ANNEX II of ATEX 94/9/EC : directive ESSENTIAL HEALTH AND SAFETY REQUIREMENTS -EHSR

ANNEX II : ESSENTIAL HEALTH AND SAFETY REQUIREMENTS RELATING TO THE DESIGN AND CONSTRUCTION OF EQUIPMENT AND PROTECTIVE SYSTEMS INTENDED FOR USE IN POTENTIALLY EXPLOSIVE ATMOSPHERES

Preliminary observations

A. Technological knowledge, which can change rapidly, must be taken into account as far as possible and be utilized immediately.

B. For the devices referred to in Article 1 (2), the essential requirements shall apply only in so far as they are necessary for the safe and reliable functioning and operation of those devices with respect to the risks of explosion.

---

1. COMMON REQUIREMENTS FOR EQUIPMENT AND PROTECTIVE SYSTEMS

1.0. General requirements

1.0.1. Principles of integrated explosion safety

Equipment and protective systems intended for use in potentially explosive atmospheres must be designed from the point of view of integrated explosion safety.

In this connection, the manufacturer must take measures:

- above all, if possible, to prevent the formation of explosive atmospheres which may be produced or released by equipment and by protective systems themselves,

- to prevent the ignition of explosive atmospheres, taking into account the nature of every electrical and non-electrical source of ignition,

- should an explosion nevertheless occur which could directly or indirectly endanger persons and, as the case may be, domestic animals or property, to halt it immediately and/or to limit the range of explosion flames and explosion pressures to a sufficient level of safety.

1.0.2. Equipment and protective systems must be designed and manufactured after due analysis of possible operating faults in order as far as possible to preclude dangerous situations.

Any misuse which can reasonably be anticipated must be taken into account.

1.0.3. Special checking and maintenance conditions

Equipment and protective systems subject to special checking and maintenance conditions must be designed and constructed with such conditions in mind.

1.0.4. Surrounding area conditions

Equipment and protective systems must be so designed and constructed as to be capable of coping with actual or foreseeable surrounding area conditions.

1.0.5. Marking

All equipment and protective systems must be marked legibly and indelibly with the following minimum particulars;

- name and address of the manufacturer,

- CE marking (see Annex X, point A),

- designation of series or type,

- serial number, if any,

- year of construction,

- the specific marking of explosion protection >REFERENCE TO A GRAPHIC>

followed by the symbol of the equipment group and category,

- for equipment-group II, the letter 'G' (concerning explosive atmospheres caused by gases, vapours or mists),

and/or the letter 'D' (concerning explosive atmospheres caused by dust).

Furthermore, where necessary, they must also be marked with all information essential to their safe use.

1.0.6. Instructions

(a) All equipment and protective systems must be accompanied by instructions, including at least the following particulars:

- a recapitulation of the information with which the equipment or protective system is marked, except for the serial number (see 1.0.5.), together with any appropriate additional information to facilitate maintenance (e.g. address of the importer, repairer, etc.);

- instructions for safe:

- putting into service,

- use,

- assembling and dismantling,

- maintenance (servicing and emergency repair),

- installation,

- adjustment;

- where necessary, an indication of the danger areas in front of pressure-relief devices;

- where necessary, training instructions;

- details which allow a decision to be taken beyond any doubt as to whether an item of equipment in a specific category or a protective system can be used safely in the intended area under the expected operating conditions;

- electrical and pressure parameters, maximum surface temperatures and other limit values;

- where necessary, special conditions of use, including particulars of possible misuse which experience has shown might occur;

- where necessary, the essential chracteristics of tools which may be fitted to the equipment or protective system.

(b) The instructions must be drawn up in one of the Community languages by the manufacturer or his authorized representative established in the Community.

On being put into service, all equipment and protective systems must be accompanied by a translation of the instructions in the language or languages of the country in which the equipment or protective system is to be used and by the instructions in the original language.

This translation must be made by either the manufacturer or his authorized representative established in the Community or the person introducing the equipment or protective system into the language area in question.

By way of derogation from this requirement, the maintenance instructions for use by the specialist personnel employed by the manufacturer or his authorized representative established in the Community may be drawn up in a single Community language understood by that personnel.

