(a) Which pipelines are covered by this section? This section applies to each hazardous liquid pipeline and carbon dioxide pipeline that could affect a high consequence area, including any pipeline located in a high consequence area unless the operator effectively demonstrates by risk assessment that the pipeline could not affect the area. (Appendix C of this part provides guidance on determining if a pipeline could affect a high consequence area.) Covered pipelines are categorized as follows:

(1) Category 1 includes pipelines existing on May 29, 2001, that were owned or operated by an operator who owned or operated a total of 500 or more miles of pipeline subject to this part.

(2) Category 2 includes pipelines existing on May 29, 2001, that were owned or operated by an operator who owned or operated less than 500 miles of pipeline subject to this part.

(3) Category 3 includes pipelines constructed or converted after May 29, 2001, and low-stress pipelines in rural areas under §195.12.

(4) Low stress pipelines as specified in §195.12.

(b) What program and practices must operators use to manage pipeline integrity? Each operator of a pipeline covered by this section must:

(1) Develop a written integrity management program that addresses the risks on each segment of pipeline in the first column of the following table no later than the date in the second column:

(2) Include in the program an identification of each pipeline or pipeline segment in the first column of the following table not later than the date in the second column:

(3) Include in the program a plan to carry out baseline assessments of line pipe as required by paragraph (c) of this section.

(4) Include in the program a framework that—

(i) Addresses each element of the integrity management program under paragraph (f) of this section, including continual integrity assessment and evaluation under paragraph (j) of this section; and

(ii) Initially indicates how decisions will be made to implement each element.

(5) Implement and follow the program.

(6) Follow recognized industry practices in carrying out this section, unless—

(i) This section specifies otherwise; or

(ii) The operator demonstrates that an alternative practice is supported by a reliable engineering evaluation and provides an equivalent level of public safety and environmental protection.

(c) What must be in the baseline assessment plan?

(1) An operator must include each of the following elements in its written baseline assessment plan:

(i) The methods selected to assess the integrity of the line pipe. An operator must assess the integrity of the line pipe by in-line inspection tool(s) described in paragraph (c)(1)(i)(A) of this section for the range of relevant threats to the pipeline segment. If it is impracticable based upon the construction of the pipeline (e.g., diameter changes, sharp bends, and elbows) or operational limits including operating pressure, low flow, pipeline length, or availability of in-line inspection tool technology for the pipe diameter, then the operator must use the appropriate method(s) in paragraphs (c)(1)(i)(B), (C), or (D) of this section for the range of relevant threats to the pipeline segment. The methods an operator selects to assess low-frequency electric resistance welded pipe, pipe with a seam factor less than 1.0 as defined in §195.106(e) or lap-welded pipe susceptible to longitudinal seam failure, must be capable of assessing seam integrity, cracking, and of detecting corrosion and deformation anomalies.

(A) In-line inspection tool or tools capable of detecting corrosion and deformation anomalies including dents, gouges, and grooves. For pipeline segments with an identified or probable risk or threat related to cracks (such as at pipe body or weld seams) based on the risk factors specified in paragraph (e), an operator must use an in-line inspection tool or tools capable of detecting crack anomalies. When performing an assessment using an in-line inspection tool, an operator must comply with §195.591. An operator using this method must explicitly consider uncertainties in reported results (including tool tolerance, anomaly findings, and unity chart plots or equivalent for determining uncertainties) in identifying anomalies;

(B) Pressure test conducted in accordance with subpart E of this part;

(C) External corrosion direct assessment in accordance with §195.588; or

(D) Other technology that the operator demonstrates can provide an equivalent understanding of the condition of the line pipe. An operator choosing this option must notify the Office of Pipeline Safety (OPS) 90 days before conducting the assessment, by sending a notice to the address or facsimile number specified in paragraph (m) of this section.

(ii) A schedule for completing the integrity assessment;

(iii) An explanation of the assessment methods selected and evaluation of risk factors considered in establishing the assessment schedule.

