Canada–Nova Scotia Offshore Area Petroleum Operations Framework Regulations

Canada–Nova Scotia Offshore Area Petroleum Operations Framework Regulations Whereas, under subsection 154(1) of the Canada-Nova Scotia Offshore Petroleum Resources Accord Implementation Acta, a copy of the proposed Canada–Nova Scotia Offshore Area Petroleum Operations Framework Regulations, substantially in the annexed form, was published in the Canada Gazette, Part I, on June 18, 2022 and a reasonable opportunity was afforded to interested persons to make representations to the Minister of Natural Resources with respect to the proposed Regulations; S.C. 1988, c. 28 And whereas, under subsection 6(1)b of that Act, the Minister of Natural Resources consulted the Provincial Minister for Nova Scotia with respect to the proposed Regulations and that minister approved the making of those Regulations; S.C. 2015, c. 4, ss. 72 and 117(16) Therefore, Her Excellency the Governor General in Council, on the recommendation of the Minister of Natural Resources and the Minister of the Environment, makes the annexed Canada–Nova Scotia Offshore Area Petroleum Operations Framework Regulations under section 153c of the Canada-Nova Scotia Offshore Petroleum Resources Accord Implementation Acta. S.C. 2015, c. 4, ss. 90 and 117(19) Definitions The following definitions apply in these Regulations. accidental event means an unexpected or unplanned event or circumstance or series of unexpected or unplanned events or circumstances that may lead to the loss of life or damage to the environment, including pollution. (événement accidentel) accommodations area means the area of an installation or vessel that contains the sleeping quarters, dining areas, food preparation areas, general recreation areas, offices and medical rooms and includes all washrooms in that area. (aire d’habitation) accommodations installation means an installation that is used to accommodate persons at a production site, drill site or dive site and that functions independently of a production installation, drilling installation or diving installation. (installation d’habitation) Act means the Canada-Nova Scotia Offshore Petroleum Resources Accord Implementation Act. (Loi) authorization means an authorization issued by the Board under paragraph 142(1)(b) of the Act. (autorisation) authorized inspector means a person who is recognized under the laws of Canada or of a province as qualified to inspect boilers and pressure systems or a representative of a certifying authority who is qualified to carry out that function. (inspecteur autorisé) barrier element means a physical element that on its own does not prevent the flow of fluids but that in combination with other physical elements forms a well barrier. (élément de barrière) barrier envelope means an envelope consisting of a set of barrier elements that prevents any unintended flow of fluids from the formation into the well-bore, another formation or the environment. (enveloppe de barrière) certificate of fitness means a certificate referred to in section 143.2 of the Act. (certificat d’aptitude) certifying authority means the American Bureau of Shipping, Bureau Veritas, Det norske Veritas or Lloyd’s Register. (autorité) classification society means a member of the International Association of Classification Societies that has recognized and relevant competence and experience in, and established rules and procedures for, the classification of fixed and floating structures, including vessels, that are used in oil or gas activities in locations with physical and environmental conditions similar to those of the offshore area. (société de classification) commingled production means the production of petroleum from more than one pool or zone through a common well where the production from each pool or zone is not measured separately. (production mélangée) completion interval means a section within a well that is prepared to permit the production of fluids from the well; the observation of the performance of the reservoir; or the injection of fluids into the well. (intervalle de complétion) control centre means a continuously staffed work area in which a control system that is critical to the operation of an installation or a pipeline, to safety or to the prevention of waste and pollution is located. (centre de commande) control system means any system, station or panel used to monitor the status and control the operation of equipment used for or in support of the drilling for, or the production, processing or transportation of, petroleum or any system, station or panel used to monitor and control the operation of an installation. (système de commande) decommissioning and abandonment means the carrying out of the following processes in accordance with any applicable Act of Parliament, any applicable regulation made under an Act of Parliament, the applicable authorization and any approved development plans: the cessation of operations; the controlled abandonment of all wells; the retirement from service and abandonment or removal of all installations, including their systems and equipment; and the retirement from service and abandonment or removal of all pipelines and materials. (désaffectation et abandon) delineation well has the same meaning as in subsection 122(1) of the Act. (puits de délimitation) development well has the same meaning as in subsection 122(1) of the Act. (puits d’exploitation) diving installation means an installation or vessel on which a diving system is installed. (installation de plongée) diving project means any work or activity that is related to the exploration or drilling for, or the production, conservation, processing or transportation of, petroleum and that involves diving. (projet de plongée) diving system means the equipment that is required to execute a dive, including that required for compression, decompression, rescue and recovery. (système de plongée) drilling installation means a drilling unit or a drilling rig, and the stable foundation on which it is installed — including an artificial island, an ice platform, a floating platform, a platform fixed to the seabed and any other foundation specifically used for drilling — and any associated accommodations area. (installation de forage) drilling program means a program for the drilling of one or more wells within a specified time and within specified areas through the use of one or more drilling installations and includes any work or activity related to the program. (programme de forage) drilling rig means the equipment used to conduct well operations and associated systems, including power systems, control systems and monitoring systems. (appareil de forage) drilling riser means the connection between a subsea blowout preventer and a mobile offshore platform. (tube prolongateur de forage) drilling unit means a fixed or mobile offshore platform, or a vessel used in any well operation, that is fitted with a drilling rig, including all systems and equipment installed on the platform or vessel that are related to well operations and marine activities. (unité de forage) drill site means a location where a drilling rig is or is proposed to be installed. (emplacement de forage) environmental load means a load imposed by meteorological or oceanographic conditions, such as winds, waves, tides, currents or snow, ice conditions, regional ice features, such as sea ice or icebergs, a seismic event or any other naturally occurring phenomenon. (charge environnementale) environmental program means a program pertaining to an environmental study as defined in subsection 122(1) of the Act. (programme environnemental) exploratory well has the same meaning as in subsection 122(1) of the Act. (puits d’exploration) floating platform means a column-stabilized mobile offshore platform, a surface mobile offshore platform or a fixed floating offshore platform, including a tension leg platform or a spar platform. (plate-forme flottante) flow allocation procedure means the procedure to allocate total measured quantities of petroleum and water produced from or injected into a pool or zone back to individual wells in a pool or zone where individual well production or injection is not measured separately; and to allocate production among fields whose petroleum is combined for the purpose of storage or processing. (méthode de répartition du débit) flow calculation procedure means the procedure to convert raw meter output to a measured quantity of petroleum or water. (méthode de calcul du débit) flowline means any line, other than a pipeline, that is used to transport fluids between a well and equipment used for the production of petroleum that is located at a production site or to transport fluids between a well and any systems or equipment that are used in support of that production and between those systems or equipment and the production equipment. (conduite d’écoulement) flow system means the flow meters, auxiliary equipment attached to the flow meters, fluid sampling devices, production test equipment, master meter and meter prover used to measure and record the rate and volumes at which fluids are produced from or injected into a pool; used as a fuel; used for artificial lift; or flared, vented or transferred from a production installation. (système d’écoulement) formation flow test means an operation to induce the flow of formation fluids to procure reservoir fluid samples and determine reservoir flow characteristics; or to inject fluids into a formation to evaluate injectivity. (essai d’écoulement de formation) functional load means any construction load or operating load other than an environmental load or accidental load. (charge fonctionnelle) geoscientific program means any program that involves geological work or geophysical work, as those terms are defined in subsection 122(1) of the Act. (programme géoscientifique) geotechnical program means any program that involves geotechnical work, as defined in subsection 122(1) of the Act, that is undertaken to assess whether the seabed or shallow subsurface, as the case may be, is suitable to support installations or any other structures. (programme géotechnique) installation means, except in Part 5, a drilling installation, production installation or accommodations installation. (installation) life-saving appliances includes lifebuoys, survival craft, launching and embarkation appliances, marine evacuation systems and visual signals. (engins de sauvetage) load includes a functional load, environmental load, accidental load and abnormal load. (charge) LSA Code means the annex to International Maritime Organization Resolution MSC.48(66), International Life-Saving Appliance (LSA) Code. (recueil LSA) major accidental event means an unexpected or unplanned event or circumstance or series of unexpected or unplanned events or circumstances that may lead to the loss of more than one life or uncontrolled pollution. (événement accidentel majeur) marine activities means activities related to the stability, station-keeping and collision avoidance of floating platforms and includes mooring, dynamic positioning and ballasting. (activités maritimes) mobile offshore platform means a platform that is designed to operate in a floating or buoyant mode or that can be moved from place to place without major dismantling or modification, whether or not it has its own motive power. (plate-forme mobile extracôtière) operations site means a site where an authorized work or activity is carried out. (emplacement des opérations) operator means a person that holds an operating licence issued by the Board under paragraph 142(1)(a) of the Act and applies for or has been granted an authorization. (exploitant) physical and environmental conditions means the physical, geotechnical, seismic, oceanographic, meteorological or ice conditions that might affect an authorized work or activity. (conditions physiques et environnementales) pipeline has the same meaning as in CSA Group standard Z662, Oil and gas pipeline systems, as it relates to offshore pipelines. (pipeline) pollution means the introduction into the environment of any substance or form of energy outside the limits applicable to an authorized work or activity. (pollution) pressure system means piping, pressure vessels, safety components and pressure components, including elements attached to pressurized parts, such as flanges, nozzles, couplings, supports, lifting lugs, safety valves and gauges. (système sous pression) production installation means the systems and equipment used for or in support of the production of petroleum, including those that are used for separation, treatment and processing; the systems and equipment used to conduct well operations; any systems and equipment related to marine activities; any associated aircraft landing areas, storage areas or tanks and accommodations areas; and any associated platforms, artificial islands, subsea production systems and offshore loading systems. (ouvrage de production) production project means a project for the purpose of developing a production site on, or producing petroleum from, a pool or field, including any work or activity related to the project. (projet de production) production riser means the connection between subsea production equipment and a production platform. (tube prolongateur de production) production site means a site where a production installation is or is proposed to be installed. (emplacement de production) recovery of petroleum means the recovery of petroleum under foreseeable economic and operational conditions. (récupération des hydrocarbures) relief well means a well that is drilled to assist in controlling a blowout in an existing well. (puits de secours) reportable incident means an event that resulted in any of the following occurrences or in which an occurrence referred to in any of paragraphs (a) to (f) was narrowly avoided: loss of life; fire or explosion; collision; pollution; leak of a hazardous substance; loss of well control; impairment of a support craft or of any of the structural elements of an installation — or any system or equipment — that is critical to safety; impairment of any of the structural elements of an installation — or any system or equipment — critical to environmental protection; implementation of emergency response procedures. (incident à signaler) safety-critical element means any system or equipment, including software and temporary or portable equipment, that is critical to the safety or integrity of an installation or to preventing the installation from polluting, including any system or equipment that is intended to prevent or limit the effects of a hazard that could cause a major accidental event, or whose failure could cause a hazard that could cause a major accidental event, or worsen the effects on the installation of a major accidental event; and any software or temporary or portable equipment that affects any system or equipment referred to in paragraph (a). (élément essentiel à la sécurité) subsea production system means equipment and structures that are located on or below the seabed for the production of petroleum from, or for the injection of fluids into, a field under a production site and includes production risers, flowlines and associated control systems that are located upstream of the isolation valve. (système de production sous-marin) support craft means a vessel, vehicle, aircraft or other craft used to provide transportation or assistance to persons at an operations site. (véhicule de service) waste material means any garbage, refuse, sewage or waste fluids or any other useless material that is generated during the carrying out of any work or activity, including used or surplus drill cuttings and drilling fluid as well as produced water. (déchets) watertight means designed and constructed to withstand a static head of water without any leakage. (étanche) well control means the control of the movement of fluids into or from a well. (maîtrise du puits) well operation means an operation related to the drilling, completion, recompletion, re-entry, intervention, workover, suspension or abandonment of a well. (travaux relatifs au puits) workover means an operation on a completed well that requires removal of the tree or the tubing. (reconditionnement) zone means any stratum or any sequence of strata, including a zone that has been designated as such by the Board under paragraph 60(a). (couche) Incorporation by reference In these Regulations, any incorporation by reference of a document is an incorporation of that document as amended from time to time. Bilingual documents Despite subsection (1), if a document that is incorporated by reference is available in both official languages, any amendment to it is incorporated only when the amended version is available in both official languages. Requirements An operator must ensure that any person to whom a duty is assigned or who carries out a work or activity under these Regulations has the necessary experience, training, qualifications and competence to carry out that duty, work or activity safely, in a manner that protects the environment and in compliance with these Regulations. Sufficient number and supervision The operator must ensure that the persons referred to in subsection (1) are sufficient in number and receive the necessary supervision to ensure safety and the protection of the environment. An operator must, for the purposes of reducing safety and environmental risks, preventing pollution and ensuring the conservation of petroleum resources, develop a management system that meets the following requirements: it must be set out in writing; it must apply to all of the works and activities referred to in the operator’s application for authorization; it must correspond to the scope, nature and complexity of the works and activities and the associated hazards and risks; it must be explicit, comprehensive and proactive; it must foster a culture of safety; it must establish conditions under which a person who makes a report that relates to safety or protection of the environment will be protected from reprisal; it must include processes for integrating works and activities and technical systems with the management of human and financial resources; it must include processes to ensure that all persons have the necessary experience, training, qualifications and competence and receive the necessary supervision to carry out the duties they are assigned; it must set out the roles, responsibilities and authorities of all persons exercising functions under it, as well as the processes for making those persons aware of their roles, responsibilities and authorities; it must include processes for coordinating the carrying out and management of the works and activities among the operator, employers, suppliers, service providers and other persons that are subject to it; it must include processes for the internal and external communication of documents and information relating to safety or the protection of the environment; it must include a process for the efficient and immediate transmission, at every shift handover, of documents and information relating to any conditions, mechanical or procedural deficiencies or other problems that may have an impact on safety or the protection of the environment; it must include processes for identifying hazards that may arise during routine and non-routine operations, for assessing the risks associated with those hazards and for reducing those risks through the implementation of control measures, and for establishing an inventory of those hazards and control measures and for maintaining that inventory; it must include processes for investigating and reporting, for the purposes of section 179, the root causes of any reportable incident, the contributing factors and the measures to be implemented to prevent recurrence of the incident; it must include a process for establishing a system to analyze trends in hazards and reportable incidents; it must include processes for identifying, evaluating and managing all systems and equipment that are critical to safety or to the protection of the environment; it must include processes for identifying, evaluating and managing any changes that could affect safety, the protection of the environment and the conservation of petroleum resources; it must include processes for identifying tasks that are critical to safety, the protection of the environment and the conservation of petroleum resources; it must include processes for establishing and maintaining measurable goals and performance indicators that are applicable to it; it must include processes for its periodic internal audit and review to identify areas for improvement and the preventive and corrective measures to be taken if deficiencies are identified; it must include processes for monitoring compliance and preventing non-compliance with the requirements of these Regulations, the provisions of Part III of the Act and any requirements that are determined by the Board under that Part; it must include processes for inspection, monitoring, testing and maintenance to ensure the continued integrity of all installations, including their systems and equipment, pipelines and vessels, and for the taking of corrective measures if deficiencies are identified; it must include the policies and indicate the standards on which it is based; it must include a process to ensure that all documents associated with it are approved by a person with the necessary authority, periodically reviewed and updated when necessary; it must include a process for establishing a system to manage any records associated with it, and the records necessary to support operational and regulatory requirements, for the purpose of ensuring that those records are generated, identified, controlled and retained and are readily accessible for consultation and examination; and it must include processes for controlling and coordinating work, including with respect to the issuance of work permits required under Part 10 and the identification of the works and activities for which a work permit is required. Documentation The operator must ensure that the processes and policies included in the management system and the standards referred to in it are readily accessible for consultation and examination. Organization The documentation associated with the management system must be organized and set out in a logical fashion to allow for ease of understanding and efficient implementation. Processes and procedures In this section, a reference to a process includes any procedures that are necessary to implement the process. Human resources An operator must put in place an organizational structure that includes sufficient human resources to implement and continually improve the management system. Accountable person The operator must designate an employee as the accountable person for the management system and must ensure that the accountable person has the necessary authority over the human and financial resources that are required to implement and continually improve the system. Name, position and contact information The operator must ensure that the name, position and contact information of the accountable person is submitted to the Board at the time the application for an authorization is made, when a new designation is made under subsection (2) and any time a change is made to the name, position or contact information of the accountable person. Implementation An operator must ensure that the management system is implemented before the commencement of any authorized work or activity. Compliance The operator must ensure that all employees, employers, suppliers, service providers and other persons that are subject to the management system comply with the requirements of the management system. Continual improvement The accountable person referred to in subsection 5(2) must ensure that the management system is continually improved. Documents and information The application for an authorization must be accompanied by the following documents and information: the scope of the proposed work or activity; an execution plan and schedule for undertaking the proposed work or activity; the safety plan referred to in section 9; the environmental protection plan referred to in section 10; the contingency plan referred to in section 11; a description of the installations, including their systems and equipment, pipelines, vessels and support craft, that are to be used for carrying out the work or activity, including the layouts of the installations; in the case of a production project, a description of the field data acquisition program referred to in section 13; in the case of a drilling program or a production project, information on any proposed flaring or venting of gas, including the rationale for flaring or venting and the estimated rate, quantity and period of the flaring or venting, and any proposed burning of oil, including the rationale for burning and the estimated quantity of oil to be burned, and the decommissioning and abandonment plan referred to in section 15; in the case of a geoscientific program, geotechnical program or environmental program, a map illustrating the location of the program works and activities and their proximity to any man-made structures or vulnerable natural structures, as well as any territorial or other boundaries, a description of the methods to be used in carrying out the program works and activities and a description of any aircraft or vessel to be used, and a description of the proposed data acquisition plan; in the case of a diving project, the dive project plan required under section 171 of the Canada–Nova Scotia Offshore Area Occupational Health and Safety Regulations; and if applicable, the list required under paragraph 151(a), the records made in the course of conducting the risk assessment required under paragraph 151(b) and the action plan required under paragraph 151(c). Safety plan An operator must develop a safety plan that sets out the procedures, practices, resources, sequence of key safety-related activities and monitoring measures that are necessary to safely carry out a proposed work or activity, as well as the target levels of safety in respect of the work or activity and measures for hazard management. The safety plan must include the following documents and information: specific references to and detailed descriptions of the provisions of the management system that relate to safety, sufficient to demonstrate how the obligations set out in these Regulations with regard to safety will be fulfilled; a document that includes a summary of the studies that have been carried out, and a description of the processes that will be followed, for the purposes of identifying hazards related to the proposed work or activity that may occur during routine and non-routine operations, including any hazards posed by any other activities taking place near the proposed work or activity, and assessing safety risks associated with the identified hazards, a description of the identified hazards referred to in clause (i)(A) and the results of the assessments referred to in clause (i)(B), a summary of the measures to be implemented to anticipate safety risks related to the identified hazards, a summary and evaluation of the measures to be implemented to reduce the safety risks associated with the identified hazards, including, if the possibility of ice hazards exists, measures for ice detection, forecasting, surveillance and reporting, including data collection, and any measures for ice avoidance or deflection, a detailed description of the measures to be implemented to reduce safety risks to a level that is as low as reasonably practicable in respect of the design of all installations, including their systems and equipment, the design, winterization and operation of any installation that is to be operated in a cold climate, the design, arrangement, installation and maintenance of barriers to provide fire and blast protection, the design of all control systems, the design, selection, location, installation, commissioning, protection, operation, inspection and maintenance of mechanical equipment, the design, construction, installation, commissioning, operation, inspection, monitoring, testing and maintenance of any subsea production system under all foreseeable physical and environmental conditions and operating conditions for all modes of operation, the management of temporary or portable equipment, and the arrangement and specification of watertight and weathertight appliances, a detailed description of the measures to be implemented in respect of the design and location of any vent that is used to release gas into the atmosphere without combustion in order to minimize the risk of accidental ignition of the gas, the design, selection, operation, inspection, testing and maintenance of fire protection systems and equipment in order to minimize the risk of hazards to persons who use those systems and equipment, the design of boilers and pressure systems in order to minimize the risk of hazards to the installation and to persons present on it and to any other installations, vessel or persons in proximity to it, and the design and maintenance of any disconnectable mooring system on a floating platform to ensure that the risk that the system will fail to safely disconnect if exposed to situations that would exceed the platform’s structural limits or the system’s design limits is reduced to a level that is as low as reasonably practicable, without compromising the ability to achieve the target levels of safety set out in the safety plan and environmental protection plan, and a summary of the measures to be implemented for communicating the identified hazards and for mitigating the safety risks associated with those hazards to all persons who are directly affected; a description of all installations or vessels that are to be used during the proposed work or activity, a description of their systems and equipment that are critical to safety and a brief description of the systems in place for the inspection, testing and maintenance of those systems and that equipment; a description of the organizational structure and chain of command for the proposed work or activity that explains the relationship between the organizational structure and chain of command, and includes the name, position and contact information of the employee who is responsible for the management of the safety plan; and a description of the measures to be implemented to monitor compliance with the plan and to evaluate performance in relation to its objectives. Environmental protection plan An operator must develop an environmental protection plan that sets out the procedures, practices, resources and monitoring measures that are necessary to protect the environment from the effects of a proposed work or activity, the target levels of safety in respect of the work or activity and measures for hazard management. The environmental protection plan must include the following documents and information: specific references to and detailed descriptions of the provisions of the management system that relate to the protection of the environment, sufficient to demonstrate how the obligations set out in these Regulations with regard to environmental protection will be fulfilled; assessing environmental risks associated with the identified hazards, a summary of the measures to be implemented to anticipate environmental risks related to the identified hazards, a summary and evaluation of the measures to be implemented to reduce the environmental risks associated with the identified hazards, and a detailed description of the measures to be implemented to reduce environmental risks to a level that is as low as reasonably practicable in respect of the design, construction, installation, commissioning, operation, inspection, monitoring, testing and maintenance of any subsea production system under all foreseeable physical and environmental conditions and operating conditions for all modes of operation, and a detailed description of the measures to be implemented in respect of the design and location of any vent that is used to release gas into the atmosphere without combustion in order to minimize the risk of accidental ignition of the gas, and a summary of the measures to be implemented for communicating the identified hazards and for mitigating the environmental risks associated with those hazards to all persons who are directly affected; a description of all installations or vessels that are to be used during the proposed work or activity, a description of their systems and equipment that are critical to the protection of the environment and a brief description of the systems in place for the inspection, testing and maintenance of those systems and that equipment; in the case of a drilling program or a production project, the procedures for the selection, evaluation and use of chemical substances, including process chemicals and drilling fluid ingredients; a description of the equipment and procedures for the treatment, handling and disposal of waste material; a description of all of the discharge streams and the limits of any discharge into the environment, including any discharge of waste material; a description of the system for monitoring compliance with the discharge limits referred to in paragraph (f), including the sampling and analytical programs for determining whether discharges are within the specified limits; includes the name, position and contact information of the employee who is responsible for the management of the environmental protection plan; a description of the measures to be implemented to monitor compliance with the plan and to evaluate performance in relation to its objectives; and a description of the procedure to be followed if an archaeological site or a burial ground is discovered during the proposed work or activity. Contingency plan An operator must develop a contingency plan that sets out the procedures, including emergency response procedures, and the practices, resources and monitoring measures that are necessary to effectively prepare for and mitigate the effects of any accidental event. The contingency plan must include the following documents and information: a description of the method to be used for classifying accidental events and a description of the emergency response procedures for each event; a description of the procedures for the internal and external reporting of accidental events; a description of the procedures for accessing safety-related and environmental information that is necessary to mitigate the effects of any accidental event; a description of the organizational structure, chain of command and resources for managing any accidental event, including a list of key emergency response positions and a description of the roles, responsibilities and authorities associated with each of those positions, including a description of related tasks and checklists of actions that must be taken in the context of the contingency plan, a description of the available support craft and the contact information for its crew or a reference to the number or title of a document that provides that description and contact information, a description, or a reference to the number or title of a document that provides the description, of available emergency response equipment, including life-saving appliances, and the equipment’s location, as well as the limits on its use and the mitigation measures to be taken in the event that it is not available, a description, or a reference to a number or title of a document that provides the description, of all available medical equipment and the equipment’s location, a description of the communication system referred to in section 129 and the operating procedures for that system, a description of all emergency response operations centres and their locations, a description of any good or service that must be obtained on a contractual basis for each response measure, and a description of the location and the contents of any temporary safe refuges or a reference to the number or title of a document that provides that description; details of all mutual aid agreements entered into with other operators; a description of the procedures for coordinating and liaising with all relevant emergency response organizations; a description of the communication protocols with all relevant federal, provincial, territorial and municipal agencies and Indigenous governing bodies; a copy of all personnel evacuation plans, including any evacuation plan for divers engaged in a dive; and an indication of the frequency with which emergency response drills and exercises are to be completed and their scope. Uncontrolled flow In the case of a drilling program or a production project, the contingency plan must also include a description of the source control and containment measures to be taken to stop uncontrolled flow from a well and to minimize the duration and environmental effects of any resulting spill, as well as the following documents and information: a description of the source control and containment equipment to be used in the event of a loss of well control; details of the contractual arrangements for the source control and containment equipment, other than a relief well drilling installation, including the name and contact information of the owner or owners of the equipment, the arrangements for transport of the equipment to the location of the uncontrolled well, and the arrangements for the mode of deployment of the equipment at the location of the uncontrolled well; the schedule and plan for the mobilization, deployment and operation of the source control and containment equipment, including measures to minimize deployment time that take required regulatory approvals into account; details regarding the accessibility of the source control and containment equipment and the documents and information referred to in paragraphs (a) to (c); an explanation of the adequacy of each of the source control and containment measures; and a description of any support systems and equipment that are available, including vessels and remotely operated vehicles and any consumables that may be used, such as, in the case of a relief well, a spare wellhead, spare casing and spare bulk additives. Spill-treating agent If a spill-treating agent is being considered for use as a spill response measure, the contingency plan must include the following additional documents and information: the name of the chosen spill-treating agent and details of an assessment of its efficacy in treating the potential sources of pollutants, including the results of any tests conducted for the assessment and a description of those tests; the results of an analysis that demonstrates that a net environmental benefit is likely to be achieved through the use of the spill-treating agent under certain circumstances; a description of the circumstances under which the spill-treating agent will be used and the estimated period within which its use will be effective; a description of the methods and protocols, including the amount and application rate, for safe, effective and efficient use of the spill-treating agent; a list of the personnel roles, equipment and materials that an operator will have available for the purpose of using the spill-treating agent, including any to be provided through contractual arrangements, and a description of the requirements that must be met for those contracts to be activated; and a monitoring plan for the use of the spill-treating agent. Assessment of efficacy The assessment of efficacy under paragraph (4)(a) must be carried out using oil obtained directly from the operations site where the spill-treating agent is being considered for use or, if oil is not available from that operations site, it must be carried out using an oil that most closely resembles the oil that is expected to be obtained from the operations site and must be repeated when oil becomes available from that operations site. International standard or alternative The assessment, analysis, methods and protocols referred to in paragraphs (4)(a), (b) and (d) must be based, taking the local environment into account, on an international standard or an alternative recognized by the Board and the contingency plan must identify each of those standards or alternatives. Methods and protocols The methods and protocols referred to in paragraph (4)(d) and the monitoring plan referred to in paragraph (4)(f) must conform to industry standards and best practices for spill-treating agent use, taking the local environment into account. Definition of source control and containment equipment In this section, source control and containment equipment means the capping stack, containment dome, any subsea and surface equipment, devices or vessels and any relief well drilling installations that are used to contain and control a spill source and to minimize the duration of a spill and its environmental effects until well control is regained. Spill-treating agent — section 142.21 of Act In determining for the purpose of section 142.21 of the Act whether the use of a spill-treating agent is likely to achieve a net environmental benefit, the Board must take into account the assessment of the spill-treating agent’s efficacy referred to in paragraph 11(4)(a); the results of the analysis referred to in paragraph 11(4)(b); the circumstances referred to in paragraph 11(4)(c); the methods and protocols referred to in paragraph 11(4)(d); and the monitoring plan referred to in paragraph 11(4)(f). Field data acquisition program In the case of a production project, an operator must develop a field data acquisition program that provides for the collection of sufficient pool pressure measurements, drill cutting and fluid samples, cores and well logs, and the carrying out of sufficient formation flow tests, analyses and surveys, to enable a comprehensive assessment of the field, of the performance of development wells, of the pool depletion scheme and of any injection scheme; and identifies the quantity of samples and cores, the evaluation data and any associated analyses, surveys and reports that are to be provided to the Board. Flow system, calculation and allocation If the application for an authorization is in respect of a production project, the operator must submit to the Board for its approval the flow system, the flow calculation procedure and the flow allocation procedure that will be used to conduct the measurements referred to in sections 74 to 78, as well as any alternate measurements referred to in subsection 74(2) that the operator proposes to conduct. Board approval The Board must approve the flow system, the flow calculation procedure and the flow allocation procedure if the applicant demonstrates that the system and procedures facilitate accurate measurements and the allocation, on a pool or zone basis, of the production from and injection into individual wells. Decommissioning and abandonment plan An operator must, in the case of a drilling program or production project, develop a decommissioning and abandonment plan that includes the following information: a description of the safety and environmental protection measures to be implemented during the decommissioning and abandonment to comply with the requirements of these Regulations, the provisions of Part III of the Act and any federal or provincial legislation or international conventions or agreements relating to safety and the protection of the environment; a description of the potential effects of the decommissioning and abandonment on the environment and on any future uses of the site where the program or project is carried out; the methods for restoring the site after the decommissioning and abandonment; and the forecasted costs of the decommissioning and abandonment and the manner in which the operator will finance or pay for those costs. Costs and financing or payment The operator must submit to the Board an update on the forecasted costs of decommissioning and abandonment and the manner in which the operator will finance or pay for those costs whenever there is a significant change to that information, and beginning no less than five years before the day on which the decommissioning and abandonment is forecasted to begin, at least once a year. Definitions — paragraph 142(4)(c) of Act The following definitions apply for the purposes of paragraph 142(4)(c) of the Act. production facility means the systems and equipment referred to in paragraph (a) of the definition production installation, other than a diving system, as well as any associated aircraft landing areas, storage areas or tanks and accommodations areas. (installation de production) production platform means a production installation. (plate-forme de production) Well operation Subject to subsection (2), an operator that intends to conduct a well operation must obtain a well approval. Approval not necessary A well approval is not necessary to conduct a wire line operation, slick line operation, coiled tubing operation or other similar operation through a tree located above sea level if the operation does not alter the completion interval or is not expected to adversely affect the recovery of petroleum; and the equipment, operating procedures and qualifications of the persons carrying out the work are in compliance with the requirements of the authorization. The following definitions apply in subsection (2). slick line means a single steel cable that is used to run tools in a well. (câble lisse) wire line means a line that contains a conductor wire and that is used to run survey instruments or other tools in a well. (câble) Approval application contents The application for a well approval must include the estimated cost breakdown of the well operation and the following information: if the well approval is being sought to drill a well, a comprehensive description of the drilling program, a geoscientific description of the reservoir targets and a description of any geohazard, the digital data necessary to allow for an independent geohazard assessment, a description of the well data acquisition program referred to in section 18, and a description of the well verification scheme referred to in section 19; if the well approval is being sought to perform a workover on, to re-enter, to complete or to recomplete a well or to suspend or abandon a well or a part of one, a description of the well or part, a description of the proposed work or activity and the rationale for carrying it out and barrier envelope diagrams that demonstrate that two barrier envelopes will be in place throughout the operation; if the well approval is being sought to complete a well, information that demonstrates that section 71 will be complied with; if the well approval is being sought to suspend a well or a part of one, an indication of the period within which the suspended well or part will be abandoned or completed; and if the well approval is being sought to suspend or abandon a well or a part of one, the methods for verifying the effectiveness of the isolation of pools and zones that is required under subparagraph 90(1)(b)(i). Well approval granted by the Board The Board must grant the well approval if the operator demonstrates that the well operation will be conducted safely, without waste or pollution and in compliance with these Regulations.