(c) The instructions must contain the drawings and diagrams necessary for the putting into service, maintenance, inspection, checking of correct operation and, where appropriate, repair of the equipment or protective system, together with all useful instructions, in particular with regard to safety.

(d) Literature describing the equipment or protective system must not contradict the instructions with regard to safety aspects.

1.1. Selection of materials

1.1.1. The materials used for the construction of equipment and protective systems must not trigger off an explosion, taking into account foreseeable operational stresses.

1.1.2. Within the limits of the operating conditions laid down by the manufacturer, it must not be possible for a reaction to take place between the materials used and the constituents of the potentially explosive atmosphere which could impair explosion protection.

1.1.3. Materials must be so selected that predictable changes in their characteristics and their compatibility in combination with other materials will not lead to a reduction in the protection afforded; in particular, due account must be taken of the material's corrosion and wear resistance, electrical conductivity, impact strength, ageing resistance and the effects of temperature variations.

1.2. Design and Construction

1.2.1. Equipment and protective systems must be designed and constructed with due regard to technological knowledge of explosion protection so that they can be safely operated throughout their foreseeable lifetime.

1.2.2. Components to be incorporated into or used as replacements in equipment and protective systems must be so designed and constructed that they function safely for their intended purpose of explosion protection when they are installed in accordance with the manufacturer's instructions.

1.2.3. Enclosed structures and prevention of leaks Equipment which may release flammable gases or dusts must wherever possible employ enclosed structures only.

If equipment contains openings or non-tight joints, these must as far as possible be designed in such a way that developing gases or dusts cannot give rise to explosive atmospheres outside the equipment.

Points where materials are introduced or drawn off must, as far as possible, be designed and equipped so as to limit escapes of flammable materials during filling or draining.

1.2.4. Dust deposits

Equipment and protective systems which are intended to be used in areas exposed to dust must be so designed that deposit dust on their surfaces is not ignited.

In general, dust deposits must be limited where possible. Equipment and protective systems must be easily cleanable.

The surface temperatures of equipment parts must be kept well below the glow temperature of the deposit dust.

The thickness of deposit dust must be taken into consideration and, if appropriate, means must be taken to limit the temperature in order to prevent a heat build up.

1.2.5. Additional means of protection

Equipment and protective systems which may be exposed to certain types of external stresses must be equipped, where necessary, with additional means of protection.

Equipment must withstand relevant stresses, without adverse effect on explosion protection.

1.2.6. Safe opening

If equipment and protective systems are in a housing or a locked container forming part of the explosion protection itself, it must be possible to open such housing or container only with a special tool or by means of appropriate protection measures.

1.2.7. Protection against other hazards

Equipment and protective systems must be so designed and manufactured as to:

(a) avoid physical injury or other harm which might be caused by direct or indirect contact;

(b) assure that surface temperatures of accessible parts or radiation which would cause a danger, are not produced;

(c) eliminate non-electrical dangers which are revealed by experience;

(d) assure that foreseeable conditions of overload shall not give rise to dangerous situations.

Where, for equipment and protective systems, the risks referred to in this paragraph are wholly or partly covered by other Community Directives, this Directive shall not apply or shall cease to apply in the case of such equipment and protective systems and of such risks upon application of those specific Directives.

1.2.8. Overloading of equipment

Dangerous overloading of equipment must be prevented at the design stage by means of integrated measurement, regulation and control devices, such as over-current cut-off switches, temperature limiters, differential pressure switches, flowmeters, time-lag relays, overspeed monitors and/or similar types of monitoring devices.

1.2.9. Flameproof enclosure systems

If parts which can ignite an explosive atmosphere are placed in an enclosure, measures must be taken to ensure that the enclosure withstands the pressure developed during an internal explosion of an explosive mixture and prevents the transmission of the explosion to the explosive atmosphere surrounding the enclosure.

1.3. Potential ignition sources

1.3.1. Hazards arising from different ignition sources

Potential ignition sources such as sparks, flames, electric arcs, high surface temperatures, acoustic energy, optical radiation, electromagnetic waves and other ignition sources must not occur.

