profile is different from a normal load: the battery is the source. You cannot turn it off by opening the AC supply because the battery is still energised internally.

Solar PV has had a DC isolation rule under Section 712 since the technology became common; A4:2026 aligns the language with Section 537 so installers and inspectors work from a single device-selection framework. The principle is unchanged: a PV array generates DC whenever there is light on it, and the only way to make the DC side safe is to physically open a DC switch-disconnector.

Module-level rapid shutdown systems (MLPE, optimisers with rapid shutdown signal, microinverters) can satisfy the rooftop DC isolation requirement where they meet the relevant product standard and opening the AC supply triggers shutdown of every module to a safe touch voltage. A4:2026 acknowledges this option explicitly.

Under Part 6, every isolating and switching device must be verified during initial verification (Section 642) and reviewed during periodic inspection (Section 651). Most Section 537 verification is visual — but the checks are formal, part of the inspector's methodology, and recorded on the EIC and EICR schedules.

1. Correct selection — the device is suitable for the function(s) being claimed. A 6 A plate switch claimed as an isolator fails.
2. Correct rating — current rating at least equal to the controlled load; interrupting capacity suitable for the prospective fault current at the terminals.
3. Securable open — the device can be locked or otherwise secured off. For circuit-breakers, a lock-off device fitted to the toggle.
4. Identifiable — clear durable labelling of the circuit or equipment controlled. Drift between label and load is a common EICR Code C3 (or C2 where safety is at stake) finding.
5. Visible contact position — directly visible or reliably indicated. For switch-disconnectors the handle position; for circuit-breakers the toggle.
6. Accessibility — accessible without removing non-user covers and without tools beyond a key for restricted enclosures.
7. Emergency switches additionally — positioned at the point of danger, red-on-yellow where reasonably practicable, single-action operation.

For the underlying lock-off procedure an inspector expects to see before any work on dead conductors, see our safe isolation method statement guide and the permit to work for electrical isolation guide. The Section 537 device makes safe isolation possible; the procedure makes it happen.

A4:2026 has formalised the requirements for smart switching — network-connected contactors, app-controlled relays, BMS-driven contactor blocks, smart consumer units with remote breaker control. The standard does not prohibit them; it places performance conditions. The core principle: a software command is not, on its own, a means of isolation under Section 537.2.

Section 537 checks are part of every EIC, Minor Works Certificate and EICR issued under BS 7671:2018+A4:2026. The Elec-Mate certificate suite includes schedules that map directly to the Section 537 device requirements, so the inspector doesn't have to remember every clause — the form prompts for the verification that matters.