Crude oil and petroleum products marine vessels
Oil tankers and barges are vessels designed with the engines and quarters at the rear of the vessel and the remainder of the vessel divided into special compartments (tanks) to carry crude oil and liquid petroleum products in bulk. Cargo pumps are located in pump rooms, and forced ventilation and inerting systems are provided to reduce the risk of fires and explosions in pump rooms and cargo compartments. Modern oil tankers and barges are built with double hulls and other protective and safety features required by the United States Oil Pollution Act of 1990 and the International Maritime Organization (IMO) tanker safety standards. Some new ship designs extend double hulls up the sides of the tankers to provide additional protection. Generally, large tankers carry crude oil and small tankers and barges carry petroleum products.
· Supertankers. Ultra-large and very large crude carriers (ULCCs and VLCCs) are restricted by their size and draft to specific routes of travel. ULCCs are vessels whose capacity is over 300,000 SDWTs, and VLCCs have capacities ranging from 160,000 to 300,000 SDWTs. Most large crude carriers are not owned by oil companies, but are chartered from transportation companies which specialize in operating these super-sized vessels.
· Oil tankers. Oil tankers are smaller than VLCCs, and, in addition to ocean travel, they can navigate restricted passages such as the Suez and Panama Canals, shallow coastal waters and estuaries. Large oil tankers, which range from 25,000 to 160,000 SDWTs, usually carry crude oil or heavy residual products. Smaller oil tankers, under 25,000 SDWT, usually carry gasoline, fuel oils and lubricants.
· Barges. Barges operate mainly in coastal and inland waterways and rivers, alone or in groups of two or more, and are either self-propelled or moved by tugboat. They may carry crude oil to refineries, but more often are used as an inexpensive means of transporting petroleum products from refineries to distribution terminals. Barges are also used to off-load cargo from tankers offshore whose draft or size does not allow them to come to the dock.
Barge and ship loading and unloading
Vessel-to-shore procedures, safety checklists and guidelines should be established and agreed upon by terminal and marine vessel operators. The International Safety Guide for Oil Tankers and Terminals (International Chamber of Shipping 1978) contains information and samples of checklists, guidelines, permits and other procedures covering safe operations when loading or unloading vessels, which may be used by vessel and terminal operators.
Although marine vessels sit in water and are thereby intrinsically grounded, there is a need to provide protection from static electricity which can build up during loading or unloading. This is accomplished by bonding or connecting metal objects on the dock or loading/unloading apparatus to the metal of the vessel. Bonding is also accomplished by use of conductive loading hose or piping. An electrostatic spark of ignitable intensity may also be generated when lowering equipment, thermometers or gauging devices into compartments immediately after loading; enough time must be allowed for the static charge to dissipate. Ship-to-shore electric currents, which are different from static electricity, may be generated by cathodic protection of the vessel’s hull or dock, or by galvanic potential differences between the vessel and the shore. These currents also build up in metal loading/unloading apparatus. Insulating flanges may be installed within the length of the loading arm and at the point where flexible hoses connect to the shore pipeline system. When the connections are broken, there is no opportunity for a spark to jump from one metal surface to another.
All vessels and terminals need mutually agreed upon emergency response procedures in case of a fire or release of product, vapour or toxic gas. These must cover emergency operations, stopping product flow and emergency removal of a vessel from the dock. The plans should consider communications, fire-fighting, vapour cloud mitigation, mutual aid, rescue, clean-up and remediation measures. Fire protection portable equipment and fixed systems should be in accord with government and company requirements and appropriate to the size, function, exposure potential and value of the dock and wharf facilities. The International Safety Guide for Oil Tankers and Terminals (International Chamber of Shipping 1978) contains a sample fire notice which may be used as a guide by terminals for dock fire prevention.
Marine vessel health and safety
In addition to the usual maritime working hazards, transporting crude oil and flammable liquids by marine vessel creates a number of special health, safety and fire prevention situations. These include surging and expansion of liquid cargo, flammable vapour hazards during transport and when loading and unloading, possibility of pyrophoric ignition, toxic exposures to materials such as hydrogen sulphide and benzene and safety considerations when venting, flushing and cleaning compart-ments. The economics of operating modern tankers requires them to be at sea for extended periods of time with only short intervals in port to load or unload cargo. This, together with the fact that tankers are highly automated, creates unique mental and physical demands on the few crew members used to operate the vessels.
Fire and explosion protection
Emergency plans and procedures should be developed and implemented that are appropriate for the type of cargo on board and other potential hazards. Fire-fighting equipment must be supplied. Response team members who have shipboard fire-fighting, rescue and spill clean-up responsibilities should be trained, drilled and equipped to handle potential emergencies. Water, foam, dry chemicals, halon, carbon dioxide and steam are used as cooling, inhibiting and smothering fire-fighting agents aboard marine vessels, although halon is being phased out due to environmental concerns. The requirements for vessel fire-fighting equipment and systems are established by the country under whose flag the vessel sails and by company policy, but usually follow the recommendations of the 1974 International Convention for the Safety of Life at Sea (SOLAS).
Strict control of flames or naked lights, lighted smoking materials and other sources of ignition, such as welding or grinding sparks, electrical equipment and unprotected light bulbs, is required on vessels at all times to reduce the risk of fire and explosion. Prior to conducting hot work on board marine vessels, the area should be examined and tested to assure that conditions are safe, and permits should be issued for each specific task allowed.
One method of preventing explosions and fires in the vapour space of cargo compartments is to maintain the level of oxygen below 11% by making the atmosphere inert with a noncombustible gas. Sources for inert gas are exhaust gases from the vessel’s boilers or an independent gas generator or a gas turbine fitted with an afterburner. The 1974 SOLAS Convention implies that vessels carrying cargo with flashpoints below 60°C should have compartments fitted with inert systems. Vessels using inert gas systems should maintain cargo compartments in non-flammable conditions at all times. Inert gas compartments should be constantly monitored to assure safe conditions and should not be allowed to become flammable, because of the danger of ignition from pyrophoric deposits.
