CHMM study materials
CHMM study resources

CHMM (IHMM): Ammonia Seal Failure at a Refrigerated Warehouse

CHMM · Put your knowledge to work in context.

All case studies

Ammonia Seal Failure at a Refrigerated Warehouse

Coldpoint Distribution runs a 210,000 square foot refrigerated warehouse served by an anhydrous ammonia system charged with 18,500 lb. At 02:40 a compressor shaft seal failed; the operator isolated the machine at 03:15. Detector records and the system's level drop indicate about 5,800 lb of ammonia escaped, mostly through the machine-room roof vent. Two employees were treated at a clinic for respiratory irritation and released the same day. The site has an OSHA process safety management program and a risk management plan last submitted in 2019; the most recent process hazard analysis was completed in 2018. The safety manager asks what must be filed, with whom, and how quickly, and whether the warehouse can simply note the event in its incident log and move on.

1. Identify the release notification obligations, the recipients, and the timing.

Read the worked answer

Immediate notifications (CERCLA/EPCRA). Anhydrous ammonia has a final reportable quantity of 100 lb. A 5,800 lb release is 58 times the RQ, so the quantity threshold is not even close. The person in charge must:

  • Notify the National Response Center immediately upon having knowledge - not after the internal investigation concludes. "Immediate" is measured in minutes to hours; delay is itself a violation and carries separate liability.
  • Notify the State Emergency Response Commission and the Local Emergency Planning Committee (EPCRA §304). A written follow-up to the SERC and LEPC is due as soon as practicable afterward, covering known and anticipated health risks and response actions taken.

Because the release was not a federally permitted release, no CERCLA exemption applies.

Other filings.

  • OSHA injury/illness record: entries on the OSHA 300 log within 7 calendar days for the two treated employees.
  • RMP: not an event-driven notification, but the plan itself is overdue - see the next task.
  • Local emergency responders and the community right-to-know program: the county LEPC will expect a follow-up, and the annual Tier II inventory report is unaffected by the release but should reflect the actual inventory.

Answer to "can we just log it?" No. An internal incident log is not a substitute for any of the above, and the NRC call comes first.

2. What does the timeline reveal about the site's PSM and RMP programs, and what must the incident investigation cover?

Read the worked answer

The timeline shows overdue obligations, not just one bad night.

  • Process hazard analysis (29 CFR 1910.119(e)(6)): a PHA must be revalidated at least every five years. A 2018 PHA is now roughly six years old. The program is out of compliance independent of the release, and the release is evidence the PHA may have been incomplete.
  • RMP update (40 CFR 68.190): the plan must be reviewed and updated at least once every five years, and within six months of a change that materially affects the process. A 2019 submission was due for update in 2024. Submitting a revised RMP now is mandatory regardless of the release.
  • Compliance audits: the PSM audit is due at least every three years (1910.119(o)) and the RMP audit likewise (68.79); check whether these tracked the stale PHA and RMP cycles.
  • Mechanical integrity (1910.119(j)): a compressor shaft seal is a covered component. The seal failure should trigger a review of the inspection and testing frequency, the seal condition-monitoring regime, spare-parts quality assurance, and whether the same seal design is used on sister machines.

Incident investigation (1910.119(m), mirrored by 68.60). It must be initiated within 48 hours, which in this case has already elapsed if nothing was started the morning of the release. The investigation must be by a team that includes at least one operator of the process and, where relevant, a contract employee; it must establish what happened, the contributing factors including the adequacy of the operating procedures and training, and it must produce findings and recommendations with written resolution and tracking to closure. The final report is due within 12 months.

Do not stop at the seal. Ask why a single seal failure allowed 5,800 lb to escape over 35 minutes - detection, isolation valve placement, and the adequacy of the emergency shutdown procedure belong in the report.

3. Should the release appear in the RMP five-year accident history? Explain the judgment and how it interacts with the stale PHA.

Read the worked answer

Framework. Under 40 CFR 68.42, the five-year accident history includes accidental releases that caused, among other things, on-site deaths, injuries, or significant property damage, or known off-site deaths, injuries, evacuations, sheltering, property damage, or environmental damage.

Applying it. The two employees were treated at a clinic and released. Whether that is a "serious injury" is the genuine judgment call: a hospitalization or lost-time injury clearly qualifies; a treat-and-release may not. Two factors push toward inclusion:

  • The threshold is applied conservatively by most practitioners and by regulators reviewing a plan after an incident. Omitting a release that caused worker injury - from a document that will be read by the same agency that may inspect the site - is a poorer position than including it with a documented rationale.
  • If there was any sheltering-in-place, evacuation, or off-site complaint, the question is settled and the release must be included.

Either way, document the analysis in the file: which criterion you tested, what the medical outcome was, and why you classified it as you did.

Interaction with the PHA. These are not independent findings. The release gives you a concrete, observed failure mode - shaft seal failure leading to an extended release - that a competent PHA should have considered. The correct order of operations is:

  1. Start the incident investigation within 48 hours.
  2. Feed its findings into the PHA revalidation rather than waiting for a routine five-year cycle.
  3. Update the RMP, including the accident history and any revised offsite consequence analysis, and establish a calendar so the five-year cycles for PHA, RMP, and audit never lapse again.

A plan that lists the release but leaves the 2018 PHA unchanged invites the conclusion that the program is paper-only.