ML20092B643

From kanterella
Jump to navigation Jump to search
Forwards Analysis of Ocre 950812 Supplemental Comments on Design of Abwr,Notice of Final Rule & Statement of Considerations,In Order to Ensure That NRC Has Complete Technical Info on Subj
ML20092B643
Person / Time
Site: 05200001
Issue date: 09/01/1995
From: Specker S
GENERAL ELECTRIC CO.
To:
NRC OFFICE OF THE SECRETARY (SECY)
References
FRN-60FR17902, RULE-PR-52 NUDOCS 9509120099
Download: ML20092B643 (200)


Text

. _ _

,4 GE Nuclear Energy 00CKETED USNRC 3,,,,, sm c cc. :,,.y s

, n. 3,a,,

ke Prwcent ed Gerent Mr,;er o is cucewere. San.) :s. :A15t25

8 925.t232. k : ] 9:5132

'95 SCP -6 P4 :31 0FFICE OF SECRETARY 00CKETihG a MRVICE September 1,1993 BRAHCH DOCKET NtWBER Secretary of the Commission PROPOSED RULE % O U.S. Nuclear Regulatory Commission Washington, DC 20555

@0N MON aaw4ccws9~+D

-g q

ddQg Attention:

Docketing and Service Branch q

Subjec" Notice of Proposed Rulemaking for Standard Design Certification of the U.S. Advanced Boiling Water Reactor Design; 60 Fed. Reg.17902 (April 7,1995)

Docket No.52-001 i

Dear Sir:

On August 12,1995, Ohio Citizens for Responsible Energy, Inc. (OCRE) submitted four comments on the design of the Advanced Boiling Water Reactor (ABWR), and requested that the Commission incorporate OCRE's suggested design changes. In order to ensure that the Commission has complete technical information regarding these matters, GE Nuclear Energy (GE), the design certification applicant for the ABWR, is enclosing in Attachment A an analysis ofeach of these comments by OCRE. As Attachment A demonstrates, the design changes recommended by OCRE are not needed to comply v.ith NRC regulations, and are not warranted for protection of the public health and safety.

In addition to its technical comments, OCRE also submitted comments on process-related i

issues regarding design certification. Comments on process-related issues were also i

submitted by the Nuclear Energy Institute, design certification applicants, a number of l

nuclear utilities, and the U.S. Department of Energy (DOE). The Commission'; Notice of Proposed Rulemaking (NOPR) for design certification of the ABWR requires GE as the design certification applicant to file proposed findings of fact and conclusions for each controverted hearing matter within 30 days of close of the record in the form of a proposed final rule and statement of considerations. 60 Fed. Reg. at 17920. Although none of the commenters requested a hearing, GE believes that the intent.of the NOPR would be served by supplying the Commission with a proposed final rule and statement of considerations addressing controverted matters raised by the comments on the proposed rule. Therefore, in accordance with the NOPR, GE is enclosing in Attachment B a proposed final rule and statement of considerations.

9509120099 950901 PDR PR 52 60FR17902 PDR

}60

As Attachment B discusses, all of the comrnenters except OCRE expressed deep concem that the process-related provisions in the proposed design certification rule are not workable, and they recommended a number of changes in the proposed rule to ensure its viability for use in future licensing proceedings. GE believes it is critical that these changes be made to assure that Part 52 achieves its design standardization goals and provides a viable approach for constructing and operating new nuclear plants in this country. Attachment B is structured to achieve this goal.

Sincerely, S. R. Specker cc:

(w/ attachments):

Chairman Shirley A. Jackson Commissioner Kenneth Rogers James M. Taylor, EDO William T. Russell, NRR Karen D. Cyr, General Counsel William H. Rasin (NEI)

Sterling Franks (DOE) l

Attachment A GE's Analysis of OCRE's Technical Comments on the ABWR Design 1

OCRE Comment:

l Although the ABWR will use the same type of Main Steam Isolation Valves as are used in operating BWRs, it will not have a MSIV Leakage Control System.

Instead, GE is taking credit for fission product retention in the main steam lines and main condenser.

However, in a main steam line break outside of containaient, a design basis event, such fission product retention will not occur.

Given the excessive leakage experience of MSIVs in operating BWRs, it would be prudent to incorporate a MSIVLCS into the ABWR design.

OCRE would recommend a positive pressure MSIVLCS, which would pressurize the main steam lines between the inboard and outboard MSIVs after MSIV closure to a pressure above that in the reactor vessel.

Thus, any leakage through the inboard MSIV will be into the reactor.

GE Analysis:

As discussed below, NRC regulations do not require a Main Steam Isolation Valve (MSIV) Leakage Control System (MSIVLCS).

Additionally, an MSIVLCS is not needed to mitigate leakage througn the MSIVs during a Main Steam Line Break Accident (MSLBA).

Finally, the ABWR has design features that provide an acceptable alternative to the MSIVLCS for mitigating leakage through the MSIVs during a loss of coolant accident (LOCA).

NRC Regulations Do Not Require an MSIVLCS NRC's requirements related to the isolation function of the MSI7s are provided in General Design Criterion (GDC) 54, i

" Piping Systems Penetrating Containment," and GDC 55, " Reactor Coolant Pressure Boundary Penetrating Containment," of Appendix A to 10 CFR Part 50.

GDC 54 and 55 require, in part, that piping

2 -

systems penetrating primary containment be provided with leak detection, isolation, and containment capabilities having redundancy, reliability, and performance capabilities that reflect the importance to safety of isolating these piping systems, and that appropriate requirements to minimize the probability or consequences of a reactor coolant line break shall be provided as necessary to assure adequate safety.

GDC 54 and 55 do not require an MSIVLCS for controlling leakage through the MSIVs.

In this regard, Regulatory Guide (Reg. Guide) 1.96,

" Design Of Main Steam Isolation Valve Leakage Control Systems For Boiling Water Reactor Nuclear Power Plants," describes the MSIVLCS as one method, but not the only method acceptable to the NRC, of complying with the requirements of GDC 54.

As noted in

[i]f an applicant proposes to use a method the Reg. Guide, different from that described in this guide for implementing

[GDC) 54 with regard to the control or limitation of leakage past the main steam isolation valves of a boiling water reactor, the acceptability of the alternative method will be determined by the Staff on a case-by-case basis."

Thus, the NRC's guidance specifically contemplates alternative means of mitigating the effects of MSIV leakage during accidents.

MSIVLCS Is Not Needed Durina An MSLBA The main steamlines in Boiling Water Reactor (BWR) plants contain dual quick-closing MSIVs.

These valves function

--~v m

t --

J

-3 to isolate the reactor system in the event of a break for two reasons:

1) for a steamline break outside of the primary containment, MSIV closure terminates and limits the loss of coolant, and 2) in the event of a design basis LOCA, or other event requiring containment isolation, the MSIVs limit the 1eakage of coolant and radionuclides from the containment and reactor vessel to the outside environs.

Although the MSIVs are designed to provide a leak-tight barrier, it is recognized that some leakage through the valves I

will occur.

Some previous BWRs have installed MSIVLCSs primarily

{

to mitigate leakage of iodine radionuclides through the MSIVs in the event of a LOCA.

As discussed below, MSIVLCSs have not

{

primarily been installed for the purpose of mitigating an MSLBA.

l An MSIVLCS would not provide any significant additional protection during an MSLBA.

During a design basis LOCA, the MSIVs close during the I

initial stages of the event, isolating the release.

However, the LOCA analysis assumes that the reactor core is damaged and fission products are released to the containment (primarily noble gases and iodines).

Any leakage from the containment through the MSIVs could continue for days as the plant is slowly brought to 4

-cold shutdown.

This leakage could aave appreciable impacts on the consequences of a LOCA.

Furthermore, for some previous BWRs, no credit was taken for the pressure integrity of the main steam piping and condenser and holdup of radionuclides by these i

components.

Thus, controlling MSIV leakage of radionuclides from a damaged core during a LOCA was considered important for those BWRs.

As a result, some previous BWRs installed a MSIVLCS to mitigate the radiological consequences of this leakage.

Conversely, the MSIVLCS is not a significant factor in mitigating the effects of an MSLBA.

As discussed in the Standard Safety Analysis Report (SSAR) for the ABWR, Section 15.6.4, the reactor core is not damaged in a MSLBA.

Therefore, the only radioactivity available for release is that which is present in the reactor coolant and steamlines prior to the break.

During a MSLBA, the total inventory of radioisotopes in the reactor coolant system is relatively small, and only a very small fraction of this inventory would leak through the MSIVa.

Further, the MSIV leakage would be terminated in approximately six hours when the plant is brought to cold shutdown and the reactor coolant system is depressurized, and the total leakage would be very small compared to the total amount of coolant released through the break.

Thus, the radiological consequences l

of MSIV leakage is n.uch less significant during a MSLBA than during a LOCA because of the substantially smaller source term in the containment and reactor coolant.

As a result, operation of the MSIVLCc is not needed to mitigate the radiological l

i consequences of an MSLBA.

As discussed in Section 15.6.4 of the ABWR SSAR and Section 15.4.3 of the FSER for the ABWR, the radiological i

I I

consequences of a MSLBA for the ABWR are approximately 1 rem whole body and 50 rem to the thyroid, which are well within the limits of 25 rem and 300 rem, respectively, specified in 10 CFR Part 100.

This dose calculation assumes that a release occurs directly to the environment (e.g.,

no holdup in the main steam lines and condenser), and that leakage through the MSIVs is equivalent to the maximum value permitted by the technical specifications.

Consequently, an MSIVLCS is not needed to satisfy the requirements in Part 100 with respect to a MSLBA.

The ABWR Has Alternatives To The MSIVLCS For Mitigating A LOCA Because of the potential for leakage through MSIVs during a LOCA, Reg. Guide 1.96 recommends the installation of an MSIVLCS.

However, in practice, the MSIVLCSs have had drawbacks.

Use of the MSIVLCS has resulted in substantial maintenance and worker exposure.

Additionally, the NRC identified a generic issue having to do with the effectiveness of the MSIVLCS to perform its intended function under conditions of high MSIV leakage (Generic Issue C-8, Main Steam Line Valve Leakage Control Systems).

In designing the ABWR, GE considered the use of an active MSIVLCS for mitigating the consequences of MSIV leakage during LOCAs.

However, a positive pressure MSIVLCS would result in continual containment pressurization.

Increased containment pressure would result in undesirable increases in stress on the

I i

l l i containment and the potential for increased leakage through the other containment penetrations.

Similarly, GE found that a negative pressure type MSIVLCS, which pulls a negative pressure between the valves, would aggravate and increase the release of noble gases which cannot be filtered when compared to a passive hold-up system.

As a result, GE has provided a passive mitigation system for the ABWR, j

As discussed in SSAR Section 15.6.5, the passive mitigation system uses the natural strengths of the steam supply system to cool and deposit out aerosols and other forms of airborne fission products.

The steam lines, drain lines, and condenser are capable of removing significantly more airborne fission products (including much improved mitigation of noble gases) by slowly passing these contaminants over cool steel lines and through reservoirs of water than by use of an active leakage r

control system.

In addition, such lines, by the very fact that l

they are designed to handle high temperatures and pressures, are inherently strong and durable, and GE has provided higher standards for steamline and drain line integrity than in prior plants.

Specifically, GE has applied appropriate seismic, safety classification, and quality assurance requirements to assure that the quality of the systems, structures, and components are commensurate with their importance to safety during both operational and accident conditions.

r f

'7 -

As demonstrated in SSAR Section 15.6, the ABWR design-with this passive mitigation system meets the offsite dose reference values set forth in 10 CFR Part 100.

The NRC staff has i

evaluated this design.

Based upon this evaluation, the NRC staff has found the ABWR design to be acceptable without an MSIVLCS, as I

discussed in the Final Safety Evaluation Report (FSER) for the ABWR, NUREG-1503, Sections 3.2, 10.3.1, 15.4.3, and 15.4.4.2.

In summary, the passive mitigation system in the ABWR

-is superior to an active MSIVLCS, both from an ability and reliability view point.

In point of fact, GE's existing utility j

customers have also found this to be true to the extent that the majority of BWRs are currently involved in upgrading their steam line systems and removing the MSIVLCS, primarily for reliability purposes.

Conclusions 1

NRC regulations do not require installation of an MSIVLCS.

Furthermore, an MSIVLCS is not intended to mitigate the consequences of MSLBA.

The ABWR has a passive system to mitigate I

the consequences of MSIV leakage during LOCAs, and this system is

[

superior to an MSIVLCS.

Therefore, the Commission should not require an MSIVLCS for the ABWR.

l i

i

_ OCRE Comment:

The ABWR Standby Liquid Control System requires simultaneous parallel, two-pump operation to achieve 100 gpm flow rate, necessary to comply with 10 CFR 50.62 (c) (4).

However, a single failure rendering one train inoperable would only yield a flow of 50 gpm, which does not comply with the ATWS rule.

OCRE recommends increasing the capacity of each SLCS train to 100 gpm, so that the SLC3 can perform its ATWS mitigation function even with a single failure.

GE Analysig:

As discussed below, NRC regulations do not require that the Standby Liquid Control System (SLCS) be able to supply minimum flow capacity (i.e.,

100 gpm) while sustaining a single failure.

Additionally, the ABWR fully satisfies the requirements of 10 CFR 50.62 (c) (4).

Furthermore, the SLCS can effect shutdown, assuming a single active failure.

Finally, the NRC staff has accepted the design for the ABWR SLCS.

NRC Reculations Do Not Require a 100 apm Flowrate Assumina A Single Failure NRC regulations contain two requirements related to the SLCS.

First, GDC 27 states that the reactivity control systems shall be designed to have a combined capability for reliably controlling reactivity changes under postulated accident conditions.

As stated in NRC's Standard Review Plan (SRP)

Section 9.3.5, paragraph II(3), in order to accomplish this function, the SLCS should have suitable redundancy in components and features assuming a single failure.

s.

~

.._>_ ~ _. _ __ _..

l f

Second, the Anticipated Transient Without Scram (ATWS) rule in 10 CFR 52.62 (c) (4) states that, in addition to a diverse reactor trip system, each boiling water reactor must'have a SLCS i

- with a minimum flow capacity and boron content equivalent in control capacity to 86 gpm of 13 weight percent sodium pentaborate solution for a 251-inch inside diameter reactor pressure vessel.

Although this rule requires the SLCS to be reliable, it does not require the SLCS to be able to withstand single failures.

Additional guidance regarding this requirement is provided in the Statement of Considerations accompanying the ATWS rule.

"pecifically, the table at 49 Fed. Reg. 26042 states that redundmacy is not required for " Mitigating Systems,"

including the recirculation pump and automatic SLCS actuation for BWRs.

Similar guidance is contained in Lona Island Lightina Co ALAB-788, 20 NRC 1102 (1984), where an intervenor argued m,

that the licensee's interim measures to address ATWS were inadequate because they did not provide for a totally redundant i

SLCS that met the single failure criterion.

The Appeal Board concluded that there was no need for such a system, and noted that "[t]he need for such a system was considered by the Commission - and rejected - during the course of the [ATWS) rulemaking."

Id. at 1165 and note 365.

l 8

The first column of the Table at 49 Fed. Reg. 26042 was only partially printed.

The error was corrected on July 6,

1984 at 49 Fed. Reg. 27736.

r

l 1

l

) P The ABWR SLCS Satisfies the ATWS Rule As discussed in ABWR SSAR Sections 9.3.5 and 15.8, the SLCS provides a backup reactor shutdown capability that is independent of the normal reactivity control system, which is based on insertion of control rods into the core.

The SLCS has two divisions of suction and injection valves and pumps.

Each division is powered from its respective Class 1E electrical division, and each pump can provide a minimum flow of 50 gpm.

The ABWR SLCS requires simultaneous parallel, two-pump operation to achieve the 100 gpm flow rate needed to comply with the ATWS rule.

However, as defined in the ATWS rule, ATWS means an anticipated operational occurrence (as defined in Appendix A to Part 50) followed by the failure of the reactor trip portion of the protection system.

Single failure of the SLCS in conjunction with a failure of the control rods to scram is not included as an anticipated operational occurrence, and the ATWS rule does not require the SLCS to be designed against such single e

failures.

Consequently, ATWS mitigation capability is evaluated using nominal parameters and initial conditions (e.g. full two-pump capability).

Using full two-pump capability (i.e.,

100 gpm), the SLCS satisfies the ATWS rule.

r i

h I

e

-..~.

fi

. /.

The ABWR SLCS Can Effect Shutdown Assumino a Sincle Active

~

Failure As discussed above, GDC 27 requires that the reactivity control systems have a combined capability of reliably controlling reactivity changes under postulated accident conditions, and SRP Section 9.3.5, parngraph II(3) states that the SLCS should have suitable redundancy in components and features to assure system safety function assuming a single failure.

The ABWR design satisfies this requirement given its redundant active components and its capability to withstand single failures.

Each pump and its associated valves are powered from its redundant emergency power supply.

They are arranged so i

that failure of a single pump or valve will not prevent adequate amounts of sodium pentaborate solution (i.e.,

50 gpm) from entering the reactor vessel.

A flow rate of 50 gpm is sufficient to effect shutdown, thereby satisfying both GDC 27 and-SRP Section 9.3.5.

The NRC Staff Has Accepted the Desion of the ABWR SLCS The NRC staff evaluated the SLCS in the FSER for the ABWR, NUREG-1503, Sections 9.3.5 and 15.15.1.

The NRC Staff accepted the SLCS, stating that " failure of a single pump or valve will not prevent adequate amounts of sodium pentaborate from entering the reactor vessel to effect shutdown" (pg. 9-41),

and that the 100 gpm SLCS flow rate with both pumps running

~ -. ~ ~...

. ~..,

provides the " equivalency specified in the ATWS rule (10 CFR 50.62)" (pg. 15-26).

Conclusions-The ABWR can supply the 100 gpm SLCS flow rate nec'.ed to satisfy the ATWS rule, and this flow rate need not be single failure proof.

A 50 gpm SLCS flow rate is needed to satisfy GDC 27, and the ABWR can satisfy this requirement assuming a single active failure.

The NRC staff has fully evaluated and accepted these design provisions.

Therefore, the Commission should not require the capacity of each SLCS pump to be increased to 100 gpm.

L

OCRE Comments In the ABWR, the drywell to wetwell vacuum breakers consist of a single vacuum breaker valve in each line.

In operating BWRs, there are two vacuum breaker valves in series in each line.

The ABWR design thus is vulnerable to a single failure, a stuck-open vacuum breaker, which would result in suppression pool bypass, which can overpressurize the containment in both design basis and severe accidents.

Having the containment function vulnerable to a single failure is unacceptable.

OCRE recommends the addition of a second vacuum breaker valve in series with the one proposed in the design.

GE Analysis:

As discussed below, NRC regulations do not require two vacuum breakers in series.

Furthermore, a single failure involving a stuck open vacuum breaker valve is highly unlikely, especially at the onset of a LOCA involving high drywell pressures.

Finally, following a LOCA blowdown, such a failure would not adversely affect the function of the containment given the other mitigative features in the kBWR.

NRC Regulations Do Not Require Two Vacuum Breakers in Series NRC's basic functional design requirements for containments are provided in GDC 16 and 50.

While these GDC

~

provide extensive requirements for containments, they do not require the installation of two vacuum breakers in series.

Similarly, SRP Section 6.2.1.1.C,

" Pressure-Suppression Type BWR Containments," only states that vacuum relief devices, if

required, should be provided in accordance with the

{.i requirements of the ASME Boiler and Pressure Vessel Code, Section Neither the SRP, nor the ASME Code, III, Subsection NE requires two vacuum breakers in series.