(2) An operator must document, prior to implementing any changes to the plan, any modification to the plan, and reasons for the modification.

(d) When must operators complete baseline assessments?

(1) All pipelines. An operator must complete the baseline assessment before a new or conversion-to-service pipeline begins operation through the development of procedures, identification of high consequence areas, and pressure testing of could-affect high consequence areas in accordance with §195.304.

(2) Newly identified areas. If an operator obtains information (whether from the information analysis required under paragraph (g) of this section, Census Bureau maps, or any other source) demonstrating that the area around a pipeline segment has changed to meet the definition of a high consequence area (see §195.450), that area must be incorporated into the operator's baseline assessment plan within 1 year from the date that the information is obtained. An operator must complete the baseline assessment of any pipeline segment that could affect a newly identified high consequence area within 5 years from the date an operator identifies the area.

(e) What are the risk factors for establishing an assessment schedule (for both the baseline and continual integrity assessments)?

(1) An operator must establish an integrity assessment schedule that prioritizes pipeline segments for assessment (see paragraphs (d)(1) and (j)(3) of this section). An operator must base the assessment schedule on all risk factors that reflect the risk conditions on the pipeline segment. The factors an operator must consider include, but are not limited to:

(i) Results of the previous integrity assessment, defect type and size that the assessment method can detect, and defect growth rate;

(ii) Pipe size, material, manufacturing information, coating type and condition, and seam type;

(iii) Leak history, repair history and cathodic protection history;

(iv) Product transported;

(v) Operating stress level;

(vi) Existing or projected activities in the area;

(vii) Local environmental factors that could affect the pipeline (e.g., seismicity, corrosivity of soil, subsidence, climatic);

(viii) geo-technical hazards; and

(ix) Physical support of the segment such as by a cable suspension bridge.

(2) Appendix C of this part provides further guidance on risk factors.

(f) What are the elements of an integrity management program? An integrity management program begins with the initial framework. An operator must continually change the program to reflect operating experience, conclusions drawn from results of the integrity assessments, and other maintenance and surveillance data, and evaluation of consequences of a failure on the high consequence area. An operator must include, at minimum, each of the following elements in its written integrity management program:

(1) A process for identifying which pipeline segments could affect a high consequence area;

(2) A baseline assessment plan meeting the requirements of paragraph (c) of this section;

(3) An analysis that integrates all available information about the integrity of the entire pipeline and the consequences of a failure (see paragraph (g) of this section);

(4) Criteria for remedial actions to address integrity issues raised by the assessment methods and information analysis (see paragraph (h) of this section);

(5) A continual process of assessment and evaluation to maintain a pipeline's integrity (see paragraph (j) of this section);

(6) Identification of preventive and mitigative measures to protect the high consequence area (see paragraph (i) of this section);

(7) Methods to measure the program's effectiveness (see paragraph (k) of this section);

(8) A process for review of integrity assessment results and information analysis by a person qualified to evaluate the results and information (see paragraph (h)(2) of this section).

(g) What is an information analysis? In periodically evaluating the integrity of each pipeline segment (see paragraph (j) of this section), an operator must analyze all available information about the integrity of its entire pipeline and the consequences of a possible failure along the pipeline. Operators must continue to comply with the data integration elements specified in §195.452(g) that were in effect on October 1, 2018, until October 1, 2022. Operators must begin to integrate all the data elements specified in this section starting October 1, 2020, with all attributes integrated by October 1, 2022. This analysis must:

(1) Integrate information and attributes about the pipeline that include, but are not limited to:

(i) Pipe diameter, wall thickness, grade, and seam type;

(ii) Pipe coating, including girth weld coating;

(iii) Maximum operating pressure (MOP) and temperature;

(iv) Endpoints of segments that could affect high consequence areas (HCAs);

(v) Hydrostatic test pressure including any test failures or leaks—if known;

(vi) Location of casings and if shorted;

(vii) Any in-service ruptures or leaks—including identified causes;

(viii) Data gathered through integrity assessments required under this section;

(ix) Close interval survey (CIS) survey results;

(x) Depth of cover surveys;

(xi) Corrosion protection (CP) rectifier readings;

(xii) CP test point survey readings and locations;

(xiii) AC/DC and foreign structure interference surveys;

(xiv) Pipe coating surveys and cathodic protection surveys.

