www.nuclearfaq.ca | |
|
|
|
The CANDU system is a strong example of safety through both engineered redundancy and passive design. The core has numerous triple-redundant detectors that feed to two logically, conceptually and physically separate shutdown systems (shut-off rods and high-pressure poison injection). Each system is capable of shutting down the core within 2 seconds following a LOCA ("Loss-of-Coolant Accident" -- the design-basis accident for CANDU reactors), without credit given to operator intervention. See the next FAQ for a more detailed discussion of the engineered CANDU safety systems.
In addition to engineered safety systems, CANDU reactors have a number of inherent safety features that distinguish it from other reactor designs (e.g. PWRs, BWRs):
Back to FAQ on CANDU Characteristics
Back to FAQ on protection against terrorism
www.nuclearfaq.ca | |
|
|
The safety philosophy of CANDU reactors [1] is based upon the principle of "Defence-in-Depth", which includes redundancy (using at least two components or systems for a given function), diversity (using two physically or functionally different means for a given function), separation (using barriers and/or distance to separate components or systems for a given function), and protection (seismically and environmentally qualifying all safety systems, equipment, and structures, including tornado protection).
This philosophy is applied throughout the plant design, from the Reactor Regulation System and Special Safety Systems, to the process control systems, and the electrical power supply (including independent, separated supplies of backup power supply). The philosophy is also embodied in the Secondary Control Area (SCA) of CANDU plants, which is a backup control room capable of independently shutting down and cooling the reactor, as well as monitoring plant status.
The Reactor Regulation System (RRS) is part of a fully computerized control system that is also responsible for boiler pressure and level control, unit power regulation, primary heat-transport pressure and inventory, and turbine run-up. The RRS includes two identical, independent digital computers, each capable of complete station control. The two computers run simultaneously, one acting as instantaneous back-up to the other.
The Special Safety Systems, on the other hand, perform no function in the normal operation of the plant, but exist to mitigate the consequences of a serious process failure. The Special Safety Systems are fully automated and take no credit for operator intervention, although they can be initiated manually if required. They consist of:
Shutdown System 1 uses solid shutoff rods, dropping by force of gravity into the core, and is capable of shutting down the reactor for the entire spectrum of postulated initiating events.
Shutdown System 2 uses high-pressure liquid poison injected into the (low-pressure) moderator, and is also capable of shutting down the reactor for the entire spectrum of postulated initiating events.
The Emergency Core Cooling System (ECCS) can maintain or re-establish core cooling by supplying coolant to all reactor headers. It consists of three phases: high-pressure water injection using pressurized nitrogen (used during the early stages of an event), medium pressure water supply from the containment building's dousing tank (used during the intermediate stages), and low-pressure water supply based on recovery from the building's sump.
The Containment System forms a continuous, pressure-confining envelope around the reactor core and primary heat-transport system. In the CANDU 6 design it consists of a pre-stressed, post-tensioned concrete structure, an automatically-initiated dousing system, building coolers, and a filtered air discharge system. In Ontario Power Generation's multi-reactor designs (the Ontario utility formerly known as Ontario Hydro), containment includes a vacuum building connected to all reactor vaults in the plant, with its own dousing system for reducing internal pressure.
The safety systems of each CANDU plant are designed to meet international standards of reliability, and are tested routinely to ensure compliance with these standards.
[1] R. Shah (AECL), "Safety Concepts and Their Implications with Respect to NPP Instrumentation and Control - Canadian Practice," IAEA Interregional Training Course on Instrumentation and Control of Nuclear Power Plants , Karlsruhe Research Centre, Germany, 24 April - 24 May 1995.