A Stuck Open Vacuum Breaker Valve Is Hiohly Unlikelv The design of the wetwell-to-drywell vacuum breaker system (WDVBS) is described in SSAR Section 6.2.1.1.4.

The purpose of the WDVBS is to prevent backflooding of the suppression pool water into the lower drywell during normal operation, and to protect key containment structures against large negative pressure differentials (i.e.,

lower drywell pressure relative to wetwell pressure) postulated during hypothetical LOCAs.

During a typical LOCA scenario inside containment, the drywell is pressurized by steam at the outset of the break.

As a result ol' this pressurization, steam and non-condensable gases are forced through the drywell-to-wetwell connecting vents into the suppression pool where the steam is condensed and the non-condensable gases rise through the water and collect in the wetwell airspace.

During this initial blowdown, there is a large positive pressure on the vacuum breakers which maintains them in e

the closed position.

At some time following the initial blowdown, cold water entering the drywell from emergency core cooling system (ECCS) injection, containment sprays, or feedwater will cause the steam remaining in the drywell to condense

.. -. creating a lower pressure than in the wetwell, and the WDVBS will open to equalize the pressure.

The vacuum breaker valves are located high in the wetwell gas space (above the pool swell impact zone), and are mounted horizontally to flanged penetrations through the reactor pressure vessel (RPV) pedestal.

There are eight separate penetrations through the RPV pedestal extending from the lower drywell to the wetwell airspace, with one vacuum breaker valve per penetration.

Only seven of the eight valves are required to open to provide an effective flow area adequate to keep the negative differential pressure between the drywell and wetwell within design limits during operating and postulated accident scenarios.

Therefore, the system design accounts for a single failure involving one vacuum breaker valve failing closed.

As discussed in SSAR Sections 6.2.1.1.4 and 6.2.1.1.5, the vacuum breaker valves have features which both minimize leaks and reduce the probability of failures of stuck open valves.

Specifically, the vacuum breakers are check valves which incorporate materials exhibiting good wear-resistance characteristics and utilize high quality seating surfaces.

During normal operations, the vacuum breaker valve disk is held closed by the disk's weight because vf the valve's offset design.

Initial drywell pressurization during LOCA provides a large positive differential pressure which acts as a force to hold the vacuum breaker valve closed.

The vacuum breaker valves are

[.\\

- 16 simple swing disk valves which are actuated by a negative differential pressure across the valve disks.

Thus, these valves require no external power to open, and more importantly, no inadvertent signal will cause them to open prematurely, or result in them being held open unintentionally.

Additionally, there are redundant, single-failure-proof position indicators in the main control room for these valves.

These indicators provide on-line verification that the valve disks are seated.

Furthermore, Technical Specification 3.6.1.6 for the ABWR requires plant shutdown if a vacuum breaker valve is open.

Therefore, it is highly unlikely that a vacuum breaker would be open during normal plant operation.

Further, unlike some existing BWRs, the containment and WDVBS for the ABWR have been engineered to eliminate vacuum breaker operation (and thus the possibility of failure to reclose) during the initial LOCA response when the containment pressure and the resulting consequences of suppression pool bypass are the highest.

The vacuum breaker valves are thus

" passive" during the blowdown phase of a postulated LOCA, thereby

{

eliminating the threat of a single active failure and suppression pool Dypass at this critical juncture.

This is the single, most significant improvement in the design of the containment and WDVBS for the ABWR.

Because the vacuum breaker valves do not change positions during the initial stages of a LOCA, the vacuum breakers are protected against a single active failure involving l

i I I

a stuck open valve and therefore a stuck open vacuum breaker valve is highly unlikely during this period.

Furthermore, the severe accident evaluations of the ABWR containment demonstrate that if opened, (e,q.,

during the post-LOCA blowdown period), a vacuum breaker va.1.ve has a low probability of failing to close.

The ABWR SSAR, Sections 19EE.2.1 and 19EE.5, evaluates the probabilities and consequences for vacuum breaker leakages, including one vacuum breaker stuck fully open.

As shown in this evaluation, suppression pool bypass due to the failure of an open vacuum breaker valve to close does not significantly add to the risk ascociated with the ABWR

{

i because of its low probability of occurrence.

j t

The ABWR Has Features To Mitigate A Stuck Open Vacuum Breaker i

Valve Even if it were assumed that a vacuum breaker valve were stuck open following a LOCA blowdown in response to steam condensing in the drywell, the consequences associated with the t

failure of the vacuum breaker valve to close would be mitigated l

by use of containment sprays.

As discussed in SSAR Sections 6.2.1.1.5.4 and 6.2.2.3.3, the use of containment spray provides l

steam suppression and fission product removal.

Even if a vacuum breaker were fully open, there would be ample time following a i

LOCA signal to initiate containment spray.

In the event of a severe accident (i.e., beyond the design basis) involving the i

i

P 1 f failure of the containment spray, the ac-independent water u

addition (ACIWA) system can be actuated and provide flow to the I

containment spray, as discussed in SSAR Sections 5.4.7.1.1.10 and 19.D.5.

Additionally, further protection is provided by the Containment Overpressure Protection System (COPS).

As discussed in SSAR Section 6.2.5.2.6, this' system provides protection against gross containment failure for suppression pool bypass scenarios in the small percent of severe accident sequences where

[

the containment pressure would exceed the rupture pressure of the rupture disk.

COPS allows for a controlled release and i

subsequent re-establishment of containment through closure of ll isolation valves in the vent pathway.

The COPS would function to relieve the overpressure, preserve the containment, and al' ow it to subsequently perform its function, if required.

Conclusions I

In summary, NRC regulations do not require the WDVBS to I

i be designed to withstand single failure involving a stuck open i

i vacuum breaker valve.

Further, the ABWR containment is not vulnerable to a single active failure.

The ABWR WDVBS design features described above render a stuck-open vacuum breaker condition during a postulated accident highly unlikely.

Should

{

one occur following a LOCA blowdown, it would be mitigated by the containment spray, or ACIWA, or COPS.

Furthermore, the addition

d'.

t of a second valve would double the probability of a stuck-closed i

pathway, since both valves in series would need to open.

Thus, the present ABWR WDVBS design with a single vacuum breaker for each flow path is technically adequate, and the ABWR design has sufficient features to ensure containment f

integrity.

As a result, the addition o.' a second vacuum breaker valve in series is not warranted.

The Nk0 staff has evaluated these analyses and accepted the WDVBS design in Sections 6.2.1.5, 6.2.1.8, and 19.2.3.3.5 of the ABWR FSER, NUREG-1503.

i i

F t

t i

t

,.yv-

- _,. ~ ~,. -. + - - -

- - l OCRE Comment:

ACRS members William Kerr and Charles J. Wylie made the following additional remarks in the ACRS letter of July 18, 1989 on proposed staff actions regarding the fire risk scoping study (NUREG/CR-5088) :

i "We recommend that the staff require the use of I

armored electrical cable in advanced light-water reactors.

There are more than 20 years of U.S.

electric utility experience which demonstrates its advantages in both nuclear and fossil electric generating plants.

There is extensive experience with armored cable in naval and maritime vessels and in chemical plants.

The British are requiring its use in the Sizewell B plant.

The armor makes it significantly more oifficult for external heat sources to kindle and to propagate fires within the cables.

It is practically impossible to kindle and propagate a fire from internal short circuits and overloads.

Armor provides a high degree of mechanical protection for the cable.

It also provides shielding against external magnetic fields.

This feature becomes more important as the application of solid-state components in power plants increases.

It is particularly important in providing protection against electromagnetic pulses generated by lightning."

OCRE believes this is sound advice and recommends that the NRC require the use of armored cable in the ABWR and in all future nuclear power plants.

i GE Analysis:

i GE's design criteria for cable installation are i

contained in the ABWR SSAR Section 8.3.3.

The NRC staff reviewed and accept.'d these provisions in tl:e ABWR FSER, Sections 8.3.2, i

8.3.3.4, 8.3.-.5, 8.3.3.13 and 8.3.4.

l As discussed below, NRC regulations do not require armored cable.

Furthermore, GE has incorporated several features

~. _ -

in the ABWR design which provide protection of electrical cables against fire, mechanical damage, and electromagnetic fields.

f Additionally, use of armored electrical cables would have ses

-11 j

disadvantages.

NRC Reculations Do Not Require Armored Cable NRC regulations do not require the use of armored cable.

The general requirements related to electric power systems and cabling are provided in GDC 17, " Electric Power Systems."

This GDC is supplemented by numerous Regulatory Guides, including Reg. Guide 1.32, " Criteria for Safety-Related Electric Power Systems for Nuclear Power Plants," and Reg.

Guide 1.75, " Physical Independence of Electrical Systems," as we31 as by multiple standards issued by the Institute of Electrical and Electronics Engineers, Inc. (IEEE).

However, none of these regulations or guidance documents requires or suggests that armored cable be used throughout the plant.

I Fire Protection Features ADplicable to Electrical Cable As discussed in SSAR Section 9.5.1, fire protection measures have been incorporated in the ABWR design which provide significantly greater protection than the fire protection requirements contained in Appendix R to 10 CFR Part'50.

First, the ABWR has been designed to accommodate the effects of fires.

For example, the ABWR adheres to the fire protectinn guidance i

, contained in SECY-93-087, which requires the ability to achieve safe shutdown while assuming that all equipment in any one fire area is rendered inoperable by a postulated fire and that entry into the affected area to restore its operation cannot be made.

For the ABWR, GE has further assured that safe shutdown can be 1

achieved while assuming that a fire in any fire area would render the entire division of equipment inoperable, including equipment outside of the affected fire area.

Second, to reduce the propagation and effects of cable tray fires, electric cables within each safety division have been grouped in separate trays according to size and function to the extent practicable.

Grouping cables in this manner reduces the risk that a fire which starts in a large power cable will disable that division's instrumentation and control cabling.

Additionally, as discussed in SSAR Section 8.3.3.8, the ABWR uses fire-resistant and non-propagating cables, which pass the vertical tray flame test in accordance with IEEE-383.

Third, to ensure that fires can not propagate between divisions, the ABWR has 3-hour fire barriers installed between equipment of different divisions.

In an April 26, 1990 report, l

the ACRS pointed out that redundar train separation is likely to be the most significant feature 1-1.ng to reduced fire risk.

1 Deviations from this design criteriva have been identified and 1

analyzed on a case-by-case basis to ensure that a fire in an area that contains equipment from more than one division does not

! l l

l the ability to bring the plant to cold shutdown.

This f

affect divisional separation by physical barriers also provides protection against localized phenomena in addition to fires, such i

as internal missiles and water spray.

Finally, the ABWR has three separate divisions of

{

safety-related equipment.

The ABWR design ensures that two L

divisions of equipment, each independently capable of bringing

[

i the plant to cold shutdown, remain available for all postulated fire scenarios.

In summary, even if it is postulated that a fire impacts an electrical cable, the ABWR has a number of design l

i features which ensure that the plant can be safely shutdown.

Therefore, armored cable is not needed as a fire protection i

feature.

i i

l Protection Against Mechanical Damaae The ABWR design provides installation of electrical i

cables in cable trays and conduit.

These trays and conduit j

t provide protection of electrical cables against mechanical f

damage.

Therefore, armored cable is not necessary to provide f

I protection against mechanical damage.

Protqction Acainst External Electromagnetic FieldH The ABWR design incorporates several design features which protect against electromagnetic interference (EMI).

,, ~ -

n

Covered cable trays or conduit provide protection of sensitive cables against the effects of EMI.

In critical applications, CE i

i has specified the use of cable consisting of twisted pairs and/or shielded construction to provide additional protection against.

EMI.

Furthermore, as. discussed above, the ABWR has maintained physical separatior af divisional equipment, which provides protection against a localized magnetic field affecting more than one division.

Finally, as discussed in SSAR Section 7A.2, the ABWR instrumentation and control systems primarily use fiber optics as the transmission medium in place of electrical cables.

Optical fiber is a non-electrical medium which has inherent immunity to EMI, lightning, and other radiated noise.

Disadvantaaes of Armored Cable Some characteristics of armored cable make its use c

undesirable.

For example, armored cable is significantly heavier than other traditional types of cable.

This increased weight would require a substantial increase in the seismic capability of cable tray supports.

Additionally, the termination of armored cable at the equipment would result in increased seismic loads to the equipment, equipment connection, and associated hardware T

(i.e., valves and piping).

i Further, armored cable is significantly more difficult to install than more traditional cable.

Armored cable has a much larger minimum bend radius and is difficult to place in cable

_ 1 trays or pull through conduits.

Additionally, the termination of armored cable is significantly more complex.

Finally, the-use of armored cable would significantly increase construction costs.

The cost of armored cable is substantially higher than traditional cable.

When these costs are added to the increased costs attributable to the installation difficulties associated with armored cable and the need for upgraded supports for armored cable trays, conduit, and equipment, GE estimates that the cost of armored cable installation would be a factor of two or more greater than for traditional cable.

I Conclusions NRC regulations and guidance do not require the use of armored electrical cable.

Furthermore, the ABWR's design includes features that provide protection of cables against fires, mechanical damage, and electromagnetic fields, and the use of armored cable would not result in an appreciable increase in plant safety.

Finally, the high cost of utilizing armored cable make its use unwarranted.

Therefore, the Commission should not require that armored electrical cable be used in the ABWR.

. _ =

r I

l Attachment B GE's Proposed Findings of Fact and Conclusions in the form of a Proposed Statement of Considerations and Final Rule

. - _ ~ -.. -.. _

f NUCLEAR REGULATORY COMMISSION j

10 CFR PART 52 Standard Design Certification for the i

U.S. Advanced Boiling Water Reactor Design AGENCY:

Nuclear Regulatory Commission.

ACTION:

Final rule.

l'

SUMMARY

The Nuclear Regulatory Commission (NRC or Commission) is amending its regulations to approve by rulemaking the standard design certification for.the U.S. Advanced Boiling Water Reactor (ABWR) design.

The applicant for certification of the U.S. ABWR design is GE Nuclear Energy.

The NRC is adding a new appendix to j

10 CFR Part 52 for the design certification.

This action is necessary so that applicants or licensees intending to construct and operate a U.S. ABWR design may do so by appropriately referencing the appendix.

EFFECTIVE DATE:

(30 days af ter publication of the final rule in f

the Federal Register).

ADDRESSES:

Copies of comments received in. response to the notice of proposed rulemaking are available for examination and copying at the NRC Public Document Room (PDR) at 2120 L Street NW (Lower Level), Washington, DC.

A copy of the environmental assessment

~.

- -._~

. =... ~ -.... - -

and the ABWR Design Control Document (DCD) is also available for examination and copying at the PDR.

Copies of the DCD may be I

purchased from National Technical Information Service, Springfield, VA 22161.

FOR FURTHER INFORMATION CONTACT:

Harry S. Tovmassian, Office of Nuclear Regulatory Research, telephone (301) 415-6231, Jerry N.

Wilson, Office of Nuclear Reactor Regulation, telephone j

(301) 415-3145, or Geary S. Mizuno, Office of the General Counsel, telephone (301) 415-1639, U.S. Nuclear Regulatory Commission, Washington, DC 20555.

8 SUPPLEMENTAR'I INFORMATION:

TABLE OF CONTENTS I

I.

Background

II.

Safety Findings III.

Summary Description of the Rule IV.

Analysis of Public Comments V.

Responses to Commission's Request for Comments VI.

Section by Section Analysis VII. Finding of No Significant Environmental Impact:

Availabilit.y 1

2

_ = _.

l I

l VIII.

Paperwork Reduction Act Statement Regulatory Analysis IX.

X.

Regulatory Flexibility Act Certification XI.

Backfit Analysis XII.

List of Subjects I.

Background

For more than thirty years, the licensing and regulation of nuclear power plants has proceeded under the two-step licensing process of 10 CFR Part 50.

Under this two-step process, issues decided during the construction permit proceeding are subject to re-review and re-litigation at the operating license stage.

The inability to achieve final resolution of these issues has caused instability in the licensing process and substantial escalation in the cost of constructing and operating nuclear power plants.

In the 1980's, the NRC recognized that a new approach to the licensing and regulation of power plants was warranted and began developing procedures for certification of standardized designs.

On May 18, 1989 (54 FR 15372), the NRC added 10 CFR Part 52 to its regulations to provide for the issuance of early site permits, standard design certifications, and combined licenses for nuclear power reactors.

Subpart B of 10 CFR Part 52 specifies the process for obtaining design certifications.

The I

j 3

~ __

major purposes of Part 52 are to achieve early resolution of licensing issues, to enhance the safety and reliability of nuclear power plants, and to provide a more stable and predictable licensing process.

Subsequent to the promulgation of Part 52, Congress underscored and reinforced the purposes of Part 52 in the Energy Policy Act of 1992 (EPACT).

Application for Certification of the ABWR On September 29, 1987, General Electric Company applied for certification of the ABWR design in accordance with the procedures specified in 10 CFR Part 50, Appendix 0, and the Policy Statement on Nuclear Power Plant Standardization, dated September 15, 1987.

The application was docketed on February 22, 1988 (Docket No. STN 50-605).

On December 20, 1991, GE Nuclear Energy (GE), an operating component of General Electric Company's power systems business, requested that its Part 50 application be considered as an application for final design approval and subsequent design certification pursuant to 10 CFR 52.45.

Notice of receipt of this request was published in the Federal Register on March 20, 1992 (57 FR 9749), and a new docket number (52-001) was assigned.

GE's application, including the ABUR Standard Safety Analysis j

i Report (SSAR) up to and including amendment 35 (Revision 7) and 4

the Certified Design Material, Revision 6, is available for i

inspection and copying at the NRC's Public Document Room.

The NRC staff issued a final safety evaluation report (FSER) related to the certification of the U.S. ABWR design in July 1994 (NUREG-1503).

The FSER documents the results of the NRC staff's safety review of the U.S. ABWR design against the requirements of 10 CFR Part 52, Subpart B, and delineates the scope of the technical details considered in evaluating the proposed design.

A copy of the FSER may be obtained from the Superintendent of Documents, Government Printing Office, Mail Stop SSOP, Washington, DC 20402-9328 or the National Technical Information Service, Springfield, VA 22161.

The final design approval (FDA) for the U.S. ABWR design was issued by NRC on July 13, 1994, and noticed in the Federal Register on July 20, 1994 (59 FR 37058).

A revised version of the FDA was issued on November 23, 1994 and noticed in the Federal Register on December 1, 1994 (59 FR 61647).

After the FDA was issued, GE developed the Design Control Document (DCD) for the ABWR based upon staff guidance and direction.

The DCD contains information from the various documents comprising the design certification application for the ABWR standard design.

Its purpose is to provide, in a single document, design-related informaticn :o be incorporated by reference in the design certification rule.

The DCD contains the 5

i rrv-'

DCD Introduction, the Certified Design Material (i.e., Tier 1),

and the approved safety analysis material (i.e.,

Tier 2).

A copy of the DCD is available for examination and copying at the NRC's PDR, and may be purchased from National Technical Information Service, Springfield, VA 22161.

The Rulemaking Process and Development of the Proposed Rule Subpart B of 10 CFR Part 52 provides for Commission approval of standard designs for nuclear power facilities (eaa., design certification) through rulemaking.

In accordance with the Administrative Procedure Act (APA), 5 U.S.C. 553, Part 52 provides the opportunity for the public to submit written comments on the proposed design certification rule.

