Emergency shutdown control systems.

(a) Each transfer system, vaporizer, liquefaction system, and storage system tank must be equipped with an emergency shutdown control system. The control must automatically actuate the shutdown of the component (providing pressure relief as necessary) when any of the following occurs:

(1) Temperatures of the component exceed the limits determined under § 193.2105;

(2) Pressure outside the limits of the maximum and minimum design pressure;

(3) Liquid in receiving vessel reaches the design maximum liquid level;

(4) Gas concentrations in the area of the component exceed 40 percent of the lower flammable limit;

(5) A sudden excessive pressure change or other condition indicating a potentially dangerous condition; and

(6) Presence of fire in area of component.

(b) For cargo transfer systems where all transfer operations are continuously manned and visually supervised by qualified personnel, actuation of the emergency shutdown control system may be manual after devices warn of the events listed in paragraph (a) of this section.

(c) Except for components that operate unattended and are remote from the control center, a reasonable delay may be programmed in emergency shutdown control systems required by this section between warning and automated shutdown to provide for manual response.

(d) Each LNG plant must have a shutdown control system to shut down all operations of the plant safely. The system must be operable at—

(1) The control center; and

(2) In the case of a plant where LNG facilities other than the control center are designed to operate unattended at the site of these facilities.