(xv) Results of examinations of exposed portions of buried pipelines (i.e., pipe and pipe coating condition, see §195.569);

(xvi) Stress corrosion cracking (SCC) and other cracking (pipe body or weld) excavations and findings, including in-situ non-destructive examinations and analysis results for failure stress pressures and cyclic fatigue crack growth analysis to estimate the remaining life of the pipeline;

(xvii) Aerial photography;

(xviii) Location of foreign line crossings;

(xix) Pipe exposures resulting from repairs and encroachments;

(xx) Seismicity of the area; and

(xxi) Other pertinent information derived from operations and maintenance activities and any additional tests, inspections, surveys, patrols, or monitoring required under this part.

(2) Consider information critical to determining the potential for, and preventing, damage due to excavation, including current and planned damage prevention activities, and development or planned development along the pipeline;

(3) Consider how a potential failure would affect high consequence areas, such as location of a water intake.

(4) Identify spatial relationships among anomalous information (e.g., corrosion coincident with foreign line crossings; evidence of pipeline damage where aerial photography shows evidence of encroachment). Storing the information in a geographic information system (GIS), alone, is not sufficient. An operator must analyze for interrelationships among the data.

(h) What actions must an operator take to address integrity issues?—

(1) General requirements. An operator must take prompt action to address all anomalous conditions in the pipeline that the operator discovers through the integrity assessment or information analysis. In addressing all conditions, an operator must evaluate all anomalous conditions and remediate those that could reduce a pipeline's integrity, as required by this part. An operator must be able to demonstrate that the remediation of the condition will ensure that the condition is unlikely to pose a threat to the long-term integrity of the pipeline. An operator must comply with all other applicable requirements in this part in remediating a condition. Each operator must, in repairing its pipeline systems, ensure that the repairs are made in a safe and timely manner and are made so as to prevent damage to persons, property, or the environment. The calculation method(s) used for anomaly evaluation must be applicable for the range of relevant threats.

(i) Temporary pressure reduction. An operator must notify PHMSA, in accordance with paragraph (m) of this section, if the operator cannot meet the schedule for evaluation and remediation required under paragraph (h)(3) of this section and cannot provide safety through a temporary reduction in operating pressure.

(ii) Long-term pressure reduction. When a pressure reduction exceeds 365 days, the operator must notify PHMSA in accordance with paragraph (m) of this section and explain the reasons for the delay. An operator must also take further remedial action to ensure the safety of the pipeline.

(2) Discovery of condition. Discovery of a condition occurs when an operator has adequate information to determine that a condition presenting a potential threat to the integrity of the pipeline exists. An operator must promptly, but no later than 180 days after an assessment, obtain sufficient information about a condition to make that determination, unless the operator can demonstrate the 180-day interval is impracticable. If the operator believes that 180 days are impracticable to make a determination about a condition found during an assessment, the pipeline operator must notify PHMSA in accordance with paragraph (m) of this section and provide an expected date when adequate information will become available.

(3) Schedule for evaluation and remediation. An operator must complete remediation of a condition according to a schedule prioritizing the conditions for evaluation and remediation. If an operator cannot meet the schedule for any condition, the operator must explain the reasons why it cannot meet the schedule and how the changed schedule will not jeopardize public safety or environmental protection.

(4) Special requirements for scheduling remediation—

(i) Immediate repair conditions. An operator's evaluation and remediation schedule must provide for immediate repair conditions. To maintain safety, an operator must temporarily reduce the operating pressure or shut down the pipeline until the operator completes the repair of these conditions. An operator must calculate the temporary reduction in operating pressure using the formulas referenced in paragraph (h)(4)(i)(B) of this section. If no suitable remaining strength calculation method can be identified, an operator must implement a minimum 20 percent or greater operating pressure reduction, based on actual operating pressure for two months prior to the date of inspection, until the anomaly is repaired. An operator must treat the following conditions as immediate repair conditions:

(A) Metal loss greater than 80% of nominal wall regardless of dimensions.