However, Part 52 goes beyond the requirements of the APA by providing the public with an opportunity to request a hearing before the Atomic Safety and Licensing Board in a design certification rulemaking.

While Part 52 describes a general framework for conducting a design certification rulemaking, Section 52.51(a) states that more detailed procedures for the conduct of each design certification will be specified by the Commission.

To assist the Commission in developing the detailed rulemaking procedures, NRC's Office of General Counsel (OGC) prepared a paper, SECY-92-170 (May 8, 1992), which identified 6

L issues relevant to design certification rulemaking procedures, and provided OGC's preliminary analyses and recommendations with respect to those issues.

SECY-92-170 was made public by the l

Commission, and a Commission meeting on this paper was. held on June 1, 1992.

Thereafter, in SECY-92-185 (May 19, 1992), OGC proposed holding a public workshop for the purpose of facilitating public discussion on the issues raised in SECY-92-170 and obtaining public comments on those issues.

The Commission approved OGC's proposal (See the May 28, 1992, Memorandum from Samuel J.

Chilk, secretary, to William C.

Parler (OGC)).

Notice of the workshop was published in the Federal Register on June 9, 1992 (57 FR

)

24394).

The notice also provided for a 30-day period following the worksh-p for the public to submit written comments on SECY-92-170.

A transcript was kept of the workshop proceedings and placed in the NRC's PDR.

OGC's final analyses and recommendations for design certification rulemaking procedures were set forth in SECY-92-381 (November 10, 1992).

This paper was prepared after consideration of the panel discussions at the public workshop and the written l

1 comments received after the workshop.

On April 30, 1993, the l

Commission issued a Memorandum to the General Counsel which set forth the Commission's determinations with respect to the procedural issues raised by the General Counsel's paper.

7

Since the issuance of 10 CFR Part 52, the NRC has been working on Subpart B implementation, including addressing issues such as the acceptability of using a two-tiered design certification rule and the level of design detail required for design certification.

On August 18, 1992, the NRC staff i

originally proposed a model design certification rule for evolutionary standard plant designs in SECY-92-287, " Form and r

Content for a Design Certification Rule."

On March 26, 1993, the NRC staff issued SECY-92-287A in which it responded to issues on SECY-92-287 which were put forth by the Commission and to specific questions raised by Commissioner Curtiss in a letter dated September 9, 1992.

Subsequently, the NRC staff modified the draft model rule in SECY-92-287 to incorporate Commission guidance and published a draft model of a proposed design certification rule in the Federal Register on November 3, 1993 (58 FR 58664), as an Advanced Notice of Proposed Rulemaking (ANPR) for public comment.

On November 23, 1993, the NRC staff discussed this ANPR in a public workshop entitled " Topics Related to Certification of Evolutionary Light Water Reactor Designs."

l All holders of operating licenses or construction permits were J

informed of the issuance of the ANPR and the planned public workshop through the issuance of NRC Administrative Letter 93-05 on OctoLer 29, 1993, Separate announcements of the workshop were also sent to the Union of Concerned Scientists, the Nuclear 8

Information and Resource Service, the Natural Resources Defense Council, the Public Citizen Litigation Group, the Ohio Citizens for Responsible Energy (OCRE), and the State of Illinois Department of Nuclear Safety on October 18, 1993.

An official transcript of the workshop proceedings is available in the NRC's PDR.

In SECY-95-023, the NRC staff submitted a proposed notice of proposed rulemaking for the ABWR to the Commission.

The Commission directed the staff to publish this notice of proposed t

rulemaking in the Federal Register for public comment.

On April 7, 1995, the Commission published a notice of proposed rulemaking (60 FR 17902) proposing to approve by rulemaking a standard design certification for the ABWR design.

In addition to providing public notice of the opportunity to submit written P

and electronic comments and discurcing the opportunity for any person to request an informal hearing on one or more specific matters with respect to the proposed design certification rule, the notice of proposed rulemaking provided a detailed description of the hearing process, the process for resolution of issues for the final rule, procedures for access to proprietary information, and ex parte and separation of functions restrictions.

The notice of proposed rulemaking also requested comments on a number l

of issues of specific interest to ti.e Commission.

l f

9

.. - - - -... -.. -.. -..... ~. -... - -. - - _..

Following the publication of the proposed rule, the NRC conducted public meetings to answer questions regarding the 1

proposed rule.

The first of these meetings was held on May 11, 1995, and featured a panel composed of representatives from the NRC Offices of Nuclear Regulatory Research, Nuclear Reactor Regulation, and General Counsel.

The meeting was attended by representatives from GE, the other design certification applicants, the industry, and a public interest group.

A transcript of this meeting is available for inspection and copying in the NRC Public Document Room in Washington, DC.

Another public meeting was held on June 27, 1995 in response i

i to a request from the Nuclear Energy Institute (NEI).

This meeting was attended by representatives from GE and the other design certification applicants as well as NEI.

The purpose of this second meeting was to answer NEI's questions regarding NRC's

[

i intent with respect to specific sections of the proposed rule, thereby assisting the parties in preparing their written j

r comments.

A meeting summary, dated July 13, 1995, is available from the NRC Public Document Room in Washington, DC.

l As discussed in more detail in Section IV below, written comments on the proposed rule were submitted by a number of i

persons.

GE submitted a reply to comments on the design of the

+

ABWR, and r proposed final rule and statement of conciderations.

f None of the comments requested a hearing.

Therefore, the 10 I

r f

i

Commission is issuing this rule based upon the information in the rulemaking docket, the comments received, and GE's reply and a final rule and statement of considerations.

II. Safety Findings The ABWR is an advanced light water nuclear power plant which utilizes proven boiling water reactor (BWR) technology.

Numerous design features and improvements have been incorporated to produce a robust design with a higher level of safety than those plants currently in operation.

For example, the probability of an event causing core damage is lower for the ABWR than for current plant designs and is at least two orders of magnitude lower than the Commission's safety goal, as stated in the Staff Requirements Memorandum (SRM) dated June 26, 1990, on SECY-90-016.

In addition, the ABWR standard design contains numerous severe accident prevention and mitigation features that substantially increase the capability of the ABWR to withstand f

severe accidents.

Finally, the ABWR contains features that address the NRC's severe accident and other technical positions in SECY-90-016 and SECY-93-087, as modified by the Commission.

Based upon the analyses in the ABWR SSAR, the ABWR DCD, the FSER for ti.e ABWR, and the other material on the docket, the Commission finds that the ABWR standard design satisfies the 11

Commission's policy on safety goals in 51 FR 28044 (August 4, 1986) and 51 FR 30028 (August 21, 1986), and concludes that the U.S. ABWR standard design provides adequate protection of the public health and safety.

Additionally, the Commission finds, as required by 10 CFR 52.54, that the U.S.

ABWR meets the applicable standards and requirements of the Atomic Energy Act and the Commission's regulations.

Therefore, the Commission is issuing this design certification rule for the U.S. ABWR in accordance with the requirements of 10 CFR 52.54.

III.

Summary Description of the Rule When the NRC added Part 52 to its regulations, it provided for issuance of early site permits, certification of standard designs, and the issuance of combined construction permits and operating licenses (COLs).

In these proceedings, the bulk of issues are resolved prior to construction and are not open to re-review or re-litigation in subsequent proceedings.

Specifically, in promulgating Part 52, the Commission sought to achieve the following goals:

Early resolution of licensing issues; Standardization; 2nhanced safety; and A more stable and predictable licensing process.

12 l

l

)

Egg, e.g., 52 FR 32060, 32060-1 (August 23, 1988); 54 FR 15372, 15372-6 (April 18, 1989).

A major purpose of rulemaking for standardized reactor designs is to realize the safety benefits of nuclear power plant standardization while, at the same time, achieving early resolution of licensing issues associated with those designs, thereby furthering both a more predictable and stable licensing process and more timely and effective public participation.

A design certification rule can be referenced in a subsequent application for a Part 52 combined license (COL) or for a Part 50 construction permit or operating license.

Except as provided in 10 CFR 2.758, all matters resolved in connection with the issuance of a design certification rule (i.e.,

all matters within the scope of the design approved by this rulemaking) will be treated by the Commission as resolved in any subsequent proceeding.

See 10 CFR 52.63 (a) (4).

Section 6 of the design certification rule provides a more complete description of the matters that have finality under Section 52.63 (a) (4).

In promulgating Part 52, the Commission recognized that there were safety benefits in maintaining standardization, and e

therefore determined to restrict the conditions under which generic or plant-specific changes could be made to a standardized design approved by the Commission.

.be Commission determined to restrict NRC-imposed changes to those that meet the backfit 13

. ~.,.

standards in 10 CFR 52.63 (a).

Pursuant to this section, the i

Commission may not modify, rescind, or impose new requirements on the certification unless it determines in a rulemaking that a modification is necessary to bring the certification or the referencing planto-into compliance with the applicable NRC regulations, or to assure adequate protection of the public health and safety or the common defense and security.

i As respects any plant-specific changes which may be required by the NRC for the certified design, in addition to satisfying the aforesaid standards, special circumstances, as defined in 10 CFR 50.12(a), must be present and consideration must be given to whether those special circumstances outweigh any decrease in safety that may result from the reduction in standardization caused by the plant-specific order.

Pursuant to 10 CFR 52.63 (b),

similar constraints also apply to proposed facility-specific design changes to the certified design by an applicant for or l

holder of a license that references a standard design certification.

s The Commission recognized, however, that an applicant or I

licensee of a plant that references a standard design may be obliged to deviate from the standard design to accommodate the j

particularities of procurement, as-built construction needs, or technological improvements.

For this reason, Part 52 provides i

i I

L 14

-. - - - _ -.. _ _ ~. _ _ _ _. _ _.. ~ -

.. ~ - - - -. - _ - -. -

t for appropriate change flexibility through use of a process i

similar to that of 10 CFR 50.59.

=..

To accommodate both the oojective of design standardization and the need to permit limited change flexibility, designs approved in a design certification rule have been divided into two parts or tiers:

Tier 1, which describes the most salient safety aspects of the design features (referred to as the

" certified design"); and Tier 2 (referred to as the " approved design"), which describes the more detailed design information approved by the rule and from which Tier 1 is derived.

A fuller description of the bases for determining the design information to be contained.in each tier is set forth in Section 14.3 of the SSAR and Tier 2 and the corresponding section of the NRC's FSER.

More stringent criteria have been established in Section 8 of the design certification rule for making changes in the certified design in Tier 1 than for the more detailed design information in Tier 2.

A two-tiered structure has been inherent in Part 52 from the i

outset.

In promulgating Part 52, the Commission recognized that, i

while all of the information in a design certification application would be subject to Commission review and approval, I

only those safety significant aspects of the design features would. comprise the certified design portion of the rule.

In particular, the Commission stated:

15 i

i The Commission does-expect, however, that there will be less detail in a certification than in an application for certification, and that a rule certifying a design is likely to encompass roughly the same design features r

that S 50.59 prohibits changing without prior NRC approval.

(54 FR 15372, 15377 (1989)).

This Commission expectation is codified in 10 CFR 52.63(b).

This section provides that facility-specific design changes by an applicant or a licensee will be subject to differing criteria, depending upon whether the proposed change pertains to the certified design '(Tier 1) or the remainder of-the approved design (Tier 2).

Under Section 52. 63 (b) (1), facility-specific changes to the certified design can be made only by means'of an exemption.

The Commission may grant an exemption request only if it determines that the exemption will comply with 10 CFR 50.12 (a) and that the special circumstances, which Section 50.12 (a) (2) requires to be present, outweigh any decrease in standardization caused by the exemption.

The granting of an applicant's exemption request is subject to litigation in the same manner as other issues in the COL or operating license hearing.

In contrast, Section 52.63 (b) (2) provides that, subject to Section 50.59, a licensee who references a standard design certification may make changes to the design, without prior Commission approval, unless the proposed change involves a change to the certified design (i.e.,

Tier 1).

As the Commission noted in the Statement of Considerations for Part 52, "S 50.59 will continue 16 i

i

to apply to the uncertified portion" of the approved design.

(54 FR'15377 (1989)).

This change process is sometimes referred to as the "50.59-like" change process since it is based upon the provisions of 10 CFR 50.59.

In order ta consolidate design-related information that is referenced by this rule into a free-standing master document, the Commission has developed the concept of a Design Control Document (DCD).

The DCD contains the Tier 1 and Tier 2 design-related information.

The DCD is incorporated by reference in Section 4 of the design certification rule.

Tier 1 for the ABWR includes the following information:

(1) Definitions and General Provisions; (2) Design Descriptions; (3) Inspections, Tests, Analyses, and Acceptance Criteria (ITAAC); (4) significant Interface Requirements for interfaces between systems within the scope of the ABWR standard desigr, and other systems that are wholly or partially outside the scope of the ABWR standard design; and (5) significant Site Parameters for' the ABWR standard design.

Tier 2 includes, to the extent technically applicable for the ABWR standard design, the following information: (1) the applicable information required for a final safety analysis report under 10 CFR 50.34 (b) ; (2) information related to the Three Mlle Island requirements unde: 10 CFR 50. 3 4 ( f ),

(3) technical resolutions of the Unresolved Safety Issues and 17

__j

medium and high priority Generic Safety Issues; and (4) important features identified from the probabilistic risk assessment (PRA) for the ABWR and a description of design features for preventing and mitigating severe accidents.

Tier 2 is essentially equivalent to the Standard Safety Analysis Report (SG AR), minus the details from the PRA and proprietary and safeguards information.

The Design Descriptions, Interface Requirements, and Site Parameters in Tier 1 are derived entirely from the provisions of Tier 2, and generally consist of the most salient safety aspects of the design features and functions.

Although the provisions in Tier 1 are derived from Tier 2, these provisions may be more general than the provisions in Tier 2.

Compliance with the more detailed Tier 2 material provides a sufficient method, but not the only acceptable method, for complying with the design provisions in Tier 1.

The change processes applicable to each tier are specified in Section 8 of the design certification rule.

With the exception of one additional provision, the criteria specified for performing 50.59-like safety evaluations for Tier 2 changes is the same as those currently used in Part 50 practice.

The additional provision expands the scope of 50.59 safety evaluatione (which traditionally have only applied to design basis accidents) to require evaluations of changes to the i

18 1

important severe accident and PRA features discussed in Section 19.8 of Tier 2.

As part of its approval of the design certification applications, the NRC staff created a concept called " Tier 2*".

The Tier 2* concept was an outgrowth of the staff's review of the design certification applications, during which the NRC staff concluded that there were certain design methodologies in Tier 2 that were not sufficiently important to warrant inclusion in Tier 1 and yet should not be changed without prior NRC approval.

The staff designated thete design methodologies as Tier 2*.

Section 2 of the design certification rule states that these Tier 2* provisions may not be changed without prior NRC approval (even if the change does not involve an unreviewed safety question).

This Section also states that the Tier 2*

restrictions expire at first full power, when the design will have been completed and the Tier 2* restrictions will have served their purpose.

i IV.

Analysis of Public Comments General Comments i

In response to the April 7, 1995 proposed rule, the Commission received written comments from nineteen organizations.

19 i

i

-. _ ~. - -. - - -. - -.... -.

i i

l Specifically, comments were provided by the industry trade organiz'ation Nuclear Energy Institute (NEI), by three design certification applicants including GE, thirteen nuclear.

. utilities, and the U.S. Department of Energy (DOE).

l

. Additionally, one public interest group, Ohio Citizens for Responsible Energy, Inc. (OCRE), submitted two sets of comments:

i one which responded to NRC's specific questions (see Section V below), and one which suggested certain changes in che ABWR design.

GE submitted a reply to the comments on the ABWR design i

and a proposed final rule and statement of considerations.

None i

of the written comments received included a request for a hearing on the proposed rule.

Therefore, the Commiss on is basing its decision to issue a design certification rule for the ABWR upon

[

t the rulemaking docket, including the written comments and GE's f

reply and proposed findings of fact and conclusions.

Copies of

[

these documents may be examined and copied at the NRC Public Document Room, 2120 "L"

Street N.W.

(Lower Level), Washington DC.

j In considering the comment s received, the Commission viewed the comments in light of the Part 52 and EPACT goals of creating j

a more stable and predictable licensing process, providing for early resolution of licensing issues, and enhancing safety i

through standardization of plant designs.

All commenters expressed support for the goals of the design certification f

i 20 r

t m

. ~,,. -.

,,. -. ~

m

_...._.___._._.__._._._...______..m__._._m.

i i

process.

None of the commenters (except OCRE) sought a change in i

the ABWR standard design.

NEI submitted extensive comments on behalf of the nuclear industry.

These comments were strongly endorsed by GE, Asea Brown Boveri-Combustion Engineering (ABB-CE), Westinghouse, and the nuclear utilities.

The industry's comments primarily focused on the process-related provisions in the proposed rule.

In general, the industry stated that a number of the proposed I

process-related provisions, which do not relate to the safety of l

the ABWR standard design, were inconsistent with or did not promote basic goals of Part 52.

In particular, the nuclear utilities, which are potential users of the design certification, strongly emphasized that these process-related provisions would threaten the viability of design certification for use by future i

license applicants for nuclear power plants.

DOE's comments forcefully made similar points.

As discussed in Section II above, the Commission has found j

that the ABWR complies with the applicable requirements and provides adequate protection of the public health and safety.

In fact, the ABWR satisfies by several orders of magnitude the Commission's goal on core damage frequency as stated in the SRM dated June 26, 1990, and represents a significant enhancement in safety relative to the current generation of nuclear power plants.

Since the process-related provisions in question are not 21

necessary to ensure the safety of the ABWR or to satisfy other statutory or regulatory requirements, the Commission has given careful consideration to the propriety of those provisions in light of the other important objectives of Part 52.

t In this regard, the Commission has previously stated in its SRM )n SECY-95-023 that "it is important that the potential COL app cants perceive the process to be workable from this point forward."

Given the enhanced safety of the ABWR standard design, the Commission believes it is sound policy to assure that the process-related provisions do not constitute unnecessary obstacles to the use of this improved design in the licensing of new nuclear plants.

If the industry does not view the design certification rule as supporting a workable licensing process, the rule will not be used and the enormous promise which design standardization holds will not be realized.

A.

Finality One of the principal purposes of Part 52 is to create a more stable and predictable licensing environment by resolving safety i

issues during design certification such that these issues have finality in later licensing proceedings (i.e.,

issues resolved during each stage are not subject to re-review by the NRC or re-litigation in licensing proceedings).

Defining the scope of issues accorded finality too narrowly would defeat the 22 i

)

i

i Commission's goal of creating a more stable licensing process --

and undermine design standardization as well -- by allowing I

unnecessary re-review or re-litigation of resolved issues at later stages of the licensing process.

Section 6 of the proposed design certification rule would have limited the scope of safety matters entitled to finality to t

the issues associatec'. with the information in the DCD and FSER.

1 Additionally, the NOPR and Section 8 (b) (5) of the proposed rule stated that changes to the DCD, wh.4ch are permitted by the rule, would not be considered matters resolved under Section 52.63 (a) (4).

F The industry and DOE objected to the limited scope of issues accorded finality and to the lack of finality for changes made in accordance with the provisions of the design certification rule, and also requested that finality be given to the design certification in all subsequent proceedings.

Each of these comments and the Commission's response is provided below.

Cbmment:

The industry and DOE stated that finality should be provided to a substantially broader scope of matters than those specified in the proposed rule to ensure the viability of the design certification for use in licensing proceedings.