Well data acquisition program In the case of a drilling program, an operator must develop a well data acquisition program that provides for the collection of sufficient pressure measurements, drill cutting and fluid samples, conventional cores, sidewall cores and well logs, and the carrying out of sufficient formation flow tests, analyses and surveys, to enable a comprehensive geophysical, geological and reservoir evaluation to be made; and Well verification scheme An operator must establish a well verification scheme based on criteria that the operator establishes to ensure that the design of any well is in accordance with industry standards and best practices so that the well’s integrity is maintained throughout its life cycle. Well ranking For the purposes of subsection (1), the operator must rank a well according to its level of risk and ensure that the well ranking is confirmed by an independent person. Verification requirements The verification scheme must set out the verification requirements that are applicable to the design of a well according to the well’s ranking and to any changes made to the design during the well’s construction or operation that would affect any previously undertaken verification. Verification by independent person The operator must ensure that the required verifications are carried out by an independent person that was not involved in the original design. Suspension of well approval The Board may suspend a well approval if the operator conducts the well operation other than as described in the application for the well approval; the physical and environmental conditions encountered in the area of the work or activity for which the well approval was granted are more severe than those on the basis of which the manufacturer of any equipment used in the well operation established the equipment’s operating limits; or the operator uses a flow system, flow calculation procedure or flow allocation procedure that has not been approved under subsection 14(2), conducts a formation flow test that has not been approved under subsection 63(5) or engages in commingled production that has not been approved under subsection 80(2). Factors for suspension In deciding whether to suspend a well approval, the Board must consider the effects or potential effects of the applicable situation referred to in subsection (1) on safety, the environment and the conservation of petroleum resources; and the operator’s history of non-compliance with the requirements of these Regulations, the provisions of Part III of the Act or any requirements that are established by the Board under that Part with respect to well operations. Revocation of well approval The Board must revoke a well approval if the operator fails to remedy the situation that caused the suspension of the well approval as soon as the circumstances permit within 60 days after the date of that suspension unless, on written request by the operator, the Board grants the operator an extension of time to remedy the situation; or the operator continues to operate the well despite the suspension of the well approval. Suspension or abandonment of well If a well approval is revoked, the operator must ensure that the well is suspended or abandoned in accordance with Part 8. Well approval — subsection 143(1) of Act For the purposes of subsection 143(1) of the Act, a well approval relating to a production project is prescribed. Concept safety analysis The approvals referred to in subsection 143(4) of the Act are subject to the operator’s submission of a concept safety analysis to the Chief Safety Officer at the time the operator submits the application and proposed development plan to the Board under subsection 143(2) of the Act. Content The concept safety analysis must be based on the development concept chosen by the operator as a general approach and described in Part I of the development plan; take into account all works and activities associated with each phase in the life cycle of the development; determine target levels of safety that are to be achieved to ensure safety and the protection of the environment for all works and activities within each phase of the life cycle of an installation, including its systems and equipment, from the installation’s design up to and including its decommissioning and abandonment; identify all hazards having the potential to cause a major accidental event; include a systematic assessment of the unmitigated risks associated with each of the identified hazards, including the likelihood of a major accidental event occurring and the consequences that would result; identify the control measures that are to be implemented to reduce the risks associated with the identified hazards to a level that is as low as reasonably practicable; identify the effects of any additional risks that may result from the implementation of the identified control measures; and identify all assumptions on which any aspect of the concept safety analysis is based. Quantitative and qualitative risk assessments The target levels of safety must be based on risk assessments that are quantitative, if it can be demonstrated that input data are available in the quantity and quality necessary to demonstrate the reliability of the results; or qualitative, if the criteria in paragraph (a) are not met or if a quantitative assessment would otherwise be inappropriate. Contents of risk assessment The operator must include in the risk assessment a description of the circumstances that will necessitate an update of the risk assessment, including changes in the physical and environmental conditions; the operating conditions and the limits taken into account in the design assumptions; and the operating procedures. Review of risk assessment The operator must update the risk assessment as often as necessary and at least once every five years throughout the life cycle of the development to account for the circumstances described in subsection (4); and ensure the ongoing suitability of the control measures to maintain risks at a level as low as reasonably practicable. Resource management plan — paragraph 143(3)(b) of Act For the purposes of paragraph 143(3)(b) of the Act, Part II of the development plan must contain a resource management plan. Contents of resource management plan The resource management plan must include a description and analysis of the following: the geological setting and features of the field and of each pool or petroleum-bearing reservoir; the petrophysical data and analytical procedures for each pool; the reservoir engineering data for each pool; estimates of in-place resources and recoverable reserves for each pool, fault block and reservoir subdivision; the proposed reservoir exploitation scheme; potential developments and the reasons why they are not included in the proposed development of the field or pool; any past drilling in the area related to the proposed development of the field or pool as well as the proposed drilling program and typical completion designs for the development wells; the production and export systems related to the proposed development of the field or pool; the expected overall operating efficiency and reliability of the proposed development of the field or pool; and past expenditures and predicted capital and operating cost data, with sufficient detail to permit an economic analysis of the proposed development of the field or pool. Organizational structure The resource management plan must also contain a description of the operator’s organizational structure as it relates to the implementation of the plan. Prescribed installations — section 143.2 of Act For the purpose of section 143.2 of the Act, a production installation, drilling installation, accommodations installation and diving installation are prescribed installations. Definition of installation In this Part, installation means an installation referred to in section 26. Issuance of certificate — requirements and conditions Before a certifying authority issues a certificate of fitness in respect of an installation, the person that applies for the certificate must provide the certifying authority with all the information that the certifying authority requires in relation to the application for certification, such as design specifications for the installation, including its systems and equipment, conduct or assist the certifying authority in conducting any inspection, test or survey that the certifying authority requires, except in the case of a diving installation, submit to the certifying authority for approval a maintenance program that meets the requirements set out in section 159 and a weight control program that meets the requirements set out in section 161, and in the case of a diving installation, submit a maintenance program to the certifying authority for approval; the certifying authority must determine that, in relation to the production site, the drill site or the region in which the particular installation is to be operated, the installation, including its systems and equipment, is fit for the purposes for which it is to be used and can be operated without posing a threat to persons or the environment, in the case of an installation other than a diving installation, the requirements set out in the following provisions have been met: the provisions of these Regulations listed in Part 1 of Schedule 1, and the provisions of the Canada–Nova Scotia Offshore Area Occupational Health and Safety Regulations listed in Part 2 of Schedule 1, other than paragraph 22(5)(b), subsection 28(3), paragraph 28(5)(a), subsection 171(3) and paragraphs 172(1)(a), (g), (j) to (m), (o) and (p), (2)(e) and (3)(c) and (f) of those Regulations, in the case of a diving installation, the requirements set out in the following provisions have been met: section 174 and the provisions of Part 9, and the provisions of the Canada–Nova Scotia Offshore Area Occupational Health and Safety Regulations listed in Part 2 of Schedule 1, and the installation, including its systems and equipment, will continue to meet the requirements set out in subparagraph (i) and the applicable requirements set out in subparagraph (ii) or (iii), as the case may be, for the time set out in the certificate of fitness if the installation — other than a diving installation — including its systems and equipment, is inspected, monitored, tested and maintained in accordance with the maintenance program and is maintained in accordance with the weight control program referred to in subparagraph (a)(iii), or the diving installation, including its systems and equipment, is maintained in accordance with the maintenance program referred to in subparagraph (a)(iv); the certifying authority must in the case of an installation other than a diving installation, determine that the maintenance program and the weight control program are adequate to ensure the continued integrity of the installation, including its systems and equipment, and approve them, and in the case of a diving installation, determine that the maintenance program is adequate to ensure the continued integrity of the installation, including its systems and equipment, and approve it; and the certifying authority must carry out the scope of work in respect of which the certificate of fitness is issued. Substitution — section 155 and subsection 210.07(1) of Act For the purposes of subparagraphs (1)(b)(ii) and (iii), the certifying authority may substitute, for any equipment, methods, measures, standards or other things required under any regulation referred to in those subparagraphs, any other equipment, methods, measures, standards or other things the use of which is authorized by the Chief Safety Officer or the Chief Conservation Officer, as the case may be, under section 155 of the Act or subsection 210.07(1) of the Act. Limitations The certifying authority must set out in any certificate of fitness that it issues the details of any limitation on the operation of the installation that is necessary to ensure that the installation, including its systems and equipment, meets the requirements set out in paragraph (1)(b). Conflict of interest — paragraph 143.2(4)(b) of Act For the purposes of paragraph 143.2(4)(b) of the Act, the extent to which a certifying authority may participate in the design, construction or installation of an installation in respect of which a certificate of fitness is issued is as follows: the certifying authority or one of its subsidiaries or affiliates may be the certifying authority or classification society for the original design, construction or installation of the installation or any modification to it; and a subsidiary or affiliate of the certifying authority may participate in the design, construction or installation of the installation to any other extent as long as it does not participate in any of the certification or verification activities in respect of the installation. Notice of non-compliance The certifying authority must monitor for any participation beyond that described in subsection (1) and must, without delay, inform the person that applied for the certificate and the Board of any such participation. Certification plan A person that applies for a certificate of fitness must submit a certification plan to the Chief Safety Officer and to the certifying authority for the purposes of the approval of the scope of work under section 31. Contents The certification plan must include the following documents and information: a description of the installation that is to be certified, including its systems and equipment; a list of the standards that will apply to the installation to be certified, including its systems and equipment, and a list of the standards on which the measures to reduce risks that are described in the safety plan and the environmental protection plan are based or, if there are no applicable standards, any studies and analyses that demonstrate that the measures to be implemented are adequate to reduce the risks to safety and the environment to a level that is as low as reasonably practicable or to minimize the risk of hazards, as the case may be; and other than in the case of a diving installation, a list of all safety-critical elements, as well as a description of how the associated performance standards are to be developed. Scope of work A certifying authority must submit to the Chief Safety Officer for approval a scope of work that takes into account the certification plan. Contents of scope of work The scope of work must include a description of the following activities to be conducted by the certifying authority: activities to verify compliance with the requirements referred to in paragraph 28(1)(b), activities to verify the validity of the certificate of fitness, and any additional activities to be carried out before the renewal of the certificate; and a schedule of the activities referred to in paragraph (a). Approval of scope of work The Chief Safety Officer must approve the scope of work if the Chief Safety Officer determines that in the case of any installation, the scope of work is sufficiently detailed to permit the certifying authority to determine whether the requirements referred to in paragraph 28(1)(b) are met, describes the type and extent of reporting in respect of continual monitoring of the certification process being undertaken by the certifying authority, and demonstrates how the certifying authority has complied with section 29; in the case of an installation other than a diving installation, the scope of work provides the means for determining whether the environmental criteria for the region or site and the loads estimated for the installation are correct, the list of safety-critical elements included in the certification plan is complete and the elements are in place and functioning as intended, in respect of any installation referred to in a development plan, the concept safety analysis submitted under section 24 meets the requirements set out in that section, in respect of a new installation, the installation has been constructed in accordance with the quality assurance program referred to in section 100, the operations manual meets the requirements set out in section 157, and the installation’s construction and installation, including the materials used for those purposes, meet the design specifications, includes the list of performance standards and methods that the certifying authority will use to verify compliance with those standards and to verify whether the installation, including its systems and equipment, continues to be fit for the purposes for which it is to be used, and provides the means for determining whether the provisions listed in Schedule 2 have been complied with and whether the structures, systems and equipment referred to in those provisions are in place and functioning as intended; and in the case of a diving installation, the scope of work provides the means for determining whether the processes referred to in subparagraph 4(1)(m)(iii) and paragraph 4(1)(v) that are included in the operator’s management system have been implemented. Period of validity A certificate of fitness is valid for five years from the day on which it is issued if the certifying authority determines that the requirements referred to in paragraph 28(1)(b) will be met for a period of at least five years from that day. Less than five years If the certifying authority determines that the requirements referred to in paragraph 28(1)(b) can be met only for a period that is less than five years, the certificate of fitness is valid for the corresponding lesser period. Expiry date The certifying authority must indicate on the certificate of fitness its expiry date. Extension of period of validity The certifying authority may, on request of the holder of a certificate of fitness, extend the period of validity of the certificate of fitness for a period of up to three months, subject to the approval of the Chief Safety Officer. Approval by Chief Safety Officer The Chief Safety Officer must approve the extension of the period of validity of the certificate of fitness if the extension does not compromise safety or the protection of the environment. Applicable site or region A certifying authority must indicate on a certificate of fitness the site or region where the installation is to be operated. Validity A certificate of fitness is valid for the operation of the installation at the site or in the region that is indicated on the certificate of fitness. Revalidation — scope of work The certifying authority must revalidate the scope of work against the criteria referred to in subsection 31(3) and make any modifications that are necessary before renewing a certificate of fitness; and if new circumstances such as the following arise that have or could have a significant impact on the scope of work: these Regulations or the Canada–Nova Scotia Offshore Area Occupational Health and Safety Regulations are amended, new information regarding a major accidental event that occurred in any place is disclosed, amendments are made to any of the standards on which the certification was based, or the installation has transitioned from one life cycle phase to another. Revalidation approval The revalidated scope of work must be submitted to the Chief Safety Officer for approval under subsection 31(3). Renewal of certificate The certifying authority must renew the certificate of fitness in relation to an installation before or on its expiry date if the certifying authority determines that the requirements referred to in paragraph 28(1)(b) have been met; the certifying authority has carried out the activities referred to in subparagraph 31(2)(a)(iii); and the certifying authority has revalidated the scope of work and it has been approved by the Chief Safety Officer. Invalidity Subject to subsections (2) and (3), a certificate of fitness ceases to be valid if the certifying authority or the Chief Safety Officer determines that any of the information provided under subparagraph 28(1)(a)(i) on the basis of which the certificate of fitness was issued is incorrect, any of the requirements referred to in paragraph 28(1)(b) are no longer being met, or any limitation set out in the certificate of fitness under subsection 28(3) has not been respected; or the Chief Safety Officer determines that the certifying authority has failed to carry out the scope of work relating to the installation in respect of which the certificate of fitness was issued. Notice in writing At least 30 days before a determination referred to in subsection (1) is made, notice of the impending determination must be given in writing in the case of a determination to be made by the certifying authority, by the certifying authority to the Chief Safety Officer and to the holder of the certificate of fitness; and in the case of a determination to be made by the Chief Safety Officer, by the Chief Safety Officer to the certifying authority and to the holder of the certificate of fitness. Consideration of information Before making a determination referred to in subsection (1), the certifying authority or the Chief Safety Officer, as the case may be, must consider any information in relation to that determination that is submitted by any person notified under subsection (2). Change of certifying authority If the person that applies for a certificate of fitness decides to change the certifying authority in relation to an installation before the initial certificate of fitness is issued, the new certifying authority must undertake its own independent verification activities for the purpose of issuing the certificate of fitness. After issuance of certificate If the holder of a certificate of fitness decides to change the certifying authority in relation to an installation, the holder must notify the Chief Safety Officer as soon as the circumstances permit; develop and submit to the Chief Safety Officer a transition plan outlining all of the activities to be carried out before transitioning from the outgoing to the incoming certifying authority and demonstrating that there will not be any gaps or delays in the carrying out of verification activities or any negative effects on the extent and quality of those activities as a result of the transition from one certifying authority to another; and ensure that the incoming certifying authority has submitted for approval to the Chief Safety Officer, in accordance with section 31, a new scope of work before commencing transition activities. Transition plan implementation The holder of a certificate of fitness must ensure that the transition plan referred to in paragraph (2)(b) is implemented. One certificate — one authority There must be no more than one certificate of fitness and certifying authority in relation to an installation at any given time. A certifying authority must, without delay, notify the Board, the Federal Minister and the Provincial Minister of any changes to its organizational structure, including amalgamations and legal name changes. Reports and information A certifying authority must submit to the Board, the Federal Minister and the Provincial Minister, not later than March 31 of each year, an annual report that contains a summary of the certification activities the certifying authority carried out during the previous calendar year as a certifying authority under the Act; and proof of its technical capabilities and experience as a certifying authority. Monthly reports The certifying authority must submit a monthly report to the Board that describes the certification activities it carried out during the previous month as a certifying authority under the Act. Information and documents to Board On the Board’s request, the certifying authority must submit to the Board any information obtained or documents generated in the course of carrying out its certification and verification activities. Record retention The certifying authority must retain records, including technical drawings, for any activity carried out during its certification or verification activities in respect of an installation until the day that is seven years after the day on which the last certificate of fitness issued for that installation expires. Installation manager For the purposes of section 198.2 of the Act, every installation is a prescribed installation. Safety and protection of environment An operator must take all measures necessary to ensure safety and the protection of the environment during any authorized work or activity, including measures to ensure that the safety of persons at an operations site or on a support craft has priority, at all times, over any work or activity at the operations site or on the support craft; safe work methods are adopted; differences in language or other barriers to effective communication do not jeopardize safety or the protection of the environment; if there is a loss of well control, all other wells at the same installation are shut in until the well that is out of control is secured; any equipment that is necessary for safety and the protection of the environment is available and in a condition to perform as intended at all times; fires can be controlled and extinguished and any related hazard to safety or the environment is minimized; the administrative and logistical support that is provided for any work or activity includes accommodation and transportation and storage and repair facilities that are fit for the purposes for which they are to be used; every operations site is equipped with a communication system that meets the requirements set out in subsection 129(1); any operating procedure that creates a hazard to safety or the environment is corrected; and all affected persons are informed of any correction made under paragraph (i). Physical and environmental conditions An operator must ensure that physical and environmental conditions, including sea states and ice movements, are observed and forecasts of those conditions are obtained; the observations and forecasts are recorded each day, as well as each time there are substantial differences between the observations and the forecasts; and the records are maintained at the operations site. Location of infrastructure or equipment An operator must keep data or information that accurately describes the location of any infrastructure or equipment at an operations site that is on or attached to the seabed, including any abandoned installation or part of it. Accessibility, storage and handling of consumables An operator must ensure that explosives, fuel, spill-treating agents, spill containment products, drilling, completion and well stimulation fluids and cement, as well as chemicals and other consumables that are necessary for safe operations, are readily accessible and stored in quantities that are sufficient for normal conditions and any emergency situation; and stored and handled in a manner that does not create a hazard to safety or the environment, including any hazard that could result from their deterioration. Storage and handling of chemical substances An operator must ensure that all chemical substances present at an operations site, including process fluids, fuel, lubricants, waste material, drilling fluids and drill cuttings, are stored and handled in a manner that does not create a hazard to safety or the environment. Misuse of equipment It is prohibited for any person to tamper with, activate without cause or otherwise misuse equipment that is necessary for safety or the protection of the environment. Cessation of work or activity An operator must ensure that any work or activity ceases without delay if it endangers or is likely to endanger the safety of any other work or activity; endangers or is likely to endanger the safety or integrity of any operations site or well; or causes or is likely to cause pollution. Condition for resumption The operator must ensure that the work or activity does not resume until it can be done safely and without causing pollution. Copy of authorization and approvals The operator must ensure that a copy of the authorization and all related approvals that are required under these Regulations or Part III of the Act is displayed in a conspicuous location at every operations site. Additional copy and plans An operator must keep an additional copy of the authorization and approvals, as well as all plans that are required under these Regulations or Part III of the Act, at every operations site and must ensure that they are readily accessible for consultation or examination. Emergency response procedures and other documentation An operator must ensure that a copy of the most current version of the emergency response procedures and any documentation that is necessary to carry out an authorized work or activity and to operate and maintain an installation or pipeline is readily accessible at all times at every operations site and emergency response operations centre; and usable under all foreseeable circumstances at each location referred to in paragraph (a). An operator must ensure that the safety plan referred to in section 9, the environmental protection plan referred to in section 10 and the resource management plan referred to in section 25 are implemented at the commencement of any work or activity and that the contingency plan referred to in section 11 is implemented as soon as an accidental event occurs or appears imminent. Periodic updates The operator must ensure that the safety plan, environmental protection plan, resource management plan and contingency plan are periodically updated; however, the descriptions of installations, vessels, systems and equipment that are included in the safety plan and the environmental protection plan as required by paragraphs 9(2)(c) and 10(2)(c), respectively, must be updated as soon as the circumstances permit after the modification, replacement or addition of any major component. Measures all equipment and materials that are necessary to conduct a geoscientific program, geotechnical program or environmental program are handled, installed, inspected, tested, maintained and operated in a manner that takes into account the manufacturer’s instructions and industry standards and best practices; and if any of the equipment, its components or the materials are defective, they are, without delay, repaired or replaced in accordance with the manufacturer’s recommendations. Certification An operator must ensure that a competent third party has certified that all equipment that is installed temporarily on a vessel to conduct a geoscientific program, geotechnical program or environmental program is fit for the purposes for which it is to be used. Damage to property An operator must take all necessary measures to ensure that no property is damaged as a result of a geoscientific program, geotechnical program or environmental program. General requirements An operator must ensure that any energy source that is used in a geoscientific program, geotechnical program or environmental program is kept free from any substance that could create a hazard; and operated in a manner that prevents inadvertent activation of the energy source. Electrical or electromagnetic energy source The operator must ensure that any electrical or electromagnetic energy source is equipped with circuit breakers on the charging and discharging circuits and with wiring that is adequately insulated and grounded to prevent current leakage and electrical shock. Elimination of risk to divers The operator must ensure that the program is conducted in a manner that eliminates all safety risks to divers from any energy source used, including by determining the minimum distances that