Lightning protection for oil, gas and hazardous facilities
On a site that holds a flammable or explosive atmosphere, a single spark from a strike or an unbonded potential difference can start a fire or an explosion. That puts the consequence of a strike far above what an ordinary building faces, and it reshapes the whole IEC 62305 assessment. This guide explains why an explosive atmosphere changes everything, how it lifts the loss factors and the protection level, and why equipotential bonding, separation distance and surge protection carry the result.
On a site that holds a flammable or explosive atmosphere, a single spark is the difference between a controlled strike and a fire or an explosion. Lightning is one of the few external events that can put enough energy into a structure to ignite a vapour cloud, a tank vent or a process release, and it can do it through a direct strike, a side flash, or simply a difference in potential between two pieces of metal that were never bonded together. That is why an IEC 62305 assessment of an oil, gas or other hazardous facility is built around keeping any spark away from the explosive atmosphere, not just around protecting the structure that contains it.
The standard and its method do not change for a hazardous site; what changes is the weight of the consequence. The presence of an explosive atmosphere lifts the loss attached to physical damage and to dangerous sparking, pushes the computed risk up, and usually calls for a more demanding protection level. The work that decides the result is the equipotential bonding, the separation distance, and the surge protection on the services that cross into the hazardous zones. This guide explains why an explosive atmosphere changes everything, how it raises the loss factors and the protection level, why bonding and separation carry the assessment, how tanks, vents and flare stacks are handled, and how IEC 62305 sits alongside the hazardous-area frameworks.
Why an explosive atmosphere changes everything
The same IEC 62305 method applies, but three things about a hazardous facility move the assessment away from the ordinary-building case and put ignition, not the building, at the centre of it.
Why the loss factors and the protection level rise
The IEC 62305 risk method builds each risk by multiplying three things: how often a dangerous event occurs, how likely that event is to cause a given type of damage, and how much is lost when the damage happens. For most buildings the loss attached to a strike is modest, because the worst likely outcome is localised fire or some failed equipment. A flammable or explosive atmosphere changes the third term completely. A strike that finds an ignition point can destroy a tank, a process unit or worse, so the loss the standard attaches to physical damage and to dangerous sparking is far higher where there is a risk of explosion.
That higher loss pulls the computed risk up. Because the result has to be brought below the same tolerable level as any other structure, a much larger reduction in risk is needed, and the way the standard delivers it is a more demanding protection level. A higher protection level means a more capable lightning protection system, intercepting a wider range of strikes, together with tighter bonding and separation and coordinated surge protection on the services. The exact level still comes out of the assessment rather than from a blanket rule, but for a structure with a genuine risk of explosion the answer rarely sits at the lenient end.
New to how the risk of loss of human life and the frequency of damage are built and how a protection level is chosen? The IEC 62305-2 risk method sets out how each is assembled from its components, and what is IEC 62305 covers the damage and loss model the risks rest on.
Bonding, separation distance and dangerous sparking
On a hazardous site the protection design is mostly a campaign against one thing: dangerous sparking. When a strike drives a current through the structure, parts of the metalwork rise to different voltages for a moment, and if two parts at different voltages sit close together a spark can jump the gap between them. On an ordinary building that spark is harmless. Near a zone that can hold an explosive atmosphere it is a potential ignition source, so the whole physical-protection scheme is shaped to make sure no such spark can occur where it would matter.
Equipotential bonding is the first answer. Tying tanks, pipework, structural steel, the lightning protection system and the earthing network into a single equipotential system means a strike lifts all of them together, with no voltage difference between them and therefore no gap for a spark to cross. Bonding is what turns a collection of separate metal parts into one body that a strike cannot spark across.
Separation distance handles the parts that cannot be bonded. Where a metal item must stay electrically separate from the protection system, the design keeps enough distance between them that the voltage a strike produces cannot bridge the gap. Getting that distance right, given the geometry and the routing of the strike current, is one of the careful calculations a hazardous-site assessment turns on. IEC 62305-3 carries specific provisions for structures with a risk of explosion that govern how bonding and separation are applied around an explosive atmosphere, and the risk method credits a sound bonding and separation scheme by lowering the probability that a strike causes dangerous sparking.
For how the earthing and bonding network is built and why it underpins everything else, see earthing and bonding under IEC 62305.
Tanks, vents, flare stacks and process structures
A hazardous site is not one box but a collection of very different structures, much like a renewable energy site spread across a wide footprint, and each presents its own exposure and its own ignition risk that the assessment has to treat on its own terms.
IEC 62305 alongside the hazardous-area frameworks
A hazardous facility is governed by more than one framework at once, and it helps to be clear about which does what. The hazardous-area classification, for example the IEC 60079 series, divides the site into zones by how likely an explosive atmosphere is to be present and sets out what the equipment installed in each zone must be able to withstand. It governs the equipment and the zoning. IEC 62305 sits alongside it and governs the lightning threat to those zones: how often a strike could cause a dangerous event, how likely that event is to ignite the atmosphere, and which protection measures bring the risk below the tolerable level.
The two frameworks meet at the boundary. A surge protective device fitted on a line entering a classified zone, or a bonding connection made inside one, has to satisfy both the IEC 62305 requirement that it controls the lightning threat and the hazardous-area requirement that it does not become an ignition source itself. IEC 62305-3 carries specific provisions for structures with a risk of explosion precisely so the lightning protection design lines up with the area classification rather than working against it. The result is one coherent scheme, not two competing ones.
The measures that move the result
For a hazardous site the protection that matters is mostly about preventing ignition. The assessment decides which measures a facility needs and where, so the care lands on the structures and zones that carry the consequence.
Why inspection and maintenance are stricter here
An IEC 62305 assessment is only true while the installed protection stays in the condition it was assessed in, and on a hazardous facility that condition is harder to keep and more costly to lose. A loose bond, a corroded conductor or a separation distance closed up by a later modification would be a minor defect on an office building. On a process unit any one of them can become an ignition source, so the consequence of a lapsed inspection is far higher.
The environment works against the protection too. Outdoor plant on an oil or gas site sits in corrosive, vibrating, weather-exposed conditions that degrade connections faster than an indoor installation. For both reasons the inspection intervals are shorter and the checks more thorough, with particular attention to bonding continuity, the separation distances around the explosive-atmosphere zones, and the condition of conductors and connections that the whole spark-prevention scheme depends on. The maintenance regime is part of what the assessment assumes, not an afterthought to it.
For how the lightning protection zones step the strike environment down as it moves inward, see lightning protection zones (LPZ).
A hazardous site, modelled to the clause
Lumex models a hazardous facility as its structures, zones, incoming services and protection measures, applies the higher loss factors that the risk of explosion calls for, and runs the IEC 62305-2 method across them. It shows how the bonding, the separation distance, the chosen protection level and coordinated surge protection bring the risk below the tolerable level, and it lets an engineer adjust the structures and services and watch the risk move, which is exactly the part of the picture a high-consequence site lives or dies on. Every figure traces back to the clause behind it, so an operator, auditor or insurer can follow the reasoning rather than take a single number on trust.
New to the standard? Start with what is IEC 62305, then see the Lumex platform for how a facility is assessed end to end.