NRC Generic Letter 1984-01
- , 1-A - -I
.-.. 0 UNITED STATES i NUCLEAR REGULATORY COMMISSION
WASHINGTON, D. C. 20555 January 5, 1984 TO ALL HOLDERS OF OPERATING LICENSES, APPLICANTS FOR OPERATING LICENSES
AND HOLDERS OF CONSTRUCTION PERMITS FOR POWER REACTORS
Gentlemen:
Subject: NRC Use of the Terms, "Important to Safety" and "Safety Related"
As you may know, there has been concern expressed recently by the Utility Classification Group over NRC use of the terms "important to safety" and
"safety-related." The concern appears to be principally derived from recent licensing cases in which the meaning of the terms in regard to NRC
quality assurance requirements. has been at issue, and from a memorandum from the Director, Office of Nuclear Reactor Regulation, to NRR personnel dated November 20, 1981.
Enclosed for your information are two letters to the NRC from this Group, and the NRC response dated December 19,-1983. In particular, you should note that the NRC reply makes it very clear that NRC regulatory jurisdiction involving a safety matter is not controlled by the use of terms such as
"safety-related" and "important to safety," and our conclusion that pur- suant to our regulations, nuclear power plant permittees or licensees are responsible for developing and implementing quality assurance programs for plant design and construction or for plant operation which meet the more general requirements of General Design Criterion 1 for plant equipment
"important to safety," and the more prescriptive requirements of Appendix B
to 10 CFR Part 50 for "safety-related" plant equipment.
While previous staff licensing reviews were not specifically directed towards determining whether, in fact, permittees or licensees have developed quality assurance programs which adequately address all structures, systems and com- ponents important to safety, this was not because of any concern over the lack of regulatory requirements for this class of equipment. Rather, our practice was based upon the staff view that normal industry practice is generally acceptable for most equipment not covered by Appendix B within this class. Nevertheless, in specific situations in the past where we have found that quality assurance requirements beyond normal industry practice were needed for equipment "important to safety," we have not hesitated in imposing additional requirements commensurate with the importance to safety of the equipment involved. We intend to continue that practice.
8401050382
. I. z -
- TIC rF
-2- The NRC staff is interested in your comments and views on whether further guidance is needed related to this issue. If you are interested in partici- pating in a meeting with NRC to discuss this subject, please contact Mr. James M. Taylor, Deputy Director, Office of Inspection and Enforcement.
Sincerely, (riginal signed by Darrell G. Eisenhut Darrell G. Eisenhut, Director Division of Licensing Enclosure:
1. Two Letters from Utility Safety Classification Group
2. NRC Response dated December 19, 1983 DL
MHungerb uhler:mcs 4; t E se HRDeon0
12/3 /83 L2/ 80 Itl 4/848 if/ 5 8~
44' VCC_'6_-'e& _c a-li
0'LJ
LI d-ap
/
-,p 1UNITED STATES
NUCLEAR REGULATORY COMMISSION
WASHINGTON, D. C. 20555 January 5, 1984 FOR OPERATING LICENSES
TO ALL HOLDERS OF OPERATING LICENSES, APPLICANTS
POWER REACTORS
AND HOLDERS OF CONSTRUCTION PERMITS FOR
Gentlemen:
and "Safety Related"
Subject: NRC Use of the Terms, "Important to Safety"
expressed recently by the Utility As you may know, there has been concern terms "important to safety" and Classification Group over NRC use of the be principally derived from
"safety-related." The concern appears to of the terms in regard to NRC
recent licensing cases in which the meaning at issue, and from a memorandum quality assurance requirements has been Regulation, to NRR personnel from the Director, Office of Nuclear Reactor dated November 20, 1981.
to the NRC from this Group, Enclosed for your information are two letters 1983. In particular, you should and the NRC response dated December 19, that NRC regulatory jurisdiction note that the NRC reply makes it very clear by the use of terms such as involving a safety matter is not controlled and our conclusion that pur-
"safety-related" and "important to safety," plant permittees or licensees are suant to our regulations, nuclear power quality assurance programs for responsible for developing and implementing operation which meet the more plant design and construction or for plant 1 for plant equipment general requirements of General Design Criterion requirements of Appendix B
"important to safety," and the more prescriptive equipment.
to 10 CFR Part 50 for "safety-related" plant not specifically directed towards While previous staff licensing reviews were or licensees have developed quality determining whether, in fact, permittees all structures, systems and com- assurance programs which adequately addressbecause of any concern over the ponents important to safety, this was not class of equipment. Rather, our lack of regulatory requirements for this normal industry practice is practice was based upon the staff view that not covered by Appendix B within generally acceptable for most equipment in the past where we have this class. Nevertheless, in specific situations beyond normal industry practice found that quality assurance requirementssafety," we have not hesitated in were needed for equipment "important to with the importance to safety imposing additional requirements commensurate continue that practice.
of the equipment involved. We intend to
2
(840105038
-2- The NRC staff is interested in your comments guidance is needed related to this issue. and views on whether further pating in a meeting with NRC to discuss If you are interested in partici- Mr. James M. Taylor, Deputy Director, this subject, please contact Office of Inspection and Enforcement.
Sincerely, arel G. Een ut Drector Division of Ltcensing Enclosure:
1. Two Letters from Utility Safety Classification Group
2. NRC Response dated December 19, 1983
HUNTON & WILLIAMS
707 EAST MAIN STREET P. 0. BOX 1535
- * & T SUILDING RICHMOXND, VI1GINIA 28212 1919 PENNSYLVANIA AVENUE, N.W.
P. O. BOX 109 . P.O. BOX 9230
RALEIGH, NORTH CAROLINA 27602 TELEPHON 804-788-8200 WASHINGTON, D.C. 20036
91$- 628 -9371 202-223 -8650
FIRST VIRGINIA BANK TOWER
P. 0. BOX 3889 FILE NO.
NORFOLK, VIRGINIA 23514 ao4-82S-S501 August 26, 1983 DIRECT DIAL NO. 804 788- Mr. William J. Dircks U.S. Nuclear Regulatory Commission Maryland National Bank Building
7735 Old Georgetown Road Bethesda, Maryland 20814 Dear Mr. Dircks:
The Utility Safety Classification Group, a group repre- senting 30 electric utility owners of nuclear power plants,./
seeks to bring to your attention an issue of major importance and increasing prominence, namely that of certain definitions used in systems classification. The regulatory terms "safety related" and "important to safety" and the non-regulatory term
"safety grade" have been consistently used synonymously by the industry and the NRC over decades of plant design, construc- tion, licensing and operation.
The Utility Group believes that various recent actions taken within the NRC Staff signal a sharp departure from the i/ Members of the Utility Group are listed in Attachment A to this letter. The Utility Group has retained the firm of KMC as its technical consultants and the law firm of Hunton & Williams as its legal consultants.
HUNTON & WILLIAMS
August 26, 1983 Page 2 long-standing meaning of the term "important to safety" to cover a much broader. and undefined set of plant structures, systems and components than is covered by the term "safety re- lated.' Redefining these terms without proper review would likely have far-reaching, pervasive consequences for licensing and general regulation of nuclear plants. In particular, given the extensive use of the term "important to safety" in the Com- mission's regulations and Staff regulatory guides, NUREG docu- ments and other licensing documents, as well as licensee sub- mittals, the result of this sharp departure from the long- standing meaning of this term would be a largely unexamined and perhaps unintended expansion of the scope of the above docu- ments. The Utility Group believes it is vital that the Commis- sion be aware of this development so that steps can be taken to ensure that if any changes to regulatory requirements and guid- ance are made, they are made only in a manner consistent with legal requirements and after a thorough consideration of their consequences and ramifications. This process should include consideration by the Committee to Review Generic Requirements.
Contrary to all this, the Utility Group understands that a ge- neric letter will soon be sent by the Director of the Office of
HUNTON & WILLIAMS
August 26, 1983 Page 3 Nuclear Reactor Regulation, requesting all licensees and applicants to describe their current treatment of structures, systems and components "important to safety." Such a letter incorrectly assumes that "important to safety" is different from "safety related."
Since the introduction of these terms in the NRC's reg- ulations, nuclear plants have been designed and built by mem- bers of the nuclear industry, including the members of this Utility Group and their contractors, using the terms "safety related" and "important to safety" interchangeably.j/ The terms "safety related" and "important to safety" are used in the Commission's regulations.j/ Plants designed using this
2/ A functional definition of these structures, systems and components "important to safety" or "safety related" is found in Part 100, Appendix A. They are those structures, systems and components relied upon, in the event of a safe shutdown earthquake, to fulfill the three basic "safety functions" of assuring (1) the integrity of the reactor coolant pressure boundary, (2) the capability to shut down the reactor and main- tain safe shutdown and (3) the capability to prevent or miti- gate the consequences of accidents which could result in offsite exposure comparable to Part 100 exposure guidelines.