(B) A calculation of the remaining strength of the pipe shows a predicted burst pressure less than the established maximum operating pressure at the location of the anomaly. Suitable remaining strength calculation methods include, but are not limited to, ASME/ANSI B31G (incorporated by reference, see §195.3) and PRCI PR-3-805 (R-STRENG) (incorporated by reference, see §195.3).

(C) A dent located on the top of the pipeline (above the 4 and 8 o'clock positions) that has any indication of metal loss, cracking or a stress riser.

(D) A dent located on the top of the pipeline (above the 4 and 8 o'clock positions) with a depth greater than 6% of the nominal pipe diameter.

(E) An anomaly that in the judgment of the person designated by the operator to evaluate the assessment results requires immediate action.

(ii) 60-day conditions. Except for conditions listed in paragraph (h)(4)(i) of this section, an operator must schedule evaluation and remediation of the following conditions within 60 days of discovery of condition.

(A) A dent located on the top of the pipeline (above the 4 and 8 o'clock positions) with a depth greater than 3% of the pipeline diameter (greater than 0.250 inches in depth for a pipeline diameter less than Nominal Pipe Size (NPS) 12).

(B) A dent located on the bottom of the pipeline that has any indication of metal loss, cracking or a stress riser.

(iii) 180-day conditions. Except for conditions listed in paragraph (h)(4)(i) or (ii) of this section, an operator must schedule evaluation and remediation of the following within 180 days of discovery of the condition:

(A) A dent with a depth greater than 2% of the pipeline's diameter (0.250 inches in depth for a pipeline diameter less than NPS 12) that affects pipe curvature at a girth weld or a longitudinal seam weld.

(B) A dent located on the top of the pipeline (above 4 and 8 o'clock position) with a depth greater than 2% of the pipeline's diameter (0.250 inches in depth for a pipeline diameter less than NPS 12).

(C) A dent located on the bottom of the pipeline with a depth greater than 6% of the pipeline's diameter.

(D) A calculation of the remaining strength of the pipe shows an operating pressure that is less than the current established maximum operating pressure at the location of the anomaly. Suitable remaining strength calculation methods include, but are not limited to, ASME/ANSI B31G and PRCI PR-3-805 (R-STRENG).

(E) An area of general corrosion with a predicted metal loss greater than 50% of nominal wall.

(F) Predicted metal loss greater than 50% of nominal wall that is located at a crossing of another pipeline, or is in an area with widespread circumferential corrosion, or is in an area that could affect a girth weld.

(G) A potential crack indication that when excavated is determined to be a crack.

(H) Corrosion of or along a longitudinal seam weld.

(I) A gouge or groove greater than 12.5% of nominal wall.

(iv) Other conditions. In addition to the conditions listed in paragraphs (h)(4)(i) through (iii) of this section, an operator must evaluate any condition identified by an integrity assessment or information analysis that could impair the integrity of the pipeline, and as appropriate, schedule the condition for remediation. Appendix C of this part contains guidance concerning other conditions that an operator should evaluate.

(i) What preventive and mitigative measures must an operator take to protect the high consequence area?—

(1) General requirements. An operator must take measures to prevent and mitigate the consequences of a pipeline failure that could affect a high consequence area. These measures include conducting a risk analysis of the pipeline segment to identify additional actions to enhance public safety or environmental protection. Such actions may include, but are not limited to, implementing damage prevention best practices, better monitoring of cathodic protection where corrosion is a concern, establishing shorter inspection intervals, installing EFRDs on the pipeline segment, modifying the systems that monitor pressure and detect leaks, providing additional training to personnel on response procedures, conducting drills with local emergency responders and adopting other management controls.