Confined spaces
Confined spaces on marine vessels, such as cargo compartments, paint lockers, pump rooms, fuel tanks and spaces between double hulls, must be treated the same as any confined space for entry, hot work and cold work. Tests for oxygen content, flammable vapours and toxic substances, in that order, must be conducted prior to entering confined spaces. A permit system should be established and followed for all confined space entry, safe (cold) work and hot work, which indicates safe exposure levels and required personal and respiratory protective equipment. In waters of the United States, these tests may be conducted by qualified individuals called “marine chemists”.
Compartments on marine vessels such as cargo tanks and pump rooms are confined spaces; when cleaning those which have been made inert or have flammable vapour, toxic or unknown atmospheres, they should be tested, and special safety and respiratory protection procedures should be followed. After crude oil has been unloaded, a small amount of residue, called clingage, remains on the interior surfaces of the compartments, which may then be washed and filled with water for ballast. One method of reducing the amount of residue is to install fixed equipment which removes up to 80% of the clingage by washing down the sides of inerted compartments with crude oil during unloading.
Pumps, valves and equipment
A work permit should be issued and safe work procedures followed, such as bonding, draining and vapour freeing, flammable vapour and toxic exposure testing, and providing stand-by fire protection equipment when operations, maintenance or repair requires opening cargo pumps, lines, valves or equipment on board marine vessels.
Toxic exposures
There is an opportunity for vented gases such as flue gas or hydrogen sulphide to reach the decks of vessels, even from specially designed vent systems. Testing should be continuously conducted to determine inert gas levels on all vessels and hydrogen sulphide levels on vessels which contain or previously carried sour crude oil or residual fuel. Tests should be conducted for benzene exposure on vessels carrying crude oil and gasoline. Inert gas scrubber effluent water and condensate water is acidic and corrosive; PPE should be used when contact is possible.
Environmental protection
Marine vessels and terminals should establish procedures and provide equipment to protect the environment from spills on water and land, and from releases of vapour to the air. The use of large vapour recovery systems at marine terminals is growing. Care must be taken to comply with air pollution requirements when vessels vent compartments and enclosed spaces. Emergency response procedures should be established, and equipment and trained personnel should be available to respond to spills and releases of crude oil and flammable and combustible liquids. A responsible person should be designated to ensure that notifications are made to both the company and the appropriate authorities should a reportable spill or release occur.
In the past, the oil-contaminated ballast water and tank washings were flushed out of the compartments at sea. In 1973, the International Convention for Prevention of Pollution from Ships established requirements that before the water is discharged at sea, the oily residue must be separated and retained on board for eventual onshore processing. Modern tankers have segregated ballast systems, with different lines, pumps and tanks than those used for cargo (in accordance with international recommen-dations), so that there is no possibility of contamination. Older vessels still carry ballast in cargo tanks, so special procedures, such as pumping oily water into designated onshore tanks and processing facilities, must be followed when discharging ballast in order to prevent pollution.
Motor Vehicle and Railroad Transport of Petroleum Products
Crude oil and petroleum products were initially transported by horse-drawn tank wagons, then by railroad tank cars and finally by motor vehicles. Following receipt at terminals from marine vessels or pipelines, bulk liquid petroleum products are delivered by non-pressure tank trucks or rail tank cars directly to service stations and consumers or to smaller terminals, called bulk plants, for redistribution. LPG, gasoline anti-knock compounds, hydrofluoric acid and many other products, chemicals and additives used in the oil and gas industry are transported in pressure tank cars and tank trucks. Crude oil may also be transported by tank truck from small producing wells to gathering tanks, and by tank truck and railroad tank car from storage tanks to refineries or main pipelines. Packaged petroleum products in bulk bins or drums and pallets and cases of smaller containers are carried by package truck or railroad box car.
Government regulations
Transportation of petroleum products by motor vehicle or railroad tank car is regulated by government agencies throughout most of the world. Agencies such as the US DOT and the Canadian Transport Commission (CTC) have established regulations governing the design, construction, safety devices, testing, preventive maintenance, inspection and operation of tank trucks and tank cars. Regulations governing railroad tank car and tank truck operations typically include tank pressure and pressure relief device testing and certification before being placed into initial service and at regular intervals thereafter. The Association of American Railroads and the National Fire Protection Association (NFPA) are typical of organizations which publish specifications and requirements for the safe operation of tank cars and tank trucks. Most governments have regulations or adhere to United Nations Conventions which require the identification of and information concerning hazardous materials and petroleum products which are shipped in bulk or in containers. Railroad tank cars, tank trucks and package trucks are placarded to identify any hazardous products being transported and to provide emergency response information.
Railroad tank cars
Railroad tank cars are constructed of carbon steel or aluminium and may be pressurized or unpressurized. Modern tank cars can hold up to 171,000 l of compressed gas at pressures up to 600 psi (1.6 to 1.8 mPa). Non-pressure tank cars have evolved from small wooden tank cars of the late 1800s to jumbo tank cars which transport as much as 1.31 million litres of product at pressures up to 100 psi (0.6 mPa). Non-pressure tank cars may be individual units with one or multiple compartments or a string of interconnected tank cars, called a tank train. Tank cars are loaded individually, and entire tank trains can be loaded and unloaded from a single point. Both pressure and non-pressure tank cars may be heated, cooled, insulated and thermally protected against fire, depending on their service and the products transported.
All railroad tank cars have top- or bottom-liquid or vapour valves for loading and unloading and hatch entries for cleaning. They are also equipped with devices intended to prevent the increase of internal pressure when exposed to abnormal con-ditions. These devices include safety relief valves held in place by a spring which can open to relieve pressure and then close; safety vents with rupture discs that burst open to relieve pressure but cannot reclose; or a combination of the two devices. A vacuum relief valve is provided for non-pressure tank cars to prevent vacuum formation when unloading from the bottom. Both pressure and non-pressure tank cars have protective housings on top surrounding the loading connections, sample lines, thermometer wells and gauging devices. Platforms for loaders may or may not be provided on top of cars. Older non-pressure tank cars may have one or more expansion domes. Fittings are provided on the bottom of tank cars for unloading or cleaning. Head shields are provided on the ends of tank cars to prevent puncture of the shell by the coupler of another car during derailments.