In particular, the industry and DOE centended that the scope of e

issues accorded finality should be expanded to include the safety 23 Y

r

adequacy of the approved design, information contained in the Standard Safety Analysis Report (SSAR), secondary reference requirements and all other issues which, though not raised in the DCD, FSER, Technical Support Document (TSD) or Environmental Assessment (EA), were raised and resolved by the NRC staff during its review of GE's application for design certification.

In this regard, both the industry and DOE have stated that the design certification rule should explicitly recite NRC's finding regarding ehe safety and acceptability of the ABWR standard design.

In addition to citing the need for finality to ensure the viability of the design certification rule, the industry and DOE justified an expansion of the scope of finality by pointing to the broad language in Section 52.63 (a) (4), and by underscoring l

the extensive scope of the design review performed by the NRC and the wide public opportunity to participate in the rulemaking l

process.

Response

In implementing Part 52, the Commission intended to i

create a more stable and predictable regulatory environment by i

t resolving issues early in the licensing process such that they would have finality in later licensing proceedings.

In this regard, 10 CFR 52.63 (a) (4) states that "the Commission shall i

treat as resolved those matters rerolved in connection with the issuance or renewal of a design certification" (emphasis aaded).

i 24 e

n

=__.

.___-_ __ -. _ _. _ - ~ - _.. -.. _ _ _ _ _. _ _.

i Thus, in promulgating Part 52, the Commission intended to accord finality to the broad range of issaes necessarily resolved by design certification, and to prevent review and litigation of issues within the scope of the approved design in subsequent proceedings.

The design review and certification process has been long l

and comprer^nsive, involving the resolution of substantial numbers of issues in numerous applicant submittals and corresponding NRC reviews.

GE submitted an application which included a multi-volume standard SSAR.

Based upon the SSAR, i

amendments to the SSAR, and GE's responses to numerous requests for additional information, the NRC staff and the Advisory l

Committee on Reactor Safeguards (ACRS) condr.cted extensive

[

detailed reviews.

Using the results of these reviews, the NRC staff prepared a Draft and a Final Safety Evaluation Report (FSER) for the ABWR standard design, which approved the SSAR.

Finally, at the end of this process, the NRC required GE to i

prepare a Design Control Document (DCD) to describe the standard design and to control changes to it.

The FSER and DCD do not explicitly address all of the issues discussed in the SSAR, in the many meetings held between GE and the NRC staff /ACRS, or in the voluminous correspondence between GE and the NRC -- all of which is on the docket of this rulemaking and was subject to public comments and questions.

25

. _. ~. -....

i Limiting the scope of issues accorded finality solely to those contained in the FSER or DCD would be contrary to what has l

actually transpired in the proceeding, to the underlying support for this rulemaking, and to a basic Commission purpose in l

promulgating Part 52.

The Commission does not believe that matters reviewed by the NRC in connection with the design certification application should be subject to re-review or re-litigation in subsequent proceedings.

In light of the foregoing, the Commission has determined that finality should not be limited to those matters articulated in the FSER or DCD.

The rule, accordingly, has been modified to

{

recite NRC's finding regarding the safety and acceptability of

{

the ABWR design and to accord finality to all matters within the i

scope of the approved design, i.e.,

only site-specific matters

{

will be open for consideration in a license proceeding.

}

F Therefore, all matters on the rulemaking docket (including the SSAR and proprietary and safeguards information in the SSAR) or t

raised.in the design certification rulemaking proceeding will be considered resolved in any subsequent proceeding.

Similarly, material contained in documents which are referenced in the DCD (so-called " secondary references") will be accorded finality where the material in those documentary references is treated as i

a design certification requirement.

.f 26 i

Finality will also be extended to the conclusion that the ABWR design is sufficient as respects protection of the public health and safety, and that additional design features and functions are not necessary for that purpose.

This conclusion derives from 10 CFR 52. 63 (a), vthich precludes imposition of new requirements by rulemaking or plant specific order absent a determination of the need to assure compliance with the applicable NRC regulations in 10 CFR Parts 20, 50, 73, and 100, or to assure adequate protection of the public health and safety.

In particular, given the restrictions in Sections 52.63 (a) (1) and (3), NRC cannot order a plant to add a new structure, system,

\\

component, or design feature within the scope of the approved i

design unless the criteria in these sections are satisfied.

If NRC cannot require the addition of a structure, system, I

component, or design feature under Section 52.63 (a) (1) and (3),

1 it follows that the lack of need for such structure, system, component, or design feature is a matter resolved under Section

52. 63 (a) (4) -- in other words, the scope of design subject to finality under Section 52.63 (a) (4) is at least as broad as the scope of design subject to the change restrictions in Sections 52.63 (a) (1) and (3).

t I

Comment:

The industry and DOE stated that plant specific changes

[

made by an applicant or licensee in accordance with the change 27 i

~

process described in Section 8 of the rule should have finality.

In particular, the industry stated that the proposal to deprive i

50.59-type changes of finality would provide less finality to such changes under Part 52 than is currently provided to such changes under Part 50, and would be contrary to the goal of a more stable and predictable licensing process.

OCRE agreed that j

changes made after issuance of the COL should not be subject to challenge except under Section 2.206; however, OCRE also stated that changes made by a COL applicant should be subject to litigation in the COL hearing.

Response

All commenters and the NRC staff agree that 50.59-type changes made after issuance of a license should only be subject l

t to challenge under Section 2.206.

Thus, the only issue is I

whether 50.59-type changes should be subject to hearing at the f

i initial licensing stage, and whether changes in general should have finality and thus protection under 10 CFR 52.63(a) against i

NRC-imposed changes.

l In the proposed rule, changes to Tier 1 or Tier 2*,

and all

+

changes to Tier 2 that involve an unreviewed safety question or a change in the technical specifications, were not accorded finality in order to " minimize the consequences of the loss of standardization caused by these changes."

However, as pointed out by several commenters, the " consequences of the loss of r

28 4

t i.

~. _. _ _ _.. _ _. _ _

i standardization" caused by such changes arc not reduced by depriving such changes of finality.

Rather, the Commission finds i

merit in the proposition that the proposed restrictions on finality might discourage the industry from making changes that l

t increase the safety or effectiveness of the design, and thus could be counter-productive to safety.

Further, because such changes trigger requirements for prior NRC approval and afford

[

i the opportunity for a public hearing as part of the NRC approval process, there is no safety benefit to be gained, and a great i

deal of uncertainty and cost to be incurred, in subjecting NRC approved, and possibly litigated, changes to potential re-review l

and re-litigation in subsequent proceedings.

Giving due consideration to the Part 52 goal of a more stable and predictable licensing process, the Commission believes that finality should be accorded to such changes.

Therefore, the i

i Commission has modified the rule to accord finality to changes that have been approved by the NRC and were subject to an opportunity for a public hearing.

The Commission also believes that changes made by applicants and licensees in accordance with the 50.59-like process should be accorded finality.

Such changes do not require prior NRC approval, are not subject to an opportunity for a public hearing, and_are authorized by Part 52 and the design certification rule.

Furthermore, because such changes, by definition, do not involve j

29

..m an unreviewed safety question, those changes do not invalidate the NRC's safety determination for the affected portion of the standard design and do not warrant a hearing.

Finally, affording hearings for such changes would be contrary to the Section 50.59 1

change process and the goal of a more stable and predictable i

licensing process under Part 52, and would afford such changes less finality under Part 52 than is afforded to 50.59 changes under Part 50.

Therefore, the Commission has modified the rule to accord finality to changes made under the 50.59-]ike process.

Comment:

The industry stated that the design certification rule r

should provide for the finality of the design certification in e

all subsequent proceedings.

OCRE made similar comments in response to an NRC question in the NOPR.

I

Response

As discussed above, the Commission's intent in implementing Part 52 was to create a more stable and predictable regulatory environment by resolving issues early in the licensing process such that they would have finality in later licensing proceedings.

Therefore, the Commission has clarified in the final rule that finality is accorded in all subsequent proceedings involving licenses referencing the design certification, including license amendment proceedings, i

construction permit proceedings, and enforcement proceedings, as 30

well as COL proceedings, Section 52.103 proceedings, design certification renewal proceedings, and operating license

. proceedings.

B.

Applicable Regulations In SECY-90-016 and SECY-93-087, the NRC staff identified a number of positions on severe accidents and other technical issues that are not embodied in the current NRC regulations in Part 50.

The NRC staff proposed that the Commission adopt modified versions of these positions and technical issues as

" applicable regulations" for the ABWR standard design, i.e.,

to give them the effect of the Commission's regulations for the purpose of issuance and renewal of design certification, controlling changes to the DCD, and imposing backfits on the DCD.

In the NOPR, the Commission specifically sought comments on whether the " applicable regulations" set forth in Section 5 (c) of the proposed rule are justified (Seg Section V below).

The industry and DOE raised a number of objections to the

" applicable regulations."

Each of these objections is discussed below, together with the Commission's response.

Comment:

The industry stated that there is no requirement to establish ' applicable regulations."

The industry noted that 10 CFR 52.48 defines the applicable standards for the design 31

~..-_

]

certification as the technically relevant standards in Parts 20, 50, 73 and 100, and contains no allowance for the identification of additional " applicable regulations".

OCRE supported the NOPR's proposal for " applicable regulations," Sut appeared to do f

so only to respond to issues arising from operating experience and to reduce the risk of severe accidents.

Response

There is no requirement in Part 52 which compels the Commission to adopt these severe accident and other technical positions as " applicable regulations."

Additionally, 52.48 does not provide any authorization for the NRC to identify additional

" applicable regulations," except through an amendment to one of the aforementioned Parts of the Commission's regulations prior to issuance of the design certification.

Notwithstanding that Part 50 does not require the features that are the subject of the " applicable regulations," GE voluntarily agreed to include features in the ABWR standard design that conform with these new technical positions.

Promulgation of this design certification rule makes those s

voluntary features part of the rule's requirement.

Further, as discussed in the ABWR FSER, the NRC staff found that the standard design conforms with the staff's positions as modified and accepted by the Commission.

Thus, even if the " applicable s

regulations" are not incorporated into the ABWR design 32

certification rule, the Commission believes that the ABWR achieves the " higher standard of severe accident safety performance" mentioned in the Commission's Policy Statement on Severe Reactor Accidents (See 50 Fed. Reg. a ~38 (August 8, 1985)).

Comment:

The industry and DOE pointed to the Commission's SRM dated September 14, 1993, related to SECY-93-226 and the ANPR on severe accident issues, wherein the Commission directed the NRC staff to defer any generic rulemaking until after approval of the designs for the ABWR and System 80+.

The industry and DOE stated that the subject " applicable regulations" should not be implemented because they are, in fact, generic requirements.

The

" applicable regulations-for the ABWR and System 80+ are substantively identical (except for one position related to steam generator tube ruptures which is not relevant to the ABWR).

Response

In response to the ANPR on severe accidents, the Commission directed the NRC staff to defer generic rulemaking on severe accidents.

However, it was the Commission's expectation that the evolutionary plants, including the ABWR, would include measures to enhance safety, including enhanced protection against severe accidents.

The ABWR fulfills this expectation.

33 1

__..___..m__.

i I

r The proposed " applicable regulations" are not geared to the specifics of the ABWR standard design.

They are indeed generic,.

as evidenced by the fact that the proposed " applicable regulations" for the ABWR and System 80+ are substantively identical (except for one " applicable regulation" that does not 2. ate to the MTER).

The Commission believes that it is inappropriate at this time to be issuing generic regulations on severe accident and other technical issues that go beyond the existing requirements in the Commission's regulations.

i Furthermore, given the generic nature of the " applicable regulations," they are not consistent with the Commission's intent in promulgating Part 52.

Specifically, in the statement of considerations for Part 52, the Commission noted that new standard designs may incorporate new features not addressed by the Commission's regulations and that new criteria may need to be developed for such features.

In this regard, the Commission said that it would consider the need for rulemaking to resolve generic questions applicable to multiple designs.

However, the Commission went on to state:

The objective of such rulemaking would be to incorporate any new standards in Part 50 or Part 100, as appropriate, rather than to develop such standards in the context of the Commi.aaion's review and approval of individual applications for design certification.

i 34 l

,,.,,,.,,n.

54 FR 15372, 15376 (April 18, 1989).

Thus, the Commission indicated that it would not enact new generic regulatory standards, such as the " applicable regulations," as part of individual design certification rulemaking proceedings.

Comment:

The industry stated that the proposed " applicable regulations" are unnecessary because the DCD contains provisions that conform with each of the " applicable regulations."

In particular, GE demonstrated that each of the " applicable regulations" is addressed in whole or in part in Tier 1.

In contrast, OCRE stated that the " applicable regulations" were justified to respond to issues arising from operating experience and to reduce the risk of severe accidents.

The industry and DOE also stated that the proposed

" applicable regulations" would create substantial instability and uncertainty because they are " broadly stated," using vague and general terms -- terms such as "to the extent practical,"

" advanced" techniques, "most facilitate the ability of the operator," " reduce the potential for," "best estimate," " reduce the amount," "approximately," and " minimize."

The industry and DOE were particularly concerned that these terms could be used in the future to impose backfits on applicants and licensees that could not atherwise be justified on the basis of adequate protection of public health and safety, thus threatening the i

f 35 i

i

)

I viabiJity of the design certification rule, and reducing licensing certainty.

The industry and DOE also noted that the

" applicable regulations" do not have any technical bases normally provided with substantive rulemaking.

The industry additionally objected to the " applicable regulations" for a number of other reasons.

The industry stated that some of the " applicable regulations" contained programmatic l

requirements for licensees that are independent of the design i

being certified, that some " applicable regulations" are f

inconsistent with prior Commission directions, and that still j

other " applicable regulations" could be construed as being inconsistenc with the NRC-approved standard design.

Response

As discussed above, GE voluntarily agreed to include f

the features in the ABWR DCD necessary to address the NRC positions in question.

In particular, as demonstrated in GE's comments, each of the " applicable regulations" is addressed in whole or part in Tier 1, which is subject to the most stringent change controls.

Since the DCD is incorporated by reference in the design certification rule, the DCD is an applicable regulation for purposes of issuance and renewal of design certification, controlling changes to the standard design, and imposing backfits.

Therefore, there is no need to establish 36

~

i b

free-standing " applicable regulations" in order to accomplish the objectives sought by the NRC staff.

i For'the same reason, the " applicable regulations" are not necessary to accomplish the goals sought by OCRE.

The DCD already contains provisions that conform with each of the technical positions that are the subject of the " applicable regulations."

As a result, the DCD does respond to operating experience and reduce the risk of severe accidents, thereby achieving OCRE's goal without the need for " applicable regulations."

Further, as the commenters pointed out, the NOPR did not provide any technical bases for the " applicable regulations,"

and the proposed " applicable regulations" do contain some vague and general terms that could be susceptible to new 1

interpretations as the state-of-the-art evolves.

These new interpretations could be used to impose backfits even though the i

standard design is acceptable and backfits are unnecessary for adequate protection of the public health and safety.

This is especially true with respect to the broadly stated positions on severe accident issues, where new information is continuously l

being developed as a result of research programs.

t The imposition of such backfits would be contrary to a basic purpose of Part 52, i.e.,

to provide a more stable and predictable licensing process through early resolution of i

i I

37 i

l i

l I

licensing issues.

Further, if backfits are required for adequate protection of the public health and safety, NRC has the authority l

under Section 52.63 (a) to impose such changes, j

The proposed " applicable regulations" on shutdown risk, the reliability assurance program, and inservice testing would impose programmatic requirements on applicants and licensees that are j

independent of the standard design being certified.

The Commission believes that it would be inappropriate to use the f

i design certification rule to impose programmatic requirements on i

applicants and licensees.

If the NRC staff believes that l

t additional regulations are needed for such matters, it should request the Commission to amend Part 50.

Additionally, the j

proposed " applicable regulations" on fire protection, equipment j

survivability, and intersystem loss-of-coolant accidents (ISLOCA) are inconsistent with the Commission's SRMs on SECY-90-016 and SECY-93-087, and the proposed " applicable regulations" on ISLOCA, inservice testing, fire protection, offsite power sources, and core debris cooling could be construed as being inconsistent with 1

the NRC-approved design for the ABWR as described in the DCD.

As a result, adoption of the proposed " applicable regulations" would create substantial instability.

t Based on the reasons discussed above, the Commission t

believes that implementation of the proposed " applicable regulations" is unnecessary, would be inconsistent with the goals 38 i

i i

i i

of Part 52, and would undercut the stability of the standard design.

Therefore, the Commission has not included the proposed

" applicable regulations" in the final rule.

C.

NRC's Finding on ITAAC The proposed design certification rule incorporated the DCD, which contains inspections, tests, analyses and acceptance criteria (ITAAC).

The purpose of the ITAAC is to provide reasonable assurance that a plant has been constructed and will I

be operated in conformity with the license, the Atomic Energy Act and the Commission's rules and regulations.

However, the proposed rule did not specify the manner in which the NRC staff is to verify that ITAAC are met.

The industry and DOE requested that the Commission define in i

the design certification rule the matters to be considered by the NRC in making its finding that the ITAAC acceptance criteria have been met.

This comment and the Commission's response are discussed below.

]

Comment:

The industry stated that the NRC staff has indicated that, in making its finding that the ITAAC acceptance criteria have been met, the staff will be considering various quality assurance issues related to the hardware that is the subject of 39

the ITAAC (e.a.,

adequacy of the installation procedures for the hardware, adequacy of training of the personnel installing the

~

hardware, and adequacy of the documentation for installation and inspection of the hardware).

The industry stated that this approach undermines a basic objective of Part 52 and of the nuclear licensing provisions of the Energy Policy Act of 1992, and that it would essentially constitute a return to the two-step licensing process under Part 50.

The industry recommended that the Commission specify in the rule that compliance with ITAAC shall be determined by verifying that the required inspections, tests, and analyses have been successfully completed and that, based solely thereon, the corresponding acceptance criteria have-been satisfied.

DOE had a similar comment.

Response

The purpose and intent of ITAAC have been clearly established by the Energy Policy Act of 1992, Part 52 and various Commission papers.

ITAAC are intended to constitute an up-front and objective specification of the acceptance criteria for the constructed plant and the means for determining that the criteria have been met.

ITAAC enhance certainty for the licensee building the plant by spelling out before construction begins what conditions the completed plant must satisfy in order to operate.

At the same time, ITAAC provide NRC personnel with objective safety standards (i.e.,

acceptance criteria) with which to 40 l

i 1

measure the constructed plant in deciding whether the plant is safe to operate.

Because of the importance the Commission attaches to ITAAC implementation and their relationship to the f

design requirements established by this rule, the Commission agrees that the design certification rule should define the nature of the NRC's ITAAC verification procesa.

ITAAC for the ABWR properly focus on the end products and P

results of construction, i.e.,

whether the as-built plant condition is acceptable.

This focus of ITAAC reflects the recognition that it is the acceptability of the end products and results of construction -- not of underlying matters encompassed t

by the Quality Assurance Program (QAP) -- that is essential to the NRC's safety finding on the adequacy of plant construction.

Proper implementation of underlying programs and processes is encompassed by the QAP and assured by NRC inspection and enforcement thereof.

It follows directly that the focus of ITAAC on end products and results of construction -- and reliance on i

i the QAP for addressing underlying programs and processes -- must extend to ITAAC implementation, including their ultimate verification by the NRC.

