NFPA 780 Annex L, section by section
A section by section guide to the 2026 edition's risk method. It names the table behind every input, sets out what changed from 2020, and shows where assessments usually go wrong.
NFPA 780 Annex L is the informative lightning risk assessment of NFPA 780-2026. It helps you decide whether a structure needs a lightning protection system in two steps: a quick screen comparing ND with NC (Section L.5), then a detailed method of up to four risks, R1 to R4 (Section L.6). It is not mandatory unless an AHJ, insurer or contract adopts it.
Edition covered: NFPA 780-2026, Annex L, checked against the 2026 text in September 2026. This guide cites every section, equation and table but does not reproduce the tables, so buy the standard from the NFPA for design and certification. Lumex is independent of the NFPA.
Is Annex L mandatory?
No. The opening note of Annex L in NFPA 780-2026 says the annex sits outside the requirements of the standard and is there for information. Skipping it is not a breach of NFPA 780, and a favourable result does not by itself excuse anyone from protecting a structure.
The annex gains force when an authority having jurisdiction (AHJ), an insurer or a client specification calls for it by name. Two body clauses also accept a risk assessment as grounds for a departure: 7.4.1 (hazardous locations at operating facilities) and 8.1.1 (explosives structures). A.8.1 also points to Annex L for when an AHJ might omit protection at an explosives facility.
Unlike the 2020 text, L.1 in the 2026 edition says the annex does not override federal, state or local AHJ requirements. L.1.1.1 ranks statutory, regulatory and insurance requirements above whatever the assessment says. And L.1.1 names situations where protection deserves serious thought whatever the numbers show: large crowds, services that must keep running, frequent lightning, tall isolated structures, explosive or flammable contents, and irreplaceable cultural heritage. For state and building codes, see is lightning protection required by code.
How NFPA 780 Annex L is organised
Six sections. The first four set up the lightning threat and the structure's exposure; the last two are the two ways to reach a decision.
| Section (NFPA 780-2026) | What it does |
|---|---|
| L.1 General | Who the method is for, when to protect regardless, the sources of damage S1 to S4 (L.1.3.1) and the causes D1d, D1t, D2 and D3 (L.1.3.2) |
| L.2 Density | The lightning ground-strike density NSG (Figure L.2.1) and the flash density conversion (L.2.2) |
| L.3 Threat | Equation (L.3) for ND, the expected strikes to the structure per year |
| L.4 Collection area | Equation (L.4.1.1) for AD, taller parts in Figures L.4.1.2(a) and (b), the location factor in Table L.4.2, overlapping areas in L.4.3 and L.4.4 |
| L.5 Simplified | Equation (L.5.1.1) for NC, coefficients C2 to C5 in Tables L.5.1.2(a) to (d), the decision in L.5.2.1, a summary sheet in Table L.5.2.2, critical facilities in L.5.3 |
| L.6 Detailed | Tolerable risk (Table L.6.2), the types of risk R1 to R4, one or more per structure (L.6.3), eight components (L.6.4, Table L.6.6), the procedure (L.6.5), events, probabilities and losses (L.6.6), thirteen factor tables (L.6.7), a worksheet (Figure L.6.8) |
Flash density or strike point density? 2026 against 2020
NFPA 780-2026 uses the lightning ground-strike density, NSG: the number of points per square kilometre per year where lightning reaches the ground (L.2.1), read from the map in Figure L.2.1. The equations of L.3 and L.6.6.1 call the same input the ground strike-point density. The 2020 edition used the lightning flash density, NG: flashes to ground per square kilometre per year, read from its Figure L.2.
The difference is real, not a relabelling. A single flash can reach the ground at more than one point, so the two densities differ for the same place. Where only a flash density is available, L.2.2 of the 2026 edition converts it by multiplying by 1.7. Skip that step and every event count (ND, NM, NL, NI) comes out smaller by the same factor, which flatters the result.
| Input | NFPA 780-2020 Annex L | NFPA 780-2026 Annex L |
|---|---|---|
| Lightning density | Flash density NG (L.2, Figure L.2) | Strike-point density NSG (L.2.1, Figure L.2.1) |
| Only flash density known | Not applicable, flash density is the input | Multiply by 1.7 (L.2.2) |
| Reach of the area for strikes near the structure, AM | 500 m around the perimeter (L.6.6.1.2) | 350 m around the perimeter (L.6.6.1.2) |
| Critical facilities | No such section | Listed in L.5.3.1, with the L.5.3.2 recommendation |
A 2020 and a 2026 Annex L report for the same building will not agree, so make the report checkable: state the edition on the cover, the source of NSG, and each tolerable value used with who set it (L.6.2). The rest of the changes are in what changed in NFPA 780-2026.