LNG is shipped as a cryogenic gas in insulated tank truck and rail pressure tank cars. Pressure tank trucks and rail tank cars for LNG transport have a stainless steel inner reservoir suspended in an outer reservoir of carbon steel. The annular space is a vacuum filled with insulation to maintain low temperatures during shipment. To prevent gas from igniting back to the tanks, they are equipped with two independent, remotely controlled fail-safe emergency shut-off valves on the filling and discharge lines and have gauges on both the inside and outside reservoirs.
LPG is transported on land in specially designed rail tank cars (up to 130 m3 capacity) or tank trucks (up to 40 m3capacity). Tank trucks and rail tank cars for LPG transport are typically uninsulated steel cylinders with spherical bottoms, equipped with gauges, thermometers, two safety relief valves, a gas level meter and maximum fill indicator and baffles.
Rail tank cars transporting LNG or LPG should not be overloaded, since they may sit on a siding for some period of time and be exposed to high ambient temperatures, which could cause overpressure and venting. Bond wires and grounding cables are provided at rail and tank truck loading racks to help neutralize and dissipate static electricity. They should be connected before operations commence and not disconnected until operations are complete and all valves are closed. Truck and rail loading facilities are typically protected by fire water spray or mist systems and fire extinguishers.
Tank trucks
Petroleum products and crude oil tank trucks are typically constructed of carbon steel, aluminium or a plasticized fibreglass material, and vary in size from 1,900-l tank wagons to jumbo 53,200-l tankers. The capacity of tank trucks is governed by regulatory agencies, and usually is dependent upon highway and bridge capacity limitations and the allowable weight per axle or total amount of product allowed. There are pressurized and non-pressurized tank trucks, which may be non-insulated or insulated depending on their service and the products transported. Pressurized tank trucks are usually single compartment, and non-pressurized tank trucks may have single or multiple compartments. Regardless of the number of compartments on a tank truck, each compartment must be treated individually, with its own loading, unloading and safety-relief devices. Compartments may be separated by single or double walls. Regulations may require that incompatible products and flammable and combustible liquids carried in different compartments on the same vehicle be separated by double walls. When pressure testing compartments, the space between the walls should also be tested for liquid or vapour.
Tank trucks have either hatches which open for top loading, valves for closed top- or bottom-loading and unloading, or both. All compartments have hatch entries for cleaning and are equipped with safety relief devices to mitigate internal pressure when exposed to abnormal conditions. These devices include safety relief valves held in place by a spring which can open to relieve pressure and then close, hatches on non-pressure tanks which pop open if the relief valves fail and rupture discs on pressurized tank trucks. A vacuum relief valve is provided for each non-pressurized tank truck compartment to prevent vacuum when unloading from the bottom. Non-pressurized tank trucks have railings on top to protect the hatches, relief valves and vapour recovery system in case of a rollover. Tank trucks are usually equipped with breakaway, self-closing devices installed on compartment bottom loading and unloading pipes and fittings to prevent spills in case of damage in a rollover or collision.
Rail tank car and tank truck loading and unloading
While railroad tank cars are almost always loaded and unloaded by workers assigned to these specific duties, tank trucks may be loaded and unloaded by either loaders or drivers. Tank cars and tank trucks are loaded at facilities called loading racks, and may be top loaded through open hatches or closed connections, bottom loaded through closed connections, or a combination of both.
Loading
Workers who load and unload crude oil, LPG, petroleum products, and acids and additives used in the oil and gas industry, should have a basic understanding of the characteristics of the products handled, their hazards and exposures and the operating procedures and work practices needed to perform the job safely. Many government agencies and companies require the use and completion of inspection forms upon receipt and shipment and prior to loading and unloading railroad tank cars and tank trucks. Tank trucks and railroad tank cars may be loaded through open hatches on the top or through fittings and valves at the top or bottom of each tank or compartment. Closed connections are required when pressure loading and where vapour recovery systems are provided. If loading systems do not activate for any reason (such as improper operation of the vapour recovery system or a fault in the grounding or bonding system), by-pass should not be attempted without approval. All hatches should be closed and securely latched during transit.
Workers should follow safe work practices to avoid slips and falls when top loading. If loading controls use pre-set meters, loaders must be careful to load the correct products into the assigned tanks and compartments. All compartment hatches should be shut when bottom loading, and when top loading, only the compartment being loaded should be open. When top loading, splash loading should be avoided by placing the loading tube or hose close to the bottom of the compartment and starting to load slowly until the opening is submerged. During manual top loading operations, loaders should remain in attendance, not tie down the loading shut-off (deadman) control and not overfill the compartment. Loaders should avoid exposures to product and vapour by standing upwind and averting the head when top loading through open hatches and by wearing protective equipment when handling additives, obtaining samples and draining hoses. Loaders should be aware of and follow prescribed response actions in case of a hose or line rupture, spill, release, fire or other emergency.
Unloading and delivery
When unloading tank cars and tank trucks, it is important first to assure that each product is unloaded into the proper designated storage tank and that the tank has sufficient capacity to hold all of the product being delivered. Although valves, fill pipes, lines and fill covers should be colour coded or otherwise marked to identify the product contained, the driver should still be responsible for product quality during delivery. Any misdelivery of product, mixing or contamination should be immediately reported to the recipient and to the company to prevent serious consequences. When drivers or operators are required to additize products or obtain samples from storage tanks following delivery to assure product quality or for any other reason, all safety and health provisions specific to the exposure should be followed. Persons engaged in delivery and unloading operations should remain in the vicinity at all times and know what to do in an emergency, including notification, stopping product flow, cleaning spills and when to leave the area.
