Documentation Protects the Plant Only While It Stays Connected to It

Today’s strongest Operational Ex theme is keeping technical assumptions connected to real plant conditions. A few fresh developments make that point especially well.

1. ATEX harmonised standards updated again — now for optical radiation

On 4 September 2026, the European Commission published Implementing Decision (EU) 2026/1967, adding EN IEC 60079-28:2026 to the harmonised standards supporting ATEX 2014/34/EU. The standard covers protection of equipment and transmission systems using optical radiation. The older EN 60079-28:2015 reference is being withdrawn, with the transition deferred until 4 March 2028. (EUR-Lex)

Why this matters:

Optical ignition risks are easy to overlook because attention often stays on electrical sparks, hot surfaces and mechanical ignition sources.

Operational Ex comment:

If your plant uses optical equipment in or through hazardous areas - sensors, fibre systems, optical links, high-intensity light sources — the Ex review should ask:

Does the installed optical system still correspond to the certified protection concept and current technical basis?

For Operations:

new standard → impact review → affected equipment → certificate basis → inspection/maintenance requirement → MoC where necessary

This is especially relevant during upgrades where “it is only a fibre/optical device” can lead to Ex considerations being missed.

EU decision on EN IEC 60079-28:2026 - https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202601967

2. A deadly pulp-mill case reinforces the meaning of STOP criteria

A recent investigation into the Nippon Dynawave pulp mill accident in Washington, where 11 workers died following a chemical tank failure in May, revealed that the company had been told the tank was “not fit for continued service”, yet it remained in use. Investigations also identified a history of poor maintenance, equipment failures and incomplete inspection records. (AP News)

This is not specifically an ATEX accident, but it is highly relevant to Operational Ex.

Operational Ex comment:

This is exactly what STOP criteria are supposed to prevent.

For Ex equipment:

If the demonstrated safe condition is lost, continued operation should require an explicit, justified decision — not habit.

Examples:

damaged flamepath → STOP

unknown certificate/X condition → assess before return

failed ventilation barrier → restrict/STOP depending on HAC basis

overdue critical inspection with loss of confidence → escalate

A finding becomes dangerous when everybody knows about it but nobody owns the operational decision.

3. Combustible-dust regulation is shifting toward explicit risk assessment

WorkSafeBC has confirmed new combustible-dust requirements taking effect 4 January 2027. The scope expands from wood dust to combustible dusts generally, including metals, plastics and flour, and employers must determine whether generated or handled dust can cause fire or explosion, assess the risk and implement controls. (WorkSafeBC)

Why this matters:

This reinforces a direction already visible in IEC 60079-10-2:2026: dust safety cannot be reduced to “Zone 21 / Zone 22 on a drawing.”

Operational Ex comment:

The Head of Operations needs a live connection between:

material data → dust behaviour → HAC → housekeeping → extraction → ignition-source control → inspection

If a new material is introduced, particle size changes or extraction performance degrades, that should be treated as a potential MoC trigger.

The zone drawing should follow reality — not the other way around.

4. A real product recall shows why the Ex certificate must match the product actually delivered

The UK product-safety authority has an active recall for certain 3M Versaflo TR-802E intrinsically safe powered-air units. The issue is that some units may contain battery-contact assemblies different from the design validated during intrinsic-safety certification, meaning the product may not achieve its certified ignition-protection level. Authorities instructed affected users to stop using the products. (GOV.UK)

Why this matters:

This is an excellent practical example of a fundamental Ex principle:

certificate ≠ automatic proof that every physical unit remains compliant.

Operational Ex comment:

An effective Ex Register should support recall traceability:

manufacturer → model → certificate → serial/batch → location → operational status

When a recall appears, Operations should be able to answer quickly:

Do we have it? Where is it? Is it in service? Can we isolate it?

Without asset-level traceability, even excellent certification data cannot support a timely operational decision.

Today’s Operational Ex message

Four different topics — one recurring issue:

Documentation only protects the plant if it stays connected to the physical reality of the plant.

A standard changes.

A tank becomes unfit for service.

A dust characteristic changes.

A manufactured component differs from the certified design.

The key question for the Head of Operations is:

Do we have a system that detects when the demonstrated Ex-safe condition is no longer the actual condition?

That means:

change detection → assessment → operational decision → action → verification → evidence → return to service

That is Operational Ex.