The simplified assessment: ND against NC
The simplified assessment of NFPA 780-2026 is one comparison between two frequencies. If the expected strikes to the structure per year, ND, do not exceed the tolerable strike frequency NC, L.5.2.1 says protection can be optional. If ND is higher, the annex recommends one.
ND, the threat side. Equation (L.3) multiplies three things and scales the product by 10⁻⁶ to turn square metres into square kilometres: the strike-point density NSG, the equivalent collection area AD, and the location factor CD. For a rectangular building, equation (L.4.1.1) builds AD from the length, width and height. The area is bounded by a line falling from the top of the structure at a slope of 1 to 3 all the way round (L.4.1). Figures L.4.1.2(a) and (b) handle a structure with a taller part. CD comes from Table L.4.2, which looks at what stands within three times the height of the structure: it runs from 0.25 for a building surrounded by taller neighbours or trees up to 2 for an isolated building on a hilltop.
NC, the tolerance side. Equation (L.5.1.1) divides a default tolerable frequency of property losses, 1.5 × 10⁻³, by a coefficient C. C is the product of four structural coefficients, each read from its own table: C2 for how the structure and its roof are built (Table L.5.1.2(a)), C3 for the value and combustibility of the contents (Table L.5.1.2(b)), C4 for occupancy and ease of evacuation (Table L.5.1.2(c)), and C5 for the consequence of a strike, from no need for continuity through to harm to the environment (Table L.5.1.2(d)). The larger C is, the smaller the tolerance.
What a finished screen shows. Table L.5.2.2 sets the screen out as three rows: AD from length, width and height; ND from the density, AD and CD; and NC from C2 to C5. A completed sheet records those inputs, the two frequencies and one verdict, optional or recommended. For a critical facility, add the L.5.3 outcome below.
The detailed assessment: up to four risks, eight components
The detailed method of NFPA 780-2026 asks which of the four types of loss matter for the structure (one or more, L.6.3), builds a risk for each from the components that apply, and judges each on its own.
| Risk (L.6.3) | Loss it covers | Components summed (L.6.5) | Default tolerable value (Table L.6.2) |
|---|---|---|---|
| R1 | Loss of life or injury | RA, RB, RU, RV; plus RC, RM, RW, RZ only where there is a risk of explosion, life-critical electrical equipment such as in a hospital, or internal systems whose failure puts life in immediate danger | 10⁻⁵ per year |
| R2 | Loss of service | From the structure: RB, RC, RM. From services: RV, RW, RZ | 10⁻³ per year |
| R3 | Loss of historical significance | RB, RV | 10⁻³ per year |
| R4 | Loss of economic value | The same six as R2, plus RA and RU only where animals could be hurt | None printed |
Strikes to and near the structure
A direct strike gives RA (injury from touch and step voltages), RB (physical damage such as fire) and RC (internal systems fail). A strike close by gives RM, internal systems failing from the induced surge.
Strikes to and near incoming services
A strike to a power or telecom line entering the structure gives RU (injury), RV (physical damage) and RW (internal systems fail). A strike near that line gives RZ.
L.6.5 sets the order of work: define the structure, pick the relevant types of loss, compute the components each needs, and test each relevant risk against its own tolerable value. Only when every one is below its value might protection not be needed. The clause also prints R as the sum of R1 to R4, but it ties the comparison to each type of loss, and Table L.6.2 gives each type its own value, so the test is made one type of loss at a time.
How each risk component is calculated
Every component is a count of dangerous events, times the chance that one causes damage, times the loss that follows (equation (L.6.6), with the per-component formulas in Table L.6.6). Each of the three factors has its own set of clauses and tables.
How many events, NX
- ND: strikes to the structure, from Section L.3.
- NM: strikes within 350 m of the perimeter, less the structure's own area, never below zero (L.6.6.1.2).
- NL: strikes to each service over an area AL of 40 × LL, the line length (1 km if unknown), with CE from Table L.6.7.1 and CT of 0.2 behind an HV/LV transformer (L.6.6.1.3).
- NI: strikes near each service, over an area AI of 4000 × LL (L.6.6.1.5).
- NDJ: strikes to an adjacent structure at a service's far end, with its area from L.6.6.1.4, and zero when nothing stands within three times the height (note to Table L.6.6).
How likely is damage, PX
- PA depends on the touch and step voltage measures taken (Table L.6.7.2).
- PB depends on the protection system, designed on a 45 m or 30 m striking distance, or a qualifying metal roof (Table L.6.7.3).
- PC drops when SPDs are fitted to Section 4.19, where L.6.6.2.3 allows the credit (Table L.6.7.4).
- PM is read from Table L.6.7.5 by a shielding factor KS built with equations (L.6.6.2.4a) to (L.6.6.2.4c), with KS3 from Table L.6.7.6.
- PU, PV and PW: without SPDs, PU comes from Table L.6.7.7 by line shielding and equipment withstand voltage UW, and PV and PW equal it; with SPDs, L.6.6.2.5 to L.6.6.2.7 give all three the lower of PC and PU.
- PZ comes from Table L.6.7.8 by line type (power or telecom) and UW, or the lower of PC and PZ with SPDs (L.6.6.2.8).
How much is lost, LX
Injury losses LA and LU scale a mean loss of life LT by a floor or soil surface factor rt (equation (L.6.6.3.1), Tables L.6.7.9 and L.6.7.10). Physical damage losses LB and LV multiply a mean damage loss LF by fire provisions rp, fire risk rf and special hazard hZ (equations (L.6.6.3.2a) and (L.6.6.3.2b), Tables L.6.7.11 to L.6.7.13). All four internal system losses equal LO (equation (L.6.6.3.3)).
Where the equipment's withstand voltage is unknown or below 1.5 kV, PM is taken as 1 (L.6.6.2.4). For PU and PZ, the notes to Tables L.6.7.7 and L.6.7.8 offer typical UW values by building type, with 1.5 kV as the default. For the SPD rules behind PC, see surge protection under NFPA 780.
Tolerable risk: the values and who may change them
NFPA 780-2026 Table L.6.2 gives three default tolerable risks per year: 10⁻⁵ for loss of life or injury, 10⁻³ for loss of service and 10⁻³ for loss of historical significance. They are the same values the 2020 edition printed. Table L.6.2 gives no value for economic loss, so R4 can only be judged against a limit that someone else supplies.
L.6.2 says the owner, someone acting for the owner, or the AHJ may select tolerable values. The table's defaults are for use where no other source provides one. If a different value is set, test against that value and record its source in the report.
The simplified screen has its own tolerance: the default tolerable frequency of property losses, 1.5 × 10⁻³, which equation (L.5.1.1) divides by C. The result, NC, is a frequency in events per year, not a tolerable risk of the Table L.6.2 kind, so it is never compared with R1 to R4.
Inputs you need for an NFPA 780 Annex L assessment
The first group is enough for the simplified screen; the detailed method needs both.
For both levels
- Lightning ground-strike density NSG for the site, from Figure L.2.1, or a flash density to convert under L.2.2
- Length, width and height of the structure, or its profile if it has a taller part (L.4.1.1, Figures L.4.1.2(a) and (b))
- What stands within three times the height, and whether the site is on a hilltop (Table L.4.2)
- Construction and roof type, contents, occupancy and the consequence of a strike (Tables L.5.1.2(a) to (d))
- Whether the facility appears on the critical facilities list in L.5.3.1
Added for the detailed method
- Which of R1 to R4 are relevant, and any tolerable values the owner or AHJ has set (L.6.2, L.6.3)
- Every incoming power and telecom service: length, whether it runs overhead or buried, its surroundings (Table L.6.7.1), any HV/LV transformer, and any adjacent structure at its far end
- Cable shielding and its resistance, and whether the shield is bonded where the equipment is bonded (Table L.6.7.7)
- The equipment's rated withstand voltage UW, in kV (notes to Tables L.6.7.7 and L.6.7.8)
- Structural shielding: mesh, down conductor or column spacing, any metal shield and its thickness, and internal wiring layout (L.6.6.2.4, Table L.6.7.6)
- The protection in place: lightning protection system and its striking distance, SPDs, touch and step voltage measures (Tables L.6.7.2 to L.6.7.4)
- Type of structure, floor or ground surface, fire provisions, fire risk and special hazards (Tables L.6.7.9 to L.6.7.13)
- Whether the structure has a risk of explosion, life-critical equipment, or animals that could be hurt, since these switch components on in R1 and R4 (L.6.5)
Annex L prints no worked example, only a blank worksheet (Figure L.6.8). The method is: count the events, pick each probability and loss from its table, multiply per component, sum per type of loss, and compare each sum with its tolerable value.
Common mistakes when running NFPA 780 Annex L
Flash density in a 2026 calculation
The 2026 equations take NSG. A flash density carried over from a 2020 report, or copied from the older symbol still printed in Table L.5.2.2 and the Figure L.6.8 worksheet, understates every event count unless it is first converted under L.2.2.
One total against one limit
Adding R1 to R4 and testing the sum against 10⁻⁵. L.6.5 makes the comparison for each relevant type of loss, and Table L.6.2 sets a value per type, so test each relevant risk against its own value or the owner's figure.
SPD credit with nothing to bond to
Taking the reduced PC of Table L.6.7.4 for a structure with neither a lightning protection system nor a continuous metal or reinforced concrete frame, which is the case where L.6.6.2.3 and the table's note withhold that credit.
Following the wrong table number
In the 2026 text, L.6.6.2.4 sends PM to Table L.6.7.4, which is the PC table, and KS3 to Table L.6.7.5, which is the PM table. Use Table L.6.7.5 for PM by KS and Table L.6.7.6 for KS3 by wiring type; the table titles settle it.
Leaving the services out
Four of the eight components come from incoming lines. A detailed assessment that models only the building misses RU, RV, RW and RZ. Long lines in rural country raise those counts most, because the service areas grow with line length and CE is highest for a rural service (L.6.6.1.3, L.6.6.1.5, Table L.6.7.1).
The conditional components in R1
The four internal system components, RM, RC, RZ and RW, join R1 only under the three conditions of L.6.5. Adding them to an office inflates R1; leaving them out of a hospital understates it.
How NFPA 780 Annex L relates to IEC 62305-2
Annex L of NFPA 780-2026 borrows from IEC 62305-2 in places. It credits Figure L.6.6.1.2, the collection areas, to the IEC, and a note to Table L.6.7.4 points to Annex B of IEC 62305-2 for smaller PC values.
The values, however, are NFPA's own, and the current IEC method has moved on. IEC 62305-2:2024 combines injury to people and physical damage into a single risk R, handles internal systems through a separate frequency of damage F, and has no R4. Annex L also does not divide a structure into lightning protection zones, which is why A.7.4.1 of NFPA 780-2026 recommends the IEC 62305-2 zone approach where only part of a structure is a hazardous location.
So a result from one method is never a substitute for the other. Run the one your AHJ or specification names. The full side by side is in NFPA 780 vs IEC 62305.
Running Annex L without the worksheet
Lumex runs both levels of NFPA 780-2026 Annex L on its Voltrace engine: the simplified screen of L.5 and the detailed assessment of L.6, with R1 to R4 each judged against its own tolerable value and R4 judged only when the owner enters a figure. Every figure in the result names the NFPA 780-2026 clause, equation or table behind it, and the signed-off report cites the 2026 edition throughout.
Lumex does not design the lightning protection system or certify a structure, and you still need the standard from the NFPA. It sets a review date 12 months out, matching the yearly inspection interval of NFPA 780-2026 Section 1.7, and reminds you when it falls due. See how Lumex runs the NFPA 780-2026 risk assessment, or compare the standards it supports on which lightning standard applies.
Related reading: NFPA 780-2026 explained, chapter by chapter, whether US codes require lightning protection, the 2026 changes against 2020, the zone of protection and the rolling sphere, SPDs under NFPA 780, and the general lightning risk assessment guide.
Annex L questions answered
What is NFPA 780 Annex L?
Is Annex L mandatory?
What is the difference between the simplified and detailed assessment?
What tolerable risk does NFPA 780 use?
What inputs do I need for an Annex L assessment?
Does NFPA 780-2026 use flash density or strike point density?
Should a critical facility rely on the simplified screen?
Can I add R1 to R4 together and compare the total with one limit?
Lumex computes the method of the standard you choose, IEC 62305-2:2024, AS 1768:2021 or NFPA 780-2026, and shows the working. It does not certify a structure. You may not issue or submit a Lumex output until a competent person, qualified where the structure is located, has reviewed the inputs and the result and signed it.
NFPA 780-2026 Annex L gives default tolerable values of 1E-5 per year for loss of life or injury and 1E-3 for loss of service and of historical significance, and the owner or the authority having jurisdiction may set others. Every NFPA 780 assessment in Lumex states the values that applied.
Get started today