Pressurized tanks may be unloaded by compressor or pump, and unpressurized tanks by gravity, vehicle pump or recipient pump. Tank trucks and tank cars which carry lubrication or industrial oils, additives and acids are sometimes unloaded by pressurizing the tank with an inert gas such as nitrogen. Tank cars or tank trucks may need to be heated using steam or electric coils in order to unload heavy crude oils, viscous products and waxes. All of these activities have inherent dangers and exposures. Where required by regulation, unloading should not commence until the vapour recovery hoses have been connected between the delivery tank and the storage tank. When delivering petroleum products to residences, farms and commercial accounts, drivers should gauge any tank which is not equipped with a vent alarm in order to prevent an overfill.
Loading-rack fire protection
Fires and explosions at top and bottom tank car and tank truck loading racks may occur from causes such as electrostatic build-up and incendiary spark discharge in a flammable atmosphere, unauthorized hot work, flashback from a vapour recovery unit, smoking or other unsafe practices. Sources of ignition, such as smoking, running internal combustion engines and hot work activity, should be controlled at the loading rack at all times, and particularly during loading or other operations when a spill or release may occur. Loading racks may be equipped with portable fire extinguishers and manually or automatically operated foam, water or dry chemical fire extinguishing systems. If vapour recovery systems are in use, flame arrestors should be provided to prevent flashback from the recovery unit to the loading rack.
Drainage should be provided at loading racks to divert product spills away from the loader, tank truck or tank car and the loading rack pad. Drains should be provided with fire traps to prevent migration of flames and vapours through sewer systems. Other loading-rack safety considerations include emergency shut-down controls placed at loading spots and other strategic locations in the terminal and automatic pressure-sensing valves which stop product flow to the rack in case of a leak in the product lines. Some companies have installed automatic brake lock systems on their tank truck fill connections, which lock the brakes and will not allow the truck to be moved from the rack until the fill lines have been disconnected.
Electrostatic ignition hazards
Some products such as intermediate distillates and low-vapour-pressure fuels and solvents tend to accumulate electrostatic charges. When loading tank cars and tank trucks, there is always an opportunity for electrostatic charges to be generated by friction as product goes through lines and filters and by splash loading. This can be mitigated by designing loading racks to allow for relaxation time in piping downstream from pumps and filters. Compartments should be checked to assure that they do not contain any unbonded or floating objects which could act as static accumulators. Bottom loaded compartments may be provided with internal cables to help dissipate electrostatic charges. Sample containers, thermometers or other items should not be lowered into compartments until a waiting period of at least 1 minute has elapsed, to allow any electrostatic charge which has accumulated in the product to dissipate.
Bonding and grounding are important considerations in dissipating electrostatic charges which build up during loading operations. By keeping the fill pipe in contact with the metal side of the hatch when top loading, and through the use of metal loading arms or conductive hose when loading through closed connections, the tank truck or tank car is bonded to the loading rack, maintaining the same electrical charge between the objects so that a spark is not created when the loading tube or hose is removed. The tank car or tank truck may also be bonded to the loading rack by use of a bonding cable, which carries any accumulated charge from a terminal on the tank to the rack, where it is then grounded by a grounding cable and rod. Similar bonding precautions are needed when unloading from tank cars and tank trucks. Some loading racks are provided with electronic connectors and sensors which will not allow loading pumps to activate until a positive bond is achieved.
During cleaning, maintenance or repair, pressurized LPG tank cars or tank trucks are usually opened to the atmosphere, allowing air to enter the tank. In order to prevent combustion from electrostatic charges when loading these cars for the first time after such activities, it is necessary to reduce the oxygen level below 9.5% by blanketing the tank with inert gas, such as nitrogen. Precautions are needed to prevent liquid nitrogen from entering the tank if the nitrogen is provided from portable containers.
Switch loading
Switch loading occurs when intermediate- or low-vapour-pressure products such as diesel fuel or fuel oil are loaded into a tank car or tank truck compartment which previously contained a flammable product such as gasoline. The electrostatic charge generated during loading can discharge in an atmosphere which is within the flammable range, with a resultant explosion and fire. This hazard can be controlled when top loading by lowering the fill tube to the bottom of the compartment and loading slowly until the end of the tube is submerged to avoid splash loading or agitation. Metal to metal contact should be maintained during loading in order to provide a positive bond between the loading tube and the tank hatchway. When bottom loading, initial slow fill or splash deflectors are used to reduce static build-up. Prior to switch loading, tanks which cannot be drained dry may be flushed out with a small amount of the product to be loaded, to remove any flammable residue in sumps, lines, valves and onboard pumps.
Shipping products by rail box cars and package vans
Petroleum products are shipped by motor truck package vans and railroad box cars in metal, fibre and plastic containers of various sizes, from 55-gallon (209-l) drums to 5-gallon (19-l) pails and from 2-1/2-gallon (9.5-l) to 1-quart (.95-l) containers, in corrugated boxes, usually on pallets. Many industrial and commercial petroleum products are shipped in large metal, plastic or combination intermediate bulk containers ranging in size from 380 to over 2,660 l capacity. LPG is shipped in large and small pressure containers. In addition, samples of crude oil, finished products and used products are shipped by mail or express freight carrier to laboratories for assay and analysis.
All of these products, containers and packages have to be handled in accordance with government regulations for hazardous chemicals, flammable and combustible liquids and toxic materials. This requires the use of hazardous materials manifests, shipping documents, permits, receipts and other regulatory requirements, such as marking the outsides of packages, containers, motor trucks and box cars with proper identification and a hazard warning label. Proper utilization of tank trucks and tank cars is important to the petroleum industry. Because storage capacity is finite, delivery schedules need to be met, from the delivery of crude oil to keep refineries running to the delivery of gasoline to service stations, and from the delivery of lubricants to commercial and industrial accounts to the delivery of heating oil to homes.