Back to Previous FAQ on CANDU Safety
Back to Previous FAQ on CANDU Characteristics
Back to FAQ on protection against terrorism
www.nuclearfaq.ca | |
see related FAQ)
|
|
In any type of reactor the void coefficient refers to the reactivity feedback (the increase or decrease of the fission rate, and thus the rate of heat generation) that occurs if coolant in the core turns to steam or otherwise disappears. In PWR's and BWR's this coefficient is negative because a decrease in coolant density leads directly to a decrease in overall neutron moderation (the slowing down of neutrons by scattering) – the higher the degree of coolant voiding, the more negative the reactivity feedback (decreasing the fission rate).
In CANDU reactors [1],[2] the coolant and moderator are separate heavy water circuits, with the coolant making only a minor contribution to overall neutron moderation. Therefore, a loss of coolant (or a decrease in coolant density) would not be expected to affect neutron moderation significantly. Furthermore, since the coolant does not significantly absorb neutrons either, one might suspect that its disappearance would have no reactivity effect at all.
In fact, the coolant does account for a small amount of moderation in CANDU reactors – just enough to "knock" fast neutrons down into the resonance energy range. This is an intermediate energy range where a neutron's probability of parasitic absorption in uranium-238 (absorption without causing fission) is enormous. Since this small amount of moderation takes place in a location close to the fuel (i.e., the neighbouring coolant), the situation arises, under normal operating conditions, that some neutrons are decelerated by "just" the right amount, and in "just" the right location, to account for a significant amount of parasitic absorption in uranium-238.
It follows that a loss of coolant reduces the amount of resonance-energy neutrons around the fuel, while increasing the amount of fast neutrons (and hence fast fission). Both effects have a small positive reactivity contribution.
Meanwhile, at the lower ("cooler") end of the neutron energy spectrum, the coolant actually "up-scatters", or increases the energy of, thermalized neutrons as they diffuse in from the surrounding moderator. This up-scattering occurs because the coolant temperature is much higher than that of the moderator (70 deg.C, versus 300 deg.C), and this temperature difference is enough to influence the average energy of low-energy neutrons (technically, neutrons in this energy range are said to be in, or approaching, thermal equilibrium with the moderating medium – hence the term "thermal neutrons" used to describe them). Making neutrons "hotter" (more energetic) makes them less likely to be captured and cause fissions in U-235 atoms. In a fresh core (no plutonium content) this provides a little more positive reactivity upon loss of coolant, because decreasing the average neutron energy means increasing the probability of fissions in uranium-235.
On the other hand, as plutonium is created in the fuel (due to neutron absorption in uranium-238), the presence of a large resonance at the upper end of its thermal spectrum leads to a negative reactivity contribution upon coolant voiding. This occurs because the resonance in plutonium, unlike that in uranium-238, increases the probability of both fission and parasitic absorption for neutrons in its energy range. Upon coolant voiding, it turns out that the loss of thermal neutron up-scattering (described above) causes a net decrease in the fission rate in plutonium.
Thus, due in large part to the presence of plutonium, the reactivity coefficient in an equilibrium CANDU core (after about 500 full-power days) is about half that of a fresh core. It should also be noted that the void coefficient is but one contributor to total reactivity feedback, and the power coefficient, which is of more importance to operational stability, is actually quite small (see next FAQ for a discussion of the overall effect on safety).
Finally, the void coefficient is highly dependent upon fuel composition, and it is practically possible to "tailor" the coefficient within a wide range, simply by altering the fuel design. For example, coolant voiding is known to cause a slight shift of thermal flux towards the centre of the fuel, simply because more thermal neutrons, diffusing in from the bulk moderator, are able to survive the journey. It is possible, therefore, to modify the void coefficient by adding more absorption material in this inner fuel region. The void coefficient can be made zero, or negative. However, the nominal design using natural UO2 fuel, with a positive void coefficient, meets high safety standards recognized by the international community.
[1] J.J. Whitlock, et al, "Effects Contributing to Positive Coolant Void Reactivity in CANDU", Trans. Am. Nucl. Soc.,72, 329, ISSN: 0003-018X, 1995.