10 CER Part 100, Appendix A, ¶¶ I, III(c).
A/ To a lesser extent, the non-regulatory term "safety grade"
is part of this issue. Safety grade is commonly regarded as being synonymous with "safety related" and "important to safe- ty." %
HUNTON & WILLIAMS
August 26, 1983 Page 4 classification scheme were licensed by the NRC and, indeed, the NRC has recognized the equivalency of safety related and impor- tant to safety in many documents./
The issue addressed by this letter is similar to, but distinct from, that faced in the TMI-1 restart proceeding.
There, the Union of Concerned Scientists, an intervenor, argued that certain components of TMI-1, previously classified as non-safety related, should be upgraded in their design criteria to "safety grade" status. The arguments in that case, highly fact-specific, were limited to the actual components at issue, were couched in terms of the non-regulatory term "safety grade," and applied only to design requirements (as contrasted with, e.g., QA requirements). Thus the decisions of the Li- censing Board (LBP-81-59, 14 NRC 1211 (1981)) and the Appeal Board (ALAB-729, May 26, 1983) in TMI-1, are not susceptible, upon close reading, of broader application to the "safety re- lated"/"important to safety" issue addressed by this letter.5/
i/ See Attachment B to this letter for examples of instances in which the NRC Staff has used these terms interchangeably.
2/ The Appeal Board in the TMI decision, while upholding the Staff's distinction between the terms "safety grade" and "im- portant to safety," found the Staff's explanations "confusing and its attempt to define [those terms] somewhat belated."
ALAB-729 at 137 (slip op.) n.288.
ItUNTON & WILLIAMS
August 26, 1983 Page 5 Unfortunately, these decisions are being improperly cited with- in the Commission, in contexts different from TMI-1, to imply an enforceable regulatory distinction between the terms "safety related" and "important to safety." Also, because the focus of the hearing in TMI-1 was so narrow, the record did not consider the broader implications of an expanded definition of "impor- tant to safety,' nor did the record include facts establishing the long-standing industry and NRC practice of equating 'impor- tant to safety" and "safety related."
The present issue was framed by a November 20, 1981 memorandum from NRR Director Harold Denton to all NRR person- nel, following the close of the TMI-1 record. This memorandum, which has never been circulated for public comment, argues that the category 'important to safety" is broader than "safety re- lated" (or "safety grade"). Significantly, the memorandum also disclaims any intent to alter existing regulatory requirements.
Despite the disclaimer, revision of the definition of "impor- tant to safety" to make it a broader category than "safety re- lated" could have far-reaching, pervasive consequences for the licensing and general regulation of these plants. The Denton definition of "important to safety" is plainly inconsistent
HUNTON & WILLIAMS
August 5, 1983 Page 6 with at least a decade of industry and regulatory usage, in relianc on which dozens of plants have been designed, ordered, and bui t.
In addition, a number of recent events have taken place on the njustified assumption that the Denton distinction be- tween " afety related" and "important to safety" is correct.
They in:lude, for example, the Staff's advocacy of the new, ex- panded meaning of the terms "safety related" and "important to safety" in various licensing proceedings; proposal and promul- gation Of rules purporting to distinguish between "safety re- lated" nd "important to safety" equipment {e.g., ATWS, Envi- ronmentil Qualification); commissioning of various contractor studies and issuance of various Staff documents premised on a distinction between the terms (eg., EG&G Draft Report on grad- ed QA). These are described in more detail in Attachment C to this le-:ter. At the same time, numerous Staff documents, some more re ent than the Denton memorandum, read fairly, presume the cor inued vitality of the view that the terms "safety re- lated" nd "important to safety" are synonymous. Examples of these t ages are also described in Attachment B. Against this backgrc nd, the apparently impending issuance of a generic NRR
HUNTON & WILLIAMS
August 26, 1983 Page 7 letter requesting utilities to account for treatment of items
"important to safety" can only exacerbate existing confusion.
The impetus for the NRC Staff's efforts to expand the definition of "important to safety" seems to be a desire to ex- pand some measure of design and quality regulation beyond the traditional scope of the NRC's regulatory authority. Whether such a desire is justified is not the direct focus of our let- ter. This Utility Group believes that a Staff redefinition of a basic regulatory term such as "important to safety" in an in- ternal memorandum is not the appropriate means to accomplish this goal. It is also important to note that while variations exist in the details of practice, industry as a whole has gen- erally applied design and quality standards to non-safety re- lated structures, systems and components in a manner commensu- rate with the functions of such items in the overall operation of the plant. Moreover, we understand that numerous industry and professional groups, including AIF and ANS, are currently addressing the issue of quality assurance and quality standards for the non-safety related set of structures, systems and com- ponents. This Group and other groups plan to work closely with the NRC Staff to address the issue in a thoroughly and carefully considered manner.
HUNTON & WILLIAMS
August 26, 1983 Page 8 In light of all this, the Utility Group urges you and the Office of Nuclear Reactor Regulation to delay indefinitely the issuance of the proposed NRR generic letter and to pursue instead a course of action on this issue which includes a con- sideration of the views and experience of industry on the ques- tion and the consequences of additional regulation before for- mally articulating any new definitions. In this way NRR can learn in more detail whether such definitions will, in fact, impose new requirements rather than merely clarify existing ones. Also, unforeseen and unintended consequences in these and other areas of the regulations can be avoided and an ade- quate cost-benefit assessment can be made if the views of af- fected parties are obtained and considered in an orderly fashion. Should the Staff decide nonetheless to issue the ge- neric letter, we request that this letter on behalf of the Utility Group and the attachments be enclosed with the generic letter and with any Board notifications that may be issued on the subject.
The number of ongoing activities potentially affected by the definition of "important to safety" and the informal na- ture of the Denton Memorandum make it difficult to determine
HUNTON & WILLIAMS
August 26, 1983 Page 9 the appropriate procedural avenue to be pursued. The differences in approaches reflected in Attachments B and C to this letter may be the result of misinterpretation or misunder- standing that the Staff may be able to correct, as suggested above. On the other hand, if efforts to resolve this matter on the Staff level fail, the most constructive way of advancing and clarifying thought on this important subject may be a rulemaking proceeding. We would appreciate your prompt re- sponse so the Group can take the appropriate action.
Sincerely yours, T. S. Ellis,.! III Do 1 .
Donald P. Liwin ,
Anthony F. Earley, Jr.
Counsel for Utility Safety Classification Group
HUNTON & WILLIAMS
August 26, 1983 Page 10
CC: Mr. Harold R. Denton Mr. Richard C. DeYoung Mr. Robert B. Minogue Mr. John G. Davis Guy E. Cunningham, III, Esq.
Mr. Victor Stello, Jr.
Mr. Richard E. Vollmer Mr. Darrell G. Eisenhut Mr. Themis P. Speis Mr. Roger J. Mattson Mr. Hugh L. Thompson
ATTACHMENT A
MEMBERS OF THE
UTILITY SAFETY CLASSIFICATION GROUP
Arkansas Power & Light Co.
(representing also Mississippi Power &
Light and Louisiana Power & Light)
Baltimore Gas & Electric Co.
Cincinnati Gas & Electric Co.
Commonwealth Edison Co.
Consumers Power Co.
Detroit Edison Co.
Florida Power Corp.
Florida Power & Light Co.
Illinois Power Co.
Long Island Lighting Co.
Niagara Mohawk Power Corp.
Northeast Utilities Northern States Power Pacific Gas & Electric Co.
Pennsylvania Power & Light Co.
Public Service Company of Indiana Public Service Company of New Hampshire (representing also the Yankee Atomic Electric Power Company)
Public Service Electric & Gas Co.
Rochester Gas & Electric Co.
Southern California Edison Co.
Sacramento Municipal Utility District SNUPPS
(representing Union Electric Co., Kansas Gas &
Electric Co., Kansas City Power & Light Co.,
and Kansas Electric Power Coop., Inc.)
Toledo Edison Co.
Wisconsin Electric Power Co.
ATTACHMENT B
Examples of the Equivalent Usage of
"Important to Safety" and "Safety Related"
I. Introduction Since the inception of its use, the term "important to safety" has been consistently used synonymously with the term
"safety related." The nuclear industry designed and built many
-nuclear power plants based on the equivalency of these terms, and the NRC, in turn, reviewed and licensed these plants on the same basis. This practice of equating "important to safety"
and "safety related" has a sound basis in the NRC's regulations.
and has been reflected in numerous NRC guidance documents. The purpose of this attachment is to describe examples of NRC
regulations, regulatory guides, NUREGs and other guidance documents in which the terms "important to safety" and "safety related" have been used inma way that evidences an intent to equate those terms. This list is not intended to be comprehensive; rather it includes only representative examples of the synonymous usage of these two regulatory terms.