LPG is supplied to consumers by bulk tank trucks which pump directly into smaller onsite storage tanks, both above ground and below ground (e.g., service stations, farms, commercial and industrial consumers). LPG is also delivered to consumers by truck or van in containers (gas cylinders or bottles). LNG is delivered in special cryogenic containers which have an inner fuel tank surrounded by insulation and an outer shell. Similar containers are provided for vehicles and appliances which use LNG as a fuel. Compressed natural gas is normally delivered in conventional compressed gas cylinders, such as those used on industrial lift trucks.
In addition to the normal safety and health precautions required in rail car and package trucking operations, such as moving and handling heavy objects and operating industrial trucks, workers should be familiar with the hazards of the products they are handling and delivering, and know what to do in case of a spill, release or other emergency. For example, intermediate bulk containers and drums should not be dropped out of box cars or from the tailgates of trucks onto the ground. Both companies and government agencies have established special regulations and requirements for drivers and operators who are involved in the transport and delivery of flammable and hazardous petroleum products.
Tank truck and package van drivers often work alone and may have to travel great distances for a number of days to deliver their loads. They work both day and night and in all sorts of weather conditions. Manoeuvring super-sized tank trucks into service stations and customer locations without hitting parked vehicles or fixed objects requires patience, skill and experience. Drivers should have the physical and mental characteristics required for this work.
Driving tank trucks is different from driving package vans in that the liquid product tends to shift forward as the truck stops, backwards as the truck accelerates and from side to side as the truck turns. Tank truck compartments should be fitted with baffles which restrict the movement of product during transport. Considerable skill is required by drivers to overcome the inertia created by this phenomenon, called “mass in motion”. Occasionally, tank truck drivers are required to pump out storage tanks. This activity requires special equipment, including suction hose and transfer pumps, and safety precautions, such as bonding and grounding to dissipate electrostatic build-up and to prevent any release of vapours or liquids.
Motor vehicle and rail car emergency response
Drivers and operators should be familiar with notification requirements and emergency response actions in case of a fire or a release of product, gas or vapour. Product identification and hazard warning placards in compliance with industry, association or national marking standards are posted on trucks and rail cars to allow emergency responders to determine the precautions needed in case of a spill or release of vapour, gas or product. Motor vehicle drivers and train operators may also be required to carry material safety data sheets (MSDSs) or other documentation describing the hazards and precautions for handling the products being transported. Some companies or government agencies require that vehicles transporting flammable liquids or hazardous materials carry first aid kits, fire extinguishers, spill clean-up materials and portable hazard warning devices or signals to alert motorists if the vehicle is stopped alongside a highway.
Special equipment and techniques are required if a tank car or tank truck needs to be emptied of product as the result of an accident or rollover. Removal of product through fixed piping and valves or by using special knock-out plates on tank truck hatches is preferred; however, under certain conditions holes may be drilled in tanks using prescribed safe work procedures. Regardless of the method of removal, tanks should be grounded and a bond connection provided between the tank being emptied and the receiving tank.
Cleaning tank cars and tank trucks
Entering a tank car or tank truck compartment for inspection, cleaning, maintenance or repair is a hazardous activity requiring that all ventilation, testing, gas freeing and other confined-space entry and permit system requirements be followed in order to assure a safe operation. Cleaning tank cars and tank trucks is not any different from cleaning petroleum-product storage tanks, and all the same safety and health exposure precautions and procedures apply. Tank cars and tank trucks may contain residue of flammable, hazardous or toxic materials in sumps and unloading piping, or have been unloaded using an inert gas, such as nitrogen, so that what may appear to be a clean, safe space is not. Tanks which have contained crude oil, residues, asphalt or high-melting-point products may need to be steam or chemically cleaned prior to ventilation and entry, or may have a pyrophoric hazard. Ventilating tanks to free them from vapours and toxic or inert gases may be accomplished by opening the lowest and furthest valve or connection on each tank or compartment and placing an air eductor at the furthest top opening. Monitoring should be performed prior to entry without respiratory protection to assure that all of the corners and low spots in the tank, such as sumps, have been thoroughly vented, and ventilation should continue while working in the tank.
Aboveground Tank Storage of Liquid Petroleum Products
Crude oil, gas, LNG and LPG, processing additives, chemicals and petroleum products are stored in aboveground and underground atmospheric (non-pressure) and pressure storage tanks. Storage tanks are located at the ends of feeder lines and gathering lines, along truck pipelines, at marine loading and unloading facilities and in refineries, terminals and bulk plants. This section covers aboveground atmospheric storage tanks in refinery, terminal and bulk plant tank farms. (Information concerning aboveground pressure tanks is covered below, and information concerning underground tanks and small aboveground tanks is in the article “Motor vehicle fuelling and servicing operations”.)
Terminals and bulk plants
Terminals are storage facilities which generally receive crude oil and petroleum products by trunk pipeline or marine vessel. Terminals store and redistribute crude oil and petroleum products to refineries, other terminals, bulk plants, service stations and consumers by pipelines, marine vessels, railroad tank cars and tank trucks. Terminals may be owned and operated by oil companies, pipeline companies, independent terminal operators, large industrial or commercial consumers or petroleum product distributors.
Bulk plants are usually smaller than terminals and typically receive petroleum products by rail tank car or tank truck, normally from terminals but occasionally direct from refineries. Bulk plants store and redistribute products to service stations and consumers by tank truck or tank wagon (small tank trucks of approximately 9,500 to 1,900 l capacity). Bulk plants may be operated by oil companies, distributors or independent owners.
Tank farms
Tank farms are groupings of storage tanks at producing fields, refineries, marine, pipeline and distribution terminals and bulk plants which store crude oil and petroleum products. Within tank farms, individual tanks or groups of two or more tanks are usually surrounded by enclosures called berms, dykes or fire walls. These tank farm enclosures may vary in construction and height, from 45-cm earth berms around piping and pumps inside dykes to concrete walls that are taller than the tanks they surround. Dykes may be built of earth, clay or other materials; they are covered with gravel, limestone or sea shells to control erosion; they vary in height and are wide enough for vehicles to drive along the top. The primary functions of these enclosures are to contain, direct and divert rain water, physically separate tanks to prevent the spread of fire in one area to another, and to contain a spill, release, leak or overflow from a tank, pump or pipe within the area.