(2) Risk analysis criteria. In identifying the need for additional preventive and mitigative measures, an operator must evaluate the likelihood of a pipeline release occurring and how a release could affect the high consequence area. This determination must consider all relevant risk factors, including, but not limited to:

(i) Terrain surrounding the pipeline segment, including drainage systems such as small streams and other smaller waterways that could act as a conduit to the high consequence area;

(ii) Elevation profile;

(iii) Characteristics of the product transported;

(iv) Amount of product that could be released;

(v) Possibility of a spillage in a farm field following the drain tile into a waterway;

(vi) Ditches along side a roadway the pipeline crosses;

(vii) Physical support of the pipeline segment such as by a cable suspension bridge;

(viii) Exposure of the pipeline to operating pressure exceeding established maximum operating pressure;

(ix) Seismicity of the area.

(3) Leak detection. An operator must have a means to detect leaks on its pipeline system. An operator must evaluate the capability of its leak detection means and modify, as necessary, to protect the high consequence area. An operator's evaluation must, at least, consider, the following factors—length and size of the pipeline, type of product carried, the pipeline's proximity to the high consequence area, the swiftness of leak detection, location of nearest response personnel, leak history, and risk assessment results.

(4) Emergency Flow Restricting Devices (EFRD). If an operator determines that an EFRD is needed on a pipeline segment to protect a high consequence area in the event of a hazardous liquid pipeline release, an operator must install the EFRD. In making this determination, an operator must, at least, consider the following factors—the swiftness of leak detection and pipeline shutdown capabilities, the type of commodity carried, the rate of potential leakage, the volume that can be released, topography or pipeline profile, the potential for ignition, proximity to power sources, location of nearest response personnel, specific terrain between the pipeline segment and the high consequence area, and benefits expected by reducing the spill size.

(j) What is a continual process of evaluation and assessment to maintain a pipeline's integrity?—

(1) General. After completing the baseline integrity assessment, an operator must continue to assess the line pipe at specified intervals and periodically evaluate the integrity of each pipeline segment that could affect a high consequence area.

(2) Verifying covered segments. An operator must verify the risk factors used in identifying pipeline segments that could affect a high consequence area on at least an annual basis not to exceed 15 months (Appendix C of this part provides additional guidance on factors that can influence whether a pipeline segment could affect a high consequence area). If a change in circumstance indicates that the prior consideration of a risk factor is no longer valid or that an operator should consider new risk factors, an operator must perform a new integrity analysis and evaluation to establish the endpoints of any previously identified covered segments. The integrity analysis and evaluation must include consideration of the results of any baseline and periodic integrity assessments (see paragraphs (b), (c), (d), and (e) of this section), information analyses (see paragraph (g) of this section), and decisions about remediation and preventive and mitigative actions (see paragraphs (h) and (i) of this section). An operator must complete the first annual verification under this paragraph no later than July 1, 2021.

(3) Assessment intervals. An operator must establish five-year intervals, not to exceed 68 months, for continually assessing the line pipe's integrity. An operator must base the assessment intervals on the risk the line pipe poses to the high consequence area to determine the priority for assessing the pipeline segments. An operator must establish the assessment intervals based on the factors specified in paragraph (e) of this section, the analysis of the results from the last integrity assessment, and the information analysis required by paragraph (g) of this section.

(4) Variance from the 5-year intervals in limited situations—

(i) Engineering basis. An operator may be able to justify an engineering basis for a longer assessment interval on a segment of line pipe. The justification must be supported by a reliable engineering evaluation combined with the use of other technology, such as external monitoring technology, that provides an understanding of the condition of the line pipe equivalent to that which can be obtained from the assessment methods allowed in paragraph (j)(5) of this section. An operator must notify OPS 270 days before the end of the five-year (or less) interval of the justification for a longer interval, and propose an alternative interval. An operator must send the notice to the address specified in paragraph (m) of this section.