[2] J.J. Whitlock, Reduction of the Coolant Void Reactivity Effect in a CANDU Lattice Cell , PhD Thesis, McMaster University, Hamilton, Ontario, 1995.
www.nuclearfaq.ca | |
|
|
It is inappropriate to judge the safety of any system based upon one of its inputs. Firstly, you must consider the combined effect of all inputs simultaneously, which (as pointed out in the previous answer) actually leads to a small feedback under power ramping. Secondly, you must consider the system response to the inputs, especially under extreme conditions.
In CANDU safety analysis, the "extreme condition" for fast reactivity insertion is a large LOCA ("Loss-of-Coolant Accident), and therefore the shut-down system is engineered to meet the speed requirements of such a scenario. There are actually two completely separate (physically as well as logically) systems, each capable of fast shutdown under large-LOCA-induced reactivity, and each tripped by triple-redundancy logic from two separate detection networks well-distributed throughout the core. The first shutdown system is spring-assisted shut-off rods, and the second (on most CANDU units) is high-pressure liquid poison injection. Unlike in other reactor designs, these systems trip on neutronic parameters to LOCA events, as opposed to those with longer thermalhydraulic time-constants. This provides an almost instantaneous indication of single-channel flow blockage, for example.
In practice both safety shutdown systems are conservative because the core never voids completely in an instantaneous fashion, especially given the high degree of thermalhydraulic subdivision within the core. This reality is not conveyed by a simple coefficient, which, for example, does not account for the fact that only half the core would void in a worst-case scenario, and even then over a finite length of time.
Also not conveyed by a simple coefficient is the core's dynamic response to insertion of positive reactivity. Unlike in light-water reactor cores, the insertion of sufficient positive reactivity to achieve "prompt criticality" in a CANDU core (i.e. the core becomes critical on the promptly-released fission neutrons alone) does not significantly shorten the core multiplication time constant such that engineered safety safety systems have difficulty maintaining control. In the heavy water core of a CANDU reactor, neutron moderation is sufficiently "sluggish" (it takes longer to slow neutrons down than in light water) to enable control under prompt critical conditions. This is an added inherent safety feature of CANDU reactors that lends additional perspective to the notion of positive void feedback.
Finally, it must be remembered that any feedback coefficient is a challenge for safe control, if it is large enough or highly variable - regardless of its sign. A BWR, for instance, has a large negative void coefficient which must be handled by the safety system in scenarios involving massive void collapse (inducing positive reactivity). It is far more important to keep feedback coefficients small and independent of operating conditions, as is the void coefficient in CANDU reactors.For further reading on this issue see the two papers by Meneley and Muzumbdar that follow, which were presented at the Canadian Nuclear Society Annual Conference in June 2009.
www.nuclearfaq.ca | |
|
|
On April 26, 1986, the Unit 4 reactor at Chornobyl*, near Kiev in the Ukraine, suffered the worst nuclear accident in history. A combination of poor design, almost nonexistent safety culture, and human error lead to an uncontrolled power increase that destroyed the core and dispersed radioactive contamination over a wide region of the Ukraine and Byelorussia. See the IAEA's summary marking the 20th anniversary in 2006: "Revisiting Chernobyl: 20 Years Later", as well as the World Nuclear Association's summary at http://www.world-nuclear.org/information-library/safety-and-security/safety-of-plants/chernobyl-accident.aspx.
The tragic events of April 26, 1986 are in many ways peculiar to the type of reactor involved, the philosophy and training of those operating it, and the political infrastructure governing the country (the former U.S.S.R.) at the time. It is not likely that an accident like that at Chornobyl could happen in a commercial nuclear plant found in Canada or the U.S.A.
