The Exxon Valdex Oil Spill 1989

The Exxon Valdez oil spill (March 24, 1989) was not a process plant disaster, but from a process safety perspective, it is a landmark case in human factors, fatigue management, maintenance of critical safeguards, and emergency response. It spilled roughly 11 million gallons of crude oil into Alaska’s Prince William Sound.

🛳️ The Direct Cause: A Grounding That Should Not Have Happened

The tanker left the Valdez terminal fully loaded, then deviated from the shipping lane to avoid small icebergs. The ship ran aground on Bligh Reef at 12:04 AM.

· The helmsman failed to turn in time – but that was the final error in a chain.

· Critical equipment was bypassed: The Raytheon Collision Avoidance Radar (RAYCAS) was broken and had been inoperable for over a year. The company allowed the ship to sail without it.

· The lookout was not posted – required by rules, but the third mate did not call him to the bridge.

😴 The Human Factor & Work System Failure

The root cause from a process safety view is fatigue and understaffing:

Factor What Happened

Sleep deprivation 

The third mate (on watch) had had only 6 hours of sleep in the previous 48.

Excessive workload 

After the pilot left, the third mate was alone on the bridge for over 3 hours (no lookout, no second officer).

No relief system 

There was no policy to ensure rested watchstanders.

Company pressure 

Sailing late was normal; reporting fatigue was discouraged.

🛡️ Failure of Safety Layers (Like Process Safety Barriers)

Barrier Failure

Bridge manning Required two officers + lookout; only one officer was present.

Collision avoidance radar Broken for a year, not fixed (deferred maintenance).

Traffic separation scheme The ship left the designated lane – no alarm or oversight.

Pilot onboard The harbor pilot left before the most hazardous part of the voyage (iceberg zone).

Vessel Traffic Service (VTS) The Coast Guard radar could see the deviation but did not broadcast a warning.

🌊 Emergency Response Failures (Critical for Process Safety)

· Delay: The company took over 10 hours to begin dispersant application, then stopped due to false concerns.

· No local plan: There was no pre-staged equipment or trained response team in Valdez.

· Equipment not ready: Booms and skimmers were stored far away or in disrepair.

· Command confusion: Exxon, the Coast Guard, and Alaska had overlapping authority with no clear leader.

🧠 Systemic & Cultural Root Causes

· Cost cutting: Reduced crew sizes and deferred radar repair to save money.

· Weak regulation: The Oil Pollution Act (OPA 90) did not yet exist; no required spill response plan or double hulls.

· Normalization of deviance: Skipping the lookout and sailing with broken radar was routine at Exxon. Nothing had gone wrong before.

· Poor safety culture: Exxon’s internal audits had flagged fatigue and manning issues years earlier – no action was taken.

📚 Key Process Safety Lessons (Now Embedded in Law)

The Exxon Valdez directly created OPA 90 (Oil Pollution Act of 1990) and changed maritime safety:

1. Fatigue is a process hazard – Hours-of-service rules and crew rest standards are now regulated.

2. Maintenance of safety-critical equipment – Radar and navigation aids cannot be deferred without formal management of change.

3. Emergency response must be real – Plans, equipment, and drills must be in place before an incident.

4. Double hulls – New tankers must have double hulls to prevent spills from groundings.

5. Vessel Traffic Service authority – The Coast Guard now has enforceable authority over tanker navigation in sensitive waters.

6. “No lookout” is never acceptable – Minimum manning rules are now strictly enforc

In short, the Exxon Valdez did not run aground because of ice, a reef, or even a helmsman’s error. It ran aground because Exxon allowed a tired, single officer to sail a broken ship without a lookout, and the industry had no law requiring a basic spill response.