Health, Safety and Environment in the Petroleum Industry: Hazards, Safety Systems, Detection and Suppression, HSE Management, Environmental Impact and Oil-Spill Control
1. Health hazards of petroleum hydrocarbons and sour gases
Petroleum hydrocarbons harm the body by several routes. Inhalation of vapours depresses the central nervous system — dizziness, headache, narcosis and, at high concentration, unconsciousness — and some components carry specific toxicity: benzene is a recognised human carcinogen that damages the bone marrow, and aromatic and polycyclic aromatic hydrocarbons carry long-term risks. Asphyxiation comes in two kinds. A simple asphyxiant such as methane, nitrogen or carbon dioxide is not toxic in itself but displaces oxygen in a confined space; a chemical asphyxiant such as hydrogen sulphide or carbon monoxide interferes with the body’s use of oxygen even when oxygen is present. Respiratory effects include irritation and aspiration pneumonitis if liquid hydrocarbon is swallowed and enters the lungs. Skin contact defats the skin and causes dermatitis, and prolonged contact with some heavy oils has been linked to skin cancer.
Sour gas is gas containing hydrogen sulphide (H₂S), the most dangerous substance routinely met in the oilfield. It is colourless, flammable and heavier than air (specific gravity about 1.19), so it collects in low places, cellars and pits. At low concentrations it smells of rotten eggs, but at higher concentrations it paralyses the sense of smell (olfactory fatigue), so the absence of smell is no evidence of safety. It is a chemical asphyxiant that blocks cellular respiration, and exposure can be fatal within minutes at high concentration. Burning it produces sulphur dioxide, itself a toxic, irritant gas. H₂S also causes sulphide stress cracking of high-strength steels, so sour wells need sour-service materials as well as detection, breathing apparatus and trained crews.
2. Shutdown and blowdown, gas and fire detection and suppression, and personal protection
A petroleum facility is protected in layers. The process shutdown (PSD) system closes in a unit when a process variable (pressure, level, temperature, flow) goes outside its limits. The emergency shutdown (ESD) system, triggered manually from push-buttons at control rooms and escape routes or automatically by fire and gas detection, isolates hydrocarbon inventories by closing shutdown valves, stops pumps and compressors and, at the highest levels, shuts in wells and isolates the whole installation; its valves are designed to fail safe (close on loss of power or air). The blowdown (depressurisation) system then vents the isolated inventory in a controlled way to the flare through blowdown valves and restriction orifices, so that a vessel heated by fire is depressurised before its weakened wall can rupture, and the fuel available to a fire is reduced. Pressure relief valves and rupture discs protect individual vessels against overpressure.
Gas detection looks for flammable and toxic gas before it finds an ignition source. Flammable gas is measured as a percentage of its lower explosive (flammable) limit (LEL) — for methane the flammable range is about 5% to 15% by volume in air, so 20% LEL of methane is 1% by volume — by catalytic-bead sensors (which need oxygen and can be poisoned) and infrared point and open-path detectors (which do not). Toxic gases such as H₂S are measured in ppm, usually by electrochemical cells. Fire detection uses flame detectors (ultraviolet, infrared or combined), heat detectors and fusible plugs, and smoke detectors in enclosed spaces. Fire suppression matches the agent to the fire: deluge water systems cool process areas and protect vessels from radiant heat; foam blankets liquid-hydrocarbon pool and tank fires; dry chemical knocks down gas and small liquid fires; CO₂ and inert or clean agents flood enclosed machinery and electrical rooms, which must be evacuated first; and passive fire protection (fire-resistant coatings, fire walls) buys time for escape and blowdown.
Personal protection is the last layer, not the first: hard hat, safety footwear, flame-resistant clothing, gloves, eye and hearing protection; personal H₂S and multi-gas monitors; self-contained breathing apparatus (SCBA) and escape sets in sour areas; fall-arrest harnesses for work at height; and, offshore, survival suits and life jackets. The hierarchy of controls ranks measures by reliability: eliminate the hazard, substitute a less hazardous material or process, engineer it out (enclosure, ventilation, interlocks), apply administrative controls (procedures, permits, training), and only then rely on PPE.
3. HSE policies, and disaster and crisis management
An HSE management system turns policy into practice through a cycle of planning, doing, checking and improving: a written policy with leadership commitment; hazard identification and risk assessment, in which risk is the combination of the likelihood and the severity of a harmful outcome, often scored on a risk matrix and reduced until it is as low as reasonably practicable (ALARP); structured studies such as HAZID (hazard identification) and HAZOP (hazard and operability study, which applies guide words such as no, more, less and reverse to each process parameter at each node); job safety analysis for tasks; a permit-to-work system that controls hot work, confined-space entry and isolation; management of change; contractor management; competence and training; incident reporting and investigation; audit; and review. Bow-tie diagrams show, for one hazardous event, the threats that can cause it with their preventive barriers on one side, and the consequences with their mitigating barriers on the other.