Indeed, because of the special legal l

t significance of ITAAC under Part 52 (authorization to commence initial operation is solely dependent on ITAAC compliance, and properly supported contentions of ITAAC noncompliance are tie sole basis for the post-construction hearing opportunity), the 41

.~

1 NRC's verification of ITAAC compliance should focus on the end products or results specified in the ITAAC acceptance criteria and not on underlying quality assurance matters.

Therefore, to ensure that the goals of Part 52 will be achieved, the Commission has modified the proposed rule to specify that compliance with ITAAC shall be determined by verifying that the required inspections, tests, and analyses have been successfully completed and that, based solely thereon, the corresponding acceptance criteria have been satisfied.

The Commission would observe that the NRC retains plenary authority to take appropriate enforcement action to remedy QAP implementation deficiencies including, if necessary, action to modify, suspend, or revoke a combined license.

D.

Application of the Change Process to Severe Accident Evaluations and the PRA Under 10 CFR 50.59, a licensee may make changes in its safety analysis report (SAR) without prior NRC approval unless the change involves a change in the technical specifications or an unreviewed safety question (e,q, an increase in probability or consequences of an accident evaluated in the SAR).

Traditionally for Part 50 plants, Section 50.59 evaluations have only applied to evaluations of desio" basis accidents.

However, the proposed design certification rule would expand the scope of 1

42

l Section 50.59 evaluations to include not only changes related to design basis accidents but also changes related to the severe-accident evaluations and probabilistic risk assessment (PRA), as contained in Chapter 19 of Tier 2 of the DCD.

Furthermore, l

except for Section 19E, the proposed rule could be construed as 1

directing that a change in the severe accident evaluations and I.

PRA in Chapter 19 would constitute an unreviewed safety question 1

if the change would increase by any amount the probability or consequences of a severe accident evaluated in Chapter 19.

The industry and DOE objected to the scope of information in Chapter 19 that is subject to the 50.59-type process, and also objected to the criteria for determining whether a change in such information constitutes an unreviewed safety question.

OCRE also l

l recommended that certain changes be made in the criteria for unreviewed safety questions.

Each of these comments is discussed below, together with the Commission's response.

Commen t:

As a threshold issue, industry and DOE objected to the scope of the 50.59-type evaluations required by the proposed rule for severe accidents and the PRA.

The industry and DOE stated that the proposed expansion of the scope of Section 50.59 evaluations would cover all of the severe accidents in Chapter 19, many of which are of ext.remely low probability and are not significant to safety.

43 l

l

..~ ~.- - -.. - - -. - ~ - -- -. -..

l-The industry and DOE also stated that the important features identified by the severe accident evaluations and the PRA are contained in Section 19.8 of Tier 2 for the ABWR.

Since the Commission has previously stated that it desired to preserve the

-severe accident and PRA insights, and since application of the r

Section 50.59 change process to all of Chapter 19 would be burdensome and unnecessary to preserve these insights, the industry and DOE stated that the Commission should limit application of the severe accident change process to changes in the important features identified in Section 19.8.

t

Response

A key aspect of the ABWR standard design is that it achieves a significantly higher level of severe accident i'

protection than the current generation of nuclear plants.

The r

Commission believes that it would be beneficial to preserve the severe accident insights and features identified during the development of the ABWR standard design that contribute significantly to the mitigation or prevention of severe Lecidents.

To that end, the Commission issued an SRM on SECY-90-377 directing that such severe accident and PRA insights be preserved.

The important severe accident and PRA insights are identified in Section 19.8 of Tier 2, and the Commission agrees that the change process for severe accident and PRA information should be applied to that Section only.

44

~~~

~- _ _ _ _

i Expanding the scope of the change process to require a safety evaluation for every change in Chapter 19 would be extremely burdensome for both licensees and the NRC staff.

Chapter 19 is very extensive; it includes three volumes of material.

Given the nature of PRA and severe accident analyses, essentially every area of the plant is discussed in Chapter 19.

Thus, it may be expected that numerous plant changes will, in some manner, directly or indirectly affect Chapter 19 and therefore require safety evaluations.

Furthermore, much of the information in Chapter 19 discusses extremely low probability events, and other information in Chapter 19 addresses structures, systems, and components that have no intended safety function.

A requirement to perform safety evaluations for changes in such information would divert licensee resources from more safety significant issues while providing little or no commensurate improvement in safety.

Therefore, the Commission has modified the language in the rule and the DCD Introduction to limit application of the change process to those severe accident and PRA insights contained in Section 19.8 only.

Commen t:

The industry and DOE also objected to defining an unreviewed safety question as any increase in the probability or consequences of a severe accident.

The industry and DOE stated that, when performing S 50.59-type evaluations on changes related 45

to severe accident issues, only a substantial increase in the probability or consequences of a severe accident should be considered an unreviewed safety question.

i 4

Response

Chapter 19 evaluates accidents that have extremely low probabilities of occurrence and extremely high consequences, each of which has a relatively high uncertainty band.

As a result, changes which cause only minor increases in the probability or consequences of these accidents should not be considered unreviewed safety questions.

The impact on safety of such changes would be trivial, and ncne of the findings or conclusions in Chapter 19 or the NRC's FSER would be affected by such changes.

Therefore, a minor increase in the probability or consequences of a severe accident should not be defined as an unreviewed safety question.

Furthermore, because changes involving unreviewed safety questions require formal application to the NRC and NRC review and approval, defining an unreviewed safety question as any 1

increase in the probability or consequences of a severe accident wculd be unduly burdensome to both the NRC and the industry and would divert their resources from more important safety issues.

Based on the foregoing reasons, the Commission has modified the change process in the final rule to clarify that only a substantial increase in the probability or consequences of severe 46

_. -. _ _ _ _ _ ~ - _ _ _ _ _ _ _ _ _ _ _ _

1 i

i accidents will be considered an unreviewed safety question when performing S 50.59 evaluations of changes related to severe l

~

accident issues.

Comment:

OCRE agreed with the concept in Section 8 (b) (5) (iii) of I

the proposed rule, but recommended two changes in the criteria in that section.

First, OCRE stated that the reference in this section to a severe accident becoming " credible" should be deleted because the term " credible" is subjective and undefined.

Second, OCRE stated that another criterion should be added to this section; namely, that an unreviewed safety question should exist if "a possibility for a severe accident of a different type i

than any reviewed previously may be created."

l i

(

I Response: The Commission believes that there is value to i

retaining the term " credible" in the definition of unreviewed

{

safety question.

The ABWR DCD evaluates severe accidents that are of extremely low probability.

In some cases, the probability a

of a severe accident evaluated in the DCD could increase by several orders of magnitude, and yet the accident still would not be credible.

There is no reason for the Commission to define such changes as unreviewed safety questions and to require their l

prior NRC approval.

The Commission recognizes that the term 47

~~~T.

i l

" credible" is not currently defined.

However, the industry has stated that it will be developing guidance for implementing the l

~

change process witu respect to severe accident evaluations.

It is expected that this guidance will, among other things, define or provide-examples of what is deemed credible.

This guidance will be reviewed and, if appropriate, endorsed by the NRC staff.

i Therefore, it is not necessary to define this term in the rule

'l l

itself.

i i

Similerly, it is not reasonable to classify as an unreviewed i

safety question any change that creates a new severe accident I

scenario.

Given the nature of severe accidents, it will in i

general always be pcssible to postulate an accident scenario of exceedingly small probability that has not been previcusly j

reviewed.

If the criterion recommended by OCRE were adopted, t

essentially all changes could be construed as involving an unreviewed safety question.

The Commission believes that such a l

i result would be both unworkable and unnecessary for safety purposes.

Given the extensive nature of the severe accident I

evaluations in the DCD, it is not realistic to expect that a change will create a credible severe accident of a different type l

than previously reviewed in the DCD.

Therefore, the Commission does not believe that the inclusion of another criterion in Section 8 (b) (5) (iii) is warranted.

l l

t I

48 J

r-

,-,~,-,,_.-_.m

E.

Applicability of ITAAC to Part 50 applicants and licensees Part S2 permits a design certification to be referenced in a construction permit or operating license issued under Part 50.

The proposed design certification rule stated that an applicant for a construction permit or operating license who intends to reference the design certification under Part 50 would be required to meet the ITAAC for the certified design.

The NRC invited comments concerning the status of the design certification in the context of Part 50 licensing.

Comment:

The industry commented that, because ITAAC are uniquely applicable to COLs under Part 52, ITAAC should not be applicable to Part 50 applicants and licensees.

Part 50 provides an alternative means for accomplishing the purpose of ITAAC.

DOE had a similar comment.

OCRE stated that a construction permit (CP) applicant who references a design certification should be required to reference the ITAAC because the ITAAC are in Tier 1.

OCRE also stated that the operating license (OL) hearing with respect to design-related issues should be limited to issues related to compliance with the ITAAC.

OCRE recognized that, under its recommendation, a CP/OL would approximate a COL, and that it would be extremely unlikely i

that an applicant would ever opt for the CP/OL process rather l

than the COL process.

49 I

i

]

J

l

?

i.

Response

The concept of ITAAC was created by the NRC in promulgating Part 52 in order to facilitate the change from a two-step Part 50 licensing process to the one-step Part 52 1

licensing process wherein all safety issues -- except conformance of the constructed plant with the ITAAC -- are resolved before l

[

the license is issued and construction begins.

Specifically, the-Commission determined that it was possible for the NRC to resolve f

all licensing issues identified in Section 185 of the Atomic Energy Act during review of the application for a COL, except for j

the provision in Section 185 which requires the NRC to find that f

the plant has been constructed and will operate in accordance with applicable regulatory requirements.

The Commission established the concept of ITAAC to correspond with this I

provision in Section 185 of the Act.

Egg 54 FR 15372, 15380 i

(1989).

l Under Part 50, the purpose of ITAAC is accomplished through other traditional and well-understood means.

In particular, the I

NRC must explicitly find prior to issuance of an operating w

license that the plant has been constructed and will operate in f

conformance with applicable regulatory requirements.

See 10 CFR 50.57 (a) (1) and (2).

For Part 50 plants that will reference the i

design certification rule, the NRC can make this finding in the i

i same manner as it has always made its finding under Section 50.57, except that design-related issues resolved during design i

50

i I

i certification will have finality as provided in Section 52.63.

Interested members of the public will have an opportunity to litigate the Section 50.57 finding in hearings on issuance of the l

operating license.

There is another reason why ITAAC need not be applied to i

Part 50 plants.

The ITAAC are derived from the Tier 1 design i

descriptions, which themselves constitute a portion of the i

applicable DCD requirements.

The ITAAC contain no design provisions or acceptance criteria that are not contained in other i

portions of the DCD.

Thus, the ITAAC are not necessary to control the design, and are not necessary to the NRC's safety finding regarding the adequacy of the design.

If ITAAC were applied to Part 50 applicants and licensees, the Part 50 process would be indistinguishable from the Part 52 COL process with respect to the standardized portion of the plant i

and there would not be any reason to reference a design certification under Part 50.

This was not the Comm.ission's i

intended purpose in preserving an applicant's ability to reference a design certification in either a Part 50 or Part 52 t

license application.

Since the Commission intended design certification to be usable under either Part 50 or Part 52, the Commission has determined that ITAAC should not be applied to l

Part 50 licensing proceedings, to ensure that referencing of a t

i design certification in Part 50 licenses will be a viable option.

i 51 i

- ~ _,,,. -. _

OCRE implies that the Commission is required to impose ITAAC on Part 50 applicants that reference a DCD, because the ITAAC are part of Tier 1 of the DCD.

However, because Part 50 provides an alternative method for achieving the purpose of ITAAC, the Commission has the discretion with respect to Part 50 applicants to separate the ITAAC from the rest of Tier 1, and not to apply the ITAAC to Part 50 applicants.

For the policy reasons discussed above, the Commission believes it is appropriate to do so.

After consideration of the submitted comments, the Commission has modified the rule to provide that ITAAC are not applicable to Part 50 plants.

F.

Incorporation of substantive provisions in the DCD Introduction into the design certification rule The DCD contains an Introduction which prescribes how various provisions in the DCD are to be applied or utilized by license applicants and licensees.

The proposed rule stated that the DCD Introduction would not be part of the information in the DCD that is incorporated by reference in the design certification rule.

Further, the proposed rule stated that if there were a conflict between the DCD Introduction and the statement of considerations (SOC) for the design certification rule, then the SOC would be controlling.

s2 4

The industry and DOE stated that the substantive provisions in the DCD Introduction should be incorporated in the design certification rule.

This comment and the Commission's response are discussed below.

Comment:

The industry and DOE contend that the DCD Introduction 4

should be incorporated in the design certification rule.

The industry and DOE pointed out that the DCD Introduction contains a number of substantive provisions that are not in the design certification rule or expressly stated in Part 52, and that the SOC either neglects these provisions entirely or paraphrases these provisions imprecisely or incorrectly.

The industry noted that, in any case, the SOC is not legally binding and is not an adequate substitute for incorporating the 'CD Introduction into the rule itself.

Furthermore, it was an otjective of both NRC staff and industry that the DCD be a self-contained document which, therefore, required the incorporation of an adequate Introduction that explains the purposes and uses of the DCD.

In support of its position, the industry stated that GE spent several months in 1993 and 1994 in close consultation with the NRC staff developing the principles and text comprising the ABWR DCD Introduction.

The DCD Introduction was intended to i

reflect those principles and agreements between the staff and GE i

that were thought to be essential elements of the design 53

certification process, but were not discussed in Part 52.

i Accordingly, the final text of the DCD Introduction was carefully i

reviewed, revised, and finalized in meetings during the spring and summer of 1994 with senior representatives of the NRC staff and NRC's Office of General Counsel (OGC).

Public meetings were held by the staff and OGC in October and November 1994 to finalize the DCD Introduction on a section-by-section basis.

The DCD Introduction was drafted and finalized in the expectation that it would have the status of the rule itself.

Response

The DCD Introduction contains a number of substantive provisions that are not addressed in either Part 52 or the proposed rule.

For example, the DCD Introduction includes provisions governing compliance with ITAAC, the status of items designated in the DCD as COL License Information items, the applicability of ITAAC during operation, expiration of Tier 2*

restrictions, the status of proprietary and safeguards information, and the status of references to the Standard Safety Analysis Report.

Some of the substantive provisions in the DCD Introduction were imprecisely or incorrectly paraphrased in the SOC.

Other provisions were completely omitted from the SOC.

Such inconsistencies would inevitably lead to uncertainty and confusion.

However, even if such inconsistencies in the SOC were 54

.c.,

t eliminated, the SOC would not be a substitute for making the provisions binding requirements by incorporating the DCD Introduction directly into the rule.

i Further, the Commission sees no benefit in requiring applicants and licensees to refer to the rule's statement of considerations when the important provisions are readily available in the DCD Introduction.

Such a requirement would only lead to confusion over the applicable requirements and would be inconsistent with the objective of making the DCD a free-standing document.

Additionally, such a requirement is unnecessary, since the NRC has approved each of the substantive provisions in the DCD Introduction.

For all the reasons discussed above, the Commission believes that the ABWR DCD Introduction should be accorded the status of a rulemaking requirement by incorporating the DCD Introduction by reference in the design certification rule.

G.

The change process criteria The proposed rule stated that an applicant or licensee who references the design certification must obtain prior NRC approval for departures from Tier 2 information "if the change involves issues that the NRC staff has not previously approved" or "if changes were made to the DCD that violated (NRC ' s]

55

I resolutions without NRC approval."

60 FR 17912, 17913 (April 7, 1995).

The industry objected to these statements.

The industry's objection and the Commission's response are discussed below.

Cbmment:

The industry commanted that these provisions are contrary to and inconsistent with 10 CFR 52.63 and 50.59, and over 30 years of practice under Section 50.59.

i

Response

Section 50.59, which is incorporated by reference in 10 CFR 52.63 (b) (2), requires prior NRC approval for proposed changes, tests, or experiments that involve a change to the technical specifications incorporated in the license or an unreviewed safety question.

Both 10 CFR 50.59 and Section 8 (b) (5) of the proposed rule define "unreviewed safety question" in terms of the impact of the change upon safety, i.e.,

whether the change involves: (1) an increase in probability or consequences of an accident; (2) a new or different kind of accideno; or (3) a decrease in the margin of safety.

As the i

commenters point out, neither of these sections defines an unreviewed safety question in relation to issues previously i

approved or resolved by the NRC.

i Further, application of the proposed requirements would fundamentally alter over thirty years of practice under Section 56

50.59.

Neither the original Section 50.59 rule, issued in April 1961, nor any subsequent revision has required prior NRC approval of changes " involving issues that the NRC staff has not previously approved," nor has such a requirement been imposed in practice.

In addition, the language in the proposed rule would, in essence, prohibit almost all changes without prior NRC approval.

By definition, a change involves a departure from a provision that has previously been reviewed and approved by the NRC.

As a result, almost all changes either involve matters not previously approved by the NRC or involve a resolution that is different from the resolution discussed in the FSER.

Therefore, given the language in the proposed rule, applicants and licensees would be prohibited from making almost any change without first seeking prior NRC approval.

This result is contrary to Section 50.59 and the intent of the Commission in adopting the Section 50.59-like process for Tier 2 changes.

Therefore, the Commission is not adopting the quoted language from the NOPR.

H.

Change process implementation The industry objected to various provisions in che NOPR regarding the change process, including the requirement for exemptions for changes to technical specifications and Tier 2*

provisions, the frequency for submitting reports of 50.59-type 57

1

)

changes during construction, and the role of Section 52.63 (b) (2).

Each of these comments is discussed below, together with the Commission's response.

Commen t:

The industry stated that exemptions should not be required for changes to technical specifications or to Tier 2*

that do not involve an unreviewed safety question.

Response

While it was not the intent, the Commission agrees that Sections 8 (b) (4) and 8 (b) (5) (i) of the proposed rule could be read together to require an exemption for changes to the technical specifications or Tier 2* that do not involve an unreviewed safety question.

Therefore, the rule has been changed to clarify that changes to technical specifications under Part 52 will be treated in the same manner as technical specification changes for Part 50 plants, i.e.,

such changes will be subject to an application for a license amendment and will not require an exemption.

The rule has also been changed to clarify that Tier 2*

changes do not require an exemption unless they involve an unreviewed safety question.

It would be inconsistent to require exemptions for Tier 2* changes that do not involve an unreviewed safety question when exemptions are not required for other Tier 2 l

58

I t

changes that similarly do not involve an unreviewed safety 1

question.

Comment:

The industry stated that, under Part 50, licensees are required to submit summaries of Section 50.59 changes once every one to two years.

However, the NOPR stated that more frequent (quarterly) reporting of design changes during the period of construction is necessary to enable the NRC staff to tailor its inspection program for determining that the ITAAC have been satisfied.

The industry stated that quarterly reporting of Section 50.59 changes, as proposed in Section 9 (b) of the proposed rule, is overly burdensome and unnecessary, and that the frequency of reporting should be reduced to no more than once every six months.

Response

The proposed rule would have required a four to eight-fold increase in reporting frequency.

This would have imposed additional burdens on licensees without resulting in any increase in safety.

Because construction itself cannot impact public health and safety, and because the NRC has a variety of other mechanisms for staying informed of changes that may relate to the i

ITAAC (including resident inspectors), the Commission believes i

that quarterly reporting of Section 50.59 changes is unnecessary, and that reporting once every six months will be sufficient.

t 59 L

h n

m Therefore, the rule has been modified to require semi-annual reporting.

Comment:

The NOPR stated that there does not appear to be a need i

for 10 CFR 52.63 (b) (2) in a two-tiered structure.

The industry stated that Section 52.63 (b) (:2) is directly applicable to and is the basis for the change process for Tier 2.

