On July 6, 1988, an explosion and fire occurred on the Piper Alpha platform in the North Sea when a standby condensate pump, which had its pressure safety valve removed for maintenance, was improperly re-energized. Gas condensate leaked from the blind flange assembly, ignited, and caused a fatal explosion. The incident quickly escalated as high-pressure gas lines ruptured, creating a major fire that blocked evacuation routes and resulted in 167 fatalities with cost of ~ US$ 2.4 bn.
Incident Description
A standby condensate pump for reinjecting gas condensate into an oil export line on the Piper (Alpha) platform had been de-energised for maintenance. Its discharge pressure safety valve (PSV) was also removed and blind flange assemblies were fitted to the open PSV pipe connections.
Meanwhile, the running condensate pump failed and would not restart. Liquid levels in the gas/liquid separation system were rising and would eventually trigger a total shutdown of the platform if not reversed. Night shift operators were aware the standby pump had been taken out of service for maintenance by the day shift but believed the work had not yet begun, so they decided to re-energise and start the standby pump.
Gas condensate leaked from a PSV blind flange assembly; it found an ignition source and exploded. The explosion was soon followed by an oil pipe rupture and pool fire. The incident escalated rapidly as 3 high pressure gas lines ruptured after 20, 50 and 80 mins, respectively, creating a towering inferno. Smoke and flames outside the accommodation module made evacuation by helicopter or lifeboat impossible.
Incident Analysis
Basic cause (most probable) was a loss of primary containment (LOPC) of hydrocarbon condensate due to overpressure of a temporary blind flange assembly after a pump undergoing maintenance was started in error.
Critical Factors
- The platform was originally designed to produce and export oil only but was extensively modified to also enable export of gas.
- Gas compression and condensate reinjection facilities were retrofitted beneath the control room, electrical utility and accommodation modules.
- Absence of fire protection for structural steel and gas risers.
- Continued operation of inter-connected oil production platforms after the first explosion.
Root Causes
- Inadequate control of work (work permit systems)
- Poor communication (shift handover and inter-platform),
- Inadequate management of change (retrofitting a gas treatment system on a congested platform)
- Inadequate protection (absence of automatic shutoff valves and dedicated deluge systems for gas risers)
- Poor emergency preparedness (failure to conduct evacuation drills and to depressure the subsea pipelines),
- Inadequate leadership (personal safety prioritised over process safety
Lessons Learned
- Offshore safety legislation should be goal-setting rather than rule-based to foster innovation and continuous improvement in installation integrity
- Owner/operators of fixed and mobile offshore installations should submit a Safety Case document to the regulator detailing how major accident risks and safe evacuation, escape and rescue of personnel are managed,
- Production platforms should be provided with fire and gas detection systems, explosion protection and active (water deluge) and passive (insulation) fire protection systems
- Production platforms should have temporary safe refuges (TSRs) which protect personnel from external fire and smoke while an emergency is assessed and/or preparations are made for evacuation, 5) Evacuation drills should be routinely practised
Top References
- https://jpt.spe.org/process-safety-thirty-years-after-piper-alpha-disaster
- Learning Lessons from Major Accidents by IChemE
Certified Functional Safety Professional (FSP, TÜV SÜD), Certified HAZOP & PHA Leader, LOPA Practitioner, and Specialist in SIL Verification & Functional Safety Lifecycle, with 18 years of professional experience in Plant Operations and Process Safety across Petroleum Refining and Fertilizer Complexes.