Dyke enclosures may be required by regulation or company policy to be sized and maintained to hold a specific amount of product. For example, a dyke enclosure may need to contain at least 110% of the capacity of the largest tank therein, allowing for the volume displaced by the other tanks and the amount of product remaining in the largest tank after hydrostatic equilibrium is reached. Dyke enclosures may also be required to be constructed with impervious clay or plastic liners to prevent spilled or released product from contaminating soil or groundwater.
Storage tanks
There are a number of different types of vertical and horizontal aboveground atmospheric and pressure storage tanks in tank farms, which contain crude oil, petroleum feedstocks, intermediate stocks or finished petroleum products. Their size, shape, design, configuration, and operation depend on the amount and type of products stored and company or regulatory requirements. Aboveground vertical tanks may be provided with double bottoms to prevent leakage onto the ground and cathodic protection to minimize corrosion. Horizontal tanks may be constructed with double walls or placed in vaults to contain any leakage.
Atmospheric cone roof tanks
Cone roof tanks are aboveground, horizontal or vertical, covered, cylindrical atmospheric vessels. Cone roof tanks have external stairways or ladders and platforms, and weak roof to shell seams, vents, scuppers or overflow outlets; they may have appurtenances such as gauging tubes, foam piping and chambers, overflow sensing and signalling systems, automatic gauging systems and so on.
When volatile crude oil and flammable liquid petroleum products are stored in cone roof tanks there is an opportunity for the vapour space to be within the flammable range. Although the space between the top of the product and the tank roof is normally vapour rich, an atmosphere in the flammable range can occur when product is first put into an empty tank or as air enters the tank through vents or pressure/vacuum valves when product is withdrawn and as the tank breathes during temperature changes. Cone roof tanks may be connected to vapour recovery systems. Conservation tanks are a type of cone roof tank with an upper and lower section separated by a flexible membrane designed to contain any vapour produced when the product warms up and expands due to exposure to sunlight in the daytime and to return the vapour to the tank when it condenses as the tank cools down at night. Conservation tanks are typically used to store aviation gasoline and similar products.
Atmospheric floating roof tanks
Floating roof tanks are aboveground, vertical, open top or covered cylindrical atmospheric vessels that are equipped with floating roofs. The primary purpose of the floating roof is to minimize the vapour space between the top of the product and the bottom of the floating roof so that it is always vapour rich, thus precluding the chance of a vapour-air mixture in the flammable range. All floating roof tanks have external stairways or ladders and platforms, adjustable stairways or ladders for access to the floating roof from the platform, and may have appurtenances such as shunts which electrically bond the roof to the shell, gauging tubes, foam piping and chambers, overflow sensing and signalling systems, automatic gauging systems and so on. Seals or boots are provided around the perimeter of floating roofs to prevent product or vapour from escaping and collecting on the roof or in the space above the roof.
Floating roofs are provided with legs which may be set in high or low positions depending on the type of operation. Legs are normally maintained in the low position so that the greatest possible amount of product can be withdrawn from the tank without creating a vapour space between the top of the product and the bottom of the floating roof. As tanks are brought out of service prior to entry for inspection, maintenance, repair or cleaning, there is a need to adjust the roof legs into the high position to allow room to work under the roof once the tank is empty. When the tank is returned to service, the legs are readjusted into the low position after it is filled with product.
Aboveground floating roof storage tanks are further classified as external floating roof tanks, internal floating roof tanks or covered external floating roof tanks.
External (open top) floating roof tanks are those with floating covers installed on open-top storage tanks. External floating roofs are usually constructed of steel and provided with pontoons or other means of flotation. They are equipped with roof drains to remove water, boots or seals to prevent vapour releases and adjustable stairways to reach the roof from the top of the tank regardless of its position. They may also have secondary seals to minimize release of vapour to the atmosphere, weather shields to protect the seals and foam dams to contain foam in the seal area in case of a fire or seal leak. Entry onto external floating roofs for gauging, maintenance or other activities may be considered confined-space entry, depending on the level of the roof below the top of the tank, the products contained in the tank and government regulations and company policy.
Internal floating roof tanks usually are cone roof tanks which have been converted by installing buoyant decks, rafts or internal floating covers inside the tank. Internal floating roofs are typically constructed of various types of sheet metal, aluminium, plastic or metal-covered plastic expanded foam, and their construction may be of the pontoon or pan type, solid buoyant material, or a combination of these. Internal floating roofs are provided with perimeter seals to prevent vapour from escaping into the portion of the tank between the top of the floating roof and the exterior roof. Pressure/vacuum valves or vents are usually provided at the top of the tank to control any hydrocarbon vapours which may accumulate in the space above the internal floater. Internal floating roof tanks have ladders installed for access from the cone roof to the floating roof. Entry onto internal floating roofs for any purpose should be considered confined-space entry.
Covered (external) floating roof tanks are basically external floating roof tanks that have been retrofitted with a geodesic dome, snow cap or similar semi-fixed cover or roof so that the floating roof is no longer open to the atmosphere. Newly constructed covered external floating roof tanks may incorporate typical floating roofs designed for internal floating roof tanks. Entry onto covered external floating roofs for gauging, maintenance or other activities may be considered confined-space entry, depending on the construction of the dome or cover, the level of the roof below the top of the tank, the products contained in the tank and government regulations and company policy.