-2- II. NRC Regulations A. Part 50, Appendix A
As proposed in 1967, Part 50's Appendix A did not use the term "important to safety." See 32 Fed. Reg. 10,213
(1967). In the version adopted in 1971, however, the term appeared in a number of places. The Federal Register notice adopting Appendix A discussed the substantive changes between the proposed and final rules. Significantly, this discussion of substantive changes did not mention the addition of the term
"important to safety." This strongly suggests that the drafters did not consider that the change in terminology made any difference in scope or substance. See 36 Fed. Reg. 3256
(1971). A comparison of the proposed and final rule reveals that "important to safety" was merely substituted for a number of similar terms referring to features that are now known as
"safety related."
The principal instance of this exchange of equivalent terms was the substitution of "structures, systems and components important to safety" for "engineered safety features." "Engineered safety features," as defined in Criterion 37 of the proposed Appendix A, are those provided to assure the safety provided by the core design, the reactor coolant pressure boundary and their protective systems. At a minimum, "engineered safety features" are designed to cope with all reactor coolant pressure boundary breaks up to and
-3- including the circumferential rupture of any pipe in that boundary, assuming unobstructed discharge from both its ends.
See 32 Fed. Reg. 10,216-17 (1967). In other words, "engineered safety feature" in the proposed Appendix A is essentially similar to the current terminology of 10 CFR Part 100,
particularly §§ 100.2(b) and 100.10(a) and (d), and it clearly falls within the ambit of "safety related" as that term is defined in Appendix A to Part 100.
Other examples exist of this substitution of "important to safety" for "engineered safety features." Proposed GDC 3, which now applies to structures, systems and components
"important to safety," specifically referred in an earlier version to "critical" parts of the facility such as the containment and control room as "engineered safety features."
See 32 Fed. Reg. 10,215. And GDC 4, which also now applies to structures, systems and components "important to safety,"
evolved from proposed versions of GDCs 40 and 42, which dealt with "engineered safety features." See 32 Fed. Reg. 10,217
(1967). By the same token, the current GDC 20 requires, in part, that protection systems be designed to sense accident conditions and to initiate the operation of systems and components "important to safety." This portion of GDC 20
evolved from an earlier, proposed version of GDC 15, which required protection systems to sense accident situations and to initiate the operation of necessary "engineered safety features." See 32 Fed. Reg. 10,216 (1967). Here again, there
-4- is an unmistakable equation of "important to safety" with
"engineered safety features," a term that refers to safety related features.
The current GDC 44 requires a cooling water system to transfer heat from structures; systems and components
"important to safety" to an ultimate heat sink. The cooling water system requirements in GDC 44 evolved from proposed GDCs
37, 38 and 39, which established the design basis of
"engineered safety features" and stated the requirements for them. See 36 Fed. Reg. 10,216-17 (1967). Thus, the cooling water system referred to in GDC 44 is, in reality, the safety related engineered safety feature necessary to support other engineered safety features previously discussed in the proposed Appendix A.
Yet another example is provided by existing GDC 16 which requires a reactor containment and associated systems to assure that containment design conditions "important to safety"
not be exceeded during postulated accident conditions.. This GDC evolved from GDC 10 of the proposed Appendix A, which required the containment structure to sustain the initial effects of gross equipment failures, such as a large coolant boundary break, without loss of required integrity and, together with other "engineered safety features," to retain for as long as necessary the capability to protect the public. See
32 Fed. Reg. 10,215 (1967). In other words, the containment design conditions in the proposed GDC dealt with loss of
-5- coolant accidents. Structures, systems and components needed to deal with a LOCA are, of course, safety related.
A final example of the substitution of terms "important to safety" for "engineered safety features" involves the current version of GDC 17. It. requires offsite and onsite electric power systems for structures, systems and components
"important to safety." This GDC evolved from proposed GDCs 24 and 39, which required emergency power sources for protection systems and "engineered safety features." See 32 Fed. Reg.
10,216-17 (1967).
In addition to substituting items "important to safety"
for "engineered safety features," the final version of Appendix A also used the term "important to safety" in place of other phrases that fall within the safety related set. GDCs 1 and 2 establish requirements for structures, systems and components important to safety. These criteria evolved from proposed GDCs
1 and 5, and 2, respectively. Proposed GDCs 1 and 2 applied to systems and components "essential to the prevention of accidents that could affect the public health and safety or to the mitigation of their consequences." This language is similar to that in 10 CFR Part 50, Appendix B, which means safety related. Proposed GDC 5 applied to records for essential" components.
Thus, this regulatory history of 10 CFR Part 50,
Appendix A, demonstrates that "important to safety" was inserted into Appendix A in lieu of a number of these terms to
-6- describe what are now known as "safety related" structures, systems and components, that the drafters believed there was no significant difference between "important to safety" and the terms used in the proposed version of the rule, and that the structures, systems and components referred to in Appendix A,
regardless of what they are called, perform those functions now regarded as the safety related functions. Consequently, it is proper to conclude, and industry justifiably did conclude, that
"important to safety" and "safety related" were equivalent terms.
B. Part 50, Appendix B
Both the NRC Staff and industry agree that Appendix B
applies only to safety related structures, systems and components. This conclusion follows from the proposed and final versions of Appendix B which apply, by their terms, to activities affecting the 'safety related" functions of structures, systems and components that prevent or mitigate the consequences of an accident4/ 34 Fed. Reg. 6600 (1969); 35 Fed. Reg. 10,499 (1970). Thus, unless a structure, system or component has a safety related function, Appendix B does not apply to it. Appendix B also states that it applies to
"structures, systems and components that prevent or mitigate i 'The prevention and mitigation of the consequences of postulated accidents, of course, are among the safety related functions of 10 CER Part 100, Appendix A.
-7- the consequences of postulated accidents that could cause undue risk.to the health and safety of the public.." 10 CFR Part 50,
Appendix B, Introduction. This definition of the scope of Appendix B is essentially identical to the definition of
"important to safety" found in the Introduction to Appendix A.
Other evidence of the equality of "safety related" and
'important to safety" is also found in the proposed Appendix B
rulemaking. The notice of.proposed rulemaking stated that its quality assurance criteria would supplement GDC 1 of proposed Appendix A, previously noticed in the Federal Register in 1967.
34 Fed. Reg. 6600 (1969). It appears from this statement that Appendix B was meant to specify, in detail, what the general provisions of GDC 1 meant. This interpretation is supported by the fact that Appendix B was intended to "assist applicants (1)
to comply with Section 50.34(a)(7) . . . .. Section
50.34(a)(7) states that Appendix B "sets forth the requirements for quality assurance programs" (emphasis added), and presumably "the requirements for quality assurance programs"
include those of GDC 1. Thus, a reading of the regulatory history implies that Appendix B is a more detailed specification of the requirements contained in GDC 1, thereby equating "important to safety" with "safety related."
C. Part 100, Appendix A
The interchangeability of the terms "safety related"
and "important to safety" is vividly illustrated by a review of
-8- the regulatory history of 10 CFR Part 100, Appendix A, which was proposed on November 25, 1971. 36 Fed. Reg. 22,601. The proposed rule included a number of passages that make absolutely clear (1) the category "important to safety" in 1971 meant "safety related" and (2) the terms are to be used interchangeably. For example, in defining the "Safe Shutdown Earthquake," the proposed rule stated:
(c) The "Safe Shutdown Earthquake" is that earthquake which produces the vibratory ground motion for which structures, systems and components important to safety are designed to remain functional.
These structures, systems and components are those necessary to assure:
(1) The integrity of the reactor coolant pressure boundary,
(2) The capability to shut down the reactor and maintain it in a safe shutdown condition, or
(3) The capability to prevent or mitigate the consequences of accidents which could result in potential offsite exposures comparable to the guideline exposures of 10 CFR Part 100.
36 Fed. Reg. 22,602 (1971) (emphasis added); see also id. at
22,604. This definition of the "safety related" functions is the same as that in the final (and current) version of the rule, which is recognized as providing the basic definition of the "safety related" functions. See 38 Fed. Reg. 31,281
(1973); 10 CFR Part 100, Appendix A, III(c).
Although the reference in paragraph (c) of the proposed rule to "structures, systems and components important to
-9- safety" was changed in the final version to refer to "certain structures, systems and components," there was no indication in the Commission's discussion of changes between the proposed and final rules to indicate that this substitution represented a change in scope. See 38 Fed. Reg. 31,279 (1973). In fact, the final rule added a reference in its purpose section to GDC 2, which applies to structures, systems and components "important to safety," thereby once again equating "safety related" and
"important to safety."