In the broadest sense, CANDU reactors share some features with the RBMK design used at Chornobyl: they both are large, well-thermalized cores with positive void coefficients, they both utilize pressure tubes, and they're both refuelled on-power. On the other hand, the CANDU and RBMK designs have some fundamental differences, including the use of a heavy water moderator in CANDU reactors, while the RBMK uses graphite. In some circles, the misconception is put forth that CANDU technology has many parallels with Chornobyl, and may incur a similar accident. The following is a summary of the more obvious reasons why this is not the case:
*   "Chornobyl" is the correct Anglicized spelling
of the Ukrainian name (as opposed to the Russian version "Chernobyl", used
prior to the separation of the Ukraine from the former U.S.S.R.). See discussion at US DOE website.
[2] J.Q. Howieson and V.G. Snell, "Chernobyl: A Canadian Technical Perspective", AECL Technical Report AECL-9334, January 1987 (also released as an AECL Public Affairs brochure,
"Chernobyl: A Canadian Perspective", July 1988).
On April 26, 1986, the Unit 4 reactor at Chornobyl, near Kiev in the
Ukraine, suffered the worst nuclear accident in history. A combination of
poor design, nonexistent safety culture, and human error lead to an
uncontrolled power increase that destroyed the core and dispersed
radioactive contamination over a wide region of the Ukraine and
Byelorussia. See the IAEA's summary marking the 20th anniversary in 2006:
"Revisiting Chernobyl: 20 Years Later", as well as the World Nuclear Association's summary at http://www.world-nuclear.org/information-library/safety-and-security/safety-of-plants/chernobyl-accident.aspx.
While the Chornobyl accident has little relevance to nuclear safety in
CANDU and most other Western nuclear power plants (see related FAQ), the wide-spread nature of its
environmental consequences and its generally high profile around the world
supports an on-going interest in Canada and other countries.
The immediate significant health effect of the accident was the death toll (mostly due to high radiation exposure) among the workers at the plant itself. Of this group, 31 died either at shortly after the accident, and 19 died subsequently over the next two decades (some not attributable to the accident however).
In 2006 the United Nations published an update on the longer-term health effects of the
Chornobyl accident, based on the epistemological research. With one
notable exception, no evidence of any public health impact attributable to
radiation exposure from the 1986 accident has been found. The exception
is an increase in thyroid cancers found in people who were exposed in
childhood after the accident (15 deaths had been documented by 2002). It has been suggested that this increase may be due to increased medical surveillance and improved diagnoses since the accident (leading, among other things, to
the identification of occult carcinomas normally undetected clinically).
While this certainly has contributed to the increase in thyroid cancer
incidence, it cannot account for the total increase (see "Chernobyl
Ten Years On: Radiological and Health Impact" at http://www.nea.fr/html/rp/chernobyl/c05.html).
Regarding overall cancer incidence or mortality, no increase has been observed that could be attributed to the accident. The risk of leukemia (normally a sensitive indicator of chronic radiation-induced effect in a population, due to its short latency period and well-understood radiogenic behaviour) does not appear to be elevated, even among the hundreds of thousands of recovery workers who participated in the clean-up following the accident. There is also no scientific evidence of any other non-malignant disorder due to the accident.
Nonetheless, the United Nations, in its "Chernobyl Forum" report, predicts an increase in cancer mortality of up to 4% (about 4000 extra fatalities) among the most highly exposed population of about 600,000 people, and an increase in cancer mortality of less than 1% in the broader "contaminated region" population of about 5 million people, based on statistical knowledge of past significant radiation exposures of large populations, such as at Hiroshima and Nagasaki. These increases would not be detectable against the natural cancer mortality of these populations. The lower bound of these mortality estimates is zero; i.e. no increase (the large range of uncertainty is due to the difficulty in estimating health consequences of low-level radiation exposure, given that such consequences cannot be directly observed and must be inferred from knowledge of past high-level exposures).
The United Nations report states, "It is impossible to assess reliably, with any precision, numbers of fatal cancers caused by radiation exposure due to Chernobyl accident. Further, radiation-induced cancers are at present indistinguishable from those due to other causes."
