Lightning protection for oil, gas and hazardous facilities
How an explosive atmosphere lifts the loss factors and the protection level, and why bonding, separation distance and surge protection carry the result on a hazardous site.
On a site that holds a flammable or explosive atmosphere, a single spark is the difference between a controlled strike and a fire or an explosion.
Lightning is one of the few external events that can put enough energy into a structure to ignite a vapour cloud, a tank vent or a process release, and it can do it through a direct strike, a side flash, or simply a difference in potential between two pieces of metal that were never bonded together. That is why an IEC 62305 assessment of an oil, gas or other hazardous facility is built around keeping any spark away from the explosive atmosphere, not just around protecting the structure that contains it.
The standard and its method do not change for a hazardous site; what changes is the weight of the consequence. The presence of an explosive atmosphere lifts the loss attached to physical damage and to dangerous sparking, pushes the computed risk up, and usually calls for a more demanding protection level. The work that decides the result is the equipotential bonding, the separation distance, and the surge protection on the services that cross into the hazardous zones. This guide explains why an explosive atmosphere changes everything, how it raises the loss factors and the protection level, why bonding and separation carry the assessment, how tanks, vents and flare stacks are handled, and how IEC 62305 sits alongside the hazardous-area frameworks.
Why an explosive atmosphere changes everything
The same IEC 62305 method applies, but three things about a hazardous facility move the assessment away from the ordinary-building case and put ignition, not the building, at the centre of it.
A spark is the whole problem
Where there is a flammable atmosphere, the danger is not the strike current itself but any spark it produces. A direct strike, a side flash, or a potential difference across an unbonded gap can ignite a fire or an explosion, so the protection is aimed at preventing the spark, everywhere a release could occur.
The consequence is severe
A strike that would scorch an ordinary roof can take the whole inventory of a tank or a process unit if it finds an ignition point. That raises the loss the assessment attaches to a dangerous event, which lifts the computed risk and usually demands a stronger protection level than a non-hazardous building of the same size.
Bonding leads the design
Tanks, pipework, steel, the protection system and the earthing network all have to be tied into one equipotential system so a strike cannot open a gap for a spark. Where bonding is not possible, a separation distance has to keep the parts far enough apart that no spark can jump. This is the core of the protection, not a detail.
Why the loss factors and the protection level rise
The IEC 62305 risk method builds each risk by multiplying three things: how often a dangerous event occurs, how likely that event is to cause a given type of damage, and how much is lost when the damage happens. For most buildings the loss attached to a strike is modest, because the worst likely outcome is localised fire or some failed equipment. A flammable or explosive atmosphere changes the third term completely. A strike that finds an ignition point can destroy a tank, a process unit or worse, so the loss the standard attaches to physical damage and to dangerous sparking is far higher where there is a risk of explosion.
That higher loss pulls the computed risk up. Because the result has to be brought below the same tolerable level as any other structure, a much larger reduction in risk is needed, and the way the standard delivers it is a more demanding protection level. A higher protection level means a more capable lightning protection system, intercepting a wider range of strikes, together with tighter bonding and separation and coordinated surge protection on the services. The exact level still comes out of the assessment rather than from a blanket rule, but for a structure with a genuine risk of explosion the answer rarely sits at the lenient end.
New to how R and the frequency of damage are built, and how a protection level is chosen? The IEC 62305-2 risk method sets out how each is assembled from its components, and what is IEC 62305 covers the damage and loss model the risks rest on.
Bonding, separation distance and dangerous sparking
On a hazardous site the protection design is mostly a campaign against one thing: dangerous sparking. When a strike drives a current through the structure, parts of the metalwork rise to different voltages for a moment, and if two parts at different voltages sit close together a spark can jump the gap between them. On an ordinary building that spark is harmless. Near a zone that can hold an explosive atmosphere it is a potential ignition source, so the whole physical-protection scheme is shaped to make sure no such spark can occur where it would matter.
Equipotential bonding is the first answer. Tying tanks, pipework, structural steel, the lightning protection system and the earthing network into a single equipotential system means a strike lifts all of them together, with no voltage difference between them and therefore no gap for a spark to cross. Bonding is what turns a collection of separate metal parts into one body that a strike cannot spark across.
Separation distance handles the parts that cannot be bonded. Where a metal item must stay electrically separate from the protection system, the design keeps enough distance between them that the voltage a strike produces cannot bridge the gap. Getting that distance right, given the geometry and the routing of the strike current, is one of the careful calculations a hazardous-site assessment turns on. IEC 62305-3 carries specific provisions for structures with a risk of explosion that govern how bonding and separation are applied around an explosive atmosphere, and the risk method credits a sound bonding and separation scheme by lowering the probability that a strike causes dangerous sparking.
For how the earthing and bonding network is built and why it underpins everything else, see earthing and bonding under IEC 62305.
Tanks, vents, flare stacks and process structures
A hazardous site is not one box but a collection of very different structures, much like a renewable energy site spread across a wide footprint, and each presents its own exposure and its own ignition risk that the assessment has to treat on its own terms.
Storage tanks
A metal tank can often serve as its own air termination and down conductor when its shell thickness, joints and bonding meet the requirements, so the strike current flows safely through the shell. The care goes to the vents and any point where a flammable mixture can escape, because that is where an ignition would do the most harm.
Vents and flare stacks
Tall, exposed, and deliberately releasing combustible gas, these are high-priority interception points. The assessment looks closely at how a strike is caught and led to ground away from the release point, and at the bonding that keeps any spark away from the gas at the tip.
