EAST RUTHERFORD, N.J. — The U.S. Chemical Safety Board (CSB) has released a safety bulletin intended to inform companies that use anhydrous ammonia in bulk refrigeration operations how to avoid a hazard referred to as hydraulic shock. The safety lessons in this bulletin resulted from an investigation into a 2010 ammonia release that occurred at Millard Refrigerated Services Inc., located in Theodore, Alabama.
The accident occurred before 9 a.m. on the morning of Aug. 23, 2010. Two international ships were being loaded when the facility’s refrigeration system experienced hydraulic shock, which is defined as a sudden, localized pressure surge in piping or equipment resulting from a rapid change in the velocity of a flowing liquid. The highest pressures often occur when vapor and liquid ammonia are present in a single line and are disturbed by a sudden change in volume.
This abnormal transient condition results in a sharp pressure rise with the potential to cause catastrophic failure of piping, valves, and other components. Often, prior to a hydraulic shock incident, there is an audible “hammering” in the refrigeration piping. The incident at Millard caused a roof-mounted 12-inch suction pipe to catastrophically fail, resulting in the release of more than 32,000 pounds of anhydrous ammonia.
The release led to one Millard employee sustaining injuries when he fell while attempting to escape from a crane after it became engulfed in the traveling ammonia cloud. The large cloud traveled a quarter mile from the facility south toward an area where 800 contractors were working outdoors at a clean-up site for the Deepwater Horizon oil spill. A total of 152 offsite workers and ship crew members reported symptomatic illnesses from ammonia exposure. Thirty two of the offsite workers required hospitalization, four of them in an intensive care unit.
Rafael Moure-Eraso, chairperson, said, “The CSB believes that if companies in the ammonia refrigeration industry follow the key lessons from its investigation into the accident at Millard Refrigeration Services, dangerous hydraulic shock events can be avoided — preventing injuries, environmental damage, and potential fatalities.”
Entitled “Key Lessons for Preventing Hydraulic Shock in Industrial Refrigeration Systems,” the bulletin describes that on the day before the incident, on Aug. 22, 2010, the Millard facility experienced a loss of power that lasted over seven hours. During that time the refrigeration system was shut down. The next day the system regained power and was up and running, though operators reported some problems. While doing some troubleshooting, an operator cleared alarms in the control system, which reset the refrigeration cycle on a group of freezer evaporators that were in the process of defrosting. The control system reset caused the freezer evaporator to switch directly from a step in the defrost cycle into refrigeration mode, while the evaporator coil still contained hot high-pressure gas.
The reset triggered a valve to open and low-temperature liquid ammonia was fed back into all four evaporator coils before removing the hot ammonia gas. This resulted in both hot high-pressure gas and extremely low-temperature liquid ammonia being present in the coils and associated piping at the same time. This caused the hot high-pressure ammonia gas to rapidly condense into a liquid. Because liquid ammonia takes up less volume than ammonia gas, a vacuum was created where the gas had been. The void sent a wave of liquid ammonia through the piping, causing the hydraulic shock.
The pressure surge ruptured the evaporator piping manifold inside one of the freezers and its associated 12-inch piping on the roof of the facility. An estimated 32,100 pounds of ammonia were released into the surrounding environment.
Investigator Lucy Tyler said, “The CSB notes that one key lesson is to avoid the manual interruption of evaporators in defrost, and ensure control systems are equipped with password protection to ensure only trained and authorized personnel have the authority to manually override systems.”
The CSB also found that the evaporators at the Millard facility were designed so that one set of valves controlled four separate evaporator coils. As a result, the contents of all four coils connected to that valve group were involved in the hydraulic shock event, which led to a larger, more hazardous pressure surge.
As a result, the CSB notes that when designing ammonia refrigeration systems, each evaporator coil should be controlled by a separate set of valves.
The CSB found that immediately after discovering the ammonia release, a decision was made to isolate the source of the leak while the refrigeration system was still operating, instead of initiating an emergency shutdown. Shutting down the refrigeration system may have resulted in a smaller release, since all other ammonia-containing equipment associated with the failed rooftop piping continued to operate.
A final key lesson from the CSB’s investigation is that an emergency shutdown should be activated in the event of an ammonia release if a leak cannot be promptly isolated and controlled. Doing so can greatly reduce the amount of ammonia released during an accident.
The CSB is an independent federal agency charged with investigating serious chemical accidents. The agency’s board members are appointed by the president and confirmed by the Senate. CSB investigations look into all aspects of chemical accidents, including physical causes such as equipment failure, as well as inadequacies in industry standards, regulations, and safety management systems.
The agency does not issue citations or fines but does make safety recommendations to plants, industry organizations, labor groups, and regulatory agencies such as the Occupational Safety and Health Administration (OSHA) and the U.S. Environmental Protection Agency (EPA). For more information, visit www.csb.gov.
Publication date: 1/26/2015