are required to be maintained between the divers and the energy source and ensuring compliance with those distances. Testing of energy sources An operator must minimize energy source testing on the deck of an operations site while a geoscientific program, geotechnical program or environmental program is being conducted. Energy source activation Before an energy source is activated for testing purposes, the operator must ensure that measures are taken to protect persons at the operations site where the test will be conducted from exposure to any hazard associated with the energy source, including advising those persons that a test will be conducted; safely securing all equipment; and in the case of an electrical or electromagnetic energy source, fully immersing it in water. Classification An operator must ensure that the primary vessel used in a geoscientific program, geotechnical program or environmental program holds a valid certificate of class issued by a classification society. Prohibited without approval It is prohibited for any person to destroy, discard or, subject to subsection (2), remove from Canada the following materials and information that are obtained in the context of a geoscientific program, geotechnical program or environmental program unless the destruction, discard or removal is approved by the Board under subsection (3): all field data and final processed data that are in a digital format, together with a description of that data format; any samples; and all other data, observations, readings and supporting information obtained during the program. Exception The materials and information may be removed from Canada without the approval of the Board for the purpose of being processed in a foreign country if they are returned to Canada as soon as the processing is complete. Approval of application Within 60 days after the day on which the Board receives an application for approval to destroy, discard or remove from Canada materials or information, the Board must approve the application if the Board is satisfied that the materials or information are not of much use or value. Provision of materials or information The Board may, after receiving an application referred to in subsection (3), require that the materials or information, or a copy of the information, be provided to the Board within the period that it specifies. Allocation of areas The Board may make orders respecting the allocation of areas, including respecting the determination of the size of spacing units and the determination of well production rates, for the purpose of drilling for or producing petroleum. Name, classification or status of well The Board may give a name, classification or status to any well and may change that name, classification or status. Pool, zone or field The Board may designate a zone as such for the purposes of these Regulations; give a name to a pool, zone or field and change that name; and define the boundaries of a pool, zone or field. Data acquisition programs An operator must ensure that the field data acquisition program referred to in section 13 and the well data acquisition program referred to in section 18 are implemented in accordance with good oilfield practices. Partial implementation If part of the field or well data acquisition program cannot be implemented, the operator must ensure that a conservation officer is notified as soon as the circumstances permit; measures to otherwise achieve the goals of the program are submitted to the Board for approval; and the measures approved by the Board are implemented. Board approval of alternate measures The Board must approve the measures submitted under paragraph (2)(b) if the operator demonstrates that the measures can achieve the goals of the field data acquisition program or the well data acquisition program, as the case may be, or are the only ones that can be taken in the circumstances. The operator must ensure that the field data acquisition program is periodically updated. Formation evaluation, testing and sampling If the Board determines that data or samples from a formation in a well would contribute substantially to the geological and reservoir evaluation, the operator must ensure that the formation is evaluated, tested and sampled as necessary to obtain the data or samples. Formation flow test An operator must ensure that no development well is put into production unless a formation flow test that has been approved by the Board under subsection (5) is conducted. If a development well is subjected to a well operation that might change its deliverability, productivity or injectivity, the operator must, for the purpose of determining the effects of the operation on the well’s deliverability, productivity or injectivity, ensure that a formation flow test that has been approved by the Board under subsection (5) is conducted as soon as the circumstances permit after the well operation has ended and the flow or injection conditions have stabilized. Conditions Before conducting a formation flow test on a well drilled on a geological feature, the operator must submit a formation flow test program to the Board; and obtain the Board’s approval under subsection (5) to conduct the formation flow test. Contribution to geological and reservoir evaluation The Board may require that the operator conduct a formation flow test on a well drilled on a geological feature, other than the first well, if the Board determines that the test would contribute to the geological and reservoir evaluation. Approval of formation flow test The Board must approve a formation flow test if the operator demonstrates that the test will be conducted in a manner that ensures safety and the protection of the environment and in accordance with good oilfield practices and that the test will enable the operator to obtain data on the deliverability of the reservoir and the productivity of the well; establish the characteristics of the reservoir; and obtain representative samples of the formation fluids. Samples and cores An operator must ensure that all drill cutting and fluid samples and cores collected as part of the field data acquisition program referred to in section 13 and the well data acquisition program referred to in section 18 are stored in durable containers that are correctly labelled for identification; transported and stored in a manner that prevents any loss or deterioration; and delivered to the Board within 60 days after the day on which the well is abandoned, suspended or completed, unless the analyses are ongoing, in which case the samples or cores, or any remaining parts, are to be delivered to the Board on completion of the analyses. Remaining conventional core An operator must ensure that, after any samples necessary for analysis or for research or academic studies have been removed from a conventional core, the remaining core, or a longitudinal slab that is not less than one half of the cross-sectional area of that core, is delivered to the Board. Remaining sidewall core The operator must ensure that, after any samples necessary for analysis or for research or academic studies have been removed from a sidewall core, the remaining core is delivered to the Board. Notice before disposal Before disposing of any drill cutting or fluid samples, cores or evaluation data, an operator must ensure that the Board is notified in writing and given an opportunity to request delivery of the samples, cores or data. Depth measurements An operator must ensure that no record is made of any depth in a well unless the depth is measured from the rotary table of the drilling rig. Directional and deviation surveys directional and deviation surveys are taken at intervals that allow the position of the well-bore to be accurately known during drilling; the directional and deviation surveys are adequate to permit the management, in relation to the well-bore, of identified geohazards, the intersection of the geological targets for the well and the intersection of the well-bore in the event that a relief well is required; and except in the case of a relief well, every well is drilled in compliance with internationally recognized well-bore collision avoidance practices and procedures and in a manner that does not intersect an existing well. Well control An operator must ensure that adequate procedures, materials and equipment are in place and used throughout the life cycle of the well to prevent the loss of well control. Reliable well control equipment The equipment referred to in subsection (1) must include reliable well control equipment to detect and control kicks, prevent blowouts and safely conduct all well operations. Shallow hazards During well operations conducted without a riser, the operator must ensure that measures are implemented to reduce the risk of shallow hazards while drilling. Surface casing The operator must ensure that the surface casing of the well is installed to a sufficient depth, and in a competent formation, to establish well control for the continuation of the drilling operations. Blowout preventer and barrier envelopes After the surface casing has been installed and cemented, the operator must ensure that a blowout preventer is installed before the casing shoe is drilled out; and there are at least two independent barrier envelopes — each of which is to be verified by the operator — in place throughout the life cycle of the well. Barrier envelope failure If there is a failure in a barrier envelope, the operator must ensure that no well operation, other than one that is intended to replace or restore the barrier envelope, takes place until the barrier envelope is replaced or restored. Replacement or restoration of barrier envelope The operator must ensure that the barrier envelope is replaced or restored as soon as the circumstances permit; every effort is made for the replacement or restoration to conform to the original design specifications; and the barrier envelope is verified after its replacement or restoration. Drilling fluid column The operator must ensure that, during well operations, one of the two barrier envelopes is the drilling fluid column, except when drilling under-balanced or if, when a completion or test string is run, the other barrier envelope has already been installed downhole and tested. Pressure control equipment The operator must ensure that all pressure control equipment associated with well operations is pressure-tested on installation and as often as necessary to ensure its continued safe operation. Corrective measures If well control is lost or if safety, the protection of the environment or resource conservation is at risk, the operator must ensure that any necessary corrective measures are taken without delay. Casing and wellhead system An operator must ensure that a casing and wellhead system is designed, taking into account the wellhead’s fatigue life, so that, throughout the life cycle of the well, the well can be drilled safely, targeted formations can be evaluated and developed and waste can be prevented; the maximum conditions, forces and stresses to which the casing and wellhead system may be subjected are withstood; and the integrity of gas hydrate and permafrost zones is protected. Barrier analysis The operator must ensure that, during the design of the casing and wellhead system, if the annulus is to be used for fluid production or injection, a barrier analysis is conducted to confirm that two barrier envelopes can be maintained in place throughout the life cycle of the well. Casing depth The operator must ensure that each casing is installed at a depth that provides for adequate kick tolerance and safe well control. Wellhead fatigue life The operator must ensure that well operations do not continue beyond the wellhead’s fatigue life. Cement slurry The operator must ensure that the cement slurry is designed and installed so that, throughout the life cycle of the well, the movement of formation fluids is prevented and, when required for safety, resource evaluation or waste prevention, the isolation of the petroleum and water zones is ensured; support for the casing is provided; corrosion of the casing over the cemented interval is minimized; and Cement integrity and placement The operator must ensure that the cement integrity and placement are verified, subject to subsection (7), through pressure-testing and, if the cement is a common barrier element of the two barrier envelopes or if confirmation of zonal isolation is required, also through logging. Other methods of verification The cement integrity and placement may be verified using other methods if the operator demonstrates that those methods provide a level of verification that is equivalent to those referred to in subsection (6). Cement design and slurry analysis The operator must ensure that the cement design is subjected to comprehensive laboratory testing and pre-cementing quality control, under all foreseeable conditions that could have an impact on cementing, so that the cement provides the expected isolation and can be efficiently installed. Waiting on cement time The operator must ensure that, after cementing any casing or casing liner and before drilling out the casing shoe, the cement reaches the minimum compressive strength sufficient to support the casing and provide zonal isolation. Casing pressure testing The operator must ensure that, after any casing is installed and cemented and before the casing shoe is drilled out, the casing is pressure-tested to the value required to confirm its integrity for maximum anticipated operating pressure throughout the life cycle of the well. Formation leak-off or integrity test An operator must ensure that a formation leak-off test or a formation integrity test is conducted before drilling more than 10 m of new formation below the shoe of any casing other than the conductor casing; and before drilling more than 10 m when sidetracking from the previous casing string. Pressure The formation leak-off test or formation integrity test must be conducted at a pressure that allows for safe drilling to the next casing depth and for the adequacy of the cement at the level of the shoe to be verified before drilling ahead. Completion, testing and operation of development wells The operator of a development well must ensure that the well is completed, tested and operated in a safe manner that allows for maximum recovery of petroleum without waste or pollution throughout the life cycle of the well; except in the case of commingled production, each completion interval is isolated from any other porous or permeable interval penetrated by the well; if applicable, the production of sand, carbonate or other solids is controlled and does not create a safety hazard or cause waste; the setting depth of each packer is as deep as possible and is such that any leak through the production casing below the packer will be contained by the barrier envelope outside the casing; the formation and any annulus seal can withstand the pressures and temperatures expected throughout the life cycle of the well; if practicable, any mechanical well condition that may have an adverse effect on the production of petroleum from, or the injection of fluids into, the well is corrected; the injection or production profile of the well is improved or the completion interval of the well is changed if it is necessary to do so to prevent waste; if different pressure and inflow characteristics of two or more pools might adversely affect the recovery of petroleum from any of those pools, the well is operated as a single pool well or as a segregated multi-pool well; during completion operations and before the removal of pressure control equipment and handover for operations, all barrier elements are tested to the maximum pressure to which they are anticipated to be subjected and, if possible, pressure testing is in the direction of flow; and following any workover or intervention, any affected barrier elements are pressure-tested.

Segregated multi-pool well If the development well is a segregated multi-pool well, the operator must also ensure that after the well is completed, segregation within and outside the well casing is verified; and if there is reason to doubt that segregation is being maintained, a segregation test is conducted as soon as the circumstances permit. Definition of multi-pool well In this section, multi-pool well means a well that is completed in more than one pool. Production tubing An operator must ensure that the production tubing used in a well is designed and maintained to be compatible with the fluids to which it will be exposed, to withstand the maximum conditions, forces and stresses to which it may be subjected and to maximize recovery of petroleum from the pool. Safe operations and production An operator must ensure that equipment and procedures are in place to recognize and control normal and abnormal operating conditions, for the purposes of allowing for safe and controlled well operations and production and of preventing pollution. Flow and volume Subject to subsection (2), an operator must ensure that the following are measured: the rate of flow and the volume of the fluid that is produced from each well; the rate of flow and the volume of the fluid or waste material that is injected into each well; and the volume of the fluid that is produced from each well that is used, flared, vented, burned or otherwise disposed of. Alternate measurements Alternate measurements may be conducted if approved by the Board under section 14. Method The operator must ensure that all measurements are conducted using the flow system, flow calculation procedure and flow allocation procedure approved under subsection 14(2). Allocation of group production An operator must ensure that group production of oil, gas and water from wells and the volume of fluids injected into those wells are allocated on a pro rata basis using the flow system, flow calculation procedure and flow allocation procedure approved under subsection 14(2). Allocation over multiple pools or zones If a well is completed over multiple pools or zones, the operator must ensure that the production of oil, gas and water from the well and the volume of fluids injected into the well are allocated on a pro rata basis to the pools or zones using the flow allocation procedure approved under subsection 14(2). Proration tests The operator must ensure that sufficient proration tests are conducted to measure the rates at which fluids are produced from the well to ensure that the allocation of oil, gas and water production to the pools and zones as a result of the flow allocation procedure is accurate. Testing and maintenance meters and other associated components of the flow system are calibrated and maintained to ensure their accuracy; the equipment used to calibrate the flow system is calibrated in accordance with good measurement practices; and any component of the flow system that may have an impact on the accuracy or integrity of the flow system and that is not functioning in accordance with the manufacturer’s specifications is repaired or replaced without delay or, if it is not possible to do so without delay, corrective measures are taken to minimize the impact on the accuracy and integrity of the flow system while the repair or replacement is in progress. Notice The operator must ensure that a conservation officer is notified, as soon as the circumstances permit, of any modification to or malfunction or failure of any flow system component that may have an impact on the accuracy of the flow system and of the corrective measures taken. Calibration a conservation officer is notified of the calibration of any transfer meter prover or master meter used in conjunction with a transfer meter at least 30 days before the day on which it is calibrated or as agreed to in writing by the Chief Conservation Officer; and following completion of the calibration, a copy of the calibration certificate is submitted to the Chief Conservation Officer as soon as the circumstances permit. Resource management An operator must, in respect of the recovery of petroleum, ensure that recovery from a pool or zone is maximized in accordance with good oilfield practices; wells are located and operated to provide for maximum recovery from a pool or zone; and if there is reason to believe that infill drilling or the implementation of an enhanced recovery plan might result in increased recovery from a pool or field, studies on those methods are conducted and submitted to the Board. Commingled production It is prohibited for an operator to engage in commingled production unless approved by the Board. Approval by the Board The Board must approve commingled production if the operator demonstrates that it will maximize the recovery of petroleum. Measurement and allocation If the operator engages in commingled production, it must ensure that the total volume and the rate of production of each fluid produced is measured and the volume from each pool or zone is allocated in accordance with the requirements set out in sections 74 to 78. Pilot scheme An operator may develop and implement a pilot scheme that applies technology in relation to the commercial production of petroleum from a pool, field or zone that is accessible from a production installation and in relation to which there is an approved development plan for the purpose of obtaining information on reservoir, production or technology performance in order to optimize production performance under the development plan or to determine whether the development plan requires an amendment for production performance to be optimized. Duration and interim evaluations The Board must establish the duration of the pilot scheme, based on the time required to achieve the stated objectives; and the intervals at which interim evaluations of the pilot scheme are to be conducted and reported to the Board. Completion of pilot scheme On completion of the pilot scheme, the operator must ensure that any production activities undertaken for the purpose of the scheme are discontinued. Prohibition against flaring or venting It is prohibited for an operator to flare or vent gas unless the Board authorizes flaring or venting as part of the authorization; the flaring or venting occurs during a formation flow test approved by the Board under subsection 63(5); or it is necessary in order to remediate an emergency situation that may cause serious risk to human health or safety and the Board is notified, as soon as the circumstances permit, of the flaring or venting and of the volume flared or vented. Venting limit An operator must ensure that the volume of gas vented under paragraph 82(a) per installation during a year is not greater than 15 000 standard m3. Definition of vented For the purpose of subsection (1), vented means emitted in a controlled manner, other than as a result of combustion, from an installation due to the design of equipment or operational procedures at the installation; or the occurrence of an event that pressurizes the gas beyond the capacity of the equipment at the installation to retain the gas. Gas emissions The operator must ensure that the emissions of gas from the seals of a centrifugal compressor or reciprocating compressor at an installation are captured and routed to gas conservation equipment or gas destruction equipment; or routed to vents that release those emissions into the atmosphere. Flow rate measurement device The operator must ensure that the flow rate of emissions of gas released from vents referred to in paragraph (1)(b) is measured by means of a continuous monitoring device that is calibrated in accordance with the manufacturer’s recommendations such that its measurements have a maximum margin of error of ±10%; operated continuously, other than during periods when it is undergoing normal servicing or timely repairs; and equipped with an alarm that is triggered when the applicable flow rate limit referred to in subsections (3) and (4) for the vents of the compressor is reached. Flow rate limit — centrifugal compressor The operator must ensure that the flow rate limit of emissions from the vents of a centrifugal compressor on an installation is in the case of a compressor that is installed before January 1, 2023, 0.68 standard m3/min if the compressor has a rated brake power of greater than or equal to 5 MW, and 0.34 standard m3/min if the compressor has a rated brake power of less than 5 MW; and in the case of a compressor that is installed on or after January 1, 2023, 0.14 standard m3/min. Flow rate limit — reciprocating compressor The operator must ensure that the flow rate limit of emissions that are from the rod packings and distance pieces of a reciprocating compressor on an installation is if the compressor is installed before January 1, 2023, the product of 0.023 standard m3/min and the number of pressurized cylinders that the compressor has; or if the compressor is installed on or after January 1, 2023, the product of 0.001 standard m3/min and the number of pressurized cylinders that the compressor has. If the alarm referred to in paragraph (2)(c) is triggered, the operator must ensure that corrective measures are taken as soon as the circumstances permit to reduce the flow rate to below or equal to the applicable flow rate limit. Prohibition against oil burning It is prohibited for an operator to burn oil unless the Board authorizes burning as part of the authorization; the burning occurs during a formation flow test approved by the Board under subsection 63(5); or it is necessary in order to remediate an emergency situation that may cause serious risk to human health or safety and the Board is notified, as soon as the circumstances permit, of the burning and of the amount burned. Determination of net environmental benefit In determining for the purpose of subsection 166.1(3) of the Act whether the use of a spill-treating agent is likely to achieve a net environmental benefit, the Chief Conservation Officer must take into account the methods and protocols referred to in paragraph 11(4)(d); the monitoring plan referred to in paragraph 11(4)(f); and the results of any small-scale test conducted in respect of the agent. Small-scale test An operator must, in respect of any small-scale test of a spill-treating agent referred to in section 166.1 of the Act, ensure that before the test is conducted, the Chief Conservation Officer approves the carrying out of the test; during the test, the quantity of spill-treating agent applied is measured and recorded, the efficacy of the spill-treating agent is monitored and the factors that affect that efficacy are evaluated; and after the test, the following information is submitted in writing, without delay, to the Chief Conservation Officer: the volume of oil released and the volume treated, the quantity of spill-treating agent that was used to conduct the test, the circumstances under which the test was conducted, and the efficacy of the use of the spill-treating agent. The following conditions must be met before a small-scale test is approved: the operator must demonstrate that the quantity of spill-treating agent to be used in the test is the minimum required to evaluate the efficacy of its use; and in the case of a request to conduct an offshore subsurface test, the operator must demonstrate that, due to physical and environmental conditions, a surface test cannot be done or its efficacy cannot be readily determined. Net environmental benefit already determined No small-scale test is to be approved if the Chief Conservation Officer has made a determination for the purpose of section 166.1 of the Act regarding the net environmental benefit of the use of the spill-treating agent whose efficacy the test is intended to evaluate. Oral or written approval Approval of a small-scale test may be provided orally or in writing but, if approval is provided orally, the Chief Conservation Officer must, as soon as the circumstances permit, provide to the operator written confirmation of the approval. Variation of approval The Chief Conservation Officer must vary the approval to use a spill-treating agent if new information indicates that a modification to the requirements set out in the approval is necessary to ensure that the approved use is likely to achieve a net environmental benefit. Revocation of approval The Chief Conservation Officer must revoke the approval if new information indicates that, despite any modification, use of the agent will not likely achieve a net environmental benefit. Use of spill-treating agent An operator must ensure that any spill-treating agent is used in accordance with industry standards and best practices for spill-treating agent use, taking into account the local environment. Equipment and materials The operator must ensure that all equipment and materials that are listed in the contingency plan as required by paragraph 11(4)(e) are available and maintained in accordance with the manufacturers’ specifications and ready for use at all times. Monitoring plan implementation The operator must implement the monitoring plan that is included in the contingency plan as required by paragraph 11(4)(f) at the commencement of the use of a spill-treating agent in the case of a spill. Information to Chief Conservation Officer The operator must inform the Chief Conservation Officer of the spill-treating agent’s efficacy, the effects of its use on the environment and any changes that may require a modification to its use. Conditions for suspension or abandonment An operator that suspends or abandons a well must ensure that the well can be readily located; and is left in a condition such that all petroleum-bearing pools and zones and discrete pressure zones are isolated, and any formation fluid is prevented from flowing through or escaping from the well-bore. Verification of isolation Before suspending or abandoning the well, the operator must verify the effectiveness of the isolations referred to in subparagraph (1)(b)(i) in accordance with the methods set out in its well approval application under paragraph 17(4)(e). Additional condition for suspension An operator that suspends a well must ensure that it is inspected and monitored to maintain its integrity and prevent pollution. Additional condition for abandonment The operator of a well must ensure that, on the abandonment of the well, the seabed is cleared of any material or equipment that might have an adverse effect on the marine environment or interfere with fishing activities or other uses of the sea. Conditions for drilling installation removal It is prohibited for the operator of a drilling installation to remove the drilling installation from a well or cause it to be removed unless the well has been abandoned, suspended or completed in accordance with these Regulations; or the removal of the drilling installation is for emergency purposes. Vessel used in diving project An operator that conducts a diving project must, in respect of a vessel used in the diving project, ensure that the vessel is capable of providing the necessary dive support functions and operating safely; the vessel is designed to withstand or avoid, without loss of its overall structural integrity or failure of its main safety functions, all foreseeable site-specific physical and environmental conditions or any foreseeable combination of those conditions; the vessel is a Safety Convention vessel, as defined in section 2 of the Canada Shipping Act, 2001, and holds a valid certificate of class issued by a classification society; if a permanent diving system is installed on the vessel, the certificate of class referred to in paragraph (c) includes a