In addition to defining "important to safety" in terms of the "safety related" definition, the proposed version of 10 CFR Part 100, Appendix A, used the terms "safety related" and
"important to safety" interchangeably. Section VI(a) of the proposed rule reiterated the definition of structures, systems and components important to safety quoted above and went on to say "[i]n addition to seismic loads, . . . loads shall be taken into account in the design of these safety related structures, systems and components." 36 Fed. Reg. 22,604 (1971) (emphasis added). Several other references to "these safety related structures, systems and components" appeared within the paragraph dealing with equipment "important to safety." Id.
Thus, the language in the proposed version of Part 100,
Appendix A, made it abundantly clear that the terms "important to safety" and "safety related" were interchangeable and equivalent.
-10-
D. 10 CER, Part 72 Part 72 of 10 CFR, adopted in November 1980, provides another example of the equation of "important to safety" and
"safety related." This regulation states, in part, that applications for a license for an Independent Spent Fuel Storage Installation (ISESI) shall describe the quality assurance program for the ISFSI: "The description of the quality assurance program shall identify structures, systems, and components important to safety and shall show how the criteria in Appendix B to Part 50 of this chapter will be applied to those safety related components, systems and structures in a manner consistent with their importance to safety." 10 CFR § 72.15(a)(14) (emphasis added). Although not directly related to nuclear power plants, the language of this NRC regulation uses "important to safety" and "safety related"
interchangeably.
E. 10 CFR § 50.54 As recently as January 1983, the Commission's regulations have treated "important to safety" and "safety related" as equivalent. On January 10, 1983, the Commission amended 10 CER § 50.54 providing that "the NRC Staff conducts extensive reviews during the licensing process to ensure that the applicant's QA program description satisfies 10 CFR Part 50, Appendix B. Once the NRC has accepted it, the QA
-11- program description becomes a principal inspection and enforcement tool in ensuring that the permit holder or licensee is in compliance with all NRC quality assurance requirements for protecting the public health and safety." 48 Fed. Reg.
1826 (1983) (emphasis added). In other words, implementation of a quality assurance program satisfying Appendix B
constitutes compliance with all NRC quality assurance requirements, including, necessarily, GDC 1. Again, as noted above, Appendix B indisputably applies only to safety related structures, systems and components. Thus, this January 1983 regulation equates the scope of "safety related" in Appendix B
with "important to safety" in GDC 1.
F. 10 CER, Part 21 Part 21 of 10 CFR uses the term important to safety in a very limited way but even that limited use demonstrates the equivalence of the terms safety related and important to safety. Section 21.3(a)(3) notes that a "'basic component'
includes design, inspection, testing, or consulting services important to safety . . . ." In discussing this portion of the regulation, the supplementary information published in the Federal Register with the regulation states that Part 21 covers
"responsible officers of firms and organizations supplying safety related components, including safety related design, testing, inspection and consulting services." 42 Fed. Reg.
28,892 (1977). Thus, this description evidently assumes that
-12- the use of the term important to safety in conjunction with design, testing, inspection and consulting services in §
21.3(a)(3) is meant to be synonymous with safety related.
This interpretation is confirmed in NUREG-0302, Revision 1, which provides information concerning various aspects of 10 CFR Part 21. In explaining references to important to safety in Part 21,. the NUREG states in question and answer form:
§21.3 states -- In all cases "basic component" includes design, inspection, testing, or consulting services
"important to safety...". Clarify the meaning of this statement.
Response:
The broad scope of Section 206 activities of construction, operation, owning and supplying in themselves include activities such as design, consultation or inspection that are important to safety and are associated with component hardware . . . . An organization may accomplish all of these activities in-house or may choose to authorize others to do some of the safety-related activities; e.g.,
consultation, design, inspection or tests, for it. When such contractual arrangements are made for safety-related services the organization accomplishing the service is within the scope of Part 21.
NUREG-0302, Rev. 1, at 21.3(a)-5 (emphasis added). In addition, the NUREG expressly states that it applies only to safety related structures, systems and components:
-13- Does Part 21 apply to only "safety related" items?
Response:
Yes. Part 21 applies to any defects and noncompliance which could create a substantial safety hazard in activities that are within the regulatory authority of the Nuclear Regulatory Commission; therefore only those items which are "safety related" are within the scope of Part 21.
NUREG-0302, Rev. 1, at 21.3(a)-i to -2. Thus, this NUREG
confirms that in Part 21 "important to safety" and "safety related" are equivalent. Importantly, it also confirms that, in general, the NRC's regulatory authority is limited to safety related items. This is consistent with the long-standing industry and NRC interpretation that important to safety means safety related wherever the term appears in the NRC's regulations.
III. Regulatory Guides A. Regulatory Guide 1.105 Regulatory Guide 1.105, "Instrument Setpoints"
(Revision 1, November 1976), provides an unmistakably clear indication that the NRC Staff considered important to safety and safety related to be equivalent. In this regulatory guide, systems important to safety" are defined as:
those systems that are necessary to ensure
(1) the integrity of the reactor coolant pressure boundary, (2) the capability to shut down the reactor and maintain it in a safe condition, or (3) the capability to prevent
-14- or mitigate the consequences of accidents that could result in potential offsite exposures comparable to the guideline exposures of 10 CFR Part 100, "Reactor Site Criteria."
Regulatory Guide 1.105, Rev. 1, at 1.105-2. Of course, this is precisely the definition of safety related structures, systems and components that appears in Appendix A to Part 100. Indeed, it is the definition of safety related that was endorsed by Mr.
Denton in his November, 1981, memorandum on the subject of safety classification.
A proposed Revision 2 to Regulatory Guide 1.105, which was issued for comment in December, 1981, reiterates the NRC's intention to equate safety related and important to safety.
This revision to the regulatory guide would endorse a document prepared by the Nuclear Power Plant Standards Committee of the Instrument Society of America (ISA) subject to several clarifications. One of the clarifications states:
The term "safety-related instruments" is used throughout the ISA Standard. This term shall be understood to mean "instruments in systems important to safety." The term "systems important to safety" is defined in the Introduction of Appendix A to 10 CFR Part 50
as " . . . systems . . . that provide reasonable assurance that the facility can be operated without undue risk to the health and safety of the public."
Proposed Revision 2 to Regulatory Guide 1.105, at 2. Once again, the language of this regulatory guide expressly equates safety related with important to safety.
-15- Regulatory Guide 1.118 Regulatory Guide 1.118, "Periodic Testing of Electric Power and Protection Systems" (Revision 2, June 1978), also explicitly equates important to safety and safety related.
This regulatory guide adopts the definition of important to safety set out in Regulatory Guide 1.105, Revision 1,. which, as noted above, makes it clear that the terms are equivalent.
Regulatory Guide 1.106 Regulatory Guide 1.106, "Thermal Overload Protection for Electric Motors on Motor-Operated Valves" (Revision 1, March 1977), describes a fmethod acceptable to the NRC Staff for complying with certain regulatory requirements, including GDCs
1 and 4, with regard to the application of thermal overload devices for electric motors on motor operated valves. Both GDCs 1 and 4 apply to structures, system and components
"important to safety." This regulatory guide, however, deals explicitly and exclusively with safety related motor operated valves to "ensure that the thermal overload protection devices will not needlessly prevent the motor from performing its safety related function." Thus, the clear implication of this regulatory guide is that components important to safety under GDCs 1 and 4 are those components (in this case motor operated valves) which have been classified as safety related.
-16- Regulatory Guide 1.151 Regulatory Guide 1.151, "Instrument Sensing Lines"
(July 1983), states in the introduction of the regulatory guide:
Section 50.34, "Contents of Applications;
Technical Information," of 10 CFR Part 50
. requires, in part, that design criteria be established for structures, systems and components important to safety that will provide reasonable assurance that the facility can be operated without undue risk to the health and safety of the public.
Criterion 1 . . . requires, in part, that structures, systems, and components be erected (installed) to quality standards commensurate with the importance of the safety functions to be performed.
Regulatory Guide 1.151, at 1. After stating the pertinent regulatory requirements, the regulatory guide describes
"a method acceptable to the NRC staff for complying with the Commission's regulations with regard to the design and installation of safety-related instrument sensing lines in nuclear power plants."
Id. (emphasis added). Here again, therefore, the NRC has explicitly equated the terms. Significantly, the regulatory guide also addresses only two classes of instrument sensing lines: "safety related" and "non-safety related."
Consequently, the clear implication of this regulatory guide is that only two classifications of equipment are used in the design of nuclear power plants and that by meeting certain standards for safety related equipment, regulations which deal with equipment important to safety are also met. This latter
-17- point implies the equivalence of important to safety and safety related equipment.
IV. NUREGs A. Safety Evaluation Reports Safety Evaluation Reports for plants that have applied for construction permits or operating licenses are published as NUREG documents. In these NUREGs, the Staff routinely includes a number of statements equating safety related and important to safety. Rather than focusing on specific plants and specific SERs, this section quotes from various SERs which are typical of SERs published by the Staff.