Disaster and crisis management plans for the events that barriers fail to prevent: blowouts, fires and explosions, toxic releases, major spills, structural failure, ship collision and extreme weather. An emergency response plan defines alarms, muster points and head counts, the roles of the on-scene commander and the onshore support team, communications with authorities and the public, medical evacuation, and evacuation and escape — offshore, by helicopter, lifeboats (TEMPSC) and life rafts. Response is tiered: tier 1 is handled with local resources, tier 2 with regional or company resources, tier 3 with national or international ones. For a blowout the plan includes well-capping and relief-well drilling. Drills and exercises test the plan, and a crisis-management team handles the business, legal and reputational side while the emergency team handles the event.
4. Environmental impact, transport of wastes, offshore studies, oil spills and compliance
Petroleum operations affect every part of an ecosystem. Air: flaring and venting (CO₂, methane, SO₂ from sour gas, soot), fugitive emissions of volatile organic compounds, and exhaust from engines and turbines. Water: produced water — often the largest waste stream by volume, containing dispersed and dissolved oil, salts, chemicals and sometimes naturally occurring radioactive material (NORM) — discharged or reinjected; drilling discharges; and spills. Soil: spills, pits and leaking lines contaminate soil and groundwater, and site construction disturbs land and habitats. Drilling specifically produces cuttings and spent muds (oil-based ones needing treatment before disposal), and production adds produced water, sludges, scale and chemicals. The environmental transport of a released waste — how far and how fast it moves — is governed by advection with flowing water or air, dispersion, sorption on soil and sediment, volatilisation, and degradation by biological and chemical processes; hazardous wastes are tracked from generation to final disposal.
Offshore environmental studies begin with a baseline survey of the seabed sediments, benthic fauna, water column and marine mammals and birds before activity starts, continue through the environmental impact assessment (EIA) that predicts and mitigates the effects of a project, and follow up with monitoring — around platforms, for example, of hydrocarbon and barium levels in sediments and changes in benthic communities with distance from the discharge point. An oil spill at sea spreads into a thin slick and weathers: evaporation removes the light ends (the largest early loss for light crudes), dissolution and natural dispersion carry some into the water, emulsification turns the rest into a viscous water-in-oil mousse whose volume can be several times the oil volume, and photo-oxidation, biodegradation and sedimentation act over longer times. Response options are containment by booms, recovery by skimmers and sorbents, chemical dispersants that break the slick into droplets for faster natural biodegradation (their use needing approval and suited to open water), controlled in-situ burning, shoreline clean-up and bioremediation; the aim, set by a net-environmental-benefit analysis, is the least overall harm. Environmental regulation and compliance rest on the same pillars everywhere — EIA and environmental clearance before a project, permits and discharge standards, monitoring and reporting, spill-response plans, waste management and site restoration on abandonment — together with international conventions on pollution from ships.
| Method | How it works | Limitation |
|---|---|---|
| Booms | Floating barriers that contain and concentrate the slick | Fail in strong currents and high waves |
| Skimmers and sorbents | Recover oil mechanically from the surface | Slow; need calm water and storage for recovered oil |
| Dispersants | Surfactants break the slick into fine droplets that disperse and biodegrade | Need approval; less effective on viscous or emulsified oil; move oil into the water column |
| In-situ burning | Controlled burning of thick, fresh oil within fire-resistant booms | Smoke plume; needs a thick slick and safe distance |
| Bioremediation | Nutrients or microbes speed natural biodegradation, mainly on shorelines | Slow; depends on temperature and oxygen |
Key takeaways
- Hydrocarbon vapours narcotise, benzene is carcinogenic, methane and CO₂ are simple asphyxiants, and H₂S is a heavier-than-air chemical asphyxiant that deadens the sense of smell.
- PSD and ESD isolate, blowdown depressurises to flare, relief valves guard vessels; ESD valves fail safe.
- Flammable gas is read as %LEL (methane about 5-15% by volume) by catalytic or infrared detectors; H₂S by electrochemical cells; deluge, foam, dry chemical and CO₂ each suit a different fire.
- HSE management: risk = likelihood × severity reduced to ALARP; HAZOP with guide words; permit-to-work; tiered emergency response with muster, evacuation and relief wells.
- Spilled oil evaporates, disperses and emulsifies into mousse; booms, skimmers, dispersants, in-situ burning and bioremediation are chosen for least overall harm; compliance rests on EIA, permits, monitoring and reporting.
Practice questions (12)
Attempt each one before opening the answer. Every explanation names the tempting wrong option as well as the right one, because that is where marks are lost.
Which property of hydrogen sulphide makes it especially dangerous in cellars and pits around a wellhead?
Show answer
Answer: A — It is heavier than air and collects in low places
With a specific gravity of about 1.19 relative to air, H₂S settles into cellars, pits and low ground. It is flammable, and at higher concentrations it paralyses the sense of smell, so it cannot be relied on to be smelt.Which of the following act as simple asphyxiants, harmful mainly by displacing oxygen? (More than one option may be correct.)