valid class notation for diving issued by the classification society referred to in that paragraph; and a competent third party has assessed and certified the sea fastening of any equipment that is temporarily installed on the vessel for the diving project. Dynamic positioning system An operator must ensure that the dynamic positioning system on a vessel that is used in a diving project includes safety-critical systems and components with sufficient segregation and redundancy to maintain the vessel’s position in the event that credible scenarios of equipment failure, fire or flooding are realized; includes systems to monitor the parameters of critical system operability and the integrity of the dynamic positioning system and to provide alerts for critical system faults; has sufficient redundancy to protect divers while diving; is designed based on numerical analysis and model testing to ensure that the vessel’s position reference and directional control can be maintained within specified tolerances that satisfy design operational requirements in relation to all functional loads and environmental loads to which the system may be subjected; and is designed to ensure that, if the diving project involves saturation diving, the dynamic positioning system can withstand the loss from fire or flooding of all of its components situated in any one watertight compartment or fire subdivision of the vessel. Verification After the design of the dynamic positioning system is completed, the operator must ensure that a failure modes and effects analysis is conducted to verify that the dynamic positioning system meets the requirements set out in subsection (1). Maintenance The operator must ensure that the dynamic positioning system is maintained so that it continues to perform in accordance with its design specifications. Light dive craft The operator must ensure that any light dive craft that is used for a diving project is fit for the purposes for which it is to be used; and designed to withstand or avoid, without loss of its overall structural integrity or failure of its main safety functions, all foreseeable site-specific physical and environmental conditions or any foreseeable combination of those conditions. Dive support vessel The operator must ensure, during all dives from a light dive craft, the availability of a dive support vessel that is fitted with emergency equipment, including a fast rescue boat, that can provide assistance to the light dive craft in any foreseeable emergency situation; and has a launch and recovery system for the light dive craft that has been verified and certified by the certifying authority as being fit for the purposes for which it is to be used. Definition of light dive craft In this section, light dive craft means a small vessel or secondary craft that is equipped to deploy divers from a primary vessel. The following definitions apply in this Part. air gap means the clearance between the highest water or ice surface that occurs during extreme environmental conditions and the lowest exposed part of an installation not designed to withstand wave or ice impingement. (tirant d’air) control station means a work area that is not continuously staffed that provides an alternative location to a control centre and the minimum necessary control equipment to enable essential management of the installation or of specific key systems. (poste de contrôle) damaged condition means, with respect to a floating platform, the condition of the platform after it has suffered damage up to the extent determined in accordance with the applicable provisions of the MODU Code or, in the case of a platform that is not a mobile offshore drilling unit, the applicable rules of a classification society. (état d’avarie) design service life means the anticipated period during which any installation, including its systems or equipment, is to be used for its intended purpose, with anticipated maintenance but without substantial repair. (vie utile) hazardous area means an area on an installation where flammable, explosive or combustible mixtures are or are likely to be present in sufficient quantities and for sufficient periods of time to require special precautions to be taken in the selection, installation or use of machinery and electrical equipment to prevent a fire or explosion. (aire dangereuse) IS Code means the annex to International Maritime Organization Resolution MSC.267(85), International Code on Intact Stability, 2008. (recueil IS) MODU Code means the annex to International Maritime Organization Resolution A.1023(26), Code for the Construction and Equipment of Mobile Offshore Drilling Units, 2009. (Code MODU) process vessel means a heater, dehydrator, separator, treater or any other pressurized vessel used in the processing or treatment of produced petroleum. (cuve de traitement) unattended installation means an installation on which persons are not normally present and in respect of which, when persons are present, it is for the purpose of performing operational duties, maintenance or inspections that will not require an overnight stay. (installation non fréquentée) Safety and environmental protection An operator must ensure that an installation, including its systems and equipment, is designed, constructed, installed, arranged and commissioned so that it is fit for the purposes for which it is to be used and can be operated safely without posing a threat to persons or the environment. Design of installation For the purpose of meeting the requirement under section 98 in respect of design, an operator must ensure that an installation, including its systems and equipment, is designed in accordance with the measures referred to in clauses 9(2)(b)(v)(A) and 10(2)(b)(v)(A) that are described in the operator’s safety plan and environmental protection plan, respectively. Quality assurance program An operator must, for the purpose of ensuring that an installation, including its systems and equipment, is fit for the purposes for which it is to be used, develop a quality assurance program that meets the following requirements: it must be comprehensive; it must include a process to achieve quality objectives and to comply with the requirements of these Regulations; it must include the policies on which it is based and a process to communicate the policies to personnel and all other affected persons; it must set out the roles, responsibilities and authorities of all persons exercising functions under it, as well as the processes for making those persons aware of their roles, responsibilities and authorities and ensuring that they comply with them; it must include processes for its periodic internal audit and review to identify areas for improvement and the corrective measures to be implemented if deficiencies are identified; it must include processes for ensuring that its integrity is preserved when changes to it are planned or implemented; it must include processes for internal and external reporting on its performance; and it must identify the resources that are necessary to ensure that the requirements under this section are being met. The operator must ensure that each phase of the life cycle of the installation, from its design up to and including its decommissioning and abandonment, is carried out in accordance with the program and that any activity relating to the installation that is carried out under the control of a third party is also carried out in accordance with a quality assurance program. Accessibility The operator must ensure that the processes and policies that are included in the program referred to in subsection (1) are readily accessible for consultation and examination. The operator must ensure that the documentation relating to the program referred to in subsection (1) is organized and set out in a logical fashion to allow for ease of understanding and efficient implementation. An operator must ensure that a work permit that is required under this Part is issued in either paper or electronic form, is approved by a person other than the one who issued it and sets out the following information: the name of the person who issued it and the person who approved it; the name of each person to whom it is issued; the periods during which it is valid; the work or activity to which it relates, the location at which the work or activity is to be carried out and any conditions to which the carrying out of the work or activity is subject; and any circumstances under which the work or activity is to be carried out that may have an effect on the safety and environmental risks associated with it, including physical and environmental conditions, any impediments to the proper use of any system or equipment, and any other activities being carried out in the area, with reference to the permit or certificate associated with those activities, if applicable. Signatures The work permit must bear the signatures of the person who issued it, the person who approved it and every person involved in the work or activity to which it relates, certifying that they have read and understood its contents. Operator obligations any work or activity that requires a work permit is done in accordance with the permit; and any work permit that is issued is made readily accessible for the duration of the work or activity to which it relates. Retention of copy The operator must retain a copy of each work permit for at least three years after the day on which the work or activity to which it relates is completed. Innovations An operator must ensure that any technology, including any technology that is used in relation to materials, design methods, joining techniques or construction techniques, that has not been previously used in comparable situations is not used in relation to an installation unless engineering studies, prototypes or model tests demonstrate that the technology is safe and fit for the purposes for which it is to be used; and the technology is verified by a competent third party, in accordance with industry standards and best practices for technology qualification. Technology qualification program The operator must develop a technology qualification program that sets out the performance monitoring and inspection measures that are necessary to determine the effectiveness of any technology referred to in subsection (1) that it intends to use. Program implementation and update The operator must ensure that the program is implemented and periodically updated. An operator must ensure that an installation is designed to withstand or avoid all foreseeable site-specific physical and environmental conditions, or any foreseeable combination of those conditions, without compromising its structural integrity or that of any of its systems or equipment that are critical to safety or to the protection of the environment. Criteria The operator must ensure that the design of an installation is based on criteria that are determined using evidence-based regional and site-specific data, statistical analysis and modelling of physical and environmental conditions, including oceanographic conditions, including any completely or partially submerged potential navigational hazards; meteorological conditions, including the number of daylight hours; geotechnical conditions and geohazards; ice conditions and any other conditions associated with cold regions; and any other physical and environmental conditions or naturally occurring phenomena that may adversely affect the installation. Ice conditions The operator must ensure that an installation that is to be operated where ice conditions may exist is designed and operated to minimize or avoid environmental loads associated with ice or ice and snow accumulation on the installation, including on its structural components; ensure that the ice conditions will not adversely affect the functionality of any systems or equipment that are critical to safety or to the protection of the environment; protect risers, offloading systems and other subsea systems from the ice conditions; and in the case of a mobile offshore platform or vessel, prevent damage to propulsion or positioning systems from the ice conditions, and ensure safe transit through ice-infested waters. Redundancy The operator must ensure that there is redundancy included in any measures implemented for the purpose of paragraph (3)(a) in relation to ice and snow accumulation and removal. Cold climate — safety plan and environmental protection plan The operator must ensure that an installation that is to be operated in a cold climate is designed, winterized and operated in accordance with the measures referred to in clauses 9(2)(b)(v)(B) and 10(2)(b)(v)(B) that are described in the operator’s safety plan and environmental protection plan, respectively. Cold climate — design An installation that is to be operated in a cold climate must be designed to ensure the functionality in that climate of the installation and all of its systems and equipment that are critical to safety or to the protection of the environment, including in the case of property changes in fluids; and prevent any impact or damage to electrical cabling in open or unheated spaces and ensure that the cabling maintains its properties under cold-climate conditions. Design for intended use and location An operator must ensure that the structural components of an installation and any of its ancillary structures, including skids and modules, are designed for their intended use and location, taking into account the nature of the works and activities to be undertaken on and around the installation and the hazards associated with those works and activities; material properties and dimensions of the installation that may vary over time; failure modes; and applicable safety factors. Analyses, tests, modelling and investigations The design of the structural components of an installation and any of its ancillary structures, including skids and modules, must be based on any analyses, model tests, numerical modelling and site investigations that are necessary to determine the behaviour of the installation and of the soils that support it or its mooring systems under all foreseeable operating, construction, transportation and installation conditions — including those involving geohazards — and under all foreseeable loads during the design service life of the installation. Design criteria The structural components of an installation and any of its ancillary structures, including skids and modules, must be designed to withstand extreme loads that may occur during their construction and anticipated use; perform as intended during their operation under all anticipated normal loads; not fail under repeated loads; prevent damage that is disproportionate to the cause; prevent localized damage from leading to progressive or complete loss of integrity of the structure; maintain structural integrity for the time necessary to safely evacuate all persons from the installation in the event of major damage caused by foreseeable hazards; in the case of a floating platform, have sufficient stability and buoyancy reserve in the case of damage to ensure that credible scenarios of unintended flooding, if realized, do not result in the loss of the structure, and incorporate sufficient redundancy in station-keeping systems to ensure that the structure can withstand the loss of a station-keeping component; and in the case of a self-elevating mobile offshore platform, withstand all loads to which the platform may be subjected in each mode of operation, including in the elevated position and during its removal. Accidental loads For the purposes of paragraphs (3)(d) to (f) and (h), the design must take into account all credible accidental load scenarios, including collisions between the installation and a vessel or aircraft. Conditions for safe operation and survival Based on the results of any analyses, tests, modelling or investigations undertaken under subsection 105(2), the operator must ensure that all physical and environmental conditions that could pose a hazard to the installation are documented and communicated to all affected personnel; the environmental limits for the safe operation of the installation are defined, included in operating procedures and communicated to all affected personnel; and measures to detect, avoid, prevent, manage and reduce the effects of the hazards posed by the physical and environmental conditions are developed and implemented in operations and incorporated into the design of the installation where required. Risk assessment — fire, explosion and hazardous gas An operator must ensure that an assessment of fire and explosion risks and of risks associated with hazardous gas and its containment is conducted in respect of an installation and that the assessment identifies the types of fires, explosions and hazardous gas releases that could occur, their potential sources and unmitigated consequences, the likelihood of their occurrence and, if applicable, their potential fire or blast loads; measures to be incorporated into the design of the installation, if practicable, to eliminate the hazards identified under paragraph (a); and if it is not practicable to eliminate those hazards through design measures, all necessary control measures to reduce the risks associated with the hazards to a level that is as low as reasonably practicable. Elements for consideration For the purposes of paragraphs (1)(b) and (c), the assessment must take into account the following elements: the general layout of the installation; the production and process activities to be carried out, including well operations; operating limits of the installation; the types of fires, explosions and hazardous gas releases identified under paragraph (1)(a) and their duration; the need for a means of detecting, from the potential sources identified under paragraph (1)(a), hazardous gas releases, and outbreaks of fire; the need for a means of isolating and safely storing hazardous substances, including fuel, explosives and chemicals; the need for a safe means of escape, evacuation and rescue in the event of a fire, explosion or hazardous gas release; and the need for a means to ensure levels of emergency shutdown of the installation, systems and equipment in the event of the detection of a hazardous gas release or an outbreak of fire. Reliability and availability An operator must demonstrate, through a risk and reliability analysis conducted using internationally recognized techniques, the reliability and availability of any system in an installation whose failure could cause or contribute to a major accidental event or whose purpose is to prevent or mitigate the effects of a major accidental event. Redundancies and measures The risk and reliability analysis must determine the redundancies and measures that are required to protect a system referred to in subsection (1) from failure, including any redundancies and measures required under this Part for that system. Results of analysis The operator must ensure that the results of the risk and reliability analysis are reflected in the design of the installation, its systems and equipment and in any associated operating and maintenance manuals, including the operations manual referred to in section 157. Monitoring program for physical and environmental conditions An operator must develop a monitoring program that involves the collection of data on physical and environmental conditions in sufficient quantities and at sufficient frequencies, and the retention of that data for sufficient periods, to support, during all works and activities, the identification of hazards and the assessment of the safety and environmental risks related to those hazards; and allow for the timely implementation of control measures to address the identified risks and, if necessary, of the contingency plan referred to in section 11. Equipment For the purposes of subsection (1), the operator must ensure that the installation is equipped to observe, measure and forecast physical and environmental conditions, to record data on those conditions and to obtain from external sources any additional data on those conditions. The operator must ensure that the monitoring program is implemented and periodically updated. Availability of data The operator must ensure that the data referred to in subsection (1) that may have an impact on safety and the protection of the environment is documented and provided to all persons that request it. Inspection, monitoring, testing and maintenance An operator must, for the purpose of facilitating the inspection, monitoring, testing and maintenance of an installation, ensure that relevant areas are clearly marked and identified; there is safe access to those areas; in the case of an installation that is not intended to be periodically drydocked, there are means for carrying out an on-location inspection of the hull and underwater components; there is safe access to subsea equipment; and the installation is otherwise designed and equipped to permit those activities to be carried out. Materials for installations An operator must ensure that the materials used in an installation are fit for the purposes for which they are to be used and suitable for the conditions to which they may be subjected, including any foreseeable emergency situation; non-combustible, unless essential properties are available only in materials that are combustible or the use of combustible material will not increase the risk to safety; and selected to ensure that, in the case of fire or explosion, their use will not increase the risk to safety in the area of the fire or explosion or in adjacent areas, including by exposing persons to toxic fumes or smoke. Definition of non-combustible In this section, non-combustible means, in respect of material, material that does not burn or give off flammable gases or vapours in sufficient quantity for self-ignition when heated to 750°C. Passive fire and blast protection An operator must ensure that an installation is designed and constructed with passive fire and blast protection. Design of passive fire protection The design of the passive fire protection must not take into account the cooling effect from active firefighting equipment; and take into account the need to inspect and maintain the passive fire protection components and the structures, divisions and equipment they are intended to protect. Divisions The operator must ensure that the installation is divided such that spacing and barriers protect against accidental events and loads identified in the risk assessment conducted under subsection 107(1) or mitigate their effects. Barriers — safety plan and environmental protection plan The operator must ensure that barriers are designed, arranged, installed and maintained in accordance with the measures referred to in clauses 9(2)(b)(v)(C) and 10(2)(b)(v)(C) that are described in the operator’s safety plan and environmental protection plan, respectively. Barriers — requirements Barriers must be designed, arranged, installed and maintained to contain fire, smoke, explosions and hazardous gas and prevent their effects from spreading into adjacent areas; protect persons from fire, smoke and explosions for the time necessary to enable them to escape to a temporary safe refuge; maintain for the necessary time, as determined on the basis of the safety studies referred to in section 116, the integrity of temporary safe refuges and of associated facilities that allow for communication, command, monitoring, control and evacuation against the effects of fire or explosion; protect safety-critical elements and equipment that are to remain operational in the event of an emergency from failure or malfunction caused by the effects of fire or explosion; and maintain the installation’s structural integrity against the effects of fire or explosion for the time necessary to safely evacuate all persons. Barriers — level of protection The level of fire and blast protection that each barrier must provide is to be based on the results of the risk assessment conducted under subsection 107(1). Barriers — penetrations and openings A barrier must not have any penetrations or openings unless the penetration or opening is necessary for the functionality of the installation; the barrier is equipped to maintain its overall fire and blast integrity despite the penetration or opening; and if there is a means of closing the penetration or opening, that means can be activated automatically or from outside the space being protected. Barrier components The operator must ensure that barrier components are certified by a competent third party. Bulkheads — production installation Unless the other combined features of a production installation can be demonstrated to provide at least the same level of protection, the operator must ensure that the following bulkheads are capable of preventing the passage of smoke and flame and of limiting the temperature rise on the unexposed face of the bulkhead to an average increase of 139°C and a maximum increase of 180°C above the initial temperature following 120 minutes of exposure to a hydrocarbon fire: those external bulkheads of the temporary safe refuges, main control centre, control stations, accommodations areas, embarkation stations and evacuation points, other than aircraft landing areas, that face production areas or wellheads; and the bulkheads that segregate the wellhead and processing areas from other areas of the installation. Classification society rules The operator must ensure that the passive fire and blast protection for an installation that does not hold a valid certificate of class issued by a classification society is at least equivalent to the protection required under the rules of a classification society for a mobile offshore drilling unit. Hazardous and non-hazardous areas An operator must ensure that the boundaries between all hazardous areas and non-hazardous areas on an installation are delineated. Classification of hazardous areas The operator must ensure that, following the conduct of the risk assessment under subsection 107(1), each hazardous area is classified according to an internationally recognized, comprehensive and documented classification system. Separation of areas The operator must ensure that hazardous areas of different classifications are separated from one another and from non-hazardous areas. Direct access and openings The operator must ensure, if practicable, that there is no direct access or other opening between hazardous areas and non-hazardous areas and between hazardous areas of different classifications or, if that is not practicable, that any direct access or opening between those areas is minimized and is designed to prevent uncontrolled air flow between them. Piping systems The operator must ensure that piping systems are designed to ensure that there is no direct conduit between hazardous and non-hazardous areas and between hazardous areas of different classifications. Ventilation of enclosed hazardous areas An operator must ensure that any enclosed hazardous area on an installation is ventilated such that air is replaced at a rate sufficient to prevent hazardous gas accumulations in the enclosed hazardous area; all air entering the enclosed hazardous area is from a non-hazardous area; the air exhausted from the enclosed hazardous area does not increase the hazard level in another enclosed hazardous area or create a hazard in an enclosed non-hazardous area; and the ventilation system for the enclosed hazardous area is separate from the ventilation system for any non-hazardous area. Mechanical ventilation system If a mechanical ventilation system is used for the purposes of subsection (1), the operator must ensure that the air in the enclosed hazardous area is maintained at a pressure that is lower than the pressure of any adjacent non-hazardous area or any adjacent hazardous area that is classified as less hazardous. Air exhaustion from enclosed hazardous area The operator must ensure that all air exhausted from an enclosed hazardous area is vented to an outdoor area that, were it not for the vented air, would be a non-hazardous area or a hazardous area that would be classified as no more hazardous than the enclosed hazardous area. Ventilation pressure differential and functionality The operator must ensure that measuring devices are installed that will monitor any loss of ventilation pressure differential and any loss of functionality of each ventilation system for a hazardous area and that will, no more than 30 seconds after such a loss occurs, activate audible and visual alarms at the control points from which the system is monitored. Positive overpressure relative to atmospheric pressure The operator must, in respect of the main control centre and all accommodations areas on an installation, ensure that they are maintained at a positive overpressure relative to atmospheric pressure; all of their external doors that provide a primary means of access to them are equipped with airlocks; and all of their other external doors are equipped with airlocks or other means of maintaining and monitoring positive overpressure relative to atmospheric pressure. Power shut-off for mechanical ventilation system The operator must ensure that the power source for a mechanical ventilation system that serves a hazardous area, a work area in a non-hazardous area or an accommodations area is capable of being shut off from the control station and from a position that is outside the area being ventilated and that will remain accessible during any fire that may occur within that area. Inlets and outlets of ventilation systems The operator must ensure that the main inlets and outlets of all ventilation systems are capable of being closed from a position that is outside the area being ventilated and that will remain accessible during any fire that may occur within that area. Ventilation system in non-hazardous area The operator must ensure that any ventilation system that serves a non-hazardous area is equipped with emergency devices in the event of a mechanical ventilation failure or the detection of hazardous gas, including measuring devices to monitor any loss of ventilation pressure differential; audible and visual alarms; an automated isolation device to prevent hazardous gas from entering the non-hazardous area; and a device to remotely seal the non-hazardous area — including inlets and outlets of all ventilation systems — from the control station and from a position outside the non-hazardous ventilated area that will remain accessible during any fire that may occur within the area. Ignition prevention In order to prevent the ignition of flammable, combustible or explosive substances on an installation, an operator must ensure that measures are implemented to prevent the uncontrolled release or accumulation of those substances, including by ensuring that materials and equipment are properly arranged. Design — systems and equipment The operator must ensure that any system or equipment that is to be used in a hazardous area is designed to control ignition sources and to prevent fire and explosions in that area, taking into account the area’s classification under subsection 113(2). Risk assessment For the purposes of meeting the requirements under subsections (1) and (2), the operator must ensure that any control measures identified in the risk assessment conducted under subsection 107(1) are implemented. Other requirements — equipment The operator must ensure that any equipment located in a hazardous area is rated for use in that area and is installed, ventilated and maintained to ensure safe operation.