There is less uncertainty about the psychological, sociocultural, and economic legacy of the Chornobyl accident, associated not only with the forced permanent evacuation of a large population, but also with the continued perception within this population that its general health is at perpetual risk in a manner that is beyond individual control.
The United Nations "Chernobyl Forum" report also addresses the social and societal impacts of the Chernobyl accident. The largest public health problems created by the accident were its effects upon the mental health of the people living in affected areas, including “lifestyle” diseases, such as alcoholism and tobacco dependency. Relocation proved a “deeply traumatic experience” for the people moved out of the affected areas, the study noted, while persistent myths and misperceptions about the threat of radiation have resulted in a “paralyzing fatalism” among residents of affected areas. Seeing themselves as “victims” rather than “survivors” has led to overcautious and exaggerated health concerns.
In Canada off-site liability for a nuclear accident is insured under the
Nuclear Liability and Compensation Act
(2015). Under this legislation, which conforms to international conventions and is conceptually similar to legislation in other countries (such as Price-Anderson in the US), all liability up to a limit of CDN$1 billion is channelled directly to the operator. This means that a member of the public with a damage claim due to an accident at a nuclear reactor can obtain compensation directly from the operator, without having to prove negligence. Component suppliers are protected from public litigation (but not from litigation by an operator, for example to cover on-site damages).
Under such a liability regime, the public is guaranteed an expedited claims process, and the right to collect on all justified claims. Should the CDN$1 billion limit be reached (there have been no claims to date), the Act authorizes the establishment of a government commission to oversee the balance of claims. For the benefit of nuclear operators and suppliers, such legislation provides a stabilizing influence, but should not be misconstrued as an incentive for reduced safety. Since operators have their own property at stake (valued at several billion dollars per reactor, sometimes insured privately and sometimes self-insured, depending on the size of a utility), and must operate under strict regulations for emissions and employee/public exposure, it is in their own best interests to ensure a high degree of safety and reliability in the components they are supplied, and in the operation of their plant. In any conceivable accident scenario where the liability limit is reached, it is almost certain that the owner's investment in the nuclear plant itself would be lost.
The Nuclear Liability and Compensation Act replaces The Nuclear Liability Act (1976), which placed the operator's limit at CDN$75 million. In addition to raising the operator's limit, the new act introduces other improvements such as allowing the operator to obatain the required insurance through a wider variety of instruments (including self-insurance), expanding the type of damage that is applicable, and allowing a longer claims period (30 vs. 10 years).
In Canada public property damage due to a nuclear accident is generally not included in homeowner insurance contracts since the coverage is provided under the NLA, by a pool of private insurers that thus avoids providing indemnification twice.
On December 12, 1952 a combination of mechanical failure and human error
led to a now-famous power excursion and fuel failure in the NRX reactor
at AECL Chalk River Laboratories. At the time NRX was one of the most significant research reactors in the world (rated at that time for 30 MW operation), in its sixth year of operation.
During preparations for a reactor-physics experiment at low power, a defect in the NRX shut-off rod mechanism combined with a number of operator errors to cause a temporary loss of control over reactor power. Power surged ultimately to somewhere between 60 and 90 MW over a period of about a minute (the total energy surge is estimated to be approximately 4000 MW-seconds). This energy load would normally not have been a problem, but several experimental fuel rods that were at that moment receiving inadequate cooling for high power operation ruptured and melted. About 10,000 Curies of fission products were carried by about a million gallons of cooling water into the basement of the reactor building. This water was subsequently pumped to Chalk River Laboratories' waste management facility, where the long-term ground water outflow was monitored thereafter to ensure adherence to the drinking water standard. The core of the reactor was left severely damaged.