Show answer
Answer: A — Methane; B — Nitrogen; C — Carbon dioxide
Methane, nitrogen and carbon dioxide are dangerous in confined spaces because they lower the oxygen concentration. Hydrogen sulphide is a chemical asphyxiant: it blocks the use of oxygen by the cells and kills at concentrations far too low to displace much oxygen.A catalytic gas detector calibrated for methane reads 20% LEL. Taking the lower explosive limit of methane as 5% by volume in air, the methane concentration is ______ % by volume.
Numerical answer — type the value.
Show answer
Answer: 1
20% of the LEL is 0.20 × 5% = 1% methane by volume, i.e. 10 000 ppm. The reading is a fraction of the way to a flammable mixture, which is why alarms are set at a low %LEL well before the gas can burn.A leak produces a gas mixture that is 50% methane and 50% propane by volume. Taking LELs of 5.0% for methane and 2.1% for propane and using Le Chatelier’s rule, LEL_mix = 1/Σ(yᵢ/LELᵢ), the LEL of the mixture is ______ % by volume (to two decimal places).
Numerical answer — type the value.
Show answer
Answer: 2.96
Σ(yᵢ/LELᵢ) = 0.5/5.0 + 0.5/2.1 = 0.1000 + 0.2381 = 0.3381, so LEL_mix = 1/0.3381 = 2.958%, which is 2.96%. The mixture’s limit lies between the two components’ and nearer the more flammable propane, so a detector calibrated on methane under-reads this leak.The main purpose of a blowdown system on a process facility is to
Show answer
Answer: A — depressurise isolated equipment to the flare so that it does not rupture in a fire and holds less fuel
Once ESD has isolated an inventory, blowdown vents it in a controlled way to the flare. A vessel heated by fire loses wall strength; reducing its pressure quickly keeps it from rupturing and cuts the hydrocarbon that could feed the fire. Water spray is the deluge system, and detection is a separate layer.The most suitable agent for extinguishing a fire in a floating-roof crude oil storage tank is
Show answer
Answer: A — foam
Foam floats on the oil, smothers the fire and suppresses vapour release while cooling the surface. A water jet sinks through oil, can cause boil-over and spreads burning oil; CO₂ disperses in open air and is used for enclosed spaces.A worker is exposed to benzene vapour at 10 ppm for 4 hours, 20 ppm for 2 hours and 0 ppm for 2 hours of an 8-hour shift. The 8-hour time-weighted average exposure is ______ ppm.
Numerical answer — type the value.
Show answer
Answer: 10
TWA = Σ(Cᵢtᵢ)/8 = (10 × 4 + 20 × 2 + 0 × 2)/8 = (40 + 40 + 0)/8 = 80/8 = 10 ppm. A TWA is compared with the applicable occupational exposure limit, which a stem supplies; the peak of 20 ppm is judged separately against any short-term limit.A HAZOP study is best described as
Show answer
Answer: A — a systematic team review that applies guide words to process parameters at each node to find deviations and their causes and consequences
HAZOP takes each node of the process design and asks, with guide words such as no, more, less and reverse applied to flow, pressure, temperature and level, what deviation could occur, what would cause it, what it would lead to and whether the safeguards are enough. A permit-to-work, gas measurement and drills are other parts of the management system.In the hierarchy of controls, which measure is considered the LEAST reliable and is used as the last line of defence?
Show answer
Answer: A — Personal protective equipment
PPE protects only the person wearing it, only if worn correctly, and does nothing to the hazard itself, so it sits at the bottom of the hierarchy. Elimination and substitution remove or reduce the hazard, and engineering controls act whether or not anyone remembers to use them.1000 bbl of crude oil is spilled at sea. Evaporation removes 30% of the oil, and the remainder forms a water-in-oil emulsion containing 60% water by volume. The volume of emulsion to be dealt with is ______ bbl.
Numerical answer — type the value.
Show answer
Answer: 1750
Oil remaining = 1000 × 0.70 = 700 bbl. In the emulsion oil is 40% of the volume, so the emulsion volume is 700/0.40 = 1750 bbl, of which 1050 bbl is water. Emulsification is why the recovered volume can exceed the volume spilled.A spill of 10 m³ of oil spreads into a uniform slick 0.1 mm thick. The area of the slick is ______ km².
Numerical answer — type the value.
Show answer
Answer: 0.1
Area = volume/thickness = 10 m³/(0.1 × 10⁻³ m) = 10/10⁻⁴ = 1 × 10⁵ m². Since 1 km² = 10⁶ m², that is 0.1 km² — a square about 316 m on a side from a volume that would fit in a small room.Which statements about the fate and control of an offshore oil spill are correct? (More than one option may be correct.)
Show answer
Answer: A — Evaporation is usually the largest early loss for a light crude; B — Dispersants break the slick into droplets that disperse into the water column and biodegrade faster; C — Booms lose effectiveness in strong currents and high waves
Light ends evaporate within hours to days; dispersants are surfactants that create fine droplets with a large surface for microbes; oil escapes under booms in fast currents and splashes over them in waves. Emulsification incorporates water, so it increases the volume and viscosity of what must be recovered.