In discussing General Design Criterion 2 involving seismic design requirements, the Staff typically states in SERs that this GDC
requires that nuclear power plant structures, systems and components important to safety be designed to withstand the effects of earthquakes without loss of capability to perform their safety function. These plant features are those necessary to assure (1)
the integrity of the reactor coolant pressure boundary, (2) the capability to shutdown the reactor and maintain it in a safe shutdown condition, or (3) capability to prevent or mitigate the consequences of accidents which could result in the potential offsite exposures comparable to 10 CFR 100 guideline exposures.
Of course, the plant features defined above are those covered in Appendix A of Part 100, which are the safety related set of structures, systems and components. Moreover, if appropriate,
-18- the NRC Staff will conclude that a plant has been designed in compliance with Criterion 2 because classification of structures, systems and components conforms with guidance contained in Regulatory Guide 1.29, "Seismic Design Classification." This regulatory guide. is recognized by industry and NRC as dealing with safety related structures, systems and components.
Another example from an SER deals with turbine missiles. One SER notes that "General Design Criterion 4 requires that a nuclear power plant be designed against internally and externally generated missiles to assure no loss of function or damage to safety-related equipment essential for a safe plant shutdown." General Design Criterion 4, of course, applies to "structures, systems, and components important to safety . . . . Consequently, this NRC statement in a SER must be interpreted as explicit recognition of the equality of these two terms. Other SERs invite the same conclusion by discussing only the protection given to safety related structures when assessing whether the plant is protected from turbine missiles as required by GDC 4.
B. NUREG-0302, Revision 1 NUREG-0302, Revision 1, which deals with 10 CFR Part 21, is discussed in Section II.F above.
-19- C. NUREG-0968 NUREG-0968 is the Safety Evaluation Report for the Clinch River Breeder Reactor (CRBR). In discussing seismic design requirements for CRBR, the Staff states:
CRBR Principal Design Criterion (PDC)
2, in part, requires that structures, systems, and components important to safety be designed to withstand the effects of earthquakes without loss of capability to perform their safety functions. The earthquake for which these plant features will be designed is defined as the safe shutdown earthquake (SSE) in 10 CFR 100,
Appendix A. The SSE is based upon an evaluation of the maximum earthquake potential and is that earthquake which produces the maximum vibratory ground motion for which structures, systems, and components important to safety are designed to remain functional.
NUREG-0968, at 3-34 (emphasis added). As already noted, the set of features designed to remain functional in the event of the safe shutdown earthquake are the safety related set of structures, systems and components, as defined in 10 CER Part
100, Appendix A.
V. Other NRC Licensing Documents A. I&E Information Notice 83-41 (June 22, 1983)
This I&E Information Notice is entitled "Actuation of Fire Suppression System Causing Inoperability of Safety-Related Equipment" (emphasis added). The stated purpose of this notice is to "alert licensees to some recent experiences in which
-20-
actuation of fire suppression systems caused damage to or inoperability.of systems important to safety" (emphasis added.). Thus, as recently as June of this year, official NRC
documents have used the terms important to safety and safety related interchangeably.
VI. Miscellaneous Industry Documents A. Institute of Electrical and Electronics Engineers (IEEE)
A number of industry groups have become aware of the inconsistent use of the term important to safety in some recent NRC documents, including the Denton memorandum. In response to these developments, the Nuclear Power Engineering Committee of IEEE wrote a letter to Mr. Robert B. Minogue, Director of the Office of Nuclear Regulatory Research, in May, 1982, making it clear that expansion of the scope of important to safety is contrary to the long-standing interpretation of NRC-regulations by both nuclear industry and the NRC Staff. The letter states that
[O]ver the years, the terminology of the General Design Criteria of Appendix A of 10
CFR Part 50 has been understood through common usage to equate systems important to safety to safety related or safety systems.
Repeated references within the General Design Criteria to preservation of the safety function being performed by "structures, systems, and components important to safety"
enforces this equivalence of terms.
Letter from R.E. Allen to Robert B. Minogue, dated May 10, 1982
-21- (attached), at 2. This letter also indicated that the Nuclear Power Engineering Committee of IEEE opposed the expansion of the term important to safety.
B. American National Standards Institute The Nuclear Standards Board (of the American National Standards Institute) Ad Hoc Committee on "Important to Safety"
has made a recommendation to the full Nuclear Standards Board of ANSI which is pertinent to the definition of important to safety. The Ad Hoc Committee's recommendation follows:
The current practice utilizing two major classifications, safety related and nonsafety related, for design,
- construction, testing and operation of nuclear power plants is acceptable and appropriate. This has occurred with a general understanding and usage that the terms "Important to Safety" and
"Safety Related" are equivalent in meaning. The current practice has recognized that within the nonsafety related set, there are varying degrees of importance to safe and reliable operation. For many or most items of this nature, standards have been promulgated to guide design, construction, testing and operation.
Even so, the NRC may determine there is a need, for licensing purposes, to identify a category of items, although nonsafety related, [that] are of more importance to the safe and reliable operation of the plant than other nonsafety related items. If so, the term "Important to Safety" should not be used to designate this set of items because of the past history of equivalence to the term "Safety Related". To apply the term,
"Important to Safety" across the body of regulations to a new set of items
-22- would cause the term to become unclear as to the meaning of all current regulation and licensing commitments that stem therefrom.
If this set of items is defined, it should be on a functional basis (e.g.,
ANS-51.1 and ANS-52.1). Requirements in existing standards for such functions, that are unique to specific functions, should be used.
Letter from Walter E. D'Ardenne to George L. Wessman, dated March 30, 1983 (attached) (emphasis added). This recommendation gives yet another unmistakable .indication that the nuclear industry has equated the terms important to safety and safety related.
(
as AMERICAN NUCLEAR S.OCIETY
STANDARDS COMMITTEE
on i, LbGMaP £mdsm At us Par-t.
Jtcia USA
Tmuisu JIZ/3324lii SW= sw3n2 March 30, 1983 George L.Wessman
"
Chairman ANSI Nuclear Standards Torrey Pines Technology Board P. 0. Box 81608 San Diego, CA 92138 Dear George:
The Nuclear Standards Board Ad hoc Safety" met on Tuesday 3/29/83 Committee on uImportant to at City. The objective of the meeting ANSI Headquarters in New York, approach on important to Safety" was to recommend to NSB an organizations could follow. that all standards writing
- That attached and represents unanimous recommended approach is the Ad hoc Committee Meeting. agreement of those attending attendees at the meeting. Also attached is the list of Sincerely, Walter H. D'Ardenne, Chairman Ad hoc Committee on Important to Safety WHD:pab:cal/J03304 Attachment cc: G. F. Dawe, Jr.
D. A. Campbell E. F. Dowling J. Ling J. Miliman B. M. Rice R. E. Allen J. F. Cooper R. A. Szalay C. T. Zegers
AD HOC COMMITTEE ON IMPORTANT TO SAFETY
RECOMMENDATION
The current practice utilizing two and nonsafety related for design, major classifications, safety related nuclear power plants Is acceptable construction, testing and operation of and appropriate. This has occurred with a general understanding and usage Safety" and 'Safety Related' are equivalentthat the terms "Important to practice has recognized that within in meaning. The current varying degrees of importance to the nonsafety related set, there are safe or most items of this nature, standards and reliable operation. For many design, construction, testing and have been promulgated to guide operation.
Even so, the NRC may determine there to identify a category of items, althoughts a need, for licensing purposes, importance to the safe and reliable nonsafety related, are of more
- nonsafety related items. If so, operation of the plant than other not be used to designate this set the term uImportant to Safetyu should of items because of the past history equivalence to the term "Safety Related". of to Safety" across the body of regulations To apply the term, .Important cause the term to become unclear to a new set of items would and licensing commitments that stemas to the meaning of all current regulation therefrom.
If this set of items is defined, it should be on a functional basis (e.g., ANS-51.1 and ANS-52. ). Requirements such functions, that are unique to in existing standards for specific functions, should be used.
WHO: Dab: ca /lmn;- 1
4 a
(
)
ATTENDANCE LIST
NAME ORGANIZATION
Walter H. D'Ardenne ANS
George F. Dawe, Jr.
Stone & Webster Engineering Corp.
Donald A. Campbell ANS-
Edward F. Dowling IEEE
June Ling ASHE
John Nillan ASKE
Bill M. Rice IEEE
George L. Wessman ANSI
WHO: pab/J03.305-2
11MA!0.2
p
0 .
1-0_1 1
. gtsceaoMc mom BE rnnm U USJMIR3S*. UCLIAS 1POVIlt SUc0IN3Siu eCOMMITTI
thakid 1- bbml. & &o IL anl C4 Am" CNWO-
S.LM.m P.D. gm. USIU P.O. aft gm"
Ckwkt. mCNMi ;um Oem.. CA WM . 013 ut,," 6_1IL Sa Oka. *"m ~ _._ MOIA *.7.