Response

When Part 52 was written, Section 52.63 (b) (1) was intended to be the change process for the certified design, and i

Section 52.63 (b) (2) was intended to be the change process for f

information that was not certified but was approved.

As the two-i tier structure was developed, Section 52.63 (b) (: ' controls changes to Tier 1 (i.e.,

the certified design) while Section 52.63 (b) (2) controls changes to Tier 2 (i.e.,

the approved design).

Accordingly, Section 52.63 (b) (2) still serves a valuable purpose.

It provides an important underpinning for the two-tier structure as applied in the design certification rules. Therefore, the Commission intends to retain Section 52.63 (b) (2).

I f

60

I.

Post certification changes by the design certification applicant Section 52.62 and the proposed ABWR design certification rule allou the NRC, applicants and licensees to make changes in the ABWR standard design under carefully controlled conditions.

However, Part 52 and the proposed rule do not contain a provision that would allow the design certification applicant to make changes to the standard design after issuance of the design certification.

The industry and DOE recommended that the design certification rule include a provision to allow design certification applicants to make limited changes after certification and before the first license application referencing the design certification.

This comment and the Commission's response are discussed below.

Commen t:

The industry and DOE recommended that the design certification rule contain a provision that would allow the design certification applicant to make 50.59-like changes in Tier 2 prior to the first referencing license application.

In support, the industry reasoned that allowing the design certification applicant to make changes to Tier 2 prior to the first license application referencing the design certification 61 i

\\

.would promote standardization, economy and administrative efficiency.

Response

A basic purpose of Part 52 is to provide for and maintain standardization.

Allowing the design certification applicant to make post-certification Tier 2 changes under the 50.59-like process will promote standardization because such changes will be generic, and therefore applicable to all license applicants and licensees that reference the design certification.

I Additionally, such a process will be economical of resources, i

since only one 50.59 change for all plants (rather than a 50.59 i

change for each plant) will have to be processed.

Finally, this t

process will also ease the administrative burden on the NRC i

because the NRC will only have to review a qualifying change once, rather than repetitively for each license application.

l t

Therefore, the Commission has modified the final rule to provide for such changes.

The final rule includes requirements that will tightly control changes by the design certification applicant.

The types of changes permitted under this process will be limited to conform with the general principles embodied in Part 52.

Specifically, changes are limited to Tier 2 changes that have t

been evaluated under the 50.59-like process and determined not to involve either an unreviewed safety question or a change in 62 l

Tier 1.

Thus, changes are limited to those matters which, by definition, do not adversely affect safety.

Additionally, the design certification applicant will be responsible for taking inventory of proposed generic 50.59-type changes in Tier 2, for performing the requisite safety evaluations, for submitting summaries of the evaluations to NRC, and for effecting the changes that qualify.

Because NRC will be notified of the change and be provided with a summary of the safety evaluation for the change, the NRC will have an opportunity to review the change.

If, based upon its review, the NRC were to conclude that the change involves an unreviewed safety question or a change in Tier 1, the NRC could invalidate the change as being inconsistent with the design certification rule.

Additionally, because changes and summaries of their associated safety evaluations would be submitted to the NRC and, in turn, placed in the NRC's Public Document Room, both the public and prospective license applicants will have full access to relevant information related to the change.

J.

Secondary References The proposed rule stated that "an applicant for a construction permit or COL, or licensee that references this certified cesign must conform with all of the requirements from the DCD, including codes, standards, and other guidance documents 63

that are referenced in the DCD" (so-called secondary references).

60 FR 17909 (April 7,

1995).

Cbmmen t:

The industry commented that not all secondary 1

references in the DCD are intended to create requirements, and i

that the context of the reference indicates whether the reference is intended to be a requirement.

Therefore, the final rule should clarify the status of these " secondary references."

Response

The DCD cites secondary references for a number of purposes.

Some of the secondary references are cited to impose requirements.

However, in context, it is clear that other secondary references in the DCD are not intended to be requirements.

For example, some references contain information regarding historical events discussed in the DCD (e.g.,

references to the Browns Ferry fire and TMI-2 accident).

Other secondary references merely contain source information (but not requirements) related to matters discussed in the DCD (e.q,,

Information Notices).

In other cases, references are made to documents or information for the purpose of explaining why the information is not applicable to the standard design (the ABWR DCD explains that some Bulletins and Generic Letters are not applicable to BWRs).

Thus, it is clear that not all secondary 64

references contain, or are intended to contain, requirements applicable to the standard design.

Although it was not the Commission's intent, the language in the NOPR could be construed as implying that all secondary references contain requirements.

Therefore, the Commission is hereby clarifying that not all secondary references are requirements, and that the context of the secondary reference within the DCD indicates whether a specific secondary reference contains a requirement.

K.

Duration of the design certification Commen t:

Section 7 of the proposed design certification rule for the ABWR stated that the duration of the design certification is for a period of fifteen years from May 8, 1995.

GE stated that the effective date of the ABWR design certification should begin 30 days after publication of the final rule in the Federal Register, as provided in 10 CFR 52.55.

Response

The statement in question was included in the proposed rule as a result of a clerical error.

The duration of the ABWR design certification should be for a period of fifteen years beginning 30 days after publication of the final rule in the Federal Register.

The rule has been changed accordingly.

65

L.

Tier 2* Restrictions As part of its approval of the design certification applications for the ABWR and System 80+,

the NRC staff concluded that there were a limited number of provisions in Tier 2 that were not sufficiently important to warrant inclusion in Tier 1, yet which should not be changed without prior NRC approval.

The NRC staff designated these provisions in Tier 2 as " Tier 2*."

These provisions pertain to design methodologies in areas where detailed designs cannot presently be developed due to the lack of as-built data or rapidly changing technology.

Because these Tier 2* provisions pertain to design methodologies, the NRC staff designated that the Tier 2* provisions would, in general, expire at first full power, when development of the design details will have been completed.

The industry commented that the NRC treated the ABWR and the l

. System 80+ differently with respect to expiration of the Tier 2*

restrictions, and that all Tier 2* restrictions should expire at first full power.

These comments and the Commission *s response are discussed below.

Comment:

The industry commented that while the topics that are the subject of Tier 2* are generally the sarae for both the ABWR and the System 80+,

the Tier 2* restrictions related to equipment seismic qualification methods and reactor core acceptance 66

. ~.

criteria apply for the life of the ABWR, but expire at first full power for the System 80+.

The industry stated that the Tier 2*

expirations for these Tier 2* provisions in the ABWR DCD should be modified to be consistent with those for the System 80+.

Further, because all of the Tier 2* provisions relate to design methodologies, the industry stated that they will have been fully implemented by the time the plant reaches full power operation.

Therefore, the industry recommended that all Tier 2*

provisions for both the ABWR and System 80+ should expire at first full power.

Response

There is no reason to treat the restrictions related to equipment seismic qualification methods and reactor core acceptance criteria for the ABWR differently from the restrictions for the same subjects for the System 80+.

Therefore, the Commission has modified the ABWR DCD Introduction to make its Tier 2* expiration periods consistent with those for the System 80+.

The Tier 2* restrictions which expire at first full power pertain to design methodologies rather than the detailed design.

Since the Tier 2* provisions that currently do not expire at l

first full power (e,q., piping design acceptance criteria and human factors engineering) also pertain to design methodologies, there is no reason to distinguish them from the balance of the 67

Tier 2*

restrictions.

Therefore, to provide for consistent treatment of the Tier 2* provisions, the Commission has changed the design certification rule and the ABWR DCD Introduction to state that all of the Tier 2*

restrictions expire at first full power.

M.

Proposed Technical Specifications in Tier 2 r

Sections 8 and 9 of the proposed rule use the term

" technical specifications," which the NRC staff has indicated refers to the proposed technical specifications contained in Chapter 16 of Tier 2 of the ABWR DCD.

Under the proposed rule, changes to these Tier 2 technical specifications would require prior NRC approval and an exemption.

The industry objected to creating a.ieparate set of i

technical specifications in the DCD with a separate change process.

The industry's objection and the Commission's response are discussed below.

Commen t:

The industry commented that the NOPR's proposal would create two sets of technical specifications; one in the license for plant-specific technical specifications and one in the DCD for generic technical specifications.

Two sets of technical specifications would be confusing for operators and inspectors when trying to determine the applicable requirements.

Further, 68

I l

i maintenance of two sets of technical specifications would be burdensome.

The industry believes that plants should have a single set of technical specifications attached to the license, and this set should be subject to the same change process as is currently applied to technical specification changes for plants licensed under Part 50.

Response

Creating two sets of technical specifications, each subject to its own change process, is impractical and would be burdensome.

Dual technical specifications would require operators, NRC inspectors, and other affected personnel to refer to and compare two sets of technical cpecifications to identify the applicable requirements and determine the appropriate course of action.

In contrast, a single set of technical specifications would be significantly easier to implement and administer than two partial sets of technical specifications.

Additionally, the proposed technical specifications in Chapter 16 are unusable in their present form; they contain numerous blanks, e.g.,

for setpoints that must be determined from as-built information and as-procured information.

It will not be possible to complete these technical specifications until construction of the affected structures, systems, or components are complete.

Given the condition of the proposed technical specifications in Chapter 16, the only reasonable course of i

69

~--

action is to require an applicant for a COL or operating license (OL) to submit as part of its application a complete set of proposed technical specifications for approval by the NRC and attachment to the license.

This comprehensive set of technical specifications should be subject to one change process, i.e.,

the one currently used by.Part 50 licensees.

The technical' specifications submitted with license applications referencing a design certification rule will include the proposed technical specifications in Chapter 16 of Tier 2, including any changes mada in accordance with the change process for Tier 2 material, plus supplementary site-specific technical specifications developed by the license applicant.

The resulting l

integrated set of proposed technical specifications will be subject to NRC review and opportunity for hearing as part of the license proceeding.

Because Chapter 16 of Tier 2 has finality I

under 10 CFR 52. 63 (a) (4), the matters subject to NRC review and hearing will be limited to the site-specific portions of the technical specifications and any changes made by the license applicant in the proposed technical specifications in Chapter 16 of Tier 2.

This set of technical specifications, including any I

modifications resulting from the license proceeding, will be incorporated into the license as the governing technical specifications for the plant.

Licensees will be able to make

{

changes to the plant technical specifications in the license by I

70 I

i

.. ~.

requesting a license amendment pursuant to 10 CFR 50.90, the same process as for current licensees.

For the foregoing reasons, the Commission has modified Sections 8 and 9 of the rule to substitute the term " technical specifications in an operating license or combined license" in place of the term " technical specifications," and has modified Section 2 to state that the proposed technical specifications in the DCD are not effective for a licensee after issuance of its COL or operating license.

N.

PRA Information To Be Submitted by a COL Applicant The NOPR stated that, predicated on NEI's acceptance, there would be future generic rulemaking to require a COL applicant to have a plant-specific PRA that updates and supersedes the design-specific PRA.

Comment:

The industry noted that this provision in the NOPR was not consistent with NEI's previous statements or SECY-94-182, which would allow COL applicants to demonstrate that their plants are bounded by the design certification PRA in lieu of developing j

a plant-specific PRA.

Response: The Commission agrees that the NOPR was imprecisely worded and that COL applicants should have the option of either i

71

l l

preparing a plant-specific PRA, or demonstrating that the design i

certification PRA is bounding, or some combination of both.

~~

O.

Need for the DCD Comment:

DOE stated that the DCD is not necessary, and recommended that the design certification rule be simplified by eliminating the DCD.

In its place, DOE stated that the Commission should reference the Certified Design Material (CDM)

(which became Tier 1) and the Standard Safety Analysis Report I

(SSAR) (which became the basis for Tier 2, minus proprietary and safeguards information and the details of the PRA).

In this regard, DOE would apply essentially the same change process to the CDM and the SSAR as the change process recommended by the industry for Tier 1 and Tier 2, respectively.

Response

GE and the industry raised the same points as DOE when the NRC staff first suggested the concept of a DCD in 1992.

However, in compliance with directions from the staff, GE developed a DCD.

As GE points out in its comments, the ABWR DCD appropriately reflects various Commission policy decisions.

Given the current situation in which an acceptable DCD has been developed for the ABWR, the Commission believes that it is appropriate to reference it in the design certification rule.

Furthermore, since DOE is recommending that the Commission adopt 72

a process involving the CDM and the SSAR which is substantively equivalent to the process involving the DCD, there appears to be little or no benefit to administrative efficiency by eliminating the DCD and substituting for it the CDM and the SSAR.

If the Commission were to adopt DOE's proposal, changes would have to be made to the SSAR to reflect some of the policy decisions governing development of Tier 2 of the DCD, an undertaking which proved to be an extensive and costly effort.

Therefore, the Commission has decided to retain the DCD e.nd uca it as the basis for the design certification rule.

P.

Other clarifications requested by the industry Commen t:

The industry commented that there are two other provisions in the proposed rule that are ambiguous or incomplete and should be clarified.

First, Section 8(c) allows an applicant or licensee to request an exemption from the design certification rule, but does not identify any provision for making generic changes in the rule.

The industry stated that Section 8 (c) should be augmented to specify a process for making changes in the design certification rule other than Tier 1 or Tier 2 (i.e.,

through rulemaking under Subpart H of 10 CFR Part 2).

Second, the industry said that the language in Section 8(c) regarding i

exemptions from the design certification rule is confusing and i

l 73

should be reworded to more clearly identify the criteria to be applied to exemptions from the language of the rule.

Response

In addition to the change process for Tier 1 and Tier 2, the change process contained in the rule should provide criteria for making changes to provisions in the rule itself.

The rule should also clearly identify the criteria to be applied to exemptions from the language of the rule.

Therefore, the Commission nas added Section 8 (c) (1) to clarify that Subpart H of 10 CFR Part 2 governs generic (rulemaking) changes to the desian certification rule and to the DCD Introduction.

In addition, Section 8 (c) (2) was added to clarify that applicants and licensees may request an exemption from the provisions in this rule or the DCD Introduction pursuant to 10 CFR 50.12.

Q.

OCRE Comments Regarding the ABWR Design In its second set of comments, OCRE recommended that the design of the ABWR be modified to add a Leakage Control System for the Main Steam Isolation Valves, to double the capacity of the Standby Liquid Control System pumps, to provide an extra valve in series in the drywell to wetwell vacuum breaker lines, j

and to provide armored electrical cable.

GE provided a response i

to each of these recommendations, stating that none of the features recommended by OCRE is either required by the 1

74

i Commission's regulations or warranted to provide additional l

protection for safety.

The discussion below addresses each of OCRE's recommendations in more detail, and provides the Commission's response.

i l

Cbmment:

OCRE suggested that a Leakage Control System be added to the Main Steam Isolation Valves (MSIVs) in the ABWR atandard design.

In support of this request, OCRE stated that MSIVs have experienced excessive leakage in operating BWRs and that, in the event of a main steam line break outside of containment, fission product retention will not occur in the main steam lines and condenser.

Response

NRC regulations related to the MSIVs are provided in General Design Criterion (GDC) 54 and 55.

These GDC do not require an MSIV Leakage Control System (MSIVLCS).

Furthermore, the purpose of an MSIVLCS is to mitigate leakage through the MSIV during a loss of coolant accident (LOCA).

An MSIVLCS would not provide any significant additional protection during a main steam line break accident (MSLBA).

Specifically, during a design basis LOCA, the consequences of MSIV leakage could be significant because the reactor core is assumed to be damaged, releasing fission products to the i

i containment.

Some previous BWRs have installed an MSIVLCS to 1

75 s

e

B 4

mitigate the radiological consequences of MSIV leakage during a LOCA.

f However, the MSIVLCS is not a significant factor in i

mitigating the effects of an MSLBA.

The reactor core is not damaged in a MSLBA and the only radioactivity available for i

i release is that present in the reactor coolant and steam lines l

i prior to the bre 'k.

During a MSLBA, the total inventory of radioisotopes i the reactor coolant system is relatively small, and only a very small fraction of this would leak through the

)

l MSIVs.

Thus, the radiological consequences of MSIV leakage is much less significant during a MSLBA than during a LOCA because of the substantially smaller source term in the containment and reactor coolant.

As a result, operation of the MSIVLCS is not i

needed to mitigate the radiological consequences of an MSLBA.

l As an alternative to an MSIVLCS, the ABWR mitigates the l

i consequences of MSIV leakage during a LOCA through passive means.

The passive mitigation system uses the natural strengths of the l

steam supply system to cool and deposit out aerosols and other j

i forms of airborne fission products.

The steam lines, drain lines, and condenser are capable of removing significantly more

)

I airborne fission products (including much improved mitigation of noble gases) by slowly passing these contaminants over cool steel lines and through reservoirs of water than by use of an active i

1 leakage control system.

In addition, such lines, by the very l

1 76

fact that they are designed to handle high temperatures and pressures, are inherently strong and durable, and GE has provided i

higher standards for steamline and drain line integrity than in prior plants.

Specifically, GE applied appropriate seismic,

)

safety classification, and quality assurance requirements to assure that the quality of the systems, structures, and i

I components are commensurate with their importance to safety i

\\

during both operational and accident conditions.

i The ABWR design meets the offsite dose reference values set l

forth in 10 CFR Part 100.

The NRC staff evaluated the design of l

the passive mitigation system in the ABWR and found the ABWR j

design to be acceptable without an MSIVLCS, as discussed in the FSER for the ABWR.

i Based upon the above, the Commission has concluded that an MSIVLCS is neither required nor warranted for the ABWR.

1 Comment:

OCRE recommended that the capacity of each of the two

{

parallel Standby Liquid Control System (SLCS) pumps be increased from 50 gpm to 100 gpm.

In support of this request, OCRE stated that, in the event of a single failure, the resultant flow rate l

of 50 gpm would not comply with 10 CFR 50. 62 (c) (4 ).

i

Response

OCRE misstates the Anticipated Transient Without Scram (ATWS) rule in 10 CFR 52.62 (c) (4).

This section states that, in f

77

\\

l

i i

i l

addition to a diverse reactor trip system, eaca boiling water i

reactor must have a SLCS with a minimum flow capacity and boron i

content equivalent in control capacity to 86 gpm of'13 weight percent sodium pentaborate solution for a 251-inch inside diameter reactor pressure vessel.

This is equivalent to a 100 I

gpm flow rate for the'ABWR.

Although this rule requires the SLCS i

to be reliable, it does not require the SLCS to be able to i

withstand single failures.

The ABWR SLCS requires simultaneous parallel, two-pump operation to achieve the 100 gpm flow rate.

Using full two-pump capability (i.e., 100 gpm), the SLCS satisfies the ATWS rule.

The SLCS is also required to meet the requirements of GDC 27.

GDC 27 states that the reactivity control systems shall j

j be designed to have a combined capability for reliably t

controlling reactivity changes under postulated accident j

conditions.

As stated in NRC's Standard Review Plan (SRP)

Section 9.3.5, in order to accomplish this function, the SLCS I

l should have suitable redundancy in components and features j

assuming a single failure.

The ABWR design satisfies this requirement given its redundant active components and its capability to withstand single failures.

A failure of a single j

i SLCS pump or valve will not prevent adequate amounts of sodium i

pentaborate solution (i.e., 50 gpm) from entering the reactor t

78

I l

vessel.

A flow rate of 50 gpm is sufficient to effect shutdown, thereby satisfying both GDC 27 and SRP Section 9.3.5.

Based on the foregoing reasons, the Commission concludes that the SLCS satisfies the applicable regulations, and that the r

i SLCS need not be modified to provide for a 100 gpm flow rate assuming a single failure.