1.3.2. Hazards arising from static electricity

Electrostatic charges capable of resulting in dangerous discharges must be prevented by means of appropriate measures.

1.3.3. Hazards arising from stray electric and leakage currents

Stray electric and leakage currents in conductive equipment parts which could result in, for example, the occurrence of dangerous corrosion, overheating of surfaces or sparks capable of provoking an ignition must be prevented.

1.3.4. Hazards arising from overheating

Overheating caused by friction or impacts occurring, for example, between materials and parts in contact with each other while rotating or through the intrusion of foreign bodies must, as far as possible, be prevented at the design stage.

1.3.5. Hazards arising from pressure compensation operations

Equipment and protective systems must be so designed or fitted with integrated measuring, control and regulation devices that pressure compensations arising from them do not generate shock waves or compressions which may cause ignition.

1.4. Hazards arising from external effects

1.4.1. Equipment and protective systems must be so designed and constructed as to be capable of performing their intended function in full safety, even in changing environmental conditions and in the presence of extraneous voltages, humidity, vibrations, contamination and other external effects, taking into account the limits of the operating conditions established by the manufacturer.

1.4.2. Equipment parts used must be appropriate to the intended mechanical and thermal stresses and capable of withstanding attack by existing or foreseeable aggressive substances.

1.5. Requirements in respect of safety-related devices

1.5.1. Safety devices must function independently of any measurement or control devices required for operation.

As far as possible, failure of a safety device must be detected sufficiently rapidly by appropriate technical means to ensure that there is only very little likelihood that dangerous situations will occur.

For electrical circuits the fail-safe principle is to be applied in general.

Safety-related switching must in general directly actuate the relevant control devices without intermediate software command.

1.5.2. In the event of a safety device failure, equipment and/or protective systems shall, wherever possible, be secured.

1.5.3. Emergency stop controls of safety devices must, as far as possible, be fitted with restart lockouts. A new start command may take effect on normal operation only after the restart lockouts have been intentionally reset.

1.5.4. Control and display units

Where control and display units are used, they must be designed in accordance with ergonomic principles in order to achieve the highest possible level of operating safety with regard to the risk of explosion.

1.5.5. Requirements in respect of devices with a measuring function for explosion protection.

In so far as they relate to equipment used in explosive atmospheres, devices with a measuring function must be designed and constructed so that they can cope with foreseeable operating requirements and special conditions of use.

1.5.6. Where necessary, it must be possible to check the reading accuracy and serviceability of devices with a measuring function.

1.5.7. The design of devices with a measuring function must incorporate a safety factor which ensures that the alarm threshold lies far enough outside the explosion and/or ignition limits of the atmospheres to be registered, taking into account, in particular, the operating conditions of the installation and possible aberrations in the measuring system.

1.5.8. Risks arising from software

In the design of software-controlled equipment, protective systems and safety devices, special account must be taken of the risks arising from faults in the programme.

1.6. Integration of safety requirements relating to the system

1.6.1. Manual override must be possible in order to shut down the equipment and protective systems incorporated within automatic processes which deviate from the intended operating conditions, provided that this does not compromise safety.

1.6.2. When the emergency shutdown system is actuated, accumulated energy must be dispersed as quickly and as safely as possible or isolated so that it no longer constitutes a hazard.

This does not apply to electrochemically-stored energy.

1.6.3. Hazards arising from power failure

Where equipment and protective systems can give rise to a spread of additional risks in the event of a power failure, it must be possible to maintain them in a safe state of operation independently of the rest of the installation.

1.6.4. Hazards arising from connections

Equipment and protective systems must be fitted with suitable cable and conduit entries.

When equipment and protective systems are intended for use in combination with other equipment and protective systems, the interface must be safe.

1.6.5. Placing of warning devices as parts of equipment

Where equipment or protective systems are fitted with detection or alarm devices for monitoring the occurrence of explosive atmospheres, the necessary instructions must be provided to enable them to be provided at the appropriate places.