Safe distance operation The operator must ensure that any equipment that is operated in a non-hazardous area is operated at a safe distance from any flammable, combustible or explosive substances and is, unless it is rated for use in a hazardous area, equipped with an automatic and manual means of deactivation in the event of fire or hazardous gas detection. Equipment in event of emergency The operator must ensure that any equipment that is located in a non-hazardous area and that is to remain in service in the event of an emergency associated with a gas release is rated for use in a hazardous area and is installed, ventilated and maintained to ensure safe operation. Cargo tank the gas mixture inside a cargo tank is maintained outside the explosive limits; and the systems associated with the cargo tank are designed to prevent fire, gas or explosion hazards during all operating modes through the use of sufficient control measures, including alarms, and through redundancies in those measures, and ensure that affected persons are made aware when the systems become impaired. Work permit A work permit is required for all hot work carried out on an installation. Safe distances The work permit for hot work must set out safe distances to be maintained between the hot work and any well or any flammable, combustible or explosive substance. Means of escape, evacuation and rescue An operator must ensure that an installation is equipped with a safe means of escape, evacuation and rescue, taking into account the results of the risk assessment conducted under subsection 107(1) and comprehensive and documented safety studies. Temporary safe refuge The operator must ensure that the installation is equipped with a temporary safe refuge that will, in the case of an emergency, including an accidental event, provide sufficient space to accommodate all persons who may need to use the refuge until they have been evacuated, the accidental event has been brought under control or the emergency otherwise ends; protect the persons referred to in paragraph (a) from fire, gas release and explosion hazards for as long as they are in the refuge; provide the means for communication and command and, if applicable, for the monitoring and control of the accidental event for as long as persons are in the refuge; and provide signage and lighting to enable safe evacuation from the refuge. Areas required to remain safe The operator must ensure that the accommodations area, main control centre and any other area of an installation that is required to remain safe for persons to occupy during an emergency, including the temporary safe refuge, are designed to prevent ingress of hazardous substances; and designed and located to enable occupation for the time required to implement emergency and evacuation procedures. Periodic verification The operator must verify on a periodic basis that the temporary safe refuge meets the requirements set out in subsections (1) and (2) and must record the findings resulting from the verification. Exits, access and escape routes in any area where persons are normally present on an installation, there are at least two exits, each connected to an escape route that provides safe, direct and unobstructed access to temporary safe refuges, muster areas, embarkation stations and evacuation points; and there are means for persons to descend to the water. Despite paragraph (1)(a), if an area referred to in that paragraph has an area less than 20 m2 or is a passage less than 5 m in length, the operator must ensure that there is at least one exit as described in that paragraph in that area. Distancing — exits The operator must ensure that the exits referred to in paragraph (1)(a) are separated as far apart from each other as possible to increase the likelihood that at least one exit and its connected escape route will be passable during an accidental event. Location of escape routes The operator must ensure that the installation has escape routes on two of its sides. Safe evacuation The operator must ensure that all escape routes from an accommodations area or a temporary safe refuge to a muster area, embarkation station or evacuation point are clearly marked and illuminated and provided with fire protection to allow for the safe evacuation of persons in a time frame determined in the safety studies referred to in section 116. Size of escape routes The operator must ensure that each escape route is of sufficient size to enable the efficient movement of the maximum number of persons who may need to use it, as well as unrestricted manoeuvring of firefighting equipment and stretchers, taking into account the maximum number of persons who can be accommodated on the installation. Life-saving appliances for installation An operator must ensure that an installation is equipped with life-saving appliances that are sufficient in number and have the necessary redundancy to ensure their availability in any emergency situation; and meet the requirements of the LSA Code and the annex to International Maritime Organization Resolution MSC.81(70), Revised Recommendation on Testing of Life-Saving Appliances, as if the installation were a vessel to which the Code and the Resolution apply. Loads The operator must ensure that life-saving appliances can withstand all loads to which they may be subjected when they are in use. Space requirements and weight The operator must ensure that, in determining the number of persons any lifeboat, life raft or marine evacuation system can accommodate, the persons’ space requirements and weight while wearing immersion suits are taken into account. Arrangement and selection The operator must ensure that the arrangement and selection of life-saving appliances are based on the safety studies referred to in section 116, in particular any escape and evacuation analysis that takes into account any major accidental events; and the results of the risk assessment conducted under subsection 107(1). Position The operator must ensure that copies of a plan showing the position of all life-saving appliances are posted at the installation, including in the main control centre and in every accommodations area and work area. Lifeboats — availability For the purpose of subsections (1) and (2), the operator must ensure, with respect to the lifeboats on an installation, that they are kept in at least two separate locations, one of which is adjacent to a temporary safe refuge; they have a combined capacity to accommodate the total number of persons on board the installation — and those kept in each location have a combined capacity to accommodate the total number of persons assigned to that location — even in the event that any one lifeboat is lost or rendered unusable; and if the installation is a floating platform, those lifeboats that are able to be launched under any credible scenario of angle of heel have a combined capacity to accommodate the total number of persons on board the installation. Lifeboats — specifications The operator must ensure that the lifeboats are totally enclosed and are fire-protected. Lifeboats — continuous communication The operator must ensure that each lifeboat is capable of being in continuous communication with each other lifeboat and with other vessels in the area. Lifeboats — towing devices The operator must ensure that each lifeboat is equipped with towing devices. Life rafts For the purpose of subsections (1) and (2), the operator must ensure that the life rafts on an installation have a combined capacity to accommodate the total number of persons on board the installation. Continuous verification The operator must verify on a continual basis that the lifeboats, life rafts and other life-saving appliances are available and in a condition to perform as intended and must record the findings resulting from each verification. Installation designed for removal An operator must ensure that an installation is designed to facilitate its removal from the offshore area at the end of its design service life and to reduce any risks to safety, adverse effects on the marine environment and interference with navigation and other uses of the sea that may occur during and after its removal. Subsection (1) does not apply if the Board has approved, in the development plan, the abandonment or an alternative use of the installation. Transportation and positioning An operator must ensure that an installation, or any part of it, is transported and positioned in a manner that does not compromise safety or the protection of the environment; in a manner that minimizes interference with and hazards to other activities in proximity to that installation; under the supervision of a competent third party; in the case of a self-elevating mobile offshore platform, with the legs of the platform secured in accordance with the rules of the classification society that issued the certificate of class required under section 140; and with the support of vessels that are classified in accordance with section 177. Before an installation, or any part of it, is transported and positioned, the operator must ensure that the following requirements are met: a risk assessment must be conducted that takes into account personnel requirements, the towing vessels that will be used, the towing plan, including towing arrangements, and the operating limits of the towing equipment’s components, the processes and control measures to be implemented to ensure safety and the protection of the environment, physical and environmental conditions and the ability to reliably forecast those conditions, and any contingency measures to be taken in the event of adverse physical and environmental conditions or the occurrence of any other foreseeable adverse event during transportation and positioning; and a transportation and positioning plan must be prepared that takes into account any requirements of the competent third party referred to in paragraph (1)(c) and, if the installation is a floating platform, the plan must be prepared in accordance with the rules of the classification society that issued the certificate of class required under section 140. Electrical system An operator must ensure that any electrical system on an installation is designed to avoid any abnormal conditions and faults that may endanger the installation or, if it is not possible to avoid them, to provide alerts of those conditions and faults and mitigate their effects. Safety and reliability The operator must ensure that all electric motors, lighting fixtures, electrical wiring and other electrical equipment on an installation are safe and reliable under all foreseeable operating conditions. Device for monitoring insulation level to earth If a primary or secondary distribution system for electrical power, heating or lighting with no connection to earth is used on an installation, the operator must ensure that the system is equipped with a device that continuously monitors the insulation level to earth and produces an audible or visual alarm to indicate abnormally low insulation values. Main electrical power supply The operator must ensure that the main electrical power supply on, or to, an installation ensures continuous availability of power generation and distribution; includes at least two power plants or other power supply sources, not including emergency power plants; is capable of supporting all normal operations without recourse to the emergency electrical power supply required under subsection 126(1); and is capable of supporting all operations, other than drilling and production, if one of the power plants is out of operation. Primary circuit shutdown The operator must ensure that the primary circuits from a power plant serving an installation are capable of being shut down from at least two separate locations, one of which must be the site of the power plant. Control system An operator must ensure that a control system is designed in accordance with the measures referred to in clauses 9(2)(b)(v)(D) and 10(2)(b)(v)(D) that are described in the operator’s safety plan and environmental protection plan, respectively. The operator must ensure that the control system is designed to meet the following requirements, taking into account human factors: controlled equipment must not be capable of being inadvertently activated; controlled equipment must not create a safety or environmental hazard in the event of system failure or shutdown; the system must have basic diagnostic capability; and the system must be capable of being operated simultaneously from multiple control stations without compromising safety. Protection of hardware The operator must ensure that control system hardware is protected from circumstances, including excessive vibration, high electromagnetic field levels, electrical power disturbances and extreme temperatures or humidity levels or other physical and environmental conditions, that could cause mechanical damage to or degradation of the hardware or that could otherwise adversely affect the performance of the system. Wireless remote control system The operator must ensure that any wireless remote control system includes a means for error checking to prevent the controlled equipment from responding to corrupt data; and a means for identification coding to prevent a transmitter other than the designated transmitter from operating the equipment. Alternative means of control The operator must ensure that all control system functions that are required to ensure safety and are dependent on wireless communication links have an alternative means of control that can be activated without delay and without modification to the control system. Inspection and testing Equipment that is to be operated by a new, repaired or modified control system must not be put into operation until the operator ensures that the control system has been inspected and tested to confirm that it functions as intended. The operator must ensure that documentation containing an up-to-date description of the design, installation, operation and maintenance of the control systems is readily accessible for consultation and examination. Integrated software-dependent control system An operator must ensure that an integrated software-dependent control system whose failure or malfunction would cause a hazard to safety or the environment is maintained to ensure its reliability, availability and security. Control measures The operator must ensure that control measures are implemented to protect the integrated software-dependent system from any threat, including unauthorized access. Safety-critical software The operator must ensure that any software that is a safety-critical element is secure, reliable and capable of being updated; designed, commissioned and updated by competent persons; and demonstrated to be fit for the purposes for which it is to be used through a testing and validation process that takes into account all foreseeable operating conditions and emergency situations, and system complexity, dependencies and interactions between systems, software failure modes and the level of risk associated with system failure or malfunction. Modification to features The operator must ensure that no modification to the features of the software is implemented unless the modified software has undergone the testing and validation process referred to in paragraph (1)(c); and the necessary internal approvals for the modification have been obtained, including the approval of the installation manager. Emergency electrical power supply An operator must ensure that an installation has an emergency electrical power supply that is independent of the main electrical power supply such that the following systems and equipment continue to function in the event of a failure of the main electrical power supply: lights at all embarkation and debarkation stations and evacuation points, all escape routes, temporary safe refuges, service corridors, accommodations area corridors, stairways, exits and personnel lift cars, all control centres, control stations and areas from which the communication system referred to in section 129 is controlled, spaces from which drilling or production equipment, including any equipment that is critical to that equipment’s operation, is controlled, spaces where equipment that is related to the emergency shutdown system referred to in section 133 and to the power plants referred to in paragraph 122(4)(b) is located, areas where emergency response equipment is stored, and aircraft landing areas and the location of any obstacle to take-off and landing; hazard detection systems, including the central monitoring system referred to in section 169 and the fire and gas detection system referred to in section 132; emergency response and life-saving systems, including life-saving appliances that require electrical power; the communication system referred to in section 129; the emergency shutdown system referred to in section 133; the lights and sound-signalling appliances referred to in section 127; in the case of a floating platform, the pumps and powered watertight doors and hatches that are necessary to stabilize the installation, having regard to the failure modes and effects analysis referred to in subsection 144(5); in the case of a column-stabilized mobile offshore platform, the ballast systems referred to in section 144; the systems and equipment that are necessary to safely suspend at any time drilling or production that is in progress, including blowout prevention systems, including the blowout preventer referred to in subsection 68(5), any disconnectable mooring system referred to in section 148, any disconnect system referred to in section 150, and pumping systems; and any other system or equipment that requires electrical power and that is referred to in the operator’s safety plan referred to in section 9 or its contingency plan referred to in section 11. Mechanically driven generator If the emergency electrical power supply is a mechanically driven generator, the operator must ensure that the installation is equipped with a transitional source of electrical power, unless the generator will automatically start and supply the necessary power in less than 45 seconds from the time the main electrical power supply fails; the installation is equipped with a self-contained battery system that is designed, on failure or shutdown of both the main electrical power supply and the emergency electrical power supply, to automatically supply sufficient power to operate for a period of at least one hour, the lights that are located in any emergency exit route, any escape route, any space where equipment incorporating an internal combustion engine, gas turbine, electric motor, generator, pump or compressor is found, any control centre and any emergency assembly room and at every launching station of life-saving appliances, for a period of at least one hour, the communication system referred to in section 129 and the general alarm system referred to in section 130, and for a period of at least four days, the lights and sound-signalling appliances referred to in section 127; and the mechanically driven generator has redundancy in its starting capabilities and a dedicated fuel source. Design and maintenance The operator must ensure that the emergency electrical power supply together with any transitional source of electrical power and self-contained battery system with which the installation may be equipped are designed and maintained such that they are able to provide the systems and equipment referred to in subsection (1) with an emergency power supply of sufficient capacity, taking into account starting currents and the transitory nature of electrical loads, and sufficient duration to ensure that the systems and equipment can function as intended and to allow for effective management of the installation during an emergency, including to allow for the complete shutdown and evacuation of the installation, to facilitate emergency response and the safe escape, refuge and evacuation of persons or to maintain the integrity of the installation, to ensure sufficient power so that systems that must operate simultaneously can do so, in the case of a floating platform, to maintain the flotation and stability of the platform, and to bring a well to a safe state and to maintain it in that state; their capacity to provide power to essential systems is not compromised during their maintenance; they have sufficient redundancy to ensure their reliability and, as far as is practicable, to ensure their functional and physical independence from other essential systems or, if that is not practicable, they are arranged so as not to adversely affect or be adversely affected by the operation of those systems; and they are readily accessible. Protection from damage The operator must ensure that the emergency electrical power supply, transitional source of electrical power and self-contained battery system referred to in subsection (3) are arranged — or are otherwise protected from mechanical damage and damage caused by fire, explosion and physical and environmental conditions to which they may be exposed — so that they remain capable of fulfilling their intended functions under all foreseeable operating conditions, including, in the case of a floating platform, under the static and dynamic angles of inclination referred to in subsection 136(7). Alert The operator must ensure that, in the event of a failure of the main electrical power supply, all control centres are alerted by means of an audible and visual signal that the installation is being powered by the emergency electrical power supply. Lights and sound-signalling appliances An operator must ensure that an installation is equipped with the lights and sound-signalling appliances that are required by the Collision Regulations as if that installation were a Canadian vessel to which those Regulations apply, unless compliance with the height and distance requirements of those Regulations is not possible, in which case the lights and appliances must be installed to maximize their audible and visual alerting capabilities for collision avoidance. Radar An operator must ensure that an installation other than an unattended installation is equipped with radar for identifying hazards in proximity to the installation and that the radar is continuously monitored. Communication system An operator must ensure that an installation is equipped with a communication system that has built-in redundancy and is capable of communicating continuously, including in an emergency, with external emergency response teams; all persons, individually or collectively, at an operations site; all persons who are in transit to or from an operations site; all support craft; all onshore support centres; nearby vessels and aircraft; and nearby installations. Radiocommunication system An operator must ensure that an installation other than an unattended installation is equipped with a radiocommunication system in respect of which the following requirements are met: the system must comply with Part 2 of the Navigation Safety Regulations, 2020 as if the installation were a Canadian vessel to which those Regulations apply; a technical acceptance certificate must have been issued in respect of the system under the Radiocommunication Act; and a continuous listening watch and radio log must be maintained. Radiocommunication system — unattended installation An operator must ensure that any radiocommunication system on an unattended installation meets the requirements referred to in paragraphs (2)(a) and (b). General alarm system An operator must ensure that an installation is equipped with a general alarm system that is capable of alerting persons on the installation of any hazards to safety or the environment other than fire or gas. Additional requirements The operator must ensure that the general alarm system is operational at all times other than when the system is being inspected, maintained or repaired; flagged as being subject to inspection, maintenance or repair, as required; and designed to prevent tampering. Alternative means of alert If a general alarm system is being inspected, maintained or repaired, the operator must ensure that there is an alternative means of alerting persons of the hazards referred to in subsection (1). Gas release system An operator must ensure that an installation that includes process tanks, process vessels and piping is equipped with a gas release system that has a flaring system, a pressure relief system, a depressurizing system or a cold vent system. Risk assessment — design The operator must ensure that the design of the gas release system is based on the results of the risk assessment conducted under subsection 107(1). Design The operator must ensure that the gas release system is designed to release gas and combustible liquid from an installation in a controlled manner without creating a hazard to safety; reduce pressure in the entire process system as quickly as possible while ensuring a safe and controlled release of pressure; minimize the effect on the environment; be activated from the main control centre and from control stations that meet the requirements set out in subsection (5); and ensure that oxygen cannot enter the system during normal operations. Location — system The operator must ensure that the gas release system is designed and located taking into account factors, including physical and environmental conditions, that affect the safe and normal flaring or emergency release of combustible liquid, gases or vapours so that when the system is in operation it does not damage the installation — or any other installation, vessel or support craft in proximity to it — or injure any person. Control stations The operator must ensure that the control stations from which the gas release system is activated are located and spaced so that they remain protected and accessible for safe operation of the system. Flaring systems The operator must, in respect of any flaring system, ensure that if an unlit release of gas could produce toxic gas concentrations or gas concentrations of more than 50% of the lower explosive limit of the released gas, the system has an automatic igniter system that has redundancy in its ignition capabilities, and in the case of an open flare system, the system and any associated equipment are designed to ensure a continuous flame; and the system and any associated equipment are designed to withstand the radiated heat at the maximum flaring rate, prevent flashback, and withstand all loads to which they may be subjected. Risk minimization — vents The operator must ensure that any vent that is used to release gas into the atmosphere without combustion is designed and located in accordance with the measures referred to in clause 9(2)(b)(vi)(A) and subparagraph 10(2)(b)(vi) that are described in the operator’s safety plan and environmental protection plan, respectively. Liquid removal The operator must ensure that any liquid, other than water, that cannot be safely and reliably burned at the flare tip of a gas release system is removed from the gas before it enters the flare. Fire and gas detection system An operator must ensure that an installation is equipped with a fire and gas detection system. The operator must ensure that the fire and gas detection system provides continuous, reliable and automatic monitoring functions to allow persons to be alerted to the presence and location of fire and hazardous gas, as well as the concentration and composition of that gas; as far as is practicable, is functionally and physically independent of other essential systems or, if that is not practicable, is arranged so as not to adversely affect or be adversely affected by the operation of those systems; includes an alarm system with audible and visual alarms that are distinct from other types of alarms, that can be heard or seen at the main control centre and in other areas where persons are normally present, that are, on detection of fire or gas hazards, automatically activated and that can also be manually activated; and allows control measures, including those that are designed to be initiated automatically, to be initiated manually to prevent abnormal conditions from escalating and causing major accidental events. The operator must ensure that the design of the fire and gas detection system is based on the results of the risk assessment conducted under subsection 107(1). The operator must ensure that the fire and gas detection system is designed to detect the types of fire and hazardous gas releases identified in the risk assessment conducted under subsection 107(1); to detect hazardous gas and smoke in the air intakes of any mechanically ventilated non-hazardous areas; and such that the means to manually initiate fire and gas alarms are available at or near the office of the installation manager, at the main control centre, at every control station and at any other locations identified in the risk assessment conducted under subsection 107(1). The operator must ensure that the fire and gas detection system meets the following requirements: its detection components must be capable of detecting the types of fire and hazardous gas releases identified in the risk assessment conducted under subsection 107(1) in the areas in which they are located, ensure reliable and early detection, taking into account their response characteristics, redundancy and performance under foreseeable conditions in which detection may be required, be rated and maintained for use in the areas in which they are located, as those areas are classified in accordance with the classification system referred to in subsection 113(2), and include failure and malfunction indicators; the system and its components must be protected from mechanical damage and damage caused by fire, explosion and physical and environmental conditions to which they may be exposed so that they remain capable of fulfilling their intended functions under all foreseeable operating conditions; the system must allow for all necessary information to be continuously provided to the main control centre and other strategic locations to permit the management of emergency situations; and the system must be capable of being reset only if the cause of its activation has been resolved. The operator must ensure, in relation to the testing and maintenance of the fire and gas detection system, that the following requirements are met: the system must be capable of being overridden for the purposes of testing and maintenance activities; override commands and functions must be applied for the shortest amount of time possible and with as few as possible being applied simultaneously; and the testing and maintenance activities must not impair the system beyond what is necessary to undertake those activities and must not impede its functioning. A work permit is required for the testing and maintenance of the fire and gas detection system. Management of override effects The work permit must set out measures to be taken to manage the effects of overriding the fire and gas detection system. Leak repair The operator must ensure that any leak of gas that is detected by the fire and gas detection system or by means of an auditory, olfactory or visual method — including the observation of the dripping of hydrocarbon liquids from an equipment component — is repaired immediately, if the repair is necessary for the purposes of safety or the conservation of petroleum resources; or as soon as the circumstances permit, in any other case. Emergency shutdown system An operator must ensure that an installation has an emergency shutdown system that is capable of shutting down all potential ignition sources and potential sources of flammable liquids or gases, including by isolating those sources; depressurizing all potential sources of flammable liquids or gases other than reservoirs; preventing abnormal conditions from escalating and causing major accidental events; and limiting the extent and duration of any major accidental event. Studies and assessments — design The operator must ensure that the design of the emergency shutdown system is based on studies, analyses and assessments that identify potential hazards and must assess the risks associated with those hazards, including the risk assessment conducted under subsection 107(1) and the risk and reliability analysis referred to in section 108. The operator must ensure that the emergency shutdown system is designed to allow for automated and manual activation to ensure effective shutdown; allow for the shutdown of any system or equipment to bring it to a safe state, unless the system or equipment has been rated to remain operational in the area in which it is located, as that area is classified in accordance with the classification system referred to in subsection 113(2); allow for the selective shutdown of ventilation systems, other than fans that are necessary for supplying combustion air to engines that are required to operate during emergency situations unless gas has been detected in the intake to those engines; allow for the isolation of petroleum and flammable fluid inventories, including reservoirs, wells, production systems and pipelines, from ignition sources; take into account the size and segregation of petroleum and flammable fluid inventories to limit the quantity of substances released on loss of containment; allow for the depressurization and the disposal of hydrocarbon inventories in a safe manner and to a safe location without cold venting; allow for the closure of the installation’s subsea and subsurface safety valves and of pipeline safety valves; take into account, in relation to all essential systems, the necessary timelines to support the safe escape, refuge and evacuation of persons and to maintain the integrity of the installation; and take into account the activation of the fixed fire suppression systems required under paragraph 134(4)(a). Shutdown logic The operator must ensure that the logic for the emergency shutdown system includes a hierarchy of shutdown levels, action sequences and timelines that are appropriate for the degree of risk posed by the hazards identified in the studies, analyses and assessments referred to in subsection (2). The operator must ensure, in relation to the emergency shutdown system, that the system is reliable and, as far as is practicable, it is functionally and physically independent of other essential systems or, if that is not practicable, it is arranged so as not to adversely affect or be adversely affected by the operation of those systems; the system includes an alarm system, with audible and visual alarms that are distinct from other types of alarms, that will automatically activate in the main control centre and at other strategic locations so that all affected persons, having regard to the hierarchy of shutdown levels referred to in subsection (4), are alerted to the emergency shutdown; there is continuous monitoring from the main control centre of the system’s status, including, if the system or part of the system is overridden, the extent and duration of the override; the system and its components are protected from mechanical damage and damage caused by fire, explosion and physical and environmental conditions to which they may be exposed so that they remain capable of fulfilling their intended functions under all foreseeable operating conditions; the system allows for all information that is necessary to permit the management of emergency situations to be continuously provided to the main control centre and other strategic locations, including information regarding the shutdown level and the source of activation of the system, any shutdown effects that failed to execute on activation of the system, and the status, including failure, of the system’s components; the system is capable of being activated from multiple manual activation points that are clearly marked, protected against unintentional activation, and located at in the case of manual activation points for the highest level of shutdown, the main control centre and other strategic locations, including aircraft landing areas and other embarkation stations, and in the case of all other manual activation points, strategic positions, at least one of which must not be in a hazardous area; the activation of the system from a manual activation point triggers the general alarm system referred to in section 130; if any part of the system is operated using a hydraulic or pneumatic accumulator, the accumulator is located as close as is practicable to the part that it is intended to operate, except if that part is part of a subsea production system, and has the capacity for a sufficient number of activations to ensure that shutdown can be achieved, and the shutdown valves revert to a fail-safe mode in the event of a failure of the accumulator; the system is capable of testing both its input and output signal devices and its internal functions to ensure its functioning; in the event of a failure of the main electrical power supply referred to in subsection 122(4), the system has the capacity to function continuously until the main electrical power supply is restored or all shutdown operations have been concluded; in the event that an impairment of the system or any of its components increases the risk to safety or the environment, any other systems that support the emergency shutdown system reverts to a fail-safe mode; if two or more installations are connected or if there is temporary equipment that has an emergency shutdown system on an installation, the emergency shutdown systems of the connected installations are linked so that emergency shutdown signals are transmitted between those systems, the emergency shutdown systems of the temporary equipment are linked to the installation’s emergency shutdown system so that emergency shutdown signals are transmitted between those systems, and the logic for the emergency shutdown system of each of the connected installations and of the temporary equipment is re-evaluated and modified, if necessary, to take into account the fact that the emergency shutdown systems are linked, with the logic of the installation’s emergency shutdown system being given priority over that of any temporary equipment; the system is capable of being overridden or reset only if the cause of its activation has been resolved and there has been local confirmation that the equipment that gave rise to the system shutdown can be safely used; and override commands and functions are not capable of being unintentionally activated. If the emergency shutdown system is capable of being overridden for the purposes of testing and maintenance activities, the operator must ensure that the following requirements are met: the testing and maintenance activities must not impair the system beyond what is necessary to undertake those activities and must not impede the system’s functioning. A work permit is required for the testing and maintenance of the emergency shutdown system. The work permit must set out the measures to be taken to manage the effects of overriding the emergency shutdown system. Closure — subsurface safety valve In the case of a production installation, the operator must ensure that, if the emergency shutdown system is activated, any subsurface safety valve closes not later than two minutes after the tree safety valve has closed unless a longer delay is justified by the mechanical or production characteristics of the well. Fire protection systems and equipment An operator must ensure that an installation is equipped with fire protection systems and equipment to control and extinguish fires. The operator must ensure that the fire protection systems and equipment are designed, selected, operated, inspected, tested and maintained in accordance with the measures referred to in clause 9(2)(b)(vi)(B) that are described in the operator’s safety plan. Design and selection The design and selection of fire protection systems and equipment, including suppression agents, must take into account their intended use and the results of the risk assessment conducted under subsection 107(1). Further requirements The operator must ensure that the fire protection systems and equipment include automated fixed fire suppression systems that are capable of being manually activated from outside the space that is being protected; fixed monitors, deluge systems and foam systems; manual firefighting systems and equipment; and any redundancies that are necessary to ensure that the systems function in the case of a failure of one of their components. The operator must ensure that the fire protection systems and equipment are protected from mechanical damage and damage caused by fire, explosion and physical and environmental conditions to which they may be exposed so that they remain capable of fulfilling their intended functions under all foreseeable operating conditions. Fixed fire suppression system The operator must ensure that an automated fixed fire suppression system is installed in every accommodations area and hazardous area and in any other area that requires such a system based on the results of the risk assessment conducted under subsection 107(1). Fire pumps The operator must ensure that at least two dedicated, segregated and independently driven fire pumps supply a dedicated firewater ring main and that each of those fire pumps is equipped with at least two independent starting devices; and designed to allow for both local and remote control. Location The operator must ensure that the fire pumps are located as far as possible from equipment used for storing and processing petroleum, taking into account the results of the risk assessment conducted under subsection 107(1). Supply of firewater The operator must ensure that the fire pumps and piping and their valves are capable of providing a sufficient supply of firewater to any area on the installation, including if a segment of the firewater ring main is damaged. Firewater system The operator must ensure that the firewater system is capable of operating continuously for a minimum of 18 hours. Fire hydrants and hose reels The operator must ensure that the number and location of fire hydrants and fire hose reels are such that at least two jets of water, not emanating from the same location, can reach any part of the installation where a fire may occur. Portable fire-extinguishing equipment In areas where it is not practical to use fire hydrants and fire hose reels, the operator must ensure that portable fire-extinguishing equipment is readily available and accessible. Alarms at main control centre The operator must ensure that audible and visual alarms will activate at the main control centre on the initiation of any of the automated fixed fire suppression systems or on the loss of any firewater pressure. Additional alarms If the automated fixed fire suppression system creates a hazard to persons, the operator must ensure that audible and visual alarms automatically activate inside and outside the space that is being protected. Unattended installations Paragraphs (4)(a) and (b) and subsections (6) to (11) do not apply in respect of unattended installations. Boilers and pressure systems An operator must ensure that boilers and pressure systems are designed in accordance with the measures referred to in clause 9(2)(b)(vi)(C) that are described in the operator’s safety plan. Design requirements The boilers and pressure systems must be designed to prevent the occurrence of an abnormal condition that could cause an undesirable event; prevent an undesirable event from causing a release of liquids, gases or vapours; prevent the ignition of any flammable liquids, gases or vapours that are released; safely disperse or dispose of any liquids, gases or vapours that are released; prevent the formation of explosive mixtures; limit persons’ exposure to fire hazards; monitor safe limits of pressure, temperature and fluid levels and reliably protect against exceeding those limits; permit the examination of components critical to the pressure system to ensure their continued integrity; allow for draining and venting at all stages of operation to permit cleaning, inspection and maintenance activities to be carried out safely, and avoid harmful effects, including water hammer, vacuum collapse, corrosion and uncontrolled chemical reactions; prevent the escalation in relation to the boilers and pressure systems of accidental events occurring outside of them; and limit and mitigate the effects of any loss of containment of the contents of the boilers and pressure systems. The design of boilers and pressure systems must be based on standards that incorporate safety margins, that conform to good engineering practice and that involve the carrying out of analyses and numerical modelling as necessary to determine the behaviour and failure modes of the boilers and pressure systems under all foreseeable operating conditions, taking into account the internal and external pressures to which the boilers and pressure systems are subjected, ambient and operating temperatures, static pressure and the mass of the contents of the boilers and pressure systems when tested or operated, foreseeable dynamic loads and reaction forces and moments resulting from, among other things, piping and its supports and other accessories, structural and mechanical integrity threats, and reactions caused by changes in fluids and other substances contained in the boilers and pressure systems over time, including reactions caused by the products of the decomposition of unstable fluids or substances; if hazards cannot be eliminated, incorporate safety measures that take into account the need for closing and opening devices and devices to indicate their status and to prevent their opening or physical access to them while pressure differential exists, the need to contain hazardous substances and to mitigate the effects of any hazard related to their release, the surface temperature of the boilers and pressure systems, and the decomposition of unstable fluids; and be approved by an authorized inspector. Loads and other factors The operator must ensure that boilers and pressure systems can withstand all combinations of loads, pressures, temperatures, fluids and substances to which they may be subjected during their design service life. Materials used The operator must ensure that the materials used for the manufacture of boilers and pressure systems are compatible with their operating environment and are chemically resistant to the fluids they contain during their design service life. Manufacturer’s documents and records The operator must ensure that the following documents and records are obtained from the manufacturer of the boilers and pressure systems: documents demonstrating that manufacturing, testing and installation have been carried out in accordance with the design specifications provided for in a quality assurance program that is approved by an authorized inspector; records of the procedures that were followed in the welding, brazing and non-destructive examination of the boilers and pressure systems, including the results of the welder qualification tests specific to the welding and brazing procedures; documents evidencing the qualifications of persons involved in manufacturing, inspection and testing, including welders; and traceability records for the components of the boilers and pressure systems.

Construction, installation, commissioning, inspection and testing The operator must ensure, before a boiler or pressure system is put into operation, that it has been constructed, installed and commissioned by persons with the necessary experience, training, qualifications and competence to do so safely and in a manner that protects the environment; and subjected to any inspections by an authorized inspector and tests by or under the direction of an authorized inspector, including non-destructive examination and proof tests, that are necessary to ensure its integrity and compliance with design specifications. Authorized inspector The operator must ensure that a boiler or pressure system is inspected by an authorized inspector and tested by or under the direction of an authorized inspector before the boiler or pressure system is put into operation following its installation; before the boiler or pressure system is put into operation following any modification or repair to it, including welding; and at any other interval as required by the standards on which the design of the boiler or pressure system is based. Operating procedures The operator must ensure that operating procedures are developed for the boilers and pressure systems that inform users of operating hazards and indicate any special measures to be taken to reduce risks when the boilers and pressure systems are being used, maintained or repaired. Conformity with procedures The operator must ensure that any boiler or pressure system is used, maintained and repaired in accordance with the operating procedures referred to in subsection (9). Alteration of fitting It is prohibited for any person to alter, interfere with or render inoperative any boiler or pressure system fitting, except for the purpose of adjusting or testing the fitting. Register The operator must keep a register of all boilers and pressure systems that includes the following documents and information in respect of each: accurate design calculations, technical drawings and design specifications, including evidence of the design approval by an authorized inspector; a list of the standards on which the design of the boiler or pressure system is based; the boiler or pressure system’s operating limits, including its pressure and temperature ratings; all documents and records required from the manufacturer under subsection (6); in respect of each inspection and test referred to in subsection (7) or (8), a record created and signed by the authorized inspector who conducted the inspection that includes the date of the inspection or test, information that identifies the boiler or pressure system that was inspected or tested, as well as its location, the range of safe pressure and temperature at which the boiler or pressure system may be operated, a declaration by the authorized inspector who conducted the inspection or who conducted or directed the test as to whether the boiler or pressure system meets the standards that were applied in its design and manufacture, a declaration by the authorized inspector who conducted the inspection or who conducted or directed the test stating that the boiler or pressure system is fit for the purposes for which it is to be used, any recommendations regarding the need for modifications to the maintenance program established under section 159, and any other observation relevant to safety; and a description of each repair or modification made to the boiler or pressure system. Marking The operator must ensure that a boiler or pressure system is marked with any information that is necessary for its safe installation and operation, including an identifier that permits reference to the documents and records referred to in subsection (6) and the information referred to in paragraphs (12)(e) and (f). The operator must ensure that all operating procedures developed in accordance with subsection (9) and the register referred to in subsection (12) are periodically verified by the certifying authority. Non-application This section does not apply to any of the following: a heating boiler that has a heating surface of 3 m2 or less; a pressure system that is installed for use at a pressure of one atmosphere of pressure or less; a pressure vessel that has a capacity of 40 L or less, or has an internal diameter of 152 mm or less, or more than 152 mm but not more than 610 mm if the pressure vessel is used for the storage of hot water or is connected to a water pumping system containing compressed air that serves as a cushion; a refrigeration plant that has a refrigeration capacity of 18 kW or less; or a domestic water and plumbing system. Mechanical equipment An operator must ensure that any mechanical equipment on an installation is designed, selected, located, installed, commissioned, protected, operated, inspected and maintained in accordance with the measures referred to in clauses 9(2)(b)(v)(E) and 10(2)(b)(v)(E) that are described in the operator’s safety plan and environmental protection plan, respectively; and can operate safely and reliably under all foreseeable operating conditions, taking into account the manufacturer’s instructions. Mechanical equipment must be designed to eliminate hazards to safety or the environment in the following scenarios or, if that is not possible, to mitigate the risks posed by those hazards: loss of containment of hazardous substances; overspeeding and loss of restraint of machinery components with high kinetic energy; extreme surface temperatures of the mechanical equipment; movement of mobile components of the mechanical equipment; loss of control and integrity of the mechanical equipment; ignition of potentially explosive atmospheres in hazardous areas from sparks, flames or excessive heat; and escalation of accidental events. Controls and manual shut-off devices The operator must ensure that controls and manual shut-off devices for mechanical equipment are in a protected and readily accessible location that permits safe operation when an accidental event occurs that renders the equipment inaccessible. Internal combustion engine — operating instructions The operator must ensure that the basic operating instructions for an internal combustion engine provide details of stop, start and emergency procedures and are permanently attached to the engine. Turbines and internal combustion engines The operator must ensure that turbines and internal combustion engines are equipped to prevent unintended ignition; installed so that their supply of combustion air is from a non-hazardous area, and their exhaust is discharged to a non-hazardous area; and equipped with safety devices — including manual fuel shut-off devices and, unless it would increase safety or environmental risks, automatic fuel shut-off devices — to prevent major damage from overspeeding, high exhaust temperature, high cooling water temperature, low lubricating oil pressure or other foreseeable hazards that could impair the safety of operations. Despite paragraph (5)(c), turbines and internal combustion engines that are critical to emergency response, including emergency generators and fire pumps, need only be equipped with safety devices to prevent major damage from overspeeding. Operation of critical mechanical equipment The operator must ensure that mechanical equipment that is critical to the safety or propulsion of a floating platform will continue to operate safely and reliably at its full rated power under the static and dynamic angles of inclination that are specified in the rules of the classification society that issued the certificate of class required under section 140. Materials handling equipment An operator must ensure that all materials handling equipment is to the extent feasible, designed and constructed to prevent the failure of any of its parts, taking into account the conditions under which it is to be operated; to the extent feasible, equipped with safety devices that will ensure that any failure of any of its parts does not result in a loss of control of the equipment or of its load or result in any other hazardous situation; and operated taking into account the manufacturer’s instructions and industry standards and best practices. The operator must ensure that all materials handling equipment is marked with its rated capacity and in a manner that identifies its manufacturer and model and that permits reference to any information that is necessary to its safe operation, including information regarding its design, construction, inspection, testing, maintenance and repair. Inspection and proof test The operator must ensure that materials handling equipment that is to be used on an installation is inspected and proof-tested by a competent third party in the following situations to determine the equipment’s rated capacity: the equipment is to be used on the installation for the first time; repairs or modifications have been made to the equipment’s load-bearing components; the equipment has been in contact with an electric arc or current; and there is any other reason to doubt that the rated capacity of the equipment that was most recently certified under subsection (5) or the limitations that were most recently indicated under that subsection continue to be accurate, including as a result of damage sustained by the equipment or modifications made to it. Criteria for inspection and testing The operator must ensure that the inspection and proof-testing is done in accordance with criteria established by the manufacturer or applicable industry design and safety standards, including with respect to the frequency at which the equipment must be inspected and proof-tested to ensure its continued safe operation. Rated capacity Following the inspection and proof test, the competent third party must certify in writing the rated capacity of the materials handling equipment and must indicate in writing any limitations that must be imposed on its use having regard to physical and environmental conditions. Emergency slewing and lowering The operator must ensure that a crane with slewing capability is capable of retaining its slewing and lowering capability in emergency situations. Pedestal crane The operator must ensure that a pedestal crane meets the following requirements: it must be equipped with appropriate travel-limiting devices for its boom, hoist, blocks and slewing mechanism, a load-measuring device that has been calibrated in accordance with the manufacturer’s specifications or any calibration standard that is at least as rigorous as those specifications, a device to indicate its boom extension or load radius, if its rated capacity is affected by the extension or radius, a device to indicate its boom angle, if its rated capacity is affected by that angle, a device for accessing anemometer readings, if the load that it is able to safely handle or support is susceptible to being reduced by wind, a gross overload protection system, if it is used to move persons or things to or from a floating platform or vessel, and a safe load indicator system that is programmed for different operating modes and includes load and moment measuring devices; and a load chart that specifies the boom angle and the safe working load for each block and for each operating mode, as well as any limitations indicated under subsection (5), must be posted inside its control cab. Crane hooks The operator must ensure that all crane hooks are equipped with spring-loaded latches or other equally effective means of preventing the load from falling off the hook under any operating conditions. Landing or take-off When an aircraft is landing on or taking off from a landing area, it is prohibited to move a crane in the vicinity of the landing area and, if feasible, the person operating the crane must ensure that the crane’s boom is stowed. Lifting device certification The operator must ensure that any materials handling equipment that lifts over 10 tonnes is certified by the certifying authority. Subsea production system An operator must ensure that a subsea production system is designed, constructed, installed, commissioned, operated, inspected, monitored, tested and maintained in accordance with the measures referred to in clauses 9(2)(b)(v)(F) and 10(2)(b)(v)(F) that are described in the operator’s safety plan and environmental protection plan, respectively. A subsea production system must be designed so that the system can avoid foreseeable hazards or revert to a safe state when hazards are imminent; the system supports and seals connections to the well, pipelines, other subsea production systems or other installations; in the event of a loss of control or communication, the system will revert to a safe state; the failure of a single component of the system cannot cause or contribute to a major accidental event; barrier elements in each conduit that carries fluids are reliable, have the necessary redundancy and are arranged to prevent uncontrolled flow of well fluids, minimize the quantity of fluids released from the conduit in the event of unintended release, and permit testing of the integrity of the barrier elements without increasing safety or environmental risks; subsea equipment can withstand or is protected from any load to which it may be subjected that would result in mechanical damage; production risers can withstand or are protected from all hazards and environmental loads to which they may be subjected, other than icebergs; and the blowout preventer is supported by the system during drilling and the tree and any workover or intervention pressure control equipment are supported by the system after completion. Disconnectable riser The operator must ensure that a riser that is connected to a floating platform that has a disconnectable mooring system or dynamic positioning system is designed to be capable of safely detaching in any foreseeable physical and environmental conditions. Riser disconnect The operator must ensure that, if risers are designed to disconnect in order to avoid foreseeable hazards, riser fluids may be safely displaced by water or isolated. Riser integrity The operator must ensure that, if a riser is disconnected, its integrity is demonstrated through testing once it is reconnected and before it is brought back into service. Control of subsea production system The operator must ensure that a subsea production system is controlled from only one location at any given time. Failure modes and effects analysis The operator must ensure that any subsea production system is assessed through a failure modes and effects analysis. Temporary or portable equipment An operator must ensure that any temporary or portable equipment used on an installation is fit for the purposes for which it is to be used. Assessment of temporary or portable equipment Before any temporary or portable equipment is installed or brought into service on an installation, the operator must ensure that the equipment and its integration with other equipment and systems are assessed to determine their impact on safety-critical elements and on the risk assessment referred to in subsection 24(3). The operator must ensure that temporary or portable equipment is managed in accordance with the measures referred to in clauses 9(2)(b)(v)(G) and 10(2)(b)(v)(G) that are described in the operator’s safety plan and environmental protection plan, respectively, and in a manner that does not compromise the target levels of safety set out in those plans. Verification by certifying authority The operator must ensure that temporary or portable equipment that is a safety-critical element is, before being put into operation, verified by the certifying authority to confirm its suitability and safe placement and hook-up. An operator must ensure that a floating platform holds a valid certificate of class issued by a classification society that corresponds to the authorized work or activity to be carried out from the floating platform. Air gap An operator must ensure that a platform that is either founded on the seabed or column-stabilized has a sufficient air gap to operate safely under the maximum environmental load conditions to which it may be subjected. Stability An operator must ensure that a floating platform, whether intact or in a damaged condition, is stable and can be operated safely, having regard to all motions and loads to which it may be subjected, including by determining the stability and motion response characteristics of the platform using analysis or model testing; determining the critical maximum loads and motions that the platform can withstand; ensuring that all equipment is fastened to prevent unintended movement; and monitoring and recording all loads that could affect the motions, stability or inclination of the platform. Freeboard The operator must ensure that a floating platform has sufficient freeboard to operate safely under the maximum environmental load conditions to which it may be subjected. Requirement — Codes The operator must comply with the applicable provisions of the MODU Code and Part B of the IS Code concerning the stability and motion response of a floating platform, which are to be read as mandatory. Deadweight survey If the weight of a floating platform or a self-elevating mobile offshore platform changes by more than 1% of the lightship weight, the operator must ensure that a deadweight survey is carried out at the earliest opportunity and an up-to-date value of the lightship centre of gravity is calculated. Self-elevating mobile offshore platform An operator must, in relation to a self-elevating mobile offshore platform, ensure that a site-specific assessment is conducted of the condition of the seabed, including seabed restraint, to ensure that the platform is stable and can be operated safely. The operator must ensure that a self-elevating mobile offshore platform meets the following requirements: it must be equipped with systems to actively monitor hull inclination, leg penetration into the seabed, loads on each of the platform’s legs, and rack phase differential, if applicable; and its jacking mechanisms must be designed so that the failure of a single component does not cause an uncontrolled descent of the platform. Suspension of operations and well shut-in The operator must ensure that the works and activities on a self-elevating mobile offshore platform are suspended and that all wells associated with the platform are brought to a safe shut-in condition if hull inclination or the rack phase differential exceeds the allowable limits set out in the operations manual in accordance with paragraph 157(3)(b); unexplained changes occur in the loads on any of the platform’s legs; leg penetration into the seabed increases; or any other event threatens the stability of the platform. In the case of any of the situations referred to in subsection (3), the operator must ensure that the works and activities on the self-elevating mobile offshore platform remain suspended and that all wells associated with the platform remain in a safe shut-in condition until the cause of the situation has been investigated and corrective measures have been taken. Ballast and bilge systems An operator must ensure that a floating platform is equipped with reliable ballast and bilge systems with the necessary redundancy in their components to maintain necessary draught, stability and hull strength under all foreseeable operating conditions; return the floating platform to a safe condition from an unintended draught, trim or heel; prevent unintended transfer of fluid within the system; empty and fill all tanks that are a part of the system; and completely and rapidly empty watertight spaces. Requirement — Code The operator must comply with the applicable provisions of the MODU Code concerning ballast and bilge systems, which are to be read as mandatory. Secondary ballast control station In the case of a column-stabilized mobile offshore platform, the operator must ensure that it is equipped with a secondary ballast control station that is equipped with an effective means of communication with other spaces that contain equipment relating to the operation of the ballast system; a ballast pump control and status system; a ballast valve control and status system; a tank level indicating system; a permanently mounted ballast schematic diagram; heel and trim indicators; a draught-indicating system; a system to indicate the available power from the main and emergency electrical power supplies; and a ballast system hydraulic or pneumatic pressure-indicating system. Location — secondary ballast control station The operator must ensure that a secondary ballast control station is located above the waterline in the final condition of equilibrium after flooding if the floating platform is in a damaged condition. The operator must ensure that the ballast and bilge systems are assessed through a failure modes and effects analysis before any authorized work or activity is carried out from the floating platform. Watertight and weathertight integrity and freeboard The operator must comply with the applicable provisions of the MODU Code and Part B of the IS Code concerning watertight and weathertight integrity and freeboard, which are to be read as mandatory. Watertight subdivision The operator must ensure that the floating platform is designed with sufficient watertight subdivision to ensure the preservation of reserve buoyancy and damage stability under all foreseeable conditions. Load line certificate The operator must ensure that a floating platform holds an International Load Line Certificate or an International Load Line Exemption Certificate issued by the government of the state whose flag the platform is entitled to fly, as required under Article 16 of the International Convention on Load Lines, 1966; and is marked in accordance with the certificate. Watertight and weathertight appliances The operator must ensure that the arrangement and specification of watertight and weathertight appliances complies with the measures referred to in clause 9(2)(b)(v)(H) that are described in the operator’s safety plan. Water ingress The operator must ensure that a floating platform is designed with systems and equipment that provide for the operation, monitoring and indication — both locally and at the ballast control stations — of the opening and closing of watertight doors and hatches and for the detection and provision of alerts of any water ingress into watertight spaces that are not designed to accumulate liquid. Port lights The operator must ensure that the columns of a column-stabilized mobile offshore platform do not have port lights or similar openings. Station-keeping An operator must ensure that a floating platform is equipped with a mooring system or a dynamic positioning system to ensure station-keeping of the platform within its operating limits. Mooring system An operator must ensure that a mooring system with which a floating platform is equipped is designed, on the basis of analysis and model testing, to ensure safety and the protection of the environment; the stability and serviceability of the floating platform; the integrity and serviceability of the mooring system components, including any related topside equipment; the integrity and serviceability of drilling risers, production risers, export risers or any other type of riser; the necessary redundancy of the mooring system components to enable the floating platform to maintain its position with the loss of a single component or, for a thruster-assisted mooring system, the loss of the most effective thruster or a single failure in the power or control system; for a thruster-assisted mooring system, the ability of the floating platform to withstand extreme meteorological conditions in the event of a power failure; the ability of the floating platform to move from its position to avoid accidental events that it is not designed to withstand; and safe access and safe clearances with respect to subsea and surface components of the installation, any nearby installations, support vessels and evacuation systems. Excursion limits The operator must ensure that the excursion limits of a floating platform that is equipped with a mooring system are established on the basis of the analysis and model testing referred to in subsection (1). Loss of station-keeping or failure The operator must ensure that the floating platform has systems and processes to continuously detect loss of station-keeping or the failure of any mooring system component. Monitoring The operator must ensure that mooring line tensions or other indicators of the integrity of the mooring system are monitored and kept within the mooring system’s operating limits. The operator must ensure that measures to ensure that the mooring system continues to perform in accordance with its design specifications are implemented, including the assessment of the system’s condition, periodically and if it is damaged or if damage to it is suspected; and the making of arrangements for timely repair or replacement in the event of damage or deterioration. Disconnectable mooring system If the mooring system with which a floating platform is equipped is disconnectable, the operator must ensure that the system is designed to ensure that disconnection can be accomplished in a controlled manner without creating a risk of drift-off. The operator must ensure that the disconnectable mooring system is designed and maintained in accordance with the measures referred to in clause 9(2)(b)(vi)(D) that are described in the operator’s safety plan. Primary and backup systems The operator must ensure that the disconnectable mooring system includes a primary system and a backup system for disconnection, both of which can be operated locally or from a remote location. Floating platform capability The operator must ensure that a floating platform that is equipped with a disconnectable mooring system is capable of safely manoeuvering away under its own power; and maintaining a safe position and heading while disconnected. Criteria and procedures for disconnection The operator must ensure that criteria and procedures for disconnection are developed for all credible disconnection scenarios, including procedures for monitoring environmental conditions and providing alerts for worsening conditions that may require disconnection. Disconnection and reconnection The operator must ensure that the disconnectable mooring system is capable of carrying out a planned disconnection after allowing time for the depressurization and flushing of subsea flowlines; is capable of carrying out an emergency disconnection after allowing time to safely shut in wells and subsea equipment; allows for the reconnection to the floating platform of the system and flowlines in an orderly sequence, in the physical and environmental conditions described in the operations manual under paragraph 157(2)(c); and allows for the resumption of production after the system and flowlines have been reconnected to the floating platform following a planned disconnection; Periodic verification of disconnection capability The operator must periodically verify the disconnect capability of the disconnectable mooring system and must record the findings resulting from the verification. Excursion limits exceeded The operator must ensure that the emergency disconnection referred to in paragraph (6)(b) is initiated if the floating platform exceeds the excursion limits established under subsection 147(2). An operator must ensure that the design of a dynamic positioning system with which a floating platform is equipped is based on numerical analysis and model testing to ensure that the floating platform’s position reference and directional control can be maintained within specified tolerances that satisfy design operational requirements in relation to all functional and environmental loads to which the system may be subjected at the floating platform’s intended location; is based on a failure modes and effects analysis to ensure the segregation and redundancy of safety-critical systems and their components as necessary to maintain the platform’s position in the event that credible scenarios of equipment failure are realized; allows the dynamic positioning system to withstand the loss from fire or flooding of all of its components situated in any one watertight compartment or fire subdivision of the floating platform; and includes systems to monitor the parameters of operability and integrity of the critical systems of the dynamic positioning system and to provide alerts for critical system faults. The operator must ensure that the excursion limits of a floating platform that is equipped with a dynamic positioning system are established based on the numerical analysis and model testing referred to in paragraph (1)(a). Disconnect system An operator must ensure that a floating platform that is equipped with a dynamic positioning system has a disconnect system that is capable of carrying out a planned disconnection of the floating platform from the seabed after allowing time to prepare the risers and subsea flowlines for the disconnection; is capable of carrying out an emergency disconnection after allowing time to safely shut in wells and subsea equipment; and allows for reconnection in an orderly sequence, in the physical and environmental conditions described in the operations manual under paragraph 157(2)(c). Demonstration The operator must periodically demonstrate by means of a trial or performance test that the disconnect system meets the requirements under subsection (1). The operator must ensure that the emergency disconnection referred to in paragraph (1)(b) is initiated if the floating platform exceeds the excursion limits established under subsection 149(2). Decisions and exemptions For any floating platform that is registered outside Canada, the operator must establish a list of all flag State administration decisions and exemptions that apply to the floating platform in relation to any standards adopted by the International Maritime Organization; conduct a risk assessment to identify measures to reduce the safety and environmental risks in relation to those decisions and exemptions to a level that is as low as reasonably practicable; and establish an action plan to implement the measures referred to in paragraph (b). Gap analysis The operator must, every time the MODU Code is updated, undertake a gap analysis between the criteria in the updated version and the version that applies to the floating platform based on its date of construction; conduct a risk assessment in relation to any gaps identified; and ensure that mitigation measures are implemented, as necessary. An operator must ensure that all installations, including their systems and equipment, are inspected, monitored, tested, maintained and operated to ensure safety, the protection of the environment and the prevention of waste; and ensure that they continue to perform in accordance with their design specifications under the operating conditions and maximum loads to which they may be subjected. Non-destructive examination An operator must ensure that a non-destructive examination of the critical joints and structural parts of an installation is conducted at least once every five years or more often as required to ensure the continued safe operation of the installation. Corrosion management An operator must ensure that if a safety or environmental hazard would result from the failure due to corrosion — including corrosion from exposure to a sour environment — of any equipment, including process vessels, or of any piping, valves, fittings and structural elements that are part of an installation, that corrosion is prevented and managed throughout the life cycle of the installation. Corrosion management program The operator must develop a corrosion management program that sets out the measures that are necessary to prevent critical failures resulting from corrosion-related degradation and to ensure the continued integrity of safety-critical elements. Program requirements The program must identify all safety-critical elements that are susceptible to degradation by corrosion; provide for the analysis that is necessary to determine corrosion degradation mechanisms and the limits and failure modes of the safety-critical elements referred to in paragraph (a), taking into account the physical and environmental conditions and chemicals to which it is foreseeable that the safety-critical elements may be exposed; include measures to prevent corrosion, as far as is practicable, and to mitigate or protect against the effects of corrosion; provide for the inspection and monitoring of corrosion and of any corrosion protection and prevention systems; provide for the collection and analysis of baseline and continuous data to monitor corrosion; provide for the continuous assessment, based on the data and analysis referred to in paragraph (e), of the maintenance activities and schedules referred to in paragraph 159(2)(f) to determine whether those activities and schedules are adequate to ensure corrosion management of safety-critical elements and provide for the modification of those activities and schedules, if necessary; provide for timely preventive maintenance of any corrosion protection and prevention systems; and provide for the timely inspection, monitoring and maintenance of safety-critical elements in accordance with the requirements of the maintenance program referred to in paragraphs 159(2)(e) and (f) and for any necessary repair before the limits established in paragraph (b) are reached. The operator must ensure that the program is implemented and periodically updated, taking into account the data and analysis referred to in paragraph (3)(e). Limits and requirements An operator must operate an installation, including its systems and equipment, in accordance with any limitations that are set out in the certificate of fitness under subsection 28(3), with any requirements under this Part and with the operations manual referred to in section 157. Operations manual An operator must develop an operations manual in respect of each installation that sets out or incorporates by reference the following documents and information: a general description of the installation, including its particular characteristics; the chain of command and the roles, responsibilities and authorities of persons during normal operations of the installation and in emergency situations; a brief description of the systems and equipment on the installation, including flow sheets and instructions for the assembly, use and maintenance of the systems and equipment; the operating limits of the installation, including those of its systems and equipment; the physical and environmental conditions under which the installation and any pipeline can operate without compromising safety or the protection of the environment and the physical and environmental conditions that the installation and pipeline can withstand, taking into account the results of any analyses, tests, numerical modelling or investigations undertaken under subsection 105(2); the results of the risk and reliability analysis conducted for the purpose of subsection 108(1); a list of the procedures necessary to ensure the safe operation of the installation, including its systems and equipment, within the limits described in paragraph (d); a list of the accidental events that would require implementing the contingency plan referred to in section 11, any possible triggers for such events and the measures to be implemented to avoid their occurrence; a list of the procedures, practices, resources and monitoring measures set out in the contingency plan referred to in section 11; the criteria for each platform’s minimum penetration into the seabed or for the maximum scour of the platform’s foundation and an indication of the arrangement of the platform’s anchoring system; a description of the characteristics of each platform’s foundation and its penetration into the seabed or an indication of the arrangement of the platform’s anchoring system, as well as a description of the measures to be implemented to monitor the integrity of the foundation or that of the mooring and anchoring systems; the criteria to identify meteorological and oceanographic conditions and phenomena that require subsea components and pipelines to be inspected; plans that show the arrangement of watertight and weathertight subdivisions; details of openings in watertight and weathertight subdivisions, including the location of vents, air pipes and all other means of water penetration, and the means of closure of the compartments, as well as the location of downflooding points; a plan that contains information concerning permissible deck loads, variable loading limits and preloading; details of all audible and visual signals and alarms used in the communication system referred to in section 129, the general alarm system referred to in section 130, the fire and gas detection system referred to in section 132 and the emergency shutdown system referred to in section 133, as well as details of any colour-coding systems used for the safety of persons on the installation; information on any corrosion protection and prevention systems, including their type and location, and any requirements for the safety and maintenance of those systems; technical drawings that show the arrangement of any deck structure and of the equipment located on it, of all accommodations areas and temporary safe refuges and of any aircraft landing area, including its obstacle-free approach zone, sufficient details to permit verification and management, if applicable, of the integrity of hulls, mooring components, primary and critical structures, foundation elements, jacking mechanisms, risers and conductors, the arrangement of hazardous areas and of any equipment located in those areas, and a fire control and evacuation plan, including the location of escape routes, fixed fire suppression systems and life-saving appliances, and the arrangement of barriers that provide passive fire and blast protection and associated equipment, along with a description of those barriers and equipment; the operating and maintenance requirements for all the life-saving appliances referred to in section 119; information identifying the aircraft that were used for the design of any aircraft landing area on the installation and the maximum weight, size and wheel centres of those aircraft; any special arrangements in place to facilitate the inspection and maintenance of the installation, including its systems and equipment, and the storage of any crude oil on the installation; special precautions to be taken or instructions to be followed when repairs or alterations to the installation, including its systems or equipment, are to be carried out; any special operational or emergency requirements and procedures with respect to any systems and equipment that are critical to safety, including the emergency shutdown system referred to in section 133; a description of the air gap or freeboard and of the means of ensuring that the requirements under section 141 and subsections 142(2) and 145(1) and (3), as the case may be, are met; the number of persons who can be accommodated on the installation during normal operations; a description of the main electrical power supply referred to in subsection 122(4) and the emergency electrical power supply referred to in section 126 and any limitations on their operation; the procedure for periodically documenting the results of all inspections, monitoring, testing and maintenance of the installation’s integrity, including the format and presentation of that documentation; and the procedure for notifying the Chief Safety Officer and the certifying authority under subsections 162(1) and 170(1) and (2). Additional information — floating platform In the case of a floating platform, the operations manual must also contain a description of the platform’s station-keeping system and its capabilities, taking into account the platform’s operating limits; all procedures for addressing the failure of any component of the station-keeping system that is critical to safety; if the station-keeping system is a mooring system, descriptions of the environmental loads that the moorings can sustain to keep the platform moored in place, the estimated holding power and capacity of the anchors in relation to the soil at the drill site or production site and the physical and environmental conditions in which reconnection of the platform is permitted; the procedures for addressing an excursion outside of the limits established in the context of the analysis and model testing under subsections 147(2) and 149(2); a description and the limitations of any onboard computer or computer-based control systems used in operations such as ballasting and dynamic positioning and in the platform’s trim and stability calculations; instructions on how to assess the loading and ballast conditions of the platform to determine its stability and how to manage those conditions to maintain the platform’s stability in accordance with the provisions referred to in subsection 142(3); data on the location, type and weights of permanent ballast installed on the platform; hydrostatic curves or equivalent data; a plan that shows the capacities and the centres of gravity of tanks and bulk material stowage compartments; tank-sounding tables or curves that show the capacities and the centres of gravity in graduated intervals and the free surface data for each tank; stability data that take into account the maximum height of the centre of gravity above the keel in relation to the draught curve and other parameters relevant to the stability of the platform; the results of any inclining test, or of any lightweight survey together with the inclining test results, and the updated location of the platform centre of gravity following a deadweight survey; examples of loading conditions for each mode of operation, together with the means to evaluate any other loading conditions; technical drawings that show the arrangement and location of all openings that could affect the stability of the platform and their means of closure, show the arrangement and operation of the ballast and bilge systems, are accompanied by the operating instructions for the ballast and bilge systems, and are sufficient in their scope and detail to ensure, in combination with the instructions referred to in subparagraph (iii), that the necessary draught, stability and hull strength can be maintained under all foreseeable operating conditions, and the floating platform can be returned to a safe condition from an unintended draught, trim or heel; and a towing arrangement plan, if necessary, and the operating limits of the towing equipment’s components. Additional information — mobile offshore platform In the case of a self-elevating mobile offshore platform, the operations manual must also contain a description of any equipment for elevating and lowering the installation and details of any special types of joints and their purpose, including any operating or maintenance instructions for the equipment and joints; and the allowable limits for hull inclination and rack phase differential. Up-to-date The operator must ensure that the operations manual is kept up-to-date. Programs An operator must develop the following programs to ensure the continued integrity of an installation, including its systems and equipment, from the time the installation is commissioned until it is abandoned or removed from the offshore area: the maintenance program referred to in section 159; the preservation program referred to in section 160; and the weight control program referred to in section 161. The operator must ensure that the programs are implemented and periodically updated. Maintenance program The maintenance program must set out the inspection, monitoring, testing and maintenance policies and procedures for the installation, including its systems and equipment, that are necessary to ensure safety, protect the environment and prevent waste. The maintenance program must include the measures to ensure that the installation, including its systems and equipment, continues to perform in accordance with its design specifications; include the measures to ensure compliance with any inspection, monitoring, testing or maintenance requirements under this Part; include the performance standards developed by the operator for the installation, including for its systems and equipment; take into account the failure modes and mechanisms of safety-critical elements and the causes of their failure; include inspection and monitoring activities that occur at a frequency and in a manner to prevent, if practicable, the failures referred to in paragraph (d), or to mitigate the effects of those failures, and to ensure that safety-critical elements are repaired, replaced or modified without delay and in accordance with section 162; and include predictive and preventive maintenance activities and schedules for each safety-critical element that are based on the performance standards referred to in paragraph (c), take into account the manufacturer’s recommendations and industry standards and best practices, specify a minimum frequency for the comprehensive inspection of each safety-critical element, taking into account its condition and the conditions under which it is used, for rotating equipment, provide for partial or complete dismantling and inspection at a frequency necessary to maintain the equipment in good condition and to ensure that the equipment’s functionality, availability, reliability and performance are in accordance with its design specifications, provide for a periodic maintenance regime for any low running-hour equipment, such as emergency generators, essential generators and fire pumps, and provide for the management of spare parts so that critical spare parts are available on the installation to ensure the continued functionality, availability, reliability and performance of each safety-critical element in accordance with its design specifications. Preservation program The preservation program must set out the measures that are necessary to ensure the integrity of equipment that is taken out of service and stored for future use. Periodic inspection The program must provide for the periodic inspection of the stored equipment to verify its integrity and ensure that it is fit for the purposes for which it is to be used if it is brought into service. Weight control program The weight control program must set out the measures that are necessary to ensure that the weight and centre of gravity of each installation are kept safely within the installation’s operating limits. Safety-critical element — repair, replacement or modification The holder of a certificate of fitness must ensure that the certifying authority and the Chief Safety Officer are notified before a safety-critical element is repaired, replaced or modified and before any equipment that would change the design, performance or integrity of a safety-critical element is brought on board the installation. Approval before repair or modification The holder of a certificate of fitness must ensure that the approval of the certifying authority is obtained before a safety-critical element is repaired or modified.

The holder of a certificate of fitness must ensure that a safety-critical element that has been repaired or modified is not put into operation until the certifying authority has verified it and confirmed that it is fit for the purposes for which it is to be used, can be operated safely without posing a threat to persons or the environment and meets the requirements of these Regulations; and imposed any limitation on the operation of the installation that is necessary to ensure that the installation meets the requirements referred to in paragraph 28(1)(b). Emergency repair or modification In an emergency, subsections (2) and (3) do not apply if the installation manager considers that the delay required to comply with the requirements under those subsections endangers persons on the installation or the environment. Verification after emergency A safety-critical element that is repaired or modified in an emergency must be verified by the certifying authority in accordance with subsection (3) as soon as the circumstances permit. This section does not apply in the case of an adjustment made to or the testing of a boiler or pressure system fitting. Drilling fluid systems the drilling fluid system and associated monitoring equipment provide an effective barrier against formation pressure, ensure safe well operations, prevent pollution and allow for well evaluation; the indicators and alarms associated with the monitoring equipment are strategically located on the drilling rig to alert persons on it; and dedicated personnel provide continuous monitoring, using independent monitoring systems, of parameters that are critical to safe well operations or to the detection of a gain or loss of drilling fluid while the installation is connected to the well and is taking fluid returns. Drilling riser An operator must ensure that every drilling riser is, throughout the duration of a well operation, capable of providing access to the well; isolating the well-bore from the sea; withstanding the differential pressure of the drilling fluid relative to the sea; withstanding the maximum loads to which it may be subjected; and permitting the drilling fluid to be returned to the installation. Drilling riser support The operator must ensure that every drilling riser is supported in a manner that effectively compensates for any loads caused by the motion of the installation, the drilling fluid or the water column. Drilling riser analysis The operator must ensure that a drilling riser analysis and, in the case of a floating platform that uses a dynamic positioning system, a weak-point analysis of the drilling riser are conducted and that the certifying authority in relation to the installation approves those analyses. Fail-safe subsurface safety valves An operator must ensure that a completed development well is equipped with a fail-safe subsurface safety valve that can be operated from the surface; and if the well is located where permafrost is present in unconsolidated sediments, is installed in the production tubing below the base of the permafrost. Additional valve The operator must ensure that a completed development well on a fixed platform that has gas-lift, injection or production capabilities in the A-annulus is equipped with an additional fail-safe safety valve on the A-annulus. The operator must ensure that all fail-safe safety valves are designed, installed, tested, maintained and operated to prevent uncontrolled well flow when they are activated. Well tubulars, trees and wellheads An operator must ensure that well tubulars, trees and wellheads are operated in accordance with good engineering practices. Sour environment The operator must ensure that any well tubulars, trees or wellheads that may be exposed to a sour environment are capable of operating safely in that environment. Safe and efficient operation The operator must ensure that the wellhead and tree equipment, including any valves, are designed and maintained to operate safely and efficiently throughout the life cycle of the well under all loads to which the well may be subjected. Formation flow test equipment An operator must ensure that the equipment used in a formation flow test is designed to safely control well pressure, evaluate the formation and prevent pollution. Rated working pressure The operator must ensure that the rated working pressure of formation flow test equipment at and upstream of the well testing manifold exceeds the maximum anticipated shut-in pressure. Overpressure The operator must ensure that all equipment downstream of the well testing manifold is protected against overpressure. Downhole safety valve — development well The operator must ensure, in the case of a development well, that the formation flow test equipment includes a downhole safety valve that permits closure of the test string above the packer. Downhole safety valve — exploratory or delineation well The operator must ensure, in the case of an exploratory well or a delineation well drilled on a geological feature, that a downhole safety valve is installed before a formation flow test is conducted unless it has been demonstrated as part of the formation flow test program referred to in paragraph 63(3)(a) that the level of risk of the proposed alternative arrangement in that program is equivalent to or lower than that of using a downhole safety valve; and the Board has approved the test under subsection 63(5). Subsea test tree The operator must ensure that any formation flow test equipment used in testing a well that is drilled with a floating drilling unit has a subsea test tree that is equipped with a valve that can be operated from the surface and automatically closes when required to prevent uncontrolled well flow; and a release system that permits the test string to be hydraulically or mechanically disconnected within or below the blowout preventers. Pipeline integrity — standard An operator must ensure that a pipeline is designed, constructed, installed, operated and maintained in accordance with CSA Group standard Z662, Oil and gas pipeline systems, as it relates to offshore pipelines. Integrity management program The operator must ensure that the pipeline system integrity management program required by that standard is implemented and periodically updated. Monitoring of systems An operator must ensure that an installation is equipped with a central monitoring system in the main control centre to monitor all systems whose failure could cause or contribute to an accidental event or waste. Management of associated systems The operator must ensure that the alarm, safety, monitoring, warning and control functions associated with the systems that are monitored under subsection (1) are managed to prevent reportable incidents and waste. Suspension of related system When a function referred to in subsection (2) is suspended or found to be impaired, the operator must ensure that the use of any related system is also suspended until in the case of a function that is suspended, that function is returned to service; and in the case of a function that was found to be impaired, measures are implemented to offset the risk of a reportable incident or waste. Affected persons informed The operator must ensure that all affected persons are informed when a function referred to in subsection (2) is suspended and when it is returned to service. Deterioration An operator must, without delay, notify the Chief Safety Officer of any deterioration of an installation, including its systems or equipment, or of a pipeline, well, vessel or support craft if that deterioration could adversely affect safety or the environment. Notice to certifying authority If an installation, system, equipment, pipeline or part of a well referred to in subsection (1) is within the scope of work referred to in section 31, the operator must also, without delay, notify the certifying authority of the deterioration. Impairment rectification The operator must ensure that any impairment of an installation, including its systems or equipment, or of a pipeline, well, vessel or support craft is rectified without delay if the impairment could adversely affect safety or the environment. Mitigation measures If it is not possible to rectify the impairment without delay, the operator must conduct a risk assessment to identify risk mitigation measures; implement those mitigation measures; and ensure that the impairment is rectified as soon as the circumstances permit. Subsections (3) and (4) do not apply in respect of safety-critical elements. Support craft An operator must, in respect of an installation on which persons are normally present, ensure that a support craft that is at a distance from the installation not greater than that required for a return time of 20 minutes is available at all times for emergency response; and whenever an aircraft is landing or taking off, or personnel are working over the side or otherwise exposed to the risk of falling in the water, a support craft is available in the immediate vicinity of the installation and ready to undertake rescue and recovery operations. The support craft referred to in subsection (1) must be capable of safely providing necessary support functions in the foreseeable physical and environmental conditions prevailing in the area in which it operates; equipped to supply emergency services, including rescue and first aid treatment, for all personnel on the installation in the event of an emergency; and equipped with a self-righting fast rescue boat that meets the requirements under chapter V of the LSA Code, is capable of being launched and retrieved when it is loaded with a full complement of persons and equipment, and is ready for deployment in the event of an emergency. Required distance exceeded If the support craft is located at a distance that exceeds the distance referred to in paragraph (1)(a), both the installation manager and the person in charge of the support craft must log that fact and the reason why the distance or time was exceeded. Vessel master During any activity or situation referred to in paragraph (1)(b), or any other activity or situation that presents an increased level of risk to the safety of the installation, the vessel master must, under the direction of the installation manager, keep the craft in close proximity to the installation, maintain open communication channels with the installation and be prepared to conduct rescue operations. Rescue boat — vessel An operator must, in respect of any vessel that is used in a geoscientific program, geotechnical program, environmental program, diving project or construction activity, ensure that a rescue boat is available and ready for use in the event of an emergency. Safety zone A support craft must not enter the safety zone around an installation or around a vessel that is engaged in a geoscientific program, geotechnical program, environmental program or diving project without the consent of the installation manager or the person in charge of the operations site. Notice to approaching aircraft or vessel The operator must ensure that persons who are in charge of an aircraft or vessel that is approaching the safety zone are notified of the safety zone boundaries and of any hazards within that zone that relate to the operator’s installation or vessel. Boundaries — installation The safety zone around an installation consists of the area within a line that encloses the installation and is drawn at a distance of 500 m from the outer edge of the installation or, if any component of the installation extends beyond that edge, from the outer limit of the component that extends furthest from that edge. Boundaries — vessel The safety zone around a vessel referred to in subsection (1) consists of the area within a line that encloses the vessel and any of its attached equipment and is drawn at a distance that minimizes risks to safety, the environment and property located nearby, including fishing gear or fishing vessels. Landing area An operator must ensure that the aircraft landing area on an installation or vessel and the equipment that is used in that area or that otherwise supports the take-off or landing of aircraft are designed to ensure safety and the protection of the environment and to prevent incidents or damage resulting from the use of aircraft. The operator must ensure that the landing area has an obstacle-free take-off and approach area and is oriented relative to prevailing winds; can withstand all functional loads imposed by aircraft; can accommodate aircraft of expected sizes; has emergency response and firefighting equipment; has conspicuous markings and signage; has adequate lighting, including in reduced visibility conditions; has monitoring and status light systems and communication and meteorological equipment; is readily and safely accessible, including from the accommodations areas and from any temporary safe refuge; and in the case of a landing area on an installation, is equipped with fuel storage tanks. Fuel storage tanks The operator must ensure that any fuel storage tanks that are in proximity to a landing area are stored safely and protected from damage, impact and fire. Procedures The operator must ensure the establishment of procedures associated with the support of aircraft operations, including procedures for emergency response, and of a training program for personnel for those purposes. Aircraft service provider An operator must ensure that, before the start of any operations that require the use of an aircraft, the aircraft service provider has accepted in writing all conditions with respect to the use of the equipment in any landing area, the procedures associated with the support of aircraft operations, including the procedures for emergency response, and the training program for personnel in respect of those matters. An operator must ensure that any support or construction vessel to be used in conjunction with an installation holds a valid certificate of class issued by a classification society according to the work or activity to be carried out by it. Definition of shotpoint In this Part, shotpoint means the surface location of a seismic energy source. Reportable incidents An operator must notify the Board of a reportable incident as soon as the circumstances permit, but not later than 24 hours after becoming aware of the incident. Investigation any reportable incident is investigated; the person who conducts the investigation includes in their investigation report the root causes of the reportable incident, the contributing factors, measures to be implemented to prevent its recurrence and any other relevant information; and the investigation report is submitted to the Board not later than 14 days after the day on which the reportable incident occurred. Accessibility of records An operator must ensure that any records that are necessary to support operational requirements and the requirements of these Regulations are readily accessible to the Board for examination. Critical information An operator must ensure that records are kept of all information — including the following — that is critical to safety, the protection of the environment or the prevention of waste: information on the location and movement of support craft; information on reportable incidents; information on emergency drills and exercises; information on the quantities of consumable substances at any operations site; data resulting from any required observation of wildlife; information on verification, inspection, monitoring, testing, maintenance and operating activities; information on the status of all systems and equipment identified in the safety plan as being critical to safety or in the environmental protection plan as being critical to the protection of the environment, including any test result indicating that the systems or equipment are not functioning as intended and information on any equipment failure that has led to an impairment of any of those systems; and information on the physical and environmental conditions observed and forecasted under section 42. Retention periods The operator must retain the records referred to in subsection (1) for the following periods: in the case of the records referred to in paragraphs (1)(a) and (e) to (g) and those referred to in paragraph (1)(h) regarding forecasted conditions, five years after the day on which the record is created; in the case of the records referred to in paragraphs (1)(b) and (c), five years after the day on which the drill or exercise is carried out, and 10 years after the day on which the reportable incident is reported; in the case of the records referred to in paragraph (1)(d), for as long as the consumable substance is at the operations site; and in the case of the records referred to in paragraph (1)(h) regarding conditions observed, for the duration of the authorized work or activity. Safety report An operator must ensure that a safety report that relates to an authorized work or activity conducted in a given calendar year is submitted to the Board within 90 days after the day on which the work or activity is concluded or suspended or, in the case of a work or activity that will continue into the following calendar year, that a safety report that relates to the work or activity conducted in the preceding calendar year is submitted to the Board not later than March 31 of that following calendar year. The safety report must contain a description and analysis of the efforts undertaken to improve safety; a summary of the operator’s safety performance during the applicable calendar year, including with respect to the objective of reducing safety risks; a summary of the safety measures and actions taken to mitigate the effects of any reportable incident, as well as of their effectiveness and any adjustments made for their continued improvement; and a summary of any emergency response drills and exercises relating to safety that were completed. Annual reports An operator must ensure that the Board is made aware, at least once a year, of any report containing relevant information regarding applied research work or studies that the operator has participated in, funded or commissioned concerning the operator’s authorized works and activities in relation to safety, the protection of the environment or resource management and must ensure that a copy of the report is submitted to the Board on request. Notice — key dates When any geoscientific program, geotechnical program or environmental program is commenced, concluded, suspended or cancelled by an operator, the operator must, without delay, notify the Board in writing of the date of the commencement, conclusion, suspension or cancellation of the program. Weekly status reports An operator must ensure that weekly reports are submitted to the Board on the status of field work carried out in relation to any geoscientific program, geotechnical program or environmental program from the commencement of the program until its conclusion, suspension or cancellation. Content of reports The weekly status reports must contain the following documents and information: the program number assigned by the Board; information identifying, and indicating the current location and status of, all operations sites and support craft used in the program; key dates of the works and activities under the program, in particular their commencement, suspension and completion dates, a description of the works and activities carried out during the preceding week, including the quantity of data collected, broken down by data acquisition technique, information identifying and indicating the location of data collection points, lines or areas, a schedule indicating each type of work or activity carried out under the program, as well as any period in which data acquisition was delayed or interrupted, along with a summary of the causes of that delay or interruption, and a description of any failure to comply with a condition of the authorization; maps illustrating, in relation to the proposed data acquisition plan referred to in subparagraph 8(i)(iii), the portion of the data acquisition that has been completed, the portion that was completed in the preceding week and the portion that remains to be carried out; an indication of the total number of persons involved in the program who, during the preceding week, were at, or transferred to or from, the operations sites and, if applicable, the means by which they were transferred; a summary of any communications or interactions that occurred during the preceding week concerning program activities between persons associated with the program and persons associated with fishing activities; a summary of emergency drills and exercises that were completed and reportable incidents that occurred during the preceding week; an indication of the quantities of consumable substances that are critical to safety that are currently at each operations site; all wildlife observation data from the preceding week that were required to be recorded under paragraph 181(1)(e); a summary of the verification, inspection, monitoring, testing, maintenance and operating activities that are critical to safety that were carried out during the preceding week; and a description of any measures taken during the preceding week to avoid disturbing wildlife or interfering with fishing activities or any other uses of the sea. Environmental report — programs An operator must ensure that an environmental report that contains the following documents and information is submitted to the Board within 90 days after the day on which a geoscientific program, geotechnical program or environmental program is concluded or suspended: a description of the general physical and environmental conditions under which the program was conducted and, if applicable, a description of ice management activities and non-productive time caused by meteorological or ice conditions; a summary of program performance in relation to the environment, including with respect to the objective of reducing environmental risks; a summary of environmental protection measures and actions that were taken to mitigate the effects of any reportable incident, as well as of their effectiveness and any adjustments made for their continued improvement; a summary of any emergency response drills and exercises for the protection of the environment that were completed; and all wildlife observation data that were required to be recorded under paragraph 181(1)(e). Final reports An operator must ensure that a final operations report, final data processing report and final interpretation report are submitted to the Board with the acquired data referred to in subsection (5), as applicable, within 12 months after the day on which any geoscientific program, geotechnical program or environmental program is concluded, unless a longer period has been agreed to in writing by the Board. Content of final operations report The final operations report must contain the following documents and information: the title, author and date of the report; an executive summary and table of contents; the names of the operator, contractors and any interest owner, as defined in section 49 of the Act; a description of all operation sites and any support craft used for the program; a description of the program, including key dates, in particular its commencement, suspension and completion dates, the equipment used, the operational methods employed, the number of persons who were involved in the program, and the quantity of data collected, broken down by data acquisition technique; location maps illustrating details of the data acquisition activities carried out under the program, including the identification and location of data collection points, lines or areas and the type of data acquired; location maps illustrating the boundaries of each area covered by the program and any portion of those areas that is subject to an interest, as defined in section 49 of the Act, as well as the identification number of each such interest; a schedule that specifies the type and duration of all program activities and includes any period in which data acquisition was delayed or interrupted; an indication as to the accuracy of the navigation system and of the positioning and survey systems, as well as the parameters and configuration of both the energy source and recording system; and shotpoint maps, track plots, flight lines with numbered fiducial points, gravity station maps, location maps for any samples or core holes, copies of any photographs and a list of any videos. Content of final data processing report The final data processing report must contain the following documents and information: the documents and information referred to in paragraphs (2)(a) to (d), (g) and (k); a description of the program, including the quantity of data collected, broken down by data acquisition technique; and a description of the geoscientific data acquired, including the data processing sequence and parameters. Content of final interpretation report The final interpretation report must contain the following documents and information, as applicable: the documents and information referred to in paragraphs (2)(a) to (e); bathymetric or topographic maps compiled from the data collected; a description and interpretive maps of the acquired data, including time and depth structure and isopach maps, velocity and residual velocity maps and seismic attribute maps, final Bouguer gravity maps and any residual or other processed gravity maps, final total magnetic intensity contour maps and any residual, gradient or other processed magnetic maps, final controlled-source electromagnetic resistivity maps, surficial maps generated from any seabed, geohazard or pipeline route survey, and any geological maps; a description and analysis of the interpretation of the data with respect to geological and geophysical correlations, correlations between gravity, magnetic, seismic and controlled-source electromagnetic data, including correlations to any data acquired during previous surveys, in the case of seabed surveys, the geophysical correlation between shallow seismic data and data from cores and geotechnical boreholes, corrections or adjustments that were applied to the data during processing or compilation, the velocity information that the operator used in a time-to-depth conversion, cores and samples, other geoscientific and geotechnical analyses, and geohazards; and a description of synthetic seismograms, seismic modelling studies that use synthetic seismograms, vertical seismic profiles at wells that were used in the interpretation of the data, amplitude versus offset studies, seismic inversion studies, if any, and any other seismic studies related to the program. Acquired data The following acquired data must accompany the final reports, as applicable: time-stamped track plot, shotpoint and sample location data; bathymetric data; all final processed seismic data for each 2-D seismic line in time and depth; all final processed 3-D volumes and each line generated from that volume in time and depth; any vertical seismic profiles, synthetic seismograms, amplitude versus offset data and seismic inversion data; in the case of any seabed, geohazard or pipeline route survey, processed high-resolution data for each line, digital location maps for any samples, any photographs and videos, and sub-bottom profiler and side-scan sonar data; in the case of an environmental program, any photograph, video or other graphic information that is relevant and contributes to the interpretation of the final data and the drafting of the final report; in the case of a gravity or magnetic survey, a series of gravity and magnetic profiles across all gravity and magnetic surveys; and in the case of controlled-source electromagnetic data, final processed cross-sections on all receiver lines, curves from all receivers and all 2-D and 3-D final models generated. Incorporation of previous data The operator must incorporate into any map referred to in paragraph (4)(b) that is included in a final interpretation report any data previously collected by the operator that are related to the area covered by the map and that are of a type similar to the data from which the map was produced. Exception — data made available to public An operator that has conducted a geoscientific program, a geotechnical program or an environmental program need not submit a final interpretation report if the data acquired from the program are made available to the public for purchase or for use under licence. Data no longer available If the operator ceases to make data available for purchase or use under licence, the operator must ensure that, within 12 months after the day on which the operator ceased to make the data available, the final interpretation report is submitted to the Board. Data purchases A purchaser of data referred to in subsection 188(1) that were acquired in an area that is subject to an interest, as defined in section 49 of the Act, must submit to the Board a final interpretation report that contains the documents and information referred to in subsection 187(4), as applicable, if the costs of the purchase of the data are to be credited against a deposit or other costs in relation to the interest. Reports from data purchaser If the purchaser has reprocessed or reinterpreted the data, and if the costs of the reprocessing or reinterpretation are to be credited against a deposit or other costs of the interest, the purchaser must submit to the Board, with the acquired data referred to in subsection 187(5), as applicable, a final data processing report that contains the documents and information referred to in subsection 187(3) and a final interpretation report that contains the documents and information referred to in subsection 187(4), as applicable. Timing of submissions The reports and data required under subsections (1) and (2) must be submitted by the purchaser to the Board before the costs referred to in those subsections are credited. Notice to Chief Conservation Officer A person who has submitted a report referred to in this section must, in respect of data that pertain to shotpoints or the location of stations, notify the Chief Conservation Officer, without delay, of any errors or omissions identified in or corrections made to the data after the report is submitted. Reference When submitting any information to the Board about a well, pool, zone or field under these Regulations, an operator must refer to each by the name given to it under section 59 or paragraph 60(b), as the case may be. Results, data, analyses and schematics An operator must ensure that a copy of the final results, data, analyses and schematics obtained from any well operation, including those obtained as a result of the following activities, is submitted to the Board: the testing, sampling and pressure measurements that are conducted as part of the field data acquisition program referred to in section 13 and the well data acquisition program referred to in section 18, as well as any evaluation, testing and sampling of formations that is conducted under section 62; and any verification conducted under paragraph 71(2)(a) and any segregation test conducted under paragraph 71(2)(b). Period for submission Unless otherwise agreed to in writing by the Board, the operator must ensure that the copy is submitted within 60 days after the day on which the activity that gave rise to the results, data, analyses or schematics is concluded. Survey An operator must ensure that a survey, certified by a person licensed under the Canada Lands Surveyors Act, is conducted to confirm the location of any well and production installation. Copy of survey plan The operator must ensure that a copy of the survey plan is filed with the Canada Lands Survey Records; and submitted to the Board. The records that must be kept under section 181 include, in the case of an operation involving drilling or production, records containing the following information and documents: in respect of any assessment of the efficacy of a spill-treating agent under paragraph 11(4)(a), a description of the assessment, including any oil samples used, and a description of any tests conducted for the assessment and their results; information concerning the inspection of any installation and its equipment or a pipeline for corrosion and erosion and any resulting maintenance activities carried out; the pressure, temperature and flow rate data obtained from compressors and from systems and equipment used for treatment and processing; information concerning the calibration of meters and other instruments on an installation; information concerning the testing of subsea, surface and subsurface safety valves; information concerning the status of each well and the status of well operations; in the case of a floating platform, information concerning all loads that could affect the motions, stability or inclination of the platform, including data, observations, measurements and calculations related to its stability and station-keeping capability, including records of all of its movements, the results of all tests and analyses conducted to assess its stability and station-keeping capability, a description of every change in relation to its weight, its centre of gravity or the weight or distribution of temporary or portable equipment on it that may affect its stability, and a description of the verification of the disconnect capability of any disconnectable mooring system; in respect of boilers and pressure systems, the documents and information referred to in paragraphs 135(12)(d) to (f); information concerning each formation leak-off test and formation integrity test conducted under section 70; the findings resulting from the verifications of temporary safe refuges required under subsection 117(3); and the findings resulting from the verifications of the availability and condition of life-saving appliances required under subsection 119(11). in the case of the records referred to in paragraph (1)(a), for as long as the spill-treating agent is approved for use; in the case of the records referred to in paragraphs (1)(b) to (f), subparagraph (1)(g)(iv) and paragraphs (1)(i) to (k), five years after the day on which the record is created; in the case of the records referred to in subparagraphs (1)(g)(i) to (iii), for the life of the floating platform; and in the case of the records referred to in paragraph (1)(h), five years after the day on which the boiler or pressure system is taken out of service. Daily production record An operator must ensure that a daily production record is kept in respect of a field in which a pool or well is located until the field is abandoned and, at that time, must offer to submit the record to the Board before destroying it. The daily production record must contain, with respect to each day, the following information and documents: information concerning the calibration of meters and other instruments referred to in paragraph 193(1)(d); any measurements obtained under section 74; a description of the manner in which any fluids were disposed of, including through venting, burning or flaring, or transported for processing, whether through offloading or a pipeline; and any other information relating to the production of petroleum and other fluids from each pool or well. Formation flow test records and report in respect of exploratory wells and delineation wells, a record of formation flow test results is submitted to the Board on a daily basis; and in respect of all wells, a formation flow test report is submitted to the Board as soon as the circumstances permit after each formation flow test. An operator must ensure that interim evaluations of a pilot scheme referred to in section 81 are reported to the Board in writing at the intervals referred to in paragraph 81(2)(b). Report on completion On completion of the pilot scheme, the operator must ensure that a report is submitted to the Board that contains the results of the scheme and supporting data and analyses; and the operator’s conclusions as to the potential of the scheme for application to full-scale production. Daily reports An operator must ensure that the following reports are submitted to the Board on a daily basis: a daily operations report that contains a description of the works and activities that were carried out on the installation on the previous day and the current status of those works and activities, a description of the works and activities that are expected to be carried out on the installation on the day on which the report is submitted, a summary of the verification, inspection, monitoring, testing, maintenance and operating activities critical to safety that were carried out on the previous day, a summary of the physical and environmental conditions that were observed under section 42 on the previous day, a summary of the information referred to in paragraph 193(1)(g) that was obtained on the previous day, and any other information that is necessary to indicate the status of operations on the installation; a daily drilling report that contains the daily and cumulative costs of operating the installation, all well and casing data obtained on the previous day, a description of the properties of the drilling fluid and all drilling fluid gas readings from the previous day, a summary of any directional and deviation surveys carried out the previous day, a description of the formations encountered on the previous day, the results of any blowout preventer test carried out on the previous day and the date of the most recent test, and the results of any formation leak-off tests or formation integrity tests referred to in section 70 that were carried out the previous day; a daily geological report, consisting of well and field data acquired the previous day through the programs referred to in sections 13 and 18 , geological assessments made the previous day and any other information that is relevant to those assessments; and in the case of a production installation, a daily production report that contains a summary of the information referred to in paragraphs 193(1)(a) to (c) in relation to the previous day and a summary of the daily production record referred to in section 194. Monthly production report An operator must ensure that a report summarizing the production data collected during a given month is submitted to the Board not later than the 15th day of the subsequent month. Well records and reports a well termination record is submitted to the Board in respect of a well within 21 days after the day on which the well is abandoned, the day on which the well is suspended if the suspension is planned to be for a period that is longer than 21 days, or the day on which the well is completed or recompleted; a well operation report is submitted to the Board in respect of a well that requires a workover or intervention within 30 days after the day on which the workover or intervention is completed; a well history report is submitted to the Board in respect of a development well within 45 days after the day referred to in subparagraph (a)(i), (ii) or (iii), as the case may be; a well history report is submitted to the Board in respect of an exploration or delineation well within 90 days after the day referred to in subparagraph (a)(i), (ii) or (iii), as the case may be; and the actual cost breakdown of all well operations is submitted to the Board within 90 days after the day on which a well is abandoned, suspended or completed. Well termination record — contents The record required under paragraph (1)(a) must describe the manner in which the well has been abandoned, suspended, completed or recompleted and must include a schematic of the well illustrating the nature and location of the plugs used to abandon or suspend the well or the equipment used to complete or recomplete the well. Reports — contents The reports required under paragraphs (1)(b) to (d) must contain a record of all operational, engineering, petrophysical, geophysical and geological information that is relevant to the well operation, including any problems encountered during the well operation and the results of any formation leak-off test or formation integrity test conducted under section 70. Impact description The report required under paragraph (1)(b) must describe any impact of the workover or intervention on the performance of the well, including any effect on productivity, injectivity and the recovery of petroleum. Environmental report — drilling An operator must ensure, in relation to a drilling program that involves an exploratory well or a delineation well, that an environmental report that contains the following documents and information is submitted to the Board within 90 days after the day referred to in subparagraph 199(1)(a)(i), (ii) or (iii), as the case may be: a summary of the physical and environmental conditions under which the drilling program was conducted and, if applicable, a description of ice management activities and non-productive time caused by meteorological or ice conditions; a summary of the environmental protection measures in place during the drilling program, the measures taken to mitigate the effects of any reportable incident, the effectiveness of those measures and any adjustments made for their continued improvement; a summary of the performance of the drilling program in relation to the environment, including in relation to the objective of reducing environmental risks; all wildlife observation data that was required to be recorded under paragraph 181(1)(e). Annual environmental report — production and pipeline An operator must ensure, in relation to a production project or pipeline project, that an environmental report that contains the following documents and information with respect to a given calendar year is submitted to the Board not later than March 31 of the subsequent year: a summary of the general physical and environmental conditions to which each operations site was subjected; a description of any ice management activities carried out; a summary of the environmental protection measures in place, the measures taken to mitigate the effects of any reportable incident, the effectiveness of those measures and any adjustments made for their continued improvement; a summary of the performance of the project in relation to the environment, including in relation to the objective of reducing environmental risks; Annual production report An operator must ensure that, not later than March 31 of each year, an annual production report for a pool, field or zone is submitted to the Board that contains information on how the operator manages and intends to manage the resource being produced without waste, including for the preceding calendar year, details on performance, production forecasts, reserve revision, the reasons for deviations in well performance from forecasts in previous annual production reports, gas conservation resources, efforts to maximize the recovery of petroleum and operating and capital expenditures, including the cost of each well operation; and for the preceding calendar year, the current calendar year and the next two calendar years, capital costs and fixed operating costs for each well and field in a production project, variable costs, commodity prices and financial commitments in relation to the transportation of the resource, including by pipeline. Gas venting records An operator must ensure that a record is kept of the following information in respect of each gas venting referred to in paragraph 82(c): a description of the emergency situation that justified the venting; a description of the venting, the date it occurred and its duration; and the volume of gas vented. Compressor records An operator must ensure that a record containing the following documents and information is kept in respect of the compressors referred to in subsection 84(1): information demonstrating, with supporting documents, that the continuous monitoring device referred to in subsection 84(2) has been calibrated in accordance with the manufacturer’s recommendations such that its measurements have a maximum margin of error of ±10%; and for each compressor, if its maximum flow rate limit under subsection 84(3) or (4) has been exceeded, its serial number, make and model, the date on which the maximum flow rate limit was exceeded, the flow rate indicated by the continuous monitoring device when the maximum flow rate limit was exceeded, and a description of the corrective measures that were taken and the dates on which they was taken. Fugitive emission records An operator must ensure that a record containing the following information is kept in respect of any fugitive emission from an installation that is detected: the date on which the emission was detected; the type of equipment from which the emission was released and its location within the installation or identifier; the means by which the emission was identified; and a description of the corrective measures that were taken and the dates on which they were taken. Record retention period An operator must ensure that a record referred to in any of sections 203 to 205 is retained for five years after the day on which the record is created. An operator must ensure that weekly reports are submitted to the Board on the status of any diving project or construction activities. the project number assigned by the Board; information identifying, and indicating the current location and status of, all operations sites and support craft used in the diving project or construction activities; a description of the works and activities carried out during the preceding week; an indication of the total number of persons involved in the works and activities who, during the week, were at, or transferred to or from, the operations sites and, if applicable, the means by which they were transferred; a summary of emergency drills and exercises that were completed and reportable incidents that occurred during the week; an indication of the quantities of consumable substances that are critical to safety that are currently at each operations site; and a summary of the verification, inspection, monitoring, testing, maintenance and operating activities that are critical to safety that were carried out during the preceding week. The following Regulations are repealed: the Nova Scotia Offshore Area Petroleum Geophysical Operations Regulations1; SOR/95-144 the Nova Scotia Offshore Certificate of Fitness Regulations2; SOR/95-187 the Nova Scotia Offshore Petroleum Installations Regulations3; and SOR/95-191 the Nova Scotia Offshore Petroleum Drilling and Production Regulations4. SOR/2009-317 Eight months after publication These Regulations come into force on the day that, in the eighth month after the month in which they are published in the Canada Gazette, Part II, has the same calendar number as the day on which they are published or, if that eighth month has no day with that number, the last day of that eighth month. [Note:

Regulations in force October 28, 2024.] Section 24 Subsections 84(1) to (4) Section 98 Section 100 Subsections 103(1) and (2) Sections 104 to 108 Subsection 109(2) Sections 110 to 114 Subsections 115(1) to (7) Section 116 Subsections 117(1) and (2) Section 118 Subsections 119(1) to (10) Section 120 Subsection 121(2) Sections 122 and 123 Subsection 124(2) Subsection 125(1) Paragraph 125(2)(a) Sections 126 to 131 Subsections 132(1) to (6) Subsections 133(1) to (6) and (9) Section 134 Subsections 135(1) to (7) and (11) to (13) Section 136 Paragraph 137(1)(a) Subsections 137(2) to (8) and (10) Subsections 138(1) to (4), (6) and (7) Section 139 Section 141 Paragraphs 142(1)(a) to (c) Subsections 142(2) to (4) Subsections 143(1) and (2) Sections 144 to 146 Subsections 147(1) to (3) Subsections 148(1) to (6). However, subsection (5) applies only with respect to the criteria for disconnection. Section 149 Subsection 150(1) Sections 151 and 152 Section 154 Subsections 155(1) to (3) Section 174 Section 19 Paragraphs 21(b) and (c) Sections 22 to 25 Subsections 26(1) and (3) Sections 27 and 28 Paragraph 29(a) Subparagraph 30(2)(d)(ii) Subsection 30(3) Paragraphs 32(2)(a), (b) and (d) Subsection 32(3) Paragraphs 32(4)(a), (c) to (g) and (i). However, paragraph (e) applies only with respect to the requirement that a medical room have surfaces that are easily cleaned and disinfected. Paragraphs 46(a) and (b) Subparagraph 46(m)(i) Clauses 46(m)(ii)(A), (C) and (D) Paragraph 47(2)(b) Subsection 57(1). However, paragraph (e) applies only with respect to the requirement that the accommodations area be maintained in good repair. Subsections 58(1) and (2) Paragraphs 58(3)(a) to (e). However, paragraph (a) applies only with respect to the requirement under paragraph 60(2)(a) concerning handwashing facilities and paragraph (e) applies only with respect to the requirement that washrooms be maintained in good repair. Subsection 60(1) Paragraphs 60(2)(a) and (d). However, paragraph (d) applies only with respect to the requirement that handwashing facilities be maintained in good repair. Subsection 61(1) Paragraphs 61(2)(a) to (c) and (e). However, paragraph (e) applies only with respect to the requirement that showers be maintained in good repair. Section 62 Subparagraphs 63(1)(a)(i) to (v) Paragraphs 63(1)(b) and (c) Section 64. However, paragraph (d) applies only with respect to the requirement that the dining area be maintained in good repair. Subsections 65(2), (4) and (5) Paragraphs 66(b) and (c). However, subparagraph (c)(iv) applies only with respect to the requirement that waste receptacles be maintained in good working order. Subsection 67(1) Paragraph 73(b) Subsection 74(1) Paragraph 77(1)(a) Subparagraph 77(1)(c)(i) Subsection 78(2) Section 79 Sections 81 to 85 Paragraphs 91(1)(a) to (e), (h), (j) and (n) to (p). However, paragraph (j) applies only with respect to the requirement that the equipment, machines and devices in question be rated by their manufacturer as appropriate for use. Subsection 93(1) Paragraph 93(2)(a) Sections 97 and 98 Subsection 101(1) Paragraphs 107(a) to (d) Subsection 113(2) Paragraphs 113(3)(a) and (b) Paragraphs 121(1)(a) to (d), (g) to (v) and (z.2) Subsection 122(5) Paragraph 122(6)(a) Subparagraph 122(6)(b)(i) Section 123 Subsections 124(2) and (3) Paragraphs 125(1)(a) and (b) Paragraphs 126(1)(f) and (g) Subsection 126(2) Paragraph 127(3)(a) Subsection 130(3) Paragraphs 144(1)(b), (l), (n), (o), (r) to (u), (w) and (x) Subsection 147(1) Paragraph 153(1)(e) Paragraphs 157(1)(b), (d), (g), (l) and (q). However, subparagraph (q)(iv) applies only with respect to the inspection of a piping system that contains a hazardous substance before it is placed in service. Subparagraphs 157(1)(c)(i) and (k)(i) Subsection 171(3) Paragraphs 172(1)(a), (g), (j) to (m), (o) and (p), (2)(e) and (3)(c) and (f) Subparagraph 4(1)(m)(iii) Paragraphs 4(1)(p) and (v) Paragraph 44(b) Section 45 Subsections 68(2) and (9) Section 73 Subsection 77(1) Subsection 103(3) Subsection 121(1) Subsection 124(1) Subsection 135(8) Subsection 138(5) Paragraph 142(1)(d) Subsections 143(3) and (4) Subsections 147(4) and (5) Subsection 148(7) Subsection 150(2) Section 153 Subsection 155(4) Sections 163 to 165 Subsections 166(2) and (3) Sections 167 and 168 Subsections 169(1) to (3)