Comment:

OCRE recommended that a second vacuum breaker valve be i

added to each of the vacuum breaker lines between the containment drywell and wetwell.

In support of this request, OCRE stated that the current ABWR is susceptible to a single failure involving a stuck open vacuum breaker valve, which could result in suppression pool bypass and overpressurization of the containment during design basis and severe accidents.

Response

NRC's basic functional design requirements for containments are provided in GDC 16 and 50.

These GDC do not require the installation of two vacuum breakers in series as OCRE proposes.

The purpose of the wetwell-to-drywell vacuum breaker system t

(WDVBS) is to protect key containment structures against large negative pressure differentials (i.e.,

lower drywell pressure relative to wetwell pressure) postulated during hypothetical LOCAs.

There are eight separate vacuum breaker lines extending i

i 1

I 79 1

, - - -. - ~,, -

___m i

?

?

f t

t f

from the lower drywell to the wetwell airspace, with one vacuum breaker valve per line, The system design accounts for a single j

i failure involving one vacuum breaker valve failing closed.

l t

The vacuum breaker valves have features which reduce the I

probability of stuck open valves.

The vacuum breakers are simple j

check valves.

During normal operations, the vacuum breaker valve

{

disk is held closed by the disk's weight because of the valve's offset design.

Initial drywell pressurization during LOCA

{

provides a large positive differential pressure which acts as a force to hold the vacuum breaker valve closed.

The vacuum r

breaker valves are opened when a negative differential pressure develops across the valve disks.

Thus, these valves require no i

external power to open, and more importantly, no inadvertent i

signal will cause them to open prematurely, or result in them being held open unintentionally.

Additionally, there are redundant, single-failure-proof position indicators in the main c.ontrol room for these valves.

These indicators provide on-line verification that the valve disks are seated.

Furthermore, the f

technical specifications for the ABWR require plant shutdown if a j

vacuum breaker valve is open.

Therefore, it is highly unlikely that a vacuum breaker would be open during normal plant e

operation.

i Further, unlike some existing BWRs, the containment and t

WDVBS for the ABWR have been engineered to eliminate vacuum 80 l

. _ ~ _ _ _ _ _

breaker operation (and thus the possibility of failure to reclose) during the initial LOCA response when the containment i

pressure and the resulting consequences of suppression pool i

-bypass are the highest.

The vacuum breaker valves are thus

" passive" during the blowdown phase of a postulated LOCA, thereby eliminating the threat of a single active failure and suppression l

pool bypass at this critical juncture.

Furthermore, the severe accident evaluations of the ABWR containment demonstrate that if

opened, (e.g., during the post-LOCA blowdown period), a vacuum breaker valve has a low probability of failing to close.

I Even if it were assumed that a vacuum breaker valve were stuck open following a LOCA blowdown in response to steam condensing in the drywell, the consequences associated with the failure of the vacuum breaker valve to close would be mitigated by use of containment spray which provides steam suppression and' f

fission product removal.

In the event of a severe accident (i.e., beyond the design basis) involving the failure of the l

containment spray, the ac-independent water addition (ACIWA) system can be actuated and provide flow to the containment spray.

l Additionally, further protection is provided.by the Containment Overpressure Protection System, which would function to relieve overpressure, preserve the containment, and allow it to l

t subsequently perform its function, if required.

i 81 l

i

?

For all of the forgoing reasons, the Commission has decided t

not to require the addition of a second vacuum breaker valve in i

series for the ABWR design.

I Comment:

OCRE recommended that armored electrical cable be used i

in the ABWR standard design.

In support of this request, OCRE i

referred to a statement in 1989 by two ACRS members on a matter outside of the ABWR docket, who said that armor helps protect cables against fires from external heat sources and internal short circuits and overloads; provides mechanical protection of l

cables; and shields against electromagnetic pulses.

Response

NRC regulations do not require the use of armored cable.

Furthermore, the ABWR includes features to limit the effects of fires, mechanical damage, and external electromagnetic t

i, fields on electrical cable.

i Fire protection measures have been incorporated in the ABWR i

design which provide significantly greater protection than the fire protection requirements contained in Appendix R to 10 CFR Part 50.

First, the ABWR has been designed to accommodate the effects of fires.

Safe shutdown of the ABWR can be achieved while assuming that a fire in any fire area renders an entire division of equipment inoperable, including equipment outside of the affected fire area.

Second, to reduce the propagation and L

5 82 i

.~..

. ~~

t I

effects of cable tray fires, electric cables within each safety l

division have been grouped in separate trays according to size I

and function to the extent practicable.

Grouping cables in this manner reduces the risk that a fire which starts in a large power cable will disable that division's instrumentation and control cabling.

Additionally, the ABWR uses fire-resistant and non-propagating cables.

Third, to ensure that fires can not j

propagate between divisions, the ABWR has 3-hour fire barriers installed between equipment of different divisions.

Deviations 1

from this design criterion have been identified and analyzed on a I

case-by-case basis to ensure that a fire in an area that contains

{

i equipment from more than one division does not affect the ability l

to bring the plant to cold shutdown.

Finally, the ABWR has three l

separate divisions of safety-related equipment.

The ABWR design ensures that two divisions of equipment, each independently f

capable of brinaing the plant to cold shutdown, remain available for all postulated fire scenarios.

In summary, even if it is postulated that a fire impacts an electrical cable, the ABWR has a number of design features which f

ensure that the plant can be safely shutdown.

Therefore, armored r

cable is not needed as a fire protection feature.

t The ABWR also provides mechanical protection for cables.

l Specifically, electrical cables are installed in trays and j

i i

83

+

l

.____-_._____..__m

.I conduit.

Therefore, armored cable is not necessary to provide 1

protection against mechanical damage.

The ABWR design also incorporates several design features which protect against electromagnetic interference (EMI).

Covered cable trays or conduit provide protection of sensitive cables against the effects of EMI.

In critical applications, GE has specified the use of cable consisting of twisted pairs and/or shielded construction to provide edditional protection against l

EMI Furthermore, as discussed above, the ABWR has maintained physical separation of divisional equipment, which provides L

protection against a localized magnetic field affecting more than one division.

Finally, the ABWR instrumentation and control systems primarily use fiber optics which is immune to EMI, l

i lightning, and other radiated noise.

Therefore, armored cable is not required for protection against EMI.

Some characteristics of armored cable make its use i

undesirable.

For example, armored cable is significantly heavier than other traditional types of cable, which would result in I

increased seismic loads to associated components.

Further, armored cable is significantly more difficult to install than more traditional cable.

Armored cable has a much larger minimum i

bend radius and is difficult to place in cable trays or pull through conduits.

Additionally, the termination of armored cable is significantly more complex.

84

For all of the foregoing reasons, the Commission has decided not to require the use of armored cable in the ABWR.

V.

Responses to Commission's Request for Comments In addition to a general invitation to submit comments on the proposed rule, the DCD, and the environmental assessment, the NRC also invited specific comments on the following questions:

1.

NRC Request:

Should the requirements of 10 CFR 52.63 (c) be added to a new 10 CFR 52.79(e)?

Commen ts:

The proposed change is administrative in nature, and thus does not change any substantive requirements.

On that basis, the commenters had no objection to the proposed change in Part 52.

NRC Response:

As noted by the commenters, the proposed change is administrative in nature.

The NRC believes the change clarifies what information is to be submitted as part of the application.

Because there were no objections, NRC plans to add a new section 52.79(e) as proposed.

This addition will be included as part of a larger rulemaking action to revise Part 52 to reflect the 85

lessons learned'from the first two design certification rulemakings.

2.

NRC Request:

Are there other words or phrases that should be defined in Section 2 of the proposed rule?

Comments:

None of the commenters identified additional terms to be defined in Section 2 of the design certification rule.

NRC Response:

The NRC agrees with the commenters that it is unnecessary to define additional words or phrases in Section 2 of the rule.

3.

NRC Request:

What change process should apply to design-related information developed by a COL applicant or holder that references this design certification rule?

Commen ts:

The industry explained that changes to the Final Safety Analysis Report (FSAR) submitted by license applicants will be controlled by 10 CFR 50.54 and 50.59, which are incorporated by reference in 10 CFR 52.63.

Under the terms of the design certification rule, applicants and licensees must also consider the impact of changes on Tier 1 and Tier 2.

If a proposed change affects Tier 1 or Tier 2, the change process in 86 l

the design certification rule would apply.

Performance of tests and experiments not described in the FSAR or DCD is covered by Section 50.59, which is applicable to licensees.

Therefore, there is no need for the design certification rules to address such tests and experiments.

The industry stated that other detailed design information (e,q., design specifications and drawings) developed by a license applicant will be treated similarly to detailed design information developed by Part 50 applicants and licensees.

For example, chenges in safety-related design specifications and drawings will be subject to the controls in Criterion III of Appendix B to Part 50; however, such changes will not be subject to 10 CFR 50.59 and will not otherwise require prior NRC review and approval.

OCRE stated that the change process for the license applicant or holder should be that set forth in Section 8 (b) (5) (1) of the design certification rule.

Additionally, OCRE stated that design-related information developed by the license applicant or holder must not have issue preclusion and must be subject to litigation in the COL hearing.

NRC Response:

The Commission has concluded that the existing provisions in Part 50 and Part 52 provide sufficient controls over design-related information developed by an applicant or 87

i l

licensee, and that additional controls need not be included in the design certification rule.

In this regard, it should be emphasized that changes in j

i design-related information developed by the license applicant or holder will have to be reviewed against the information in Tier 2, and that any changes in Tier 2 will be subject to Section 8 (b) (5) (i), as suggested by OCRE.

Additionally, any design-related information developed by the license applicant and included in the license application will be subject to litigation in the licensing hearing.

However, to the extent that there is a change in information developed by the license applicant or holder that does not affect the DCD, the licensee will be able to make changes in that information pursuant to Section 50.59 and Appendix B, as applicable.

4.

NRC Request:

Are each of the " applicable regulations" set forth in Section 5(c) of the proposed rule justified?

Commen ts:

As discussed in detail in Section IV.B above, the industry and DOE raised a number of objections to these added

" applicable regulations."

OCRE stated that the " applicable regulations" were justified to respond to issues arising from operating experience and to reduce the risk of severe accidents.

88 s

i l

NRC Response:

In response to GE's, the industry's, and DOE's I

comments discussed in Section IV.B above, the Commission has determined that the " applicable regulations" are unnecessary and would decrease the stability and predictability of the licensing process.

Accordingly, the proposed " applicable regulations" have not been included in the final rule.

The DCD contains provisions that conform with each of the technical positions that are the subject of the " applicable regulations."

As a result, the " applicable regulations" are not necessary to accomplish the goal sought by OCRE; namely, to respond to operating experience and reduce the risk of severe accidents.

5.

NRC Request:

Section 8 (b) (5) (i) authorizes an applicant or licensee who references the design certification to depart from Tier 2 information without prior NRC approval if the applicant or licensee makes a determination that the change does not involve a change to Tier 1 or Tier 2*

information, as identified in the DCD, the technical specifications, or an unreviewed safety question as defined in Sections 8 (b) (5) (ii) and (iii).

Where Section 8 (b) (5) (i) states that a change made pursuant to that paragraph will no longer be considered as a matter resolved in connection with the issuance or renewal of a design certification within the meaning of 10 CFR 52.63 (a) (4), should this mean that 89

the determination may be challenged as not demonstrating that the change may be made without prior NRC approval or that the change itself may be challenged as not complying with the Commission's requirements?

Comments:

As discussed in detail in Section IV.A above, the j

industry and DOE stated that changes made in accordance with the design certification rule should have finality and should only be subject to challenge pursuant to 10 CFR 2.206.

In response to i

Question 6, OCRE agreed that changes made after issuance of the COL should only be subject to challenge under Section 2.206; however, OCRE also stated that changes made by a COL applicant should be subject to litigation in the COL hearing on the grounds that the criteria in Section 8 (b) (5) of the design certification rule were not satisfied or on the grounds that the change did not t

satisfy the Commission's regulations.

NRC Response:

All commenters and the NRC staff agree that changes made after issuance of a license should only be subject to challenge under Section 2.206.

As discussed in Section IV.A above, the Commission has concluded that changes made in accordance with 10 CFR 52.63 (b) and the change processes

[

specified in the design certification rule should be accorded finality in the license proceeding as well.

Providing an i

90 m

=

opportunity for hearings on changes that do not involve an unreviewed safety question would be inconsistent with 10 CFR j

1 50.59, the goals of Part 52, and long-standing NRC practice.

Therefore, the referenced provision in Section 8 (b) (5) (i) of the proposed rule has not been included in the final design certification rule.

Rather, the rule has been modified to state l

that changes nade in accordance with the design certification rule have finality.

6.

NRC Request:

How should the determinations made by an applicant or licensee that changes may be made under Section 8 (b) (5) (i) without prior NRC approval be made available to the public in order for those determinations to be challenged or for the changes themselves to be challenged?

Commen ts:

The industry stated that a mechanism already exists for informing the public of changes made pursuant to Section 8 (b) (5) ti) of the design certification rule.

Specifically, pursuant to 10 CFR 50.59(b) and Section 9(b) of the design certification rule, an applicant or licensee must submit periodic reports to the NRC which summarize changes made under Section 8 (b) (5) (1) ), and these reports will be available for public review in the NRC's Public Document Room.

OCRE made similar 91 i

i l

i l

comments, and also stated that the descriptions of the changes should be provided to parties in the COL proceeding.

NRC Response:

The Commission agrees with the commenters that the existing method of informing the public of changes made pursuant to 50.59 (b) is adequate for the purposes of the rule.

Furthermore, pursuant to the so-called "McGuire Rule," Duke Power Co. (William B.

McGuire Nuclear Station, Units 1 and 2),

ALAB-143, 6 AEC 623, 625 (1973), parties already have an obligation to inform the licensing board and other parties of new information that is material to the matters being adjudicated Accordingly, no change has been made to the rule.

7.

NRC Request:

What is the preferred regulatory process (including opportunities for public participation) for NRC review of proposed changes to Tier 2* information and the commenter's basis for recommending a particular process?

Comments:

The industry stated that changes to Tier 2*

information should be treated in a manner similar to the changes which require prior NRC approval under 10 CFR 50.54 (a), (p) an(.

(q).

Specifically, prior NRC approval should be in the form of a letter to the applicant or licensee which explains the basis for NRC's approval.

The change should be subject to an opportunity 92

.=.

m l

i for public hearing only as provided in 10 CFR 52.63 (b) (2) ;

i,e,,

an opportunity for public hearing would be provided only for those Tier 2* changes that also involve either a change in Tier 1, a change in the technical specifications in the license, or an unreviewed safety question.

OCRE commented that Tier 2* changes should be subject to approval as part of a license amendment proceeding.

In this regard, OCRE pointed to cases which state that a grant of authority for a licensee to do something that it could not otherwise have done under existing licensing authority is a license amendment.

NRC Response:

The Commission believes that changes to Tier 2*

information should be treated in a manner similar to the changes which require NRC approval under 10 CFR 50.54 (a), (p), and (q) as described in the comment.

There is no legal or practical reason to require license amendments or afford hearings on Tier 2*

changes that do not involve an unreviewed safety question.

The rule has been clarified accordingly.

The cases cited by OCRE are inapposite to Tier 2* changes.

These cases involved permission for venting of a containment in a situation in which a previous NRC order had explicitly prohibited venting, and authorization to engage in major component dismantling without an NRC approved decommissioning plan.

Unlike i

93

- =.

. ~ -

l l

these cases, a licensee is explicitly authorized by 10 CPR 50.59 and 10 CFR 52.63 (b) (2) to make changes (including changes in Tier 2 and Tier 2*) without a license amendment if those changes do not involve a change in the technical specifications, a change to the certified design (i.e., Tier 1), or an unreviewed safety question.

Given this authorization, it is clear that a change to Tier 2* requires a license amendment (or a hearing on an initial license) only if the change involves an unreviewed safety question, a change in technical specifications, or a change in Tier 1.

i OCRE's recommendation would render the distinction between Tier 2* and Tier 1 essentially meaningless.

A licensee may seek a change in Tier 1 only by means of an exemption from the design certification rule and a license amendment.

If a licensee were required to obtain a license amendment for Tier 2* changes, Section 8 (b) (5) (iv) of the design certification rule would also require an exemption for the change.

Thus, under OCRE's proposal, an exemption and license amendment would be needed for changes to either Tier 1 or Tier 2*.

This would negate the entire purpose for creating Tier 2*.

i 8.

NRC Request:

Should determinations of whether proposed changes to severe accident issues constitute an unreviewed safety questian use different criteria than for other safety issues 94

- =

t resolved in the design certification review and, if so, what should those criteria be?

Comments:

As discussed in detail in Section IV.D above, the industry and DOE stated that a change in the severe accident evaluations should constitute an unreviewed safety question only if there is a change to an important feature identified in Section 19.8 of Tier 2 and there is a substantial increase in the probability or consequences of a severe accident previously reviewed.

OCRE recommended that the reference to a severe accident becoming " credible" should be deleted and that another f

criterion should be added regarding the possibility for a severe accident of a different type than any reviewed previously.

NRC Response:

For the reasons discussed in Section IV.D above, the Commission has concluded that the definition of unreviewed safety question as applied to severe accidents should be modified to refer to a " substantial increase" in the probability or consequences of a severe accident.

The Commission also has concluded that safety evaluations should be performed only for those changes to the important severe accident features identified in Section 19.8 of Tier 2 for the ABWR.

For the reasons discussed in Section IV.D above, the Commission believes that the term " credible" should be retained 95 t

_ ~

~

~.

i because the ABWR DCD evaluates severe accidents that are of extremely low probability, and even substantial increases in such

~

probability should not be deemed an unreviewed safety question unless the severe accident in question were to become credible.

Similarly, it is not reasonable to classify as an unreviewed safety question a change that creates a new severe accident scenario, because it is always possible to postulate a severe accident scenario of exceedingly small probability that has not been previously reviewed.

9.

NRC Request:

9 (a) (1)

Should construction permit applicants under 10 CFR Part 50 be allowed to reference design certification rules to satisfy the relevant requirements of 10 CFR Part 50?

(2)

What, if any, issue preclusion exists in a subsequent operating license stage and NRC enforcement, after the Commission authorizes a construction permit applicant to reference a design certification rule?

(3)

Should construction permit applicants referencing a design certification rule be either permitted or required to reference the ITAAC?

If so, what are the legal consequences, in terms of the scope of NRC review and approval and the scope of admissible contentions, at the subsequent operating license proceeding?

i 96

~.

. -. ~.. -. -

e 4

(4)

What would distinguish the "old" 10 CFR Part 50 2-step process.from the 10 CFR Part 52 combined license process if a i

construction permit applicant is permitted to reference a design certification-rule and the final design and ITAAC are given full issue preclusion in the operating license proceeding?

To the extent this circumstance approximates a combined license,-without j

being one, is it inconsistent with Section 189 (b) of the Atomic Energy Act (added by the Energy Policy Act of 1992) providing specifically for combined licenses?

9 (b) (1)

Should operating license applicants under 10 CFR Part 50 be allowed to reference design certification rules to satisfy the relevant requirements of 10 CFR Part 50?

(2)

What should be the legal consequences, from the i

standpoints of issue resolution in the operating license i

proceeding, NRC enforcement and licensee operation if a design i

s certification rule is referenced by an applicant for an operating license under 10 CFR Part 50?