This accident is historically important, not only because it was the first
of its type and magnitude, but also because of its legacy to Canadian and
international practice in reactor safety and design. Nobody was killed or
hurt in the incident, but a massive clean-up operation was required that involved hundreds of AECL staff, as well as Canadian and American military personnel, and employees of an external construction company working at the site. In addition the reactor core itself was rendered unusable for an extended period. Environmental effects outside the plant were negligible, as was radiation exposure to members of the public. The health record of AECL and Canadian military personnel involved in the clean-up was scientifically reviewed in the 1980s (no significant health effects were observed).
Several of today's fundamental safety principles of reactor design and
operation stem from the lessons learned at this formative stage of
Canada's nuclear program, making Canada an early leader in this field.
Among these were:
The NRX core was completely rebuilt, improved, and restarted within 14
months following the accident (the first time something like this was
attempted), and the reactor continued to perform for another four decades
before being retired.
As with the analysis of the accident itself, the clean-up and repair of
the NRX reactor shed light on several new concepts of reactor operation
and design. A major example of these is the complete rehabilitation of a
large reactor core, which contributed to the unique long-term maintenance
philosophy of not only research-reactors at Chalk River Laboratories, but
also CANDU power reactors.
Another summary of the NRX accident can be found
here.
Two points of trivia:
On May 24, 1958 a major fuel-handling accident occurred at the NRU research reactor facility at AECL Chalk River Laboratories. The NRU, one of the world's most powerful and versatile research reactors, was in its first year of operation (reactor design power: 200 MW). Although a major event in its own right, the 1958 NRU accident was not as significant as the 1952 NRX accident (see related FAQ) in terms of either the resulting damage to the reactor core or its legacy to the field of reactor safety.
Unlike the events of December 1952, the 1958 NRU accident did not involve a power excursion in an operating reactor. It occurred while NRU was shut down and undergoing an operation to remove failed fuel from its core. While being removed the failed fuel rod did not receive adequate cooling and probably began burning in the fuel transfer flask above the core (the fuel used at the time was uranium metal, which combusts spontaneously in air). The fuel also broke apart, leaving one section in the bottom of the reactor and another section stuck in the transfer flask. As the transfer flask moved across the reactor bridge towards the fuel storage area beside the reactor, a three-foot section of the stuck fuel rod dropped from the flask into a maintenance pit on the bridge, where it continued to burn. The fire was extinguished relatively quickly (about 15 minutes) by reactor staff, but not before it had significantly contaminated the inside of the NRU building and, to a smaller degree, an area (approximately 0.4 square km) of the Chalk River site itself. Cleanup started immediately, along with repair of the reactor itself, and NRU was up and running again by August of that year.
The clean-up involved a large number of personnel, including AECL staff, soldiers from CFB Petawawa, and workers from the Civil Defense Unit based in Arnprior, Ontario, and a commercial cleaning company in Ottawa, Ontario. All personnel were protected from contamination by special clothing, and radiation doses were controlled through timed work procedures, long-handled tools, and dosimetry on all workers that ensured adherence to legal limits. The health record of AECL and Canadian military personnel involved in the clean-up was scientifically reviewed in the 1980s (no significant health effects were observed).
Tritium (H-3) is a radioactive heavy isotope of hydrogen, created in the heavy-water
moderator of CANDU reactors by neutron bombardment of deuterium (H-2, the
hydrogen isotope in heavy water). Over a period
of time a significant quantity of tritium builds up in the moderator, and
since tritium is radioactive, with a half-life of 12.3 years, this poses a
potential risk to employees, and also increases the potential for a
tritium release to the environment. Tritium is considered a "low hazard"
radioactive isotope, because of the weak energy of its radiation (beta
particles with an average of 6 keV energy). Due to its low-energy
radiation, it is harmless outside the body, but becomes a biohazard if
taken internally. Regulations are therefore set on the amount of tritium
that can be released from a CANDU nuclear plant, and CANDU operational
targets are typically less than 1% of this value.