P1?4)419IS1 PMI.1iP& 9*
GIM4 34ZWOU
on T
J0C-15 LtSh W-1. GaftWa Pleas t~
RiC Wl Mi.
W*
._S.agav W.. Robert 5. K
Offiva *f ,*u DaiRlatory Rsarrb ZkW *w z A- -N U.S. lcu a,
- .Stumwal'
l.O. aft ftar Mr. U :
- a. uaftgi,8&q15
&-jft: Tase of eh. Tok Uj=ft rt;t tos fete
4t put WV"
2 1) ftoposed ftwiuum I rz FASMUaxcy
'Guie 1.89w ftVirMeta1 Qualui..
Cation at E1etric Equipment for g Power nants, FebcL=*a IL
5C.4, ^"Jr.W Pm~
0.*. ;t* 2) Proapoutd 5dv1so 2 t toelawry Cua..qea Esi~c. MIUsilf Co. a~de 1.105. XTatVrt etpolatm 1 Decir, 1961.
k.C~.
P 4a u9 m ti
3) Draft Reglevtoty Ceie (Task tV 26-5),
Instr=a= ImnSi line, Kareho 132.
C4vmtm mc
4 r fan U ld L Deatm to
- SN Cmatdowtamj&ta*
All N Ferueel. Standard Defirtid fm CGzm=1y-Tad Safety Classifttirn eCvii Ptsaw Term., November 10, 18.
- P.D. Iliasalq
- Q:1i
) , tPpe we (4?FR=U,
o es*a9o 1/20182) 1vfcaenta1 alulifleat~m SCt':.. ".*Mt& 1-*ftigh & ComaeP raCiW. of Electric Equtpumt for Nucear Lkam Lk*
W&UM3E.t,%* *%#&;C, Cg'.agAWAO tfer Plants.
Pla ;w e.'U?59a-w"i.
PFEg 1I A wmdber of %went JEC doctmats kaft used the tam SOMAMI *, pa to safety' to destribia the scope of etes and Vipmut to vbich the dctattt spplhs. fttable exsxples me the proposea Revision I of Regatory Gldde
1.*8 ( terence 1)* the prposed Revislot 2 of lxeulaatry Caide 1.105 (Referene 2), and tke drat lte5datary Calde SC4. S A& On Instruaent s5ssig Unes (T"k IC t1265) (Refere 3.
I. v. wafts cS. Yem low.
VA'. 'Ibert S. lmiaage. biractot 4-~ way lot 196 u.S.. VW-le=a bgulatoty comisrLon 612-C'O15 Amforeste IA made to 10Cfl Part SO t the ao'wce of the termInalogy.
- *O-Gr the years:* the tenmiuo"oyf the&GAenerd Souin Crdtarla of
- Appsudlz A of tOCMl Part SO bea bena eaderstood through c~oam usaile to
.eqivta systess laportant to wlfety to safety-'kmlated cm wafaty -systems.
'The rqapaaco references witbin the Ckenral Destgn Criteria to proservation
-of the safety, function being perforwid by KstazIzs.*r sywte=. and onupocents *npzaut to safety" 1siuforce this k~iaec of tonas.
TMe current Mu Is~enti~n In teI MM8 Of the terM "AWOtAit to dafety0
appears to be to frcada~n Cheatpaoef ejuIpuenzaddressed to Incude sore than safety-related or safety syste=. In an linta~s1 NBC cmmraZAiM
(Weereeze 4) Macald Denton dcfened Ugafetyu-celatgdd an a ube of
'imapntimt to safmety Sroadeuing tht usage of tbe term "important -to Miafezy" cc 4icompaaix an undefined aet of as:yst, xinadAitfnn to safety- relAted or aafety systma, icraasev caufasion to the dislzgue on current
- 2~R= raquiremmme/lgotdance tad creates to wumwrkable situation. A clear uaderscaszin up of the prfecip1~.s for detemizing tihat Is included tad what Li not tu'e1ud4 to Wayntema Ispartaist tit ufetf 13 uoim'd. 1eir example.,
VAWu~azory Coutd* e.IO5, Tinstrumaes SttpulaLs, recs~e6 L'ehb the substitution sytm b ortaxt to safety" fo 'ul -aeyritd~ TLL
s*ubl)tlou of terms adds an unauzimm siater of systems to the set of
- sysanas required to omat the draft MSstandard.
The IMFI through a-Nuclear Power EngInertug Camaittee MNEC) working grouip an standardis projeet P827. Ix atroapring to develop a setbdo4logy for I
ass igning desIgn criteria based an a s.)'tem' u level of wLa~ocnce to safety.
Altbmmh considerable progress ha beei umade an tCe sibJect In the lost YeAT
- ~and a half,* the methodology bas mot bme developed to the -poin of WUin eastily understood and usable. Unfortumately, the ew~2exitY Of the subJect prevents the methodology, as currently d.'telopeA, -from lbeing Unifoimly interpretrM and applied by individual users. &ork Is continuing cm our- vowEing -this,deficiencys -so that application msy be e6nsistent fz= user t*
user and. enfarcaet. may be mtinfufrom f. aplicat ion to applcaticn. The difftIcuty in producing this acth~oologry underacor-es the seed for careful
- choice of ter-ainoloty so that a baste is established to Prou~t* bmun trnderstwndlag sAv~ not Co Introduce aildttlimul confusion.
Unitil the P821 ewthoilology hasu passed through che I=E review (consenLRUA)
process and the term "zst~z imortant to VafetY" has a c0M=lY understood Melivg it to recovendc that. the M~C refrain fron using this te= virttwut
£also includ~ing a clear definition of which systems are addressed. Thits ts exacrly wtat was done In the developumet df the Mub OR equfiP'met 'qualificatior
- (aoference 5). Alternztively, co=u3ul u7Ynderstood ter=,, such as safety-relate, and terms defitwd Ln voluntary standards, sisch as safety "ytfts.Should be
4=ployed. If it appears necessary to address systems beyond the scope of these torms, thou the-additianal. systems should be Clearly ideatfiled.
It 'is re==4nded that the term 'nuclear..safety-relacedJ" be retained In the proposad Revision 2 to gegulatory Culate 1.105 .nd the proposed Regulatory Gaide an Iastruzrent Sensing LUna (Task IC 126-4) and that rhe term "ImporrcAmt
-to safety" not be us*4 In these docmicatti.
-3- c. Preliminary versions of a final ATWS rule have contained supplementary information discussing the classification of ATWS related equipment. Some ATWS prevention and mitigation equipment will not be required to be "safety related,' but must be classified "important to safety."I/
Given the nuclear industry's and the NRC's synonymous use of these terms, the rule has the potential to create substantial confusion. Utilities do not have a separate classification category of important to safety, nor are there any NRC
specified standards to be applied to such a category (if that category is assumed to be different from the safety related category). As with the Environmental Qualification rule, this use of the term important to safety was not included in any of the proposed versions of the rule. Thus, the implications of changing the NRC's classification scheme have not been fully aired in the rulemaking.
d. In the still-pending Shoreham case, docket 50-322 (OL), the Staff supported the argument of intervenors on the systems classification terminology. Although the Staff supported the acceptability of the Shoreham design, the Staff position on terminology was used by the intervenors to call i/ See Enclosure A to SECY-83-293 dated July 19, 1983. A
table entitled "Guidance Regarding System and Equipment Specifications" indicates that certain equipment need not be safety related, but a footnote to the table states that "this equipment is in the broader class of structures, systems and components important to safety . . .
-4- into question over a decade of design of the Shoreham plant.
This licensing case triggered a Differing Professional Opinion (DPO) by James E. Conran, a Staff witness at both Shoreham and TMI-1. The issue of "important to safety" has been raised by intervenors in other cases, including Diablo Canyon, Byron and Seabrook.
e. Mr. Conran's DPO has recently been resolved (William T. Russell memorandum to Harold R. Denton, June 22,
1983; Harold R. Denton memorandum to Themis P. Speis, July 11,
1982) on a basis which includes proposals for a generic letter relative to the "important to safety" concept. Mr. Russell's memorandum twice stresses the presumption that use of the term
"important to safety" should impose no new regulatory requirements. Whether that is, or can be, true, depends on the content of the generic letter which presumably will be issued in the near future. If that letter endorses a definition of
"important to safety" that is inconsistent with its historical equivalency to "safety related," then, contrary to the resolution of the Conran DPO and the Denton Memorandum, there will be new regulatory requirements imposed on all nuclear power plants.
f. The expanded definition of important to safety also appears in generic letter 83-28, issued as a result of the Salem incident. According to section 2.2.1.6, licensees and applicants must provide the NRC Staff with certain information
- -5- regarding this category of equipment that is supposedly larger'
than the safety related set. As already noted, utilites do not have, nor do the NRC's regulations require, such an expanded category. Similarly, statements in NUREG-1000, which also relate to the Salem incident, incorrectly assume that important to safety is a broader category than safety related.
I
A S,.
-
&
r. t.
ftberr ogue, Drecwtor .4. may io, 1982 V.S. Nuclear Zsjulatory CwIistm ,.82.C015 It is ao reco.awmded that t le t laz+/-?1c equiment Imprmat to ufet" replaced by "Class It el actric equlvettt" L the second pra- graph of the introduction to the pi oposeA Revision I to aMSaUltory Guide 1.89.
As an alternatbrae to thse two reae oadtifes, it Ls recGUI-ded that the general tex2= e replaced wtth a eci£fie tabulation of the tyiteaat
- euipuelnt to uhich the reguatory guide is applkablo. P
4Wttr treatment should be =acoidd other 1UC regulatory decuwent
- a the future, or until tme PA2? aethoolav Trches cOvneRns= In the Vj~Clir -poer-commty.
Vy vruy s chairman. N7IC
ze: Paul 1. Shemmon Mtmnn, Advis ry Cotbitee an Reactor Saftguards
. . Warld SL Ukeu, Diretor
. Office of 2itdwar Reactor RegulaScloa
0
Edu-ard C. Venzinger, Chief Insru~entar5:on *d Control 'Branch Office of Iuclear Reactor Reoularton Letter Me
ATTACHMENT C
Numerous recent events have taken place on the unjustified assumption that the Staff/Denton distinction between "safety related' and "important to safety" is correct.
In light of the numerous examples cited in Attachment B,
however, these actions ignore the historical evaluation of the terms and the long-standing interpretation and application of the NRC's regulations:
a. The Commission approved a final rule on environ- mental qualification of electric components in January of this year. 48 Fed. Reg. 2729 (January 21, 1983). The rule, by its terms, is applicable to electric equipment "important to safety." That term includes safety related equipment performing the three safety functions defined in Part 100,
Appendix A. (10 CFR § 50.49(b)(1)). It also includes, however, nonsafety-related electric equipment whose failures under postulated environmental conditions could prevent satisfactory accomplishment of safety functions specificed in [Part 100, Appendix A] by the safety-related equipment.
10 CFR § 50.49(b)(2). The important but subtle addition of the term important to safety in defining the scope of the rule and the addition of §§ (b)(2) and (3) were made in the last draft of the regulations, after the close of the public comment
, I
-2- period. It is interesting to note that the scope of the rule could have been defined as electric equipment within the three categories listed in the rule ((b)(1), (b)(2) and (b)(3))
without calling that equipment important to safety. Thus, this last minute addition to the rule contravenes the historical use of the term important to safety without adding anything of substance to the rule. The principal result of its use in the environmental qualification context is that it creates substantial confusion about the meaning of the term.
b. The Staff commissioned the Idaho National Engineering Laboratory to undertake a study of potential
"graded QA" requirements reaching substantially beyond the scope of Part 50, Appendix B, and involving equipment important to safety. Identification and Ranking of Nuclear Power Plant Structures, Systems and Components, and Graded Quality Assurance Guidelines -- Draft (November, 1982) (EG&G-EA-6109).
This report received widespread criticism and has not been issued in final form. The widespread criticism reflects the difficulties utilities and the NRC Staff will encounter in trying to redefine the class of structures, systems and components important to safety, if that term is ultimately given a broader meaning than safety related. Significantly, the EG&G effort only addresses quality assurance requirements;
the difficulties will be multipled if any new classification scheme considers, as it must, the impact on plants for each of the many places in the regulations where the term appears.
I II
} AZ TOx & WILL IAS :
707 ass e.&-W SutCCT P. 0. Box 1"35 Gus.&w-ae...vCr w.
R'-CxNoxDVjiR0Xzi'LA 23212 P.' . 0SbC*9mS. e 0)
- @ as
- *- 53,6a
- *w~D*
TELCPO940" 50' 75*SI CO os8aa0eS
$?go.~~&0e~3t0
Ca-* ,.C
we.pa o@@tg.3
¢ens v*Csrn ,,C* *vc*.'wou
- . on abox D
- @t S*S S* Ce" *. d October 27, 1983 mr. Samuel J. Chilk Secretary -
U.S. Nuclear Regulatory Commission Washington, D.C. 20555 Attention: Chief, Docketing and Service Branch Comments of the Utility Safety Classification Group on the ANPR for the Backfitting Rulemaking
(48 Fe6. Reg. 44217)
Dear mr. Chilk:
ad- The Commission published in the Federal Register an vance notice of proposed rulemaking (ANPR) on the revision of the backfitting process for nuclear reactors, 48 Fed. Reg.
44217 (September 28, 1983). This rulemaking would establish requirements fo; the long-term management of the NRC's process for imposing new regulatory requirements for power reactors.
The notice invited interested persons to submit written com- ments and suggestions by October 28, 1983. This letter will provide the comments, in response to the ANPR, of the Utility Safety Classification Group.
-2-
'HUNTON & ILLIAMS
- Although various members of the Utility Group will sub- mit additional comments on this ANPR either individually or as members of other organizations interested in the backfitting rulemaking, these- comments are intended to focus on the rela- tionship between the safety classification issue and the backfitting rulemaking. In particular, the safety classifica- tion issue provides a useful example to consider in developing an appropriate definition for lbackfitting.' Other pertinent examples, such as the administrative requirements contained in NUREG-0737, also demonstrate the 'need for the broad definition of backfitting suggested in this letter. These other examples will not be addressed by the Utility Group but should be con- sidered in the rulemaking.
Utility Safety Classification Group The Group is composed of 38 electric utility companies that have among them over seventy nuclear reactors currently in operation or under construction. A-list of the Utility Group's members is attached. -
The Utility Group's interest, and indeed its purpose of existence, is the issue of the NRC Staff's efforts to change certain definitions used in systems classification. The regu- latory terms 'safety related' and 'important to safety" have been used synonymously by industry and the NRC over many years of plant design, construction, licensing and operation.
Ht;>;To. NVILL1A41S
Construction permits and operating licenses have been issued based on licensee commitments to and NRC acceptance of the syn- onymous use.of these terms. The Utility Group believes that recent NRC Staff actions signal a sharp departure from this long-standing definition of the term important to safety' to cover a much broader and undefined set of plant structures, systems and components than is covered by the term 'safety re- lated." The Utility Group's concerns have been set out in de- tail in a letter from its counsel to William 0. Dircks dated August 26, 1983.
The impetus for the NRC Staff's efforts to expand the definition of "important to safety" seems to be a desire to ex- pand some measure of design and quality regulation beyond
"safety related" equipment. It is important to note that while variations exist in the details of practice, industry as a whole has generally applied design and quality standards to non-safety relat.ed structures, systems and components in a man- ner commensurate with the functions of such items in the over- all safety and operation of the plant. The Utility Group is confident that these measures do adequately ensure that non-safety related equipment will perform its intended func- tion.
. Le @-4-
- TON & WILLlA2S
re-.
Despite the existing measures applied to non-safety lated structures, systems and components, redefining *important perva- to safetyO without proper review will have far-reaching, of nu- sive consequences for licensing and general regulation clear plants, particularly for operating plants. Specifically, in given the extensive use of the term Oimportant to safety"
the Commission's regulations and Staff regulatory guides, licensee
- documents ar.d other licensing documents, as well as long- submittals, the result of this sharp departure from the standing definition of this term would be a largely unexamined doc- and perhaps unintended expansion of the scope of the above in uments. Consequently, the Group is intensely interested Commission efforts to control the imposition of new regulatory requirements.
The Relationship of the Safety Classification issue to the Eackfitting Rulemaking Question l.a of the ANPR asks, in essence, whether hard- backfitting management measures should apply to proposed defined ware changes or whether the term should be more broadly power to encompass other activities associated with a nuclear
- plant. The Utility Group urges the Commission to define Obackfitting' to encompass any change in a regulatory require- in the ment or its implementation which results in any change design, construction, testing or operation of a nuclear power
-5-
- 'iENTON & WILLIAMS
plant for which a construction permit or operating license has been issued. A narrower definition of 'backfitting' would only partially accomplish the rulemaking's goal of injecting ratio- nal management into the process of imposing new regulatory re- quirements.
In the case of safety classification, the widespread use of the term 'important to safety' throughout the Commis- sion's regulations, Staff regulatory guides, NUREG documents and other licensing documents means that any change in the definition of "important to safety' would have ramifications well beyond the imposition of new hardware requirements. Such a change could, for example, affect such activities as quality assurance programs, seismic and environmental qualification programs and training programs. Changes in these and other programs are cirtain to entail extensive expenditures of utili- ty resources. Thus, at a minimum there is an impact that should be weighed against the corresponding benefits. More- over, because utility-resources are finite, changes in such programs may well result in a dilution or diversion of a utili- ty's resources with a potential corresponding decrease in safe- ty. Consequently, it makes sense to give the term
'backfitting' a broad interpretation to ensure that all aspects of the imposition of new requirements, whether the result of new requlatfons or the clarification or interpretation of existing regulations, are effectively scrutinized.
-) ,, XTNO & 'M7ILLIAMS
The Utility Group also urges the Commission to give a broad interpretation to what is considered a 'new requirement'
in any revised backfitting rule. Question l.b. of the ANPR
asks whether the Commission's interim directions to the VRC
Staff provide a useful approach. These interim directions de- fine a backfit as a proposed new staff position or a proposed change in an existing staff position. The Utility Group believes that these directions should be expanded to include I
instances in which the Staff cl~arifies" or 'reinterprets ex- isting staff positions or NRC regulations. The safety classi- fication issue provides a good example of why this should be
60.
The present issue was framed by a November 20, 1981 memorandum from NRR Director Harold Denton to all NRR person- nel. This memorandum which has never been circulated for pub- lic comment and which argues that the category 'important to safety' is broader than 'safety relatedO (or "safety grade'),
disclaims any intent to alter existing regulatory requirements.
Although the Utility Group believes that the NRC Staff's effort to expand the definition of important to safety' is an attempt to change the meaning of a regulatory term without benefit of rulemaking or other appropriate procedure, some Staff members do not agree. According to them it is merely a clarifications of the definition of important to safety. Despite the
.
1 .XTO & NILL1AMS
disclaimer and the characterization, revision of the definition of Oimportant to safety" to make it a broader category than asafety related" could have far-reaching, pervasive conse- quences for the licensing and general regulation of nuclear plants. Thus, clarifications of existing staff positions or new interpretations should be included within any definition of
- backfitting."
We hope these comments prove helpful. We will be happy to provide further information if you wish..
Sincerely yours,
- ~~Donald P. grwin M
Anthony F. Earley, Jr.
Counsel for Utility Safety Classification Group Attachment cc: Chairman Nunzio J. Palladino Commissioner James K. Asselstine
- Commissioner Frederick Bernthal Commissioner Victor Gilinsky Commissioner Thomas M. Roberts William J. Dircks Herzel 1.E.'Plaine, Esq.
(-..
UTILITY SAFETY CLASSIFICATION GROUP
Arkanas Power & Light Co.
(representing also Mississippi Power &
Light, and Louisiana.Power & Light)
Baltimore Gas & Electric Co.
Cincinnati Gas & Electric Co.
Cleveland Electric Illuminating Co.
Commonwealth Edison Co.
Consolidated Edison Company of New York Consumers Power Co.
Detroit Edison Co.
Florida Power Corp.
Florida Power & Light Co.
Gulf States Utility Co.
Illinois Power Co.
Long Island. Lighting Co.
Nebraska Public Power District Niagara Mohawk Power Corp.
Northeast Utilities Service Co.
Northern States Power Co.
Omaha Public Power District Pacific Gas & Electric Co.
Pennsylvania Power & Light Co.
Public Service Company of Indiana Public Service Company of New Hampshire (representing also the Yankee Atomic Electric Power Company, Maine Yankee Atomic Power Co.
and Vermont Yankee Nuclear Power Co.
Public Service Electric & Gas Co.
Rochester Gas & Electric Corp.
Southern California Edison Co.
Sacramento Municipal Utility District SNUPPS
(representing Union Electric Co., Kansas Gas &
Electric Co., Kansas City Power & Light Co.,
and Kansas Electric Power Coop., Inc.)
Toledo Edison Co.
Wisconsin Electric Power Co.
Wisconsin Public Service Corp.
.0
'fUNITED STATES
NUCLEAR REGULATORY COMMISSION
WASHINGTON, D. C. 20555 -
- A ~DEC I19983 T. S. Ellis,-_1JII, Esq.
Hunton & Williani5
707 East Main Street P.O. Box 1535 Richmond, Virginia 9?3212 Dear Mr. Ellis:
The Executive Director for Operations has asked me to respond to your letter of August 26, l1933, in which you express concern, on behalf of the Utility Safety Classification Group, over the NRC use of the terms
"important to safety" and "safety-related." Your concern appears to be principally derived from recent licensing cases in which the meaning of these terms in regard to \NRC quality assurance requirements has been at issue, and my memorandum to NRR personnel of November 20, 1981.
I agree that the use of these; terms in a variety of contexts over the past several years has not been consistent. In recognition of this problem I attempted in my 1981 memorandum to NRR personnel to set forth definitions of these terms for use in all future regulatory documents and staff testimony before the adjudicatory boards. As you are aware, the position taken in that memorandum was that "important to safety" and
"safety-related" are not synonymous terms as used in Commission regulations applicable to nuclear power reactors. The former encompasses the broad scope of equipment covered by Appendix A to 10 CFR Part 50, the General Design Criteria, while the latter refers toaa narrower subset of this class of equipment defined "in Appendix A to 10 CFR Part 100 Section VI(a)(l)
and, more recently, in 10 CFR 50.49(b)(1). Based on such a distinction between these terms, it generally has been staff practice to apply the quality assurance requirements of Appendix B to 10 CFR Part 50 only to the narrower class of "safety-related" equipment, absent a specific regulation directing otherwise.
More importantly, however, this does not mean that there are no existing NRC requirements for quality standards or quality assurance programs for the broader class of nuclear power plant equipment which does not meet the definition of "safety-related." General Design Criterion 1 requires quality standards and a quality assurance program for all structures, systems and components "important to safety." These requirements, like those of Appendix B to 10 CFR Part 50, are "graded" in that GDC-l mandates the application of quality standards and programs "commensurate with the importance of the safety functions to be performed," and expressly allows the use of "generally recognized codes and standards" where applicable
T. S. Ellis -2- and sufficient. Documentation and record keeping requirements for such equipment are likewise graded. Pursuant to our regulations, permittees or licensees are responsible for developing and implementing quality assurance programs for plant design and construction or for plant operation which meet the more general requirements of GDC-l for plant equipment "important to safety," and the more prescriptive requirements of Appendix B for "safety-related" plant equipment.
This distinction between the terms "important to safety" and "safety- related" has been accepted in two recent adjudicatory decisions where the issue was squarely faced. In the Matter of Metropolitan Edison Company, et. al. (Three Mile Island Nuclear Station, Unit 1),
ALAB-729, _ NRC (May 26, 1983): In the Matter of Long Island Lighting Company (Sho reham Nuclear Power Station, Unit 1), LBP-83-57, NRC (September 21, 1983). Moreover, the Commission itself recognized and endorsed a distinction between the terms in promulgating the Seismic and Geologic Siting Criteria for Nuclear Power Plants (see Section VI(a)(l) and VIta)(2) of Appendix A to 10 CFR Part 100) and the Environmental Qualification Rule (see Supplementary Information and
10 CFR 50.49(b)). Also, in preparing this response, members of the licensing staff and legal staff reviewed all of the material on this subject provided by your letter, and have also reviewed numerous other regulatory documents, including both staff and Commission issuances over the past several years in which the terms "safety-related" and
"important to safety" are used. While it is apparent that some confusion continues to exist with regard to the distinction between the terms, the staff is convinced that the position it has previously taken remains correct.
The final point which I considered in responding to your letter is the consistency of NRC staff practice over the years with our position on this issue, and the technical basis for that practice. While previous staff licensing reviews were not specifically directed towards determining whether in fact permittees or licensees have implemented quality assurance programs which adequately address all structures, systems, and components important to safety, this was not because of any concern over lack of regulatory requirements for this class of equipment. Rather, our practice was based upon the staff view that normal industry practice is generally acceptable for most equipment not covered by Appendix B within this class.
Nevertheless, in specific situations in the past where we have found that quality assurance requirements beyond normal industry practice were needed for equipment "important to safety," we have not hestitated in imposing additional requirements commensurate with the importance to safety of the equipment involved. We intend to continue that practice.
7 .
T. S. Ellis -3-
- e note that in a more recent letter on this subJect (comments dated October 27, 1983 on the Advanced Notice of Proposed Rulemaking on Backfitting Requirements) you have stated that ... "industry as a whole has generally applied design and quality standards to non-safety related structures. systems and components in a manner commensurate wtth the functions of such items in the overall safety and operation of the plant." The principal difference, then, between the NRC Staff position discussed above and that expressed inyour letters appears to be your view that such actions by the industry are purely voluntary, with no regulatory underpinning; whereas, we have been and remain convinced that such actions are required by General Design Criterion 1.
I want to make it very clear that NRC regulatory jurisdiction involving a safety matter is not controlled by the use of the terms such as
"safety related" or "important to safety."
A copy of your letters and this response are being sent to all permittees and licensees for information.
Sincerely, Harold R. Denton. Director Office of Nuclear Reactor Regulation