(c)

Is it necessary to resolve these issues as part of this design certification, or may resolution of these issues be deferred without adverse consequence (gmg., without foreclosing l

alternatives for future resolution)?

)

Comments:

The industry and OCRE stated that applicants for construction permits (CP) and operating licenses (OL) under Part 97

1 t

50-should be allowed to reference the design certification rule.

Any other result would be inconsistent with Part 52, which clearly states that applicants for Cps and OLs may reference a design certification (agg, e.g, 10 CFR 52.55(b), 52.55(c),

52.63 (a) (4), 52.63 (b) (1), and 52.63(c)).

Further, the industry I

I i

and OCRE stated that a design certification should have issue preclusion effect in subsequent proceedings, including OL and f

i enforcement proceedings; however, OCRE stated that an OL should i

not be allowed to reference a design certification if the l

I corresponding CP did not reference the certification.

j I

The. industry also stated that the rule should not require a construction permit applicant who references the design certification rule to utilize the ITAAC.

Such a requirement j

would, in essence, convert a CP into a COL and eliminate any reason for a CP applicant to reference a design certification j

rule.

OCRE stated that a CP applicant who references a design certification should be required to reference the ITAAC because

-the ITAAC are in Tier 1, but that the OL hearing with respect to design-related issues would be limited to issues related to compliance with the ITAAC.

OCRE recognized that, under its recommendation, a CP/OL would approximate a COL, and that it t

r would be extremely unlikely that an applicant would ever opt for

?

i the CP/OL process rather than the COL process.

l i

k

~

98 l

NRC Response:

The Commission believes that it is desirable to resolve these issues now and not defer them until after design certification.

As the industry pointed out, both the proposed rule and the DCD Introduction contain explicit and implicit provisions related to use of the design certification by license applicants and licensees under Part 50.

Therefore, the Commission agrees with the commenters that applicants for construction permits (CP) and operating licenses (OL) under Part 50 should be allowed to reference the design certification rule.

The Commission agrees with the commenters that the design certification should have issue preclusion effect in all subsequent Part 50 proceedings, including CP, OL, license amendment, and enforcement proceedings.

Any other tre'atment would lead to the inconsistent treatment of two identical plants, i

one being licensed under Part 50 and the other under Part 52, where adequacy of the design could be challenged in the Part 50 proceeding but not in the Part 52 proceeding.

The Commission also agrees with OCRE that an OL should be allowed to reference a design certification only if the corresponding CP referenced the certification.

Finally, the Commission has concluded that the ITAAC should not be applicable to a construction permit applicant who references the design certification, as discussed in Section IV.E above.

As the commenters recognized, a requirement for a CP to 99

reference the ITAAC would essentially make the CP/OL process indistinguishable from the COL process.

To preserve the value of design certification for use in Part 50 licensing proceedings, ITAAC should not constitute requirements for such proceedings.

Contrary to OCRE's statement, the Commission has the discretion to allow Part 50 license applicants to reference Tier 1 without requiring them also to reference the ITAAC.

VI.

Section By Section Analysis After careful consideration of all the comments received, the Commission has made both editorial and substantive changes to the text of the proposed rule.

Throughout the following discussion of the substantive modifications, the reader should refer to the text of the final regulations to aid in understanding the specific points of this discussion.

Section 1, Scope.

Section 1 is unchanged from the proposed rule.

Section 2, Definitions.

The following modifications have been made to the definitions provided in Section 2 of the rule:

100

. - ~

-=

' The definition of Design Control Document was modified to include the DCD Introduction, as well as Tier 1 and. Tier 2 information incorporated by reference into the design certification rule.

As discussed in Section IV.F above, the change was made because the DCD Introduction contains numerous substantive provisions that were not addressed in the text of the proposed rule, and therefore would have no binding effect unless i

the DCD Introduc.2.n is incorporated by reference in the design certification rule.

The definition of Tier 2 was modified to clarify that compliance with the more detailed Tier 2 material provides a sufficient, but not the only acceptable, method for complying with the more general provisions.in Tier 1.

Additionally, the definition was changed to state that the methods and provisions specified in Tier 2 shall be followed unless a change is made in accordance with the change processes specified in the rule.

Finally, the revised definition states that the design descriptions in Tier 1 pertain only to the design of ABWR structures, systems and components, not to their operation, maintenance or administration, and that, in the event of inconsistencies between Tier 1 and Tier 2, Tier 1 governs.

All of these new provisions are also part of the DCD Introduction, and are being included in the design certification rule to clarify that these provisions are regulatory requirements.

101

)

l The definition of Tier 2 was modified to reflect the changes in the definition of Tier i discussed above, and was expanded to explain the purpose of COL License Information Items, conceptual design information, references to the SSAR, and the role of proprietary and safeguards information in the ABWR SSAR.

These provisions are also in the DCD Introduction and are being included in the rule to ensure their binding effect.

Additionally, the definition of Tier 2 was modified to explain the status of the proposed technical specifications in Tier 2, as discussed in Section IV.M above.

Finally, the definition of Tier 2* was modified to clarify that a license or license amendment is not necessary for Tier 2*

changes, and that all of the Tier 2* restrictions expire at first full power, consistent with the discussion in Section IV.L above.

Section 4, Contents of the design certification.

Section 4 (a) was modified, consistent with the discussion in Section IV.F above, to incorporate the entire ABWR Design Control Document (including the DCD Introduction) by reference, not just Tier 1 and Tier 2.

In addition, the rule was changed to indicate that copies of the ABWR DCD can be purchased from the National Technical Information Service.

Section 4 (b) was revised to state that the ITAAC in Tier -

are not required for an application for a construction permit or 102 l

_-.a information shall be controlled in the same manner as changes to other Tier 2 information.

(e)

All other terms in this rule have the meaning set out in 10 CFR 50.2, 10 CFR 52.3, or Section 11 of the Atomic Energy Act of 1954, as amended, as applicable.

i P

r 3.

[ Reserved).

4.

Contents of the design certification.

(a)

The ABWR Design Control Document, GE Nuclear Energy, Revision 3

[date], is incorporated by reference.

This

[

incorporation by reference was approved by the Director of the l

Office of the Federal Register on [ Insert date of approval] in i

accordance with 5 U.S.C. 552 (a) and 1 CFR Part 51.

Copies of the U.S. ABWR DCD may be purchased from National Technical Information Services, Springfield, VA 22161.

Copies are also available for examination and copying at the NRC Public Document Room, 2120 L Street NW (Lower Level), Washington, DC 20555, and for examination at the NRC Library, 11545 Rockville Pike, Rockville, Maryland 20582-2738.

(b)

An applicant for a construction permit, operating license, or combined license that references this design certification shall reference both Tier 1 and Tier 2 of the U.S.

t 118 i

l

?

ABWR DCD.

However, the ITAAC in Tier 1 are not applicable to an applicant for a construction permit or operating license.

~.

(c)

If there is a conflict between the U.S.

1BWR DCD and either the application for design certification for the U.S. ABWR design or NUREG-1503, " Final Safety Evaluation Report related to the Certification of the Advanced Boiling Water Reactor Design,"

dated July 1994 (FSER), then the U.S. ABWR DCD is the controlling document.

5.

Exemptions and applicable regulations.

(a) 7te U.S. ABWR design is exempt from portions of the following regulations, as described in the FSER (index provided in Section 1.6 of the FSER):

i (1)

Section VI(a) (2) of Appendix A to 10 CFR Part 100 -

l Operating Basis Earthquake Design Consideration; f

(2)

Section (b) (3) of 10 CFR 5C.49 - Environmental

[

Qualification of Post-Accident Monitoring Equipment; (3)

Section ( f) (2 ) (iv) of 10 CFR 50.34 - Separate Plant Safety Parameter Display Console; (4)

Section (f) (2) (viii) of 10 CFR 50.34 - Post-Accident Sampling for Boron, Chloride, and Pissolved Gases; and I

(5)

Section ( f ) (3 ) (iv) of 10 CFR 50.34 - Dedicated Containment Penetration.

119

i (6)

Except as indicated in paragraph (a) of this section, the regulations that apply to the U.S. ABWR design are those regulations in 10 CFR Parts 20, 50,.73, and 100 [ July 1994], that i

are applicable and technically relevant, as described in the i

FSER.

I 6.

Issue resolution for the design certification.

i (n)

The Commission has found that the structures, systems, j

components, and design features of the standard design described in the DCD and FSER satisfy the relevant Commission regulations p

i and provide adequate protection of the health and safety of the l

public.

Inherent in this finding is the determination that i

additional or alternative structures, systems, components, design features, design criteria, testing, analyses, or justifications,-

I 7

are not necessary for the standard design.

The lack of need t

thereof is, accordingly, also considered a matter resolved in j

connection with issuance of this design certification rule.

i (b)

All nuclear safety issues associated with the f

information in the FSER or DCD, application for design

[

I certification of the ABWR including the ABWR Standard Safety Analysis Peport, docket of the application for design certification of the ABWR, and the rulemaking record for design

[

t certification of the ABWR are resolved within the meaning of t

e 120 i

i

_.-.,r

10 CFR 52. 63 (a) (4).

Within the scope of the standard design as discussed in the FSER and DCD, the NRC may not require an i

applicant or licensee to:

1 (1) provide structures, systems, components, or design f

I features not discussed in the FSER or DCD; or (2) provide additional design criteria, testing, analysis, or justification for structures, systems, components, or design r

l features discussed in the FSER or DCD; except in accordance with the change processes and other provisions of this design certification rule.

(c)

All environmental issues associated with the

[

information in the NRC's environmental assessment for the ABWR design or the severe accident design alternatives in Revision 1 of the Technical. Support Document for the ABWR, dated December I

1994, are resolved within the meaning of 10 CFR 52.63 (a) (4).

(d)

Any change made in accordance with the change process t

set forth in Section 8 of this design certification rule is

{

resolved within the meaning of 10 CFR 52.63 (a) (4).

(e)

The matters listed above shall be considered resolved

'n all subsequent proceedings, including proceedingt for issuance i

of a combined license, construction permit, or operating license; permit or license amendment proceed' gs: design certification and license renewal proceedings; proceedings under 30 CFR 52.103; and enforcement proceedings.

6 121

7.

Duration of the design certification.

i This design certification may be referenced for a period of 15 years from [ insert date 30 days after publication of the final rule in the Federal Register], except as provided for in 10 CFR 52.55(b) and 52.57(b).

This design certification remains valid for an applicant or licensee that references this certification until their application is withdrawn or their license expires, including any period of extended operation under a renewed license.

t 8.

Change process.

(a)

Tier 1 information.

(1)

Generic (rulemaking) changes to Tier 1 information are governed by the requirements in 10 CFR 52.63 (a) (1).

(2)

Generic changes to Tier 1 information are applicable to all plants referencing the design certification as set forth in 10 CFR 52. 63 (a) (2).

l (3)

Changes from Tier 1 information that are imposed by the Commission through plant-specific ordtrs are governed by the-requirements in 10 CFR 52.63 (a) (3)

(4)

Exemptions from Tier 1 information are governed by the requirements in 10 CFR 52.63 (b) (1).

i 122 i

5 (b)

Tier 2 information.

i (1)

Generic (rulemaking) changes to Tier 2 information are governed by the requirements in 10 CFR 52.63 (a) (1).

(2)

Generic changes to Tier 2 information are applicable to all plants referencing the design certification as set forth in l

r 10 CFR 52. 63 (a) (2).

(3)

The Commission may not impose new requirements by plant-specific order on Tier 2 information of a specific glant referencing the design certification while the design certification is in effect under SS 52.55 or 52.61, unless:

(i)

A modification is necessary to secure compliance with the Commission's regulations applicable and in effect at the time the certification was issued, or to assure adequate protection of l

the public health and safety or the common defense and security; and (ii) Special circumstances as defined in 10 CFR 50.12(a) are present.

(4)

An applicant or licensee who references the design j

i certification may request an exemption from Tier 2 information.

v The Commission may grant such a request only if it determines that the exemption will comply with the requirements of 10 CFR

[

t 50.12(a).

The granting of an exemption on request of an i

applicant must be subject to litigation in the same manner as 123 i

other issues in the construction permit, operating license, combined license, or permit or license amendment hearing.

(5) (1) An applicant or licensee who references the design f

certification may depart from Tier 2 information, without prior NRC approval, unless the proposed change involves a change to Tier 1 or Tier 2* information, as identified in the DCD, the technical specifications in an operating license or combined license, or an unreviewed safety question as defined in paragraphs (b) (5) (ii) or (b) (5) (iii) of this section.

When evaluating the proposed change, an applicant or licensee shall consider all matters described in the DCD, including generic issues and shutdown risk for all postulated accidents including severe accidents, but excluding the information in Chapter 19 of Tier 2 other than the information in Section 19.8.

(ii) A proposed departure from Tier 2 information, other than severe accident issues identified Section 19.8, shall be deemed to involve an unreviewed safety question if:

(A)

The probability of occurrence or the consequences of an accident or malfunction of equipment important to safety previously evaluated in the DCD may be increased; l

l (B)

A possibility for an accident or malfunction of a different type than any evaluated previously in the DCD may be created; or 124

-. ~ _ -

(C)

The margin of safety as defined in the basis for any technical specification in an operating license or combined license is reduced.

(iii) A proposed departure from information associated with severe accident issues identified in Section 19.8 of Tier 2 shall be deemed to involve an unrev'iewed safety question if:

(A)

There is a substantial increase in the probability of a severe accident such that a particular severe accident previously reviewed and determined to be not credible could become credible; or (B)

There is a substantial increase in the consequences to the public of a particular severe accident previously reviewed.

(iv) Departures from Tier 2 information made in accordance with Section 8 (b) (5) above, technical specification changes, and Tiet 2* changes that do not involve an unreviewed safety question do not require an exemption from this design certification rule.

(c)

Other requirements of this design certification rule.

(1)

Generic frulemaking) changes to the provisions in this Appendix or to the DCD Introduction are governed by the requirements of Subpart H of 10 CFP Part 2.

125

f (2)

An applicant or licensee may request an exemption from the provisions in this Appendix or the DCD Introduction in accordance with 10 CFR 50.12 (a).

(d)

Generic Changes to the DCD by the Design Certification Applicant (1)

Changes to Tier 1 - Any change to Tier 1 proposed by the design certification applicant shall be the subject of a request for proposed rulemaking in accordance with the provisions of subsection (a) of this Section.

(2)

Changes to Tier 2 - Prior to the first license application that references the DCD, the design certification applicant may make a change to Tier 2, unless the proposed change involves a change in Tier 1 or an unreviewed safety question.

Any change by the design certification applicant to Tier 2*

information designated in the DCD shall be subject to prior NRC staff approval.

(i)

The design certification applicant shall submit reports of any change in Tier 2 to the NRC.

The reports shall describe J

the change and provide a summary of a safety evaluation which provides the basis for the determination that the change does not involve an unreviewed safety question.

i 126

.. - =

(ii) For changes made hereunder, the design certification applicant shall submit to the NRC an update to the DCD on a replacement-page basis, which shall indicate the area changed, e.g.,.a bold line vertically drawn in the margin adjacent to the portion changed, and a page change identification (date of change or change number, or both)..

(iii) A change made hereunder shall be considered resolved under 10 CFR 52.63 (a) (4) unless the NRC determines, within six months of submission of the change, that the change involves an unreviewed safety question as defined in Section 8 (b) (5) above.

(iv) A license applicant shall reference and utilize the updated DCD, unless the license applicant makes a change in accordance with the other provisions of this section.

i 9.

Records and Reports.

(a)

Records.

(1)

The applicant for this design certification shall naintain a copy of the DCD that includes all generic changes to the DCD, including Tier 1 and Tier 2 information.

(2)

An applicant or licensee that references this design certification shall maintain records of all changes to and departures from the DCD pursuant to Section 8 of this appendix.

Records of changes made pursuant to Section 8 (b) (5) must include 127

a written safety evaluation which provides the bases for the f

determination that the proposed change does not involve an unreviewed safety question, a change to Tier 1 or Tier 2*

information, or a change to the technical specifications in the operating license or combined license.

i (b)

Reports.

An applicant or licensee that references this design certification shall submit a report to the NRC, as specified in 10 CFR 50.4, containing a brief description of any departures from the DCD, including a summary of the safety evaluation of each departure.

An applicant or licensee shall also submit updates to the DCD to ensure that the DCD contains the latest material developed for both Tier 1 and 2 information.

The requirements of 10 CFR 50.71 for safety analysis reports must apply to these updates.

These reports and updates must be submitted at the frequency specified below:

i (1)

During the interval from the date of application to the j

date of issuance of either a construction permit under 10 CFR l

Part 50 or a combined license under 10 CFR Part 52, the report and any updates to the DCD may be submitted along with amendments to the application.

(2)

During the interval from the date of issuance of either a construction permit under 10 CFR Part 50 or a combined license

[

f under 10 CFR Part 52 until the applicant or licensee receives t

either an operating license under 10 CFR Part 50 or the i

128 I

-. _ ~

.._-.~..--.

l l

Commission makes its findings under 10 CFR 52.103, the report must be submitted semiannually.

Updates to the DCD must be' submitted annually.

(3)

Thereafter, reports and updates to the DCD may be submitted annually or along with updates to the safety analysis report for the facility as required by 10 CFR 50.71, or at such shorter intervals as may be specified in the license.

(c)

Retention Period.

The plant-specific DCD, and the records of changes to and departures from the plant-specific DCD must be maintained until the date of termination of the construction permit or license.

10.

Inspections, Tests, Analyses, and Acceptance Criteria (ITAAC)

(a)

An applicant for or holder of a combined license (COL) that references the design certification rule for the ABWR shall l

perform and demonstrate conformance with the ITAAC prior to fuel load.

With respect to activities subject to an ITAAC, an applicant for a COL may proceed at its own risk with design and i

procurement activities, and a holder of a COL may proceed at its own risk with design, procurement, construction and preoperational activities, even though the NRC staff may not yet have agreed that any particular ITAAC have been satisfied.

In j

i 129 i

the event that an activity is subject to and in noncompliance with an ITAAC, the applicant for or holder of a COL shall either take corrective actions to successfully complete that ITAAC or request and obtain NRC approval of a change in or exemption from the ITAAC in accordance with the design certification rule for the ABWR.

(b)

In accordance with 10 CFR 52.103(g), the Commission must find that the acceptance criteria in the ITAAC are met prior to operation.

After the Commission has made the finding required by Section 52.103 (g), the ITAAC do not constitute regulatory requirements for subsequent plant modifications.

However, subsequent modifications must comply with Tier 1 Design Descriptions, unless changes are made in the Tier 1 Design Descriptions in accordance with the change processes in Section 8 of this Appendix.

Furthermore, after the NRC has issued its finding in accordance with 10 CFR 52.103 (g), the ITAAC do not, by virtue of their inclusion in the Design Control Document, constitute requirements for the COL holder or for renewals of the COL.

11.

ITAAC Verification i

In order to provide a basis for the NRC to make the findings required by SS 52.99 and 52.103(g), the licensee shall notify the 130 i

NRC that the required inspections, tests, and analyses specified in the ITAAC have been successfully completed and that the corresponding acceptance criteria have been met.

The NRC shall verify that the inspections, tests, and analyses referenced by the licensee have been successfully completed and, based solely thereon, find that the prescribed acceptance criteria have been met.

The NRC shall publish notice of successful completion of inspections, tests, and analyses in the Federal Register as required by 5 52.99, t

Dated at Rockville, Maryland, this day of For the Nuclear Regulatory Commission.

1 John C. Hoyle, Secretary of the Commission l

131

,