To reduce the risks further, Ontario Power
Generation (then known as Ontario Hydro) commissioned a Tritium
Removal Facility (TRF) at its Darlington nuclear station (near
Toronto, Ontario) in 1990. This facility chemically extracts tritium from
the moderator water of all of Ontario Power Generation's CANDU reactors,
using a two-stage process. Stage 1 is a vapour phase catalytic
extraction (VPCE) process which extracts the tritium in vapour form.
Stage 2 is a cryogenic distillation process which then distills the
tritium at low temperatures and immobilizes it.
Ontario Power Generation can process up to 2.5 thousand tonnes (2,500 Mg)
of heavy water a year, producing about 2.5 kg of tritium with a purity
greater than 98% [1]. The utility then markets this tritium globally, for
end-uses not associated with nuclear weapons. Ontario is one of only two
major civilian producers of tritium in the world, the other being a
Russian-British joint venture called Reviss Services Ltd., which
uses the Mayak facility about 100 km from Chelyabinsk, Russia. The
civilian uses of tritium include self-luminous lighting applications,
fusion power research (for which it is a principal fuel material), and
tracer applications in biological and pharmaceutical research.
[1] Ontario Power Generation fact sheets: (i) Tritium Removal Facility and (ii)
Tritium Products.
Canadian nuclear power plants emit low levels of both airborne and waterborne radiation
to the environment, typically through normal operational leakage in heavy water systems within the contaiment building (about 1% of which is not recovered and vented), or through less frequent heavy water spills within the containment building (a small fraction of which is sometimes released, and usually diluted in the body of water nearby). These emissions are in adherence to regulations set out in the Nuclear Safety and Control (NSC) Act (May 2000,
replacing the Atomic Energy Control Act of 1946). Under the NSC Act,
nuclear operators are granted licenses by the Canadian Nuclear
Safety Commission (CNSC), which limit the level of radiation
exposure that the public can receive from these operations. (See related FAQ.)
The annual limit on public radiation exposure from nuclear operations is
specified in the NSC Act is 1 millisievert* (mSv), roughly equal to
one-third the radiation dose that Canadians receive annually, on average,
from natural sources (i.e., the rocks, plants, and air around us, and even
our own bodies), and several hundred times less than that which is observed to
have a health effect in human populations.
Operators of CANDU reactors in Canada typically set their own operational
targets at about 1% of the regulatory limit, or about 0.01 mSv, and in
practice achieve much better than this. These criteria apply to a
hypothetical "most-exposed individual", who spends 100% of his/her
time at the boundary of the plant, eating only locally-derived produce, meat,
fish, water, and milk. The average,
realistic radiation exposure in the community surrounding a nuclear plant,
due directly to the plant itself, will be hundreds and thousands of times
less again. At this level the dose is millions of times less than that
which is observed to have a health effect in human populations, and
unnoticeable compared to the natural radioactivity of our own bodies.
The amount of radiation that the public is exposed to from nuclear plants
is a matter of public record, and both past and current information can be
obtained on-line from the CNSC website (see above link), or from the
utilities themselves (see, for example, the reports on the
Ontario Power Generation
website).
The act of regulating something often breeds apprehension, but
quantities regulated for industrial use can be smaller than
naturally-occuring quantities of the same material. For example, the
following common items contain enough potassium-40 (a naturally
radioactive form of potassium, found in concentrations of 1-part-in-10,000
within natural potassium) to require a license from the Canadian Nuclear
Safety Commission (CNSC), had that same quantity of potassium-40 been
isolated within a regulated nuclear industrial or laboratory setting: 9 kg of granite, 600 g of sodium-free table salt (KCl), 5 kg of all-purpose lawn fertilizer (7-7-7), 42 kg of cement, 112 kg of dry wallboard, 50 kg of Brazil nuts, 60 kg of lima beans, 80 kg of bananas, 80 kg of white potatoes, 80 kg of carrots, 80 kg of wood, 90 kg of red meat, 700 litres of beer, 250 litres of milk, or 3 average human adults. The level of radiation in all of these cases presents no health risk (and may even be beneficial), but the information sheds light on both the ubiquitous nature of radioactivity, and the conservatism built into regulatory limits.