(ii) Unavailable technology. An operator may require a longer assessment period for a segment of line pipe (for example, because sophisticated internal inspection technology is not available). An operator must justify the reasons why it cannot comply with the required assessment period and must also demonstrate the actions it is taking to evaluate the integrity of the pipeline segment in the interim. An operator must notify OPS 180 days before the end of the five-year (or less) interval that the operator may require a longer assessment interval, and provide an estimate of when the assessment can be completed. An operator must send a notice to the address specified in paragraph (m) of this section.

(5) Assessment methods. An operator must assess the integrity of the line pipe by any of the following methods. The methods an operator selects to assess low frequency electric resistance welded pipe or lap welded pipe susceptible to longitudinal seam failure must be capable of assessing seam integrity and of detecting corrosion and deformation anomalies.

(i) In-Line Inspection tool or tools capable of detecting corrosion and deformation anomalies, including dents, gouges, and grooves. For pipeline segments that are susceptible to cracks (pipe body and weld seams), an operator must use an in-line inspection tool or tools capable of detecting crack anomalies. When performing an assessment using an In-Line Inspection tool, an operator must comply with §195.591;

(ii) Pressure test conducted in accordance with subpart E of this part;

(iii) External corrosion direct assessment in accordance with §195.588; or

(iv) Other technology that the operator demonstrates can provide an equivalent understanding of the condition of the line pipe. An operator choosing this option must notify OPS 90 days before conducting the assessment, by sending a notice to the address or facsimile number specified in paragraph (m) of this section.

(k) What methods to measure program effectiveness must be used? An operator's program must include methods to measure whether the program is effective in assessing and evaluating the integrity of each pipeline segment and in protecting the high consequence areas. See Appendix C of this part for guidance on methods that can be used to evaluate a program's effectiveness.

(l) What records must an operator keep to demonstrate compliance?

(1) An operator must maintain, for the useful life of the pipeline, records that demonstrate compliance with the requirements of this subpart. At a minimum, an operator must maintain the following records for review during an inspection:

(i) A written integrity management program in accordance with paragraph (b) of this section.

(ii) Documents to support the decisions and analyses, including any modifications, justifications, deviations and determinations made, variances, and actions taken, to implement and evaluate each element of the integrity management program listed in paragraph (f) of this section.

(2) See Appendix C of this part for examples of records an operator would be required to keep.

(m) How does an operator notify PHMSA? An operator must provide any notification required by this section by:

(1) Sending the notification by electronic mail to InformationResourcesManager@dot.gov; or

(2) Sending the notification by mail to ATTN: Information Resources Manager, DOT/PHMSA/OPS, East Building, 2nd Floor, E22-321, 1200 New Jersey Ave SE., Washington, DC 20590.

(n) Accommodation of instrumented internal inspection devices—

(1) Scope. This paragraph does not apply to any pipeline facilities listed in §195.120(b).

(2) General. An operator must ensure that each pipeline is modified to accommodate the passage of an instrumented internal inspection device by July 2, 2040.

(3) Newly identified areas. If a pipeline could affect a newly identified high consequence area (see paragraph (d)(2) of this section) after July 2, 2035, an operator must modify the pipeline to accommodate the passage of an instrumented internal inspection device within 5 years of the date of identification or before performing the baseline assessment, whichever is sooner.

(4) Lack of accommodation. An operator may file a petition under §190.9 of this chapter for a finding that the basic construction (i.e., length, diameter, operating pressure, or location) of a pipeline cannot be modified to accommodate the passage of an instrumented internal inspection device or that the operator determines it would abandon or shut-down a pipeline as a result of the cost to comply with the requirement of this section.

(5) Emergencies. An operator may file a petition under §190.9 of this chapter for a finding that a pipeline cannot be modified to accommodate the passage of an instrumented internal inspection device as a result of an emergency. An operator must file such a petition within 30 days after discovering the emergency. If the petition is denied, the operator must modify the pipeline to allow the passage of an instrumented internal inspection device within 1 year after the date of the notice of the denial.

[Amdt. 195-70, 65 FR 75406, Dec. 1, 2000]