Pipeline and marine receipts
An important safety, product quality and environmental concern in tank storage facilities is to prevent intermixing of products and overfilling tanks by developing and implementing safe operating procedures and work practices. Safe operation of storage tanks depends on receiving product into tanks within their defined capacity by designating receiving tanks prior to delivery, gauging tanks to determine the available capacity and ensuring that valves are properly aligned and that only the receiving tank inlet is opened, so the correct amount of product is delivered into the assigned tank. Drains in dyke areas surrounding tanks receiving product should normally be kept closed during receipt in case an overfill or spill occurs. Overfill protection and prevention can be accomplished by a variety of safe operating practices, including manual controls and automatic detection, signalling and shut-down systems and a means of communication, all of which should be mutually understood and acceptable to product transfer personnel at the pipeline, marine vessel and terminal or refinery.
Government regulations or company policy may require that automatic product level detection devices and signal and shut-down systems be installed on tanks receiving flammable liquids and other products from trunk pipelines or marine vessels. Where such systems are installed, electronic system integrity tests should be conducted on a regular basis or prior to product transfer, and if the system fails, transfers should follow manual receipt procedures. Receipts should be monitored manually or automatically, onsite or from a remote control location, to ensure that operations are proceeding as planned. Upon completion of transfer, all valves should be returned to normal operating position or set for the next receipt. Pumps, valves, pipe connections, bleeder and sample lines, manifold areas, drains and sumps should be inspected and maintained to assure good condition and to prevent spills and leakage.
Tank gauging and sampling
Tank storage facilities should establish procedures and safe work practices for gauging and sampling crude oil and petroleum products which take into consideration the potential hazards involved with each product stored and each type of tank in the facility. Although tank gauging is often done using automatic mechanical or electronic devices, manual gauging should be performed at scheduled intervals to assure the accuracy of the automatic systems.
Manual gauging and sampling operations usually require the operator to climb to the top of the tank. When gauging floating roof tanks, the operator then has to descend onto the floating roof unless the tank is fitted with gauging and sampling tubes that are accessible from the platform. With cone roof tanks, the gauger must open a roof hatch in order to lower the gauge into the tank. Gaugers should be aware of the confined-space entry requirements and potential hazards when entering onto covered floating roofs or down upon open-top floating roofs which are below established height levels. This may require the use of monitoring devices, such as oxygen, combustible gas and hydrogen sulphide detectors and personal and respiratory protective equipment. Product temperatures and samples may be taken at the same time as manual gauging is conducted. Temperatures may also be recorded automatically and samples obtained from built-in sample connections. Manual gauging and sampling should be restricted while tanks are receiving product. Following the completion of receipt, a relaxation period of from 30 minutes to 4 hours, depending on the product and company policy, should be required to allow any electrostatic build-up to dissipate before conducting manual sampling or gauging. Some companies require that communications or visual contact be established and maintained between gaugers and other facility personnel when descending upon floating roofs. Entry onto tank roofs or platforms for gauging, sampling or other activities should be restricted during thunderstorms.
Tank venting and cleaning
Storage tanks are taken out of service for inspection, testing, maintenance, repair, retrofitting and tank cleaning as needed or at regular intervals dependent on government regulations, company policy and operating service requirements. Although tank venting, cleaning and entry is a potentially hazardous operation, this work can be accomplished without incident, provided that proper procedures are established and safe work practices followed. Without such precautions, injury or damage can occur from explosions, fires, lack of oxygen, toxic exposures and physical hazards.
Preliminary preparations
A number of preliminary preparations are required after it has been decided that a tank needs to be taken out of service for inspection, maintenance or cleaning. These include: scheduling storage and supply alternatives; reviewing the tank history to determine whether it has ever contained leaded product or has previously been cleaned and certified lead free; determining the amount and type of products contained and how much residue will remain in the tank; inspecting the outside of the tank, the surrounding area and the equipment to be used for product removal, vapour freeing and cleaning; assuring that personnel are trained, qualified and familiar with facility permit and safety procedures; assigning job responsibilities in accordance with the facility’s confined-space entry and hot- and safe-work permit requirements; and holding a meeting between terminal and tank cleaning personnel or contractors before tank cleaning or construction starts.
Control of ignition sources
After the removal of all available product from the tank through fixed piping, and before any water draws or sample lines are opened, all sources of ignition should be removed from the surrounding area until the tank is declared vapour free. Vacuum trucks, compressors, pumps and other equipment which is electrically or motor driven should be located upwind, either on top of or outside the dyke area, or, if inside the dyke area, at least 20 m from the tank or any other sources of flammable vapours. Tank preparation, venting and cleaning activities should cease during electrical storms.
Removing residue
The next step is to remove as much remaining product or residue in the tank as possible through pipeline and waterdraw connections. A safe-work permit may be issued for this work. Water or distillate fuel may be injected into the tank through fixed connections to help float product out of the tank. Residue removed from tanks that have contained sour crude should be kept wet until disposal to avoid spontaneous combustion.
Isolating the tank
After all available product has been removed through fixed piping, all piping connected to the tank, including product lines, vapour recovery lines, foam piping, sample lines and so on, should be disconnected by closing the valves nearest the tank and inserting blinds in the lines on the tank side of the valve to prevent any vapours from entering the tank from the lines. The portion of piping between the blinds and the tank should be drained and flushed. Valves outside the dyke area should be closed and locked or tagged. Tank pumps, internal mixers, cathodic protection systems, electronic gauging and level detection systems and so on should be disconnected, de-energized and locked or tagged out.
Vapour freeing
The tank is now ready to be made vapour free. Intermittent or continuous vapour testing should be conducted and work in the area restricted during tank ventilation. Natural ventilation, through opening the tank to the atmosphere, is not usually preferred, since it is neither as fast nor as safe as forced ventilation. There are a number of methods of mechanically venting a tank, depending on its size, construction, condition and internal configuration. In one method, cone roof tanks may be vapour freed by placing an eductor (a portable ventilator) at a hatch on the top of the tank, starting it slowly while a hatch at the bottom of the tank is opened and then setting it on high speed to draw air and vapours through the tank.