---

2. SUPPLEMENTARY REQUIREMENTS IN RESPECT OF EQUIPMENT

2.0. Requirements applicable to equipment in category M of equipment-group I

2.0.1. Requirements applicable to equipment in category M 1 of equipment-group I

2.0.1.1. Equipment must be so designed and constructed that sources of ignition do not become active, even in the event of rare incidents relating to equipment.

Equipment must be equipped with means of protection such that:

- either, in the event of failure of one means of protection, at least an independent second means provides the requisite level of protection,

- or, the requisite level of protection is ensured in the event of two faults occurring independently of each other.

Where necessary, this equipment must be equipped with additional special means of protection.

It must remain functional with an explosive atmosphere present.

2.0.1.2. Where necessary, equipment must be so constructed that no dust can penetrate it.

2.0.1.3. The surface temperatures of equipment parts must be kept clearly below the ignition temperature of the foreseeable air/dust mixtures in order to prevent the ignition of suspended dust.

2.0.1.4. Equipment must be so designed that the opening of equipment parts which may be sources of ignition is possible only under non-active or intrinsically safe conditions. Where it is not possible to render equipment non-active, the manufacturer must affix a warning label to the opening part of the equipment.

If necessary, equipment must be fitted with appropriate additional interlocking systems.

2.0.2. Requirements applicable to equipment in category M 2 of equipment-group I

2.0.2.1. Equipment must be equipped with means of protection ensuring that sources of ignition do not become active during normal operation, even under more severe operating conditions, in particular those arising from rough handling and changing environmental conditions.

The equipment is intended to be de-energized in the event of an explosive atmosphere.

2.0.2.2. Equipment must be so designed that the opening of equipment parts which may be sources of ignition is possible only under non-active conditions or via appropriate interlocking systems. Where it is not possible to render equipment non-active, the manufacturer must affix a warning label to the opening part of the equipment.

2.0.2.3. The requirements regarding explosion hazards arising from dust applicable to category M 1 must be applied.

2.1. Requirements applicable to equipment in category 1 of equipment-group II

2.1.1. Explosive atmospheres caused by gases, vapours or hazes

2.1.1.1. Equipment must be so designed and constructed that sources of ignition do not become active, even in event of rare incidents relating to equipment.

It must be equipped with means of protection such that:

- either, in the event of failure of one means of protection, at least an independent second means provides the requisite level of protection,

- or, the requisite level of protection is ensured in the event of two faults occurring independently of each other.

2.1.1.2. For equipment with surfaces which may heat up, measures must be taken to ensure that the stated maximum surface temperatures are not exceeded even in the most unfavourable circumstances.

Temperature rises caused by heat build-ups and chemical reactions must also be taken into account.

2.1.1.3. Equipment must be so designed that the opening of equipment parts which might be sources of ignition is possible only under non-active or intrinsically safe conditions. Where it is not possible to render equipment non-active, the manufacturer must affix a warning label to the opening part of the equipment.

If necessary, equipment must be fitted with appropriate additional interlocking systems.

2.1.2. Explosive atmospheres caused by air/dust mixtures

2.1.2.1. Equipment must be so designed and constructed that ignition of air/dust mixtures does not occur even in the event of rare incidents relating to equipment.

It must be equipped with means of protection such that - either, in the event of failure of one means of protection, at least an independent second means provides the requisite level of protection,

- or, the requisite level of protection is ensured in the event of two faults occurring independently of each other.

2.1.2.2. Where necessary, equipment must be so designed that dust can enter or escape from the equipment only at specifically designated points.

This requirement must also be met by cable entries and connecting pieces.

2.1.2.3. The surface temperatures of equipment parts must be kept well below the ignition temperature of the foreseeable air/dust mixtures in order to prevent the ignition of suspended dust.

2.1.2.4. With regard to the safe opening of equipment parts, requirement 2.1.1.3 applies.

2.2. Requirements for category 2 of equipment-group II

2.2.1. Explosive atmospheres caused by gases, vapours or mists

2.2.1.1. Equipment must be so designed and constructed as to prevent ignition sources arising, even in the event of frequently occurring disturbances or equipment operating faults, which normally have to be taken into account.

2.2.1.2. Equipment parts must be so designed and constructed that their stated surface temperatures are not exceeded, even in the case of risks arising from abnormal situations anticipated by the manufacturer.

2.2.1.3. Equipment must be so designed that the opening of equipment parts which might be sources of ignition is possible only under non-active conditions or via appropriate interlocking systems. Where it is not possible to render equipment non-active, the manufacturer must affix a warning label to the opening part of the equipment.

2.2.2. Explosive atmospheres caused by air/dust mixtures

2.2.2.1. Equipment must be designed and constructed so that ignition of air/dust mixtures is prevented, even in the event of frequently occurring disturbances or equipment operating faults which normally have to be taken into account.

2.2.2.2. With regard to surface temperatures, requirement 2.1.2.3 applies.

2.2.2.3. With regard to protection against dust, requirement 2.1.2.2 applies.

2.2.2.4. With regard to the safe opening of equipment parts, requirement 2.2.1.3 applies.

2.3. Requirements applicable to equipment in category 3 of equipment-group II

2.3.1. Explosive atmospheres caused by gases, vapours or mists

2.3.1.1. Equipment must be so designed and constructed as to prevent foreseeable ignition sources which can occur during normal operation.

2.3.1.2. Surface temperatures must not exceed the stated maximum surface temperatures under intended operating conditions. Higher temperatures in exceptional circumstances may be allowed only if the manufacturer adopts special additional protective measures.

2.3.2. Explosive atmospheres caused by air/dust mixtures

2.3.2.1. Equipment must be so designed and constructed that air/dust mixtures cannot be ignited by foreseeable ignition sources likely to exist during normal operation.

2.3.2.2. With regard to surface temperatures, requirement 2.1.2.3 applies.

2.3.2.3. Equipment, including cable entries and connecting pieces, must be so constructed that, taking into account the size of its particles, dust can neither develop explosive mixtures with air nor form dangerous accumulations inside the equipment.

---

3. SUPPLEMENTARY REQUIREMENTS IN RESPECT OF PROTECTIVE SYSTEMS

3.0. General requirements

3.0.1. Protective systems must be dimensioned in such a way as to reduce the effects of an explosion to a sufficient level of safety.

3.0.2. Protective systems must be designed and capable of being positional in such a way that explosions are prevented from spreading through dangerous chain reactions or flashover and incipient explosions do not become detonations.

3.0.3. In the event of a power failure, protective systems must retain their capacity to function for a period sufficient to avoid a dangerous situation.

3.0.4. Protective systems must not fail due to outside interference.

3.1. Planning and design

3.1.1. Characteristics of materials

With regard to the characteristics of materials, the maximum pressure and temperature to be taken into consideration at the planning stage are the expected pressure during an explosion occurring under extreme operating conditions and the anticipated heating effect of the flame.

3.1.2. Protective systems designed to resist or contain explosions must be capable of withstanding the shock wave produced without losing system integrity.

3.1.3. Accessories connected to protective systems must be capable of withstanding the expected maximum explosion pressure without losing their capacity to function.

3.1.4. The reactions caused by pressure in peripheral equipment and connected pipe-work must be taken into consideration in the planning and design of protective systems.

3.1.5. Pressure-relief systems

If it is likely that stresses on protective systems will exceed their structural strength, provision must be made in the design for suitable pressure-relief devices which do not endanger persons in the vicinity.

3.1.6. Explosion suppression systems

Explosion suppression systems must be so planned and designed that they react to an incipient explosion at the earliest possible stage in the event of an incident and counteract it to best effect, which due regard to the maximum rate of pressure increase and the maximum explosion pressure.

3.1.7. Explosion decoupling systems

Decoupling systems intended to disconnect specific equipment as swiftly as possible in the event of incipient explosions by means of appropriate devices must be planned and designed so as to remain proof against the transmission of internal ignition and to retain their mechanical strength under operating conditions.

3.1.8. Protective systems must be capable of being integrated into a circuit with a suitable alarm threshold so that, if necessary, there is cessation of product feed and output and shutdown of equipment parts which can no longer function safely.