Process structures
Reactors, columns, pipe racks and their dense instrumentation carry a great deal of metalwork close together, all of which has to be brought into the bonding scheme so a strike cannot open a potential difference anywhere among it.
Hazardous zones
The areas classified as able to hold an explosive atmosphere are where every spark matters most. The protection design steps the strike environment and the bonding scheme around these zones so the highest care lands exactly where the ignition consequence is greatest.
Where the atmosphere is flammable, the consequence of a strike is measured in lives, not repairs.
IEC 62305 alongside the hazardous-area frameworks
A hazardous facility is governed by more than one framework at once, and it helps to be clear about which does what. The hazardous-area classification, for example the IEC 60079 series, divides the site into zones by how likely an explosive atmosphere is to be present and sets out what the equipment installed in each zone must be able to withstand. It governs the equipment and the zoning. IEC 62305 sits alongside it and governs the lightning threat to those zones: how often a strike could cause a dangerous event, how likely that event is to ignite the atmosphere, and which protection measures bring the risk below the tolerable level.
The two frameworks meet at the boundary. A surge protective device fitted on a line entering a classified zone, or a bonding connection made inside one, has to satisfy both the IEC 62305 requirement that it controls the lightning threat and the hazardous-area requirement that it does not become an ignition source itself. IEC 62305-3 carries specific provisions for structures with a risk of explosion precisely so the lightning protection design lines up with the area classification rather than working against it. The result is one coherent scheme, not two competing ones.
The measures that move the result
For a hazardous site the protection that matters is mostly about preventing ignition. The assessment decides which measures a facility needs and where, so the care lands on the structures and zones that carry the consequence.
A thorough bonding network
An equipotential system tying tanks, pipework, steel, the protection system and the earthing network together is what stops a strike from opening a dangerous potential difference. On a hazardous site this is usually the single most important set of measures, because dangerous sparking is the main ignition path.
Separation distance where bonding cannot reach
For metalwork that must stay electrically separate, the design holds enough distance that the voltage a strike produces cannot bridge the gap. The separation calculation is one of the things a hazardous-site assessment turns on, and it has to be checked against the real geometry.
Coordinated SPDs on incoming services
Power, control and instrumentation lines crossing into a hazardous zone get surge protective devices sized for the chosen protection level and installed to respect the bonding scheme, so a strike-induced surge is clamped without the device itself introducing a spark risk.
A protection level matched to the consequence
Because the loss from an explosion is so high, the assessment usually calls for a strong protection level. The numbers, not a blanket rule, set how capable the interception, bonding and separation have to be, so the effort lands where the explosion risk is real.
Why inspection and maintenance are stricter here
An IEC 62305 assessment is only true while the installed protection stays in the condition it was assessed in, and on a hazardous facility that condition is harder to keep and more costly to lose. A loose bond, a corroded conductor or a separation distance closed up by a later modification would be a minor defect on an office building. On a process unit any one of them can become an ignition source, so the consequence of a lapsed inspection is far higher.
The environment works against the protection too. Outdoor plant on an oil or gas site sits in corrosive, vibrating, weather-exposed conditions that degrade connections faster than an indoor installation. For both reasons the inspection intervals are shorter and the checks more thorough, with particular attention to bonding continuity, the separation distances around the explosive-atmosphere zones, and the condition of conductors and connections that the whole spark-prevention scheme depends on. The maintenance regime is part of what the assessment assumes, not an afterthought to it.
For how the lightning protection zones step the strike environment down as it moves inward, see lightning protection zones (LPZ).
A hazardous site, modelled to the clause
Lumex models a hazardous facility as its structures, zones, incoming services and protection measures, applies the higher loss factors that the risk of explosion calls for, and runs the IEC 62305-2 method across them. It shows how the bonding, the separation distance, the chosen protection level and coordinated surge protection bring the risk below the tolerable level, and it lets an engineer adjust the structures and services and watch the risk move, which is exactly the part of the picture a high-consequence site lives or dies on. Every figure traces back to the clause behind it, so an operator, auditor or insurer can follow the reasoning rather than take a single number on trust.
New to the standard? Start with what is IEC 62305, then see the Lumex platform for how a facility is assessed end to end.
Questions answered
Why is lightning protection critical for oil, gas and hazardous facilities?
How does an explosive atmosphere change the IEC 62305 risk assessment?
What is dangerous sparking and why does it dominate hazardous-site protection?
Why is equipotential bonding so important on oil and gas sites?
How are storage tanks, vents and flare stacks protected from lightning?
Does IEC 62305 cover structures with a risk of explosion?
How is surge protection chosen for incoming services into a hazardous zone?
Why are inspection and maintenance stricter on hazardous facilities?
What protection level do hazardous facilities usually need?
Does Lumex handle lightning risk assessments for oil, gas and hazardous sites?
Lumex computes the IEC 62305-2 method and shows the working. It does not certify a structure. You may not issue or submit a Lumex output until a competent person, qualified where the structure is located, has reviewed the inputs and the result and signed it.
The tolerable risk in IEC 62305-2 is not a fixed constant. Clause 7.3 NOTE 1 gives RT = 1×10-5 per year as a representative value of tolerable risk and adds that another value may be set once the case has been investigated in detail. Printed p.12 then lets national or local regulations fix RT, the tolerable frequency of damage FT, and the Annex A, B, C and E calculation rules and parameter values. Every Lumex assessment states the jurisdiction it was computed under and the values that applied.