A safe- or hot-work permit should be issued covering ventilation activities. All blowers and eductors should be securely bonded to the tank shell to prevent electrostatic ignition. For safety purposes, blowers and eductors should preferably be operated by compressed air; however, explosion-proof electric- or steam-driven motors have been used. Internal floating roof tanks may need to have the portions above and below the floating roof vented separately. If vapours are discharged from a bottom hatch, a vertical tube at least 4 m above ground level and no lower than the surrounding dyke wall is needed in order to prevent vapours from collecting at low levels or reaching a source of ignition before dissipating. If necessary, vapours may be directed to the facility vapour recovery system.
As ventilation progresses, the remaining residue can be washed down and removed through the open bottom hatch by water and suction hoses, both of which should be bonded to the tank shell to prevent electrostatic ignition. Tanks which have contained sour crude oil or high-sulphur residual products may generate spontaneous heat and ignite as they dry out during ventilation. This should be avoided by wetting the inside of the tank with water to blanket the deposits from air and prevent a rise in temperature. Any iron sulphide residue should be removed from the open hatch to prevent ignition of vapours during ventilation. Workers engaged in washdown, removal and wetting activities should wear appropriate personal and respiratory protection.
Initial entry, inspection and certification
An indication of the progress being made in vapour freeing the tank can be obtained by monitoring vapours at the point of eduction during ventilation. Once it appears that the flammable vapour level is below that established by regulatory agencies or company policy, entry can be made into the tank for inspection and testing purposes. The entrant should wear appropriate personal and air-supplied respiratory protection; after testing the atmosphere at the hatch and obtaining an entry permit, the worker may enter the tank to continue testing and inspection. Checks for obstructions, falling roofs, weak supports, holes in the floor and other physical hazards should be conducted during the inspection.
Cleaning, maintenance and repair
As ventilation continues and the vapour levels in the tank drop lower, permits may be issued allowing entry by workers with appropriate personal and respiratory equipment, if needed, to start cleaning the tank. Monitoring for oxygen, flammable vapours and toxic atmospheres should continue, and if the levels inside the tank exceed those established for entry, the permit should automatically expire and the entrants should immediately leave the tank until the safe level is again achieved and the permit is reissued. Ventilation should continue during cleaning operations as long as any residue or sludge remains in the tank. Only low-voltage lighting or approved flashlights should be used during inspection and clean-up.
After tanks have been cleaned and dried, a final inspection and testing should be conducted before maintenance, repair or retrofitting work is started. Careful inspection of sumps, wells, floor plates, floating roof pontoons, supports and columns is needed to assure that no leaks have developed which allowed product to enter these spaces or seep beneath the floor. Spaces between foam seals and weather shields or secondary containment should also be inspected and tested for vapours. If the tank has previously contained leaded gasoline, or if no tank history is available, a lead-in-air test should be conducted and the tank certified lead free before workers are allowed inside without air-supplied respiratory equipment.
A hot-work permit should be issued covering welding, cutting and other hot work, and a safe-work permit issued to cover other repair and maintenance activities. Welding or hot work can create toxic or noxious fumes inside the tank, requiring monitoring, respiratory protection and continued ventilation. When tanks are to be retrofitted with double bottoms or internal floating roofs, a large hole is often cut into the side of the tank to provide unrestricted access and avoid the need for confined-space entry permits.
Blast cleaning and painting the outside of tanks usually follows tank cleaning and is completed before the tank is returned to service. These activities, together with cleaning and painting tank farm piping, may be performed while tanks and pipes are in service, by implementing and following prescribed safety procedures, such as conducting monitoring for hydrocarbon vapours and stopping blast cleaning while nearby tanks are receiving flammable liquid products. Blast cleaning with sand has the potential for hazardous exposure to silica; therefore, many government agencies and companies require the use of special non-toxic blast cleaning materials or grit, which may be collected, cleaned and recycled. Special vacuum collection blast cleaning devices may be used in order to avoid contamination when cleaning leaded paint from tanks and piping. Following blast cleaning, spots in the tank walls or piping suspected of having leaks and seeps should be tested and repaired before being painted.
Returning the tank to service
In preparation for return to service upon completion of tank cleaning, inspection, maintenance or repair, the hatches are closed, all blinds are removed and the piping is reconnected to the tank. Valves are unlocked, opened and aligned, and mechanical and electrical devices are reactivated. Many government agencies and companies require tanks to be hydrostatically tested to assure that there are no leaks before they are returned to service. Since a considerable amount of water is required to obtain the necessary pressure head for an accurate test, a water bottom topped with diesel fuel is often used. Upon completion of the testing, the tank is emptied and made ready to receive product. After receipt is completed and a relaxation time has elapsed, the legs on floating roof tanks are reset into the low position.
Fire protection and prevention
Whenever hydrocarbons are present in closed containers such as storage tanks in refineries, terminals and bulk plants, the potential exists for release of liquids and vapours. These vapours could mix with air in the flammable range and, if subjected to a source of ignition, cause an explosion or fire. Regardless of the capability of fire protection systems and personnel in the facility, the key to fire protection is fire prevention. Spills and releases should be stopped from entering sewers and drainage systems. Small spills should be covered with wet blankets, and larger spills with foam, to prevent vapours from escaping and mixing with air. Sources of ignition in areas when hydrocarbon vapours may be present should be eliminated or controlled. Portable fire extinguishers should be carried on service vehicles and located at accessible and strategic positions throughout the facility.
The establishment and implementation of safe work procedures and practices such as hot- and safe- (cold-) work permit systems, electrical classification programmes, lockout/tagout programmes, and employee and contractor training and education is critical to preventing fires. Facilities should develop preplanned emergency procedures, and employees should be knowledgeable in their responsibilities for reporting and responding to fires and evacuation. Telephone numbers of responsible persons and agencies to be notified in case of an emergency should be posted at the facility and a means of communication provided. Local fire departments, emergency response, public safety and mutual aid organizations should also be aware of the procedures and familiar with the facility and its hazards.
Hydrocarbon fires are controlled by one or a combination of methods, as follows: