Home
gpo.gov
govinfo.gov

e-CFR Navigation Aids

Browse

Simple Search

Advanced Search

 — Boolean

 — Proximity

 

Search History

Search Tips

Corrections

Latest Updates

User Info

FAQs

Agency List

Incorporation By Reference

eCFR logo

Related Resources

Electronic Code of Federal Regulations

We invite you to try out our new beta eCFR site at https://ecfr.federalregister.gov. We???ve made big changes to make the eCFR easier to use. Be sure to leave feedback using the Help button on the bottom right of each page!

e-CFR data is current as of August 6, 2020

Title 30Chapter IISubchapter BPart 250Subpart H → Subject Group


Title 30: Mineral Resources
PART 250—OIL AND GAS AND SULPHUR OPERATIONS IN THE OUTER CONTINENTAL SHELF
Subpart H—Oil and Gas Production Safety Systems


Subsea and Subsurface Safety Systems—Subsea Trees

§250.825   Subsea tree subsurface safety devices—general.

(a) For wells using subsea (wet) trees or for which you intend to install subsea trees, you must equip all tubing installations open to hydrocarbon-bearing zones with subsurface safety devices that will shut off the flow from the well in the event of an emergency. You must also install flow couplings above and below the subsurface safety devices. For instances where the well at issue is incapable of natural flow, you may seek District Manager approval for using alternative procedures or equipment, if you propose to use a subsea safety system that is not capable of shutting off the flow from the well in the event of an emergency. Subsurface safety devices include the following and any associated safety valve lock and landing nipple:

(1) A surface-controlled SSSV;

(2) An injection valve;

(3) A tubing plug; and

(4) A tubing/annular subsurface safety device.

(b) After installing the subsea tree, but before the rig or installation vessel leaves the area, you must test all valves and sensors to ensure that they are operating as designed and meet all the conditions specified in this subpart.

§250.826   Specifications for SSSVs—subsea trees.

All SSSVs, safety valve locks, and landing nipples installed on the OCS must conform to the requirements specified in §§250.801 through 250.803 and any Deepwater Operations Plan (DWOP) required by §§250.286 through 250.295.

§250.827   Surface-controlled SSSVs—subsea trees.

You must equip all tubing installations open to a hydrocarbon-bearing zone that is capable of natural flow with a surface-controlled SSSV, except as specified in §§250.829 and 250.830. The surface controls must be located on the host facility.

§250.828   Design, installation, and operation of SSSVs—subsea trees.

You must design, install, and operate (including repair, maintain, and test) an SSSV to ensure its reliable operation.

(a) You must install the SSSV at a depth at least 100 feet below the mudline. When warranted by conditions, such as unstable bottom conditions, permafrost, hydrate formation, or paraffin problems, the District Manager may approve an alternate setting depth on a case-by-case basis.

(b) The well must not be open to flow while an SSSV is inoperable, unless specifically approved by the District Manager in an APM.

(c) You must design, install, maintain, inspect, repair, and test all SSSVs in accordance with your Deepwater Operations Plan (DWOP) and ANSI/API RP 14B (incorporated by reference in §250.198). For additional SSSV testing requirements, refer to §250.880.

[81 FR 60918, Sept. 7, 2016, as amended at 83 FR 49257, Sept. 28, 2018]

§250.829   Subsurface safety devices in shut-in wells—subsea trees.

(a) You must equip all new subsea tree completions (perforated but not placed on production) and completions shut-in for a period of 6 months with one of the following:

(1) A pump-through-type tubing plug;

(2) An injection valve capable of preventing backflow; or

(3) A surface-controlled SSSV, provided the surface control has been rendered inoperative. For purposes of this section, a surface-controlled SSSV is considered inoperative if, for a direct hydraulic control system, you have bled the hydraulics from the control line and have isolated it from the hydraulic control pressure. If your controls employ an electro-hydraulic control umbilical and the hydraulic control pressure to the individual well cannot be isolated, a surface-controlled SSSV is considered inoperative if you perform the following:

(i) Disable the control function of the surface-controlled SSSV within the logic of the programmable logic controller which controls the subsea well;

(ii) Place a pressure alarm high on the control line to the surface-controlled SSSV of the subsea well; and

(iii) Close the USV and at least one other tree valve on the subsea well.

(b) When warranted by conditions, such as unstable bottom conditions, permafrost, hydrate formation, and paraffin problems, the District Manager must approve the setting depth of the subsurface safety device for a shut-in well on a case-by-case basis.

§250.830   Subsurface safety devices in injection wells—subsea trees.

You must install a surface-controlled SSSV or an injection valve capable of preventing backflow in all injection wells. This requirement is not applicable if the District Manager determines that the well is incapable of natural flow. You must verify the no-flow condition of the well annually.

§250.831   Alteration or disconnection of subsea pipeline or umbilical.

If a necessary alteration or disconnection of the pipeline or umbilical of any subsea well would affect your ability to monitor casing pressure or to test any subsea valves or equipment, you must contact the appropriate District Office at least 48 hours in advance and submit a repair or replacement plan to conduct the required monitoring and testing. You must not alter or disconnect until the repair or replacement plan is approved.

§250.832   Additional safety equipment—subsea trees.

(a) You must equip all tubing installations that have a wireline- or pump down-retrievable subsurface safety device installed after May 31, 1988, with a landing nipple, with flow couplings, or other protective equipment above and below it to provide for the setting of the device.

(b) The control system for all surface-controlled SSSVs must be an integral part of the platform ESD.

(c) In addition to the activation of the ESD by manual action on the platform, the system may be activated by a signal from a remote location.

§250.833   Specification for underwater safety valves (USVs).

All USVs, including those designated as primary or secondary, and any alternate isolation valve (AIV) that acts as a USV, if applicable, and their actuators, must conform to the requirements specified in §§250.801 through 250.803. A production master or wing valve may qualify as a USV under ANSI/API Spec. 6A and API Spec. 6AV1 (both incorporated by reference in §250.198).

(a) Primary USV (USV1). You must install and designate one USV on a subsea tree as the USV1. The USV1 must be located upstream of the choke valve. As provided in paragraph (b) of this section, you must inform BSEE if the primary USV designation changes.

(b) Secondary USV (USV2). You may equip your tree with two or more valves qualified to be designated as a USV, one of which may be designated as the USV2. If the USV1 fails to operate properly or exhibits a leakage rate greater than allowed in §250.880, you must notify the appropriate District Office and designate the USV2 or another qualified valve (e.g., an AIV) that meets all the requirements of this subpart for USVs as the USV1. The USV2 must be located upstream of the choke.

[81 FR 60918, Sept. 7, 2016, as amended at 83 FR 49257, Sept. 28, 2018]

§250.834   Use of USVs.

You must install, maintain, inspect, repair, and test any valve designated as the primary USV in accordance with this subpart, your DWOP (as specified in §§250.286 through 250.295), and API STD 6AV2 (incorporated by reference in §250.198). For additional USV testing requirements, refer to §250.880.

[83 FR 49257, Sept. 28, 2018]

§250.835   Specification for all boarding shutdown valves (BSDVs) associated with subsea systems.

You must install a BSDV on the pipeline boarding riser. All new BSDVs and any BSDVs removed from service for remanufacturing or repair and their actuators installed on the OCS must meet the requirements specified in §§250.801 through 250.803. In addition, you must:

(a) Ensure that the internal design pressure(s) of the pipeline(s), riser(s), and BSDV(s) is fully rated for the maximum pressure of any input source and complies with the design requirements set forth in subpart J, unless BSEE approves an alternate design.

(b) Use a BSDV that is fire rated for 30 minutes, and is pressure rated for the maximum allowable operating pressure (MAOP) approved in your pipeline application.

(c) Locate the BSDV within 10 feet of the first point of access to the boarding pipeline riser (i.e., within 10 feet of the edge of platform if the BSDV is horizontal, or within 10 feet above the first accessible working deck, excluding the boat landing and above the splash zone, if the BSDV is vertical).

(d) Install a temperature safety element (TSE) and locate it within 5 feet of each BSDV.

§250.836   Use of BSDVs.

You must install, inspect, maintain, repair, and test all new BSDVs, as well as all BSDVs that you remove from service for remanufacturing or repair, in accordance with API STD 6AV2 (incorporated by reference in §250.198) for SSVs. If any BSDV does not operate properly or if any gas fluid and/or liquid fluid flow is observed during the leakage test, as described in §250.880, you must shut-in all sources to the BSDV and immediately repair or replace the valve.

[83 FR 49257, Sept. 28, 2018]

§250.837   Emergency action and safety system shutdown—subsea trees.

(a) If your facility is impacted or will potentially be impacted by an emergency situation (e.g., an impending National Weather Service-named tropical storm or hurricane, ice events, or post-earthquake), you must shut-in all subsea wells unless otherwise approved by the District Manager. A shut-in is defined as a closed BSDV, USV, GLSDV, and surface-controlled SSSV.

(b) When operating a mobile offshore drilling unit (MODU) or other type of workover or intervention vessel in an area with subsea infrastructure, you must:

(1) Suspend production from all wells that could be affected by a dropped object, including upstream wells that flow through the same pipeline; or

(2) Establish direct, real-time communications between the MODU or other type of workover or intervention vessel and the production facility control room and develop a dropped objects plan, as required in §250.714. If an object is dropped, you must immediately secure the well directly under the MODU or other type of workover or intervention vessel while simultaneously communicating with the platform to shut-in all affected wells. You must also maintain without disruption, and continuously verify, communication between the production facility and the MODU or other type of workover or intervention vessel. If communication is lost between the MODU or other type of workover or intervention vessel and the platform for 20 or more minutes, you must shut-in all wells that could be affected by a dropped object.

(c) In the event of an emergency, you must operate your production system according to the valve closure times in the applicable tables in §§250.838 and 250.839 for the following conditions:

(1) Process upset. In the event an upset in the production process train occurs downstream of the BSDV, you must close the BSDV in accordance with the applicable tables in §§250.838 and 250.839. You may reopen the BSDV to blow down the pipeline to prevent hydrates, provided you have secured the well(s) and ensured adequate protection.

(2) Pipeline pressure safety high and low (PSHL) sensor. In the event that either a high or a low pressure condition is detected by a PSHL sensor located upstream of the BSDV, you must secure the affected well and pipeline, and all wells and pipelines associated with a dual or multi pipeline system, by closing the BSDVs, USVs, and surface-controlled SSSVs in accordance with the applicable tables in §§250.838 and 250.839. You must obtain approval from the appropriate District Manager to resume production in the unaffected pipeline(s) of a dual or multi pipeline system. If the PSHL sensor activation was a false alarm, you may return the wells to production without contacting the appropriate District Manager.

(3) ESD/TSE (platform). In the event of an ESD activation that is initiated because of a platform ESD or platform TSE not associated with the BSDV, you must close the BSDV, USV, and surface-controlled SSSV in accordance with the applicable tables in §§250.838 and 250.839.

(4) Subsea ESD (platform) or BSDV TSE. In the event of an emergency shutdown activation that is initiated by the host platform due to an abnormal condition subsea, or a TSE associated with the BSDV, you must close the BSDV, USV, and surface-controlled SSSV in accordance with the applicable tables in §§250.838 and 250.839.

(5) Subsea ESD (MODU). In the event of an ESD activation that is initiated by a dropped object from a MODU or other type of workover or intervention vessel, you must secure all wells in the proximity of the MODU or other type of workover or intervention vessel by closing the USVs and surface-controlled SSSVs in accordance with the applicable tables in §§250.838 and 250.839. You must notify the appropriate District Manager before resuming production.

(d) Following an ESD or fire, you must bleed your low pressure (LP) and high pressure (HP) hydraulic systems in accordance with the applicable tables in §§250.838 and 250.839 to ensure that the valves are locked out of service and cannot be reopened inadvertently.

[81 FR 60918, Sept. 7, 2016, as amended at 83 FR 49257, Sept. 28, 2018]

§250.838   What are the maximum allowable valve closure times and hydraulic bleeding requirements for an electro-hydraulic control system?

(a) If you have an electro-hydraulic control system, you must:

(1) Design the subsea control system to meet the valve closure times listed in paragraphs (b) and (d) of this section or your approved DWOP; and

(2) Verify the valve closure times upon installation. The District Manager may require you to verify the closure time of the USV(s) through visual authentication by diver or ROV.

(b) You must comply with the maximum allowable valve closure times and hydraulic system bleeding requirements listed in the following table or your approved DWOP as long as communication is maintained with the platform or with the MODU or other type of workover vessel:

Valve Closure Timing, Electro-Hydraulic Control System

If you have the following.  .  .Your pipeline BSDV must.  .  .Your USV1 must.  .  .Your USV2 must.  .  .Your alternate isolation valve must.  .  .Your surface-controlled SSSV must.  .  .Your LP
hydraulic
system must.  .  .
Your HP
hydraulic
system must.  .  .
(1) Process upsetClose within 45 seconds after sensor activation[no requirements][no requirements][no requirements][no requirements].
(2) Pipeline PSHLClose within 45 seconds after sensor activationClose one or more valves within 2 minutes and 45 seconds after sensor activation. Close the designated USV1 within 20 minutes after sensor activation.Close within 60 minutes after sensor activation. If you use a 60-minute manual resettable timer, you may continue to reset the time for closure up to a maximum of 24 hours total[no requirements]Initiate unrestricted bleed within 24 hours after sensor activation.
(3) ESD/TSE (Platform)Close within 45 seconds after ESD or sensor activationClose within 5 minutes after ESD or sensor activation. If you use a 5-minute resettable timer, you may continue to reset the time for closure up to a maximum of 20 minutes totalClose within 20 minutes after ESD or sensor activation.Close within 20 minutes after ESD or sensor activation. If you use a 20-minute manual resettable timer, you may continue to reset the time for closure up to a maximum of 60 minutes totalInitiate unrestricted bleed within 60 minutes after ESD or sensor activation. If you use a 60-minute manual resettable timer you must initiate unrestricted bleed within 24 hoursInitiate unrestricted bleed within 60 minutes after ESD or sensor activation. If you use a 60-minute manual resettable timer you must initiate unrestricted bleed within 24 hours.
(4) Subsea ESD (Platform) or BSDV TSEClose within 45 seconds after ESD or sensor activationClose one or more valves within 2 minutes and 45 seconds after ESD or sensor activation. Close all tree valves within 10 minutes after ESD or sensor activationClose within 10 minutes after ESD or sensor activationInitiate unrestricted bleed within 60 minutes after ESD or sensor activationInitiate unrestricted bleed within 60 minutes after ESD or sensor activation.
(5) Subsea ESD (MODU or other type of workover vessel, Dropped object)[no requirements]Initiate valve closure immediately. You may allow for closure of the tree valves immediately prior to closure of the surface-controlled SSSV if desired.Initiate unrestricted bleed immediatelyInitiate
unrestricted bleed within 10 minutes after ESD activation.

(c) If you have an electro-hydraulic control system and experience a loss of communications (EH Loss of Comms), you must comply with the following:

(1) If you can meet the EH Loss of Comms valve closure timing conditions specified in the table in paragraph (d) of this section, you must notify the appropriate District Office within 12 hours of detecting the loss of communication.

(2) If you cannot meet the EH Loss of Comms valve closure timing conditions specified in the table in paragraph (d) of this section, you must notify the appropriate District Office immediately after detecting the loss of communication. You must shut-in production by initiating a bleed of the low pressure (LP) hydraulic system or the high pressure (HP) hydraulic system within 120 minutes after loss of communication. You must bleed the other hydraulic system within 180 minutes after loss of communication.

(3) You must obtain approval from the appropriate District Manager before continuing to produce after loss of communication when you cannot meet the EH Loss of Comms valve closure times specified in the table in paragraph (d) of this section. In your request, include an alternate valve closure timing table that your system is able to achieve. The appropriate District Manager may also approve an alternate hydraulic bleed schedule to allow for hydrate mitigation and orderly shut-in.

(d) If you experience a loss of communications, you must comply with the maximum allowable valve closure times and hydraulic system bleeding requirements listed in the following table or your approved DWOP:

Valve Closure Timing, Electro-Hydraulic Control System With Loss of Communication

If you have the following.  .  .Your pipeline
BSDV must.  .  .
Your USV1 must.  .  .Your USV2 must.  .  .Your alternate isolation valve must.  .  .Your surface-controlled SSSV must.  .  .Your LP
hydraulic
system must.  .  .
Your HP
hydraulic
system must.  .  .
(1) Process upsetClose within 45 seconds after sensor activation[no requirements][no requirements][no requirements][no requirements].
(2) Pipeline PSHLClose within 45 seconds after sensor activationInitiate closure when LP hydraulic system is bled (close valves within 5 minutes after sensor activation).Initiate closure when HP hydraulic system is bled (close within 24 hours after sensor activation)Initiate unrestricted bleed immediately, concurrent with sensor activationInitiate unrestricted bleed within 24 hours after sensor activation.
(3) ESD/TSE (Platform)Close within 45 seconds after ESD or sensor activationInitiate closure when LP hydraulic system is bled (close valves within 20 minutes after ESD or sensor activation).Initiate closure when HP hydraulic system is bled (close within 60 minutes after ESD or sensor activation)Initiate unrestricted bleed concurrent with BSDV closure (bleed within 20 minutes after ESD or sensor activation)Initiate unrestricted bleed within 60 minutes after ESD or sensor activation.
(4) Subsea ESD (Platform) or BSDV TSEClose within 45 seconds after ESD or sensor activationInitiate closure when LP hydraulic system is bled (close valves within 5 minutes after ESD or sensor activation).Initiate closure when HP hydraulic system is bled (close within 20 minutes after ESD or sensor activation)Initiate unrestricted bleed immediatelyInitiate unrestricted bleed immediately, allowing for surface-controlled SSSV closure.
(5) Subsea ESD (MODU or other type of workover vessel), Dropped object[no requirements]Initiate closure immediately. You may allow for closure of the tree valves immediately prior to closure of the surface-controlled SSSV if desired.Initiate unrestricted bleed immediatelyInitiate unrestricted bleed immediately.

§250.839   What are the maximum allowable valve closure times and hydraulic bleeding requirements for a direct-hydraulic control system?

(a) If you have a direct-hydraulic control system, you must:

(1) Design the subsea control system to meet the valve closure times listed in this section or your approved DWOP; and

(2) Verify the valve closure times upon installation. The District Manager may require you to verify the closure time of the USV(s) through visual authentication by diver or ROV.

(b) You must comply with the maximum allowable valve closure times and hydraulic system bleeding requirements listed in the following table or your approved DWOP:

Valve Closure Timing, Direct-Hydraulic Control System

If you have the following.  .  .Your pipeline
BSDV must.  .  .
Your USV1 must.  .  .Your USV2 must.  .  .Your alternate isolation valve must.  .  .Your surface-controlled SSSV must.  .  .Your LP
hydraulic
system must.  .  .
Your HP
hydraulic
system must.  .  .
(1) Process upsetClose within 45 seconds after sensor activation[no requirements][no requirements][no requirements][no requirements]
(2) Flowline PSHLClose within 45 seconds after sensor activationClose one or more valves within 2 minutes and 45 seconds after sensor activation. Close the designated USV1 within 20 minutes after sensor activation.Close within 24 hours after sensor activationComplete bleed of USV1, USV2, and the AIV within 20 minutes after sensor activationComplete bleed within 24 hours after sensor activation.
(3) ESD/TSE (Platform)Close within 45 seconds after ESD or sensor activationClose all valves within 20 minutes after ESD or sensor activation.Close within 60 minutes after ESD or sensor activationComplete bleed of USV1, USV2, and the AIV within 20 minutes after ESD or sensor activationComplete bleed within 60 minutes after ESD or sensor activation.
(4) Subsea ESD (Platform) or BSDV TSEClose within 45 seconds after ESD or sensor activationClose one or more valves within 2 minutes and 45 seconds after ESD or sensor activation. Close all tree valves within 10 minutes after ESD or sensor activation.Close within 10 minutes after ESD or sensor activationComplete bleed of USV1, USV2, and the AIV within 10 minutes after ESD or sensor activationComplete bleed within 10 minutes after ESD or sensor activation.
(5) Subsea ESD (MODU or other type of workover vessel), Dropped object[no requirements]Initiate closure immediately. If desired, you may allow for closure of the tree valves immediately prior to closure of the surface-controlled SSSV.Initiate unrestricted bleed immediatelyInitiate unrestricted bleed immediately.

Need assistance?