For more information on the radiation around us, and inside us, see "Radioactivity in Nature" from Iowa
State University. For a general introduction to nuclear science and
radioactivity, see "The ABCs of Nuclear Science" from
Lawrence Berkeley National Laboratory (LBNL). A home-made cloud-chamber
for "seeing" radiation is described in the author's brochure, "Radiation Encounter!", along with more
background information (PDF-format). Teacher and student resources
are available at the Yes I Can! website operated by York
University.
Tritium is a radioactive form of hydrogen (H-3), with a half-life of 12.3 years. It is found in small amounts in nature (about 4 kg globally), created by cosmic ray interactions in the upper atmosphere. Industrial releases of tritium account for roughly 25% of the natural production. Tritium is considered to be a weak radionuclide because of the low energy of its radioactive emissions (beta particle energy 0 - 19 keV; average energy about 6 keV). The beta particles (similar to electrons) do not travel very far in air and do not penetrate skin; therefore the main biological hazard of tritium is due to its intake into the body (inhalation, ingestion, or absorption).
Several epidemiological studies of cancer (especially leukemia) and other disease incidence, birth defects, mortality, and other abnormalities have been conducted in communities near CANDU nuclear stations and other nuclear facilities in Canada. As expected by the low levels of radioactive emissions measured to date, there has been no evidence of a negative health effect in these populations.
[contributed by Dr. Richard Osborne, Sept 2008]
The Canadian Nuclear
Safety Commission (CNSC) is Canada's "nuclear watchdog", established
under the Nuclear Safety and Control Act (NSCA, passed March 1997; in
effect May 2000). The CNSC was formerly known as the Atomic Energy Control
Board (AECB), under the Atomic Energy Control Act of 1946.
The CNSC is an independent, quasi-judicial administrative tribunal and regulatory agency that reports to Parliament through the Minister of Natural Resources. The CNSC regulates the use of nuclear energy and materials to protect health, safety, security and the environment, and to respect Canada's international commitments on the peaceful use of nuclear energy. The CNSC’s mandate does not include regulating for economic objectives. Nuclear regulation is solely federal jurisdiction, and the CNSC has no provincial counterparts.
Licences are granted by the CNSC for all aspects of operation involving
the above facilities and activities. Licensees are required to prove to
the CNSC that their facility or activity is acceptably safe, under the
requirements of the NSCA, before a license is granted or renewed. The
approach to safety assumes that nothing is 100% risk-free (i.e.
"absolutely safe"), but that risk can be minimized through multiple layers
of verifiable protection. This approach includes external risks from both
natural and man-made causes. For example, the CNSC specifies the levels
and type of security that are required at nuclear facilities.
In Canada nuclear power plants are defined as "Class I" nuclear facilities under the NSCA, and require CNSC licences prior to each of the five phases of a nuclear plant's lifecycle: site preparation, plant construction, plant operation, site decommissioning, and site abandonment. The process followed at each of these licensing steps includes a public hearing with opportunity for public input.
In addition, the licensing process for a nuclear power plant in Canada proceeds only after approval is granted through the federal Environmental Assessment (EA) process under the Canadian Environmental Assessment Act (CEAA, 1992), involving the convening of a EA Panel and further public hearings. The EA process identifies whether a specific project is likely to cause significant environmental effects, determines whether potentially significant adverse effects are identified and mitigates to the extent possible.
The CNSC is an independent agency of the Government of Canada. Its operations, meeting, and reports are open to public scrutiny. In 2007 the CNSC commissioned a study by a third-party expert on public-sector governance, examining the role and importance of regulatory independence in the administration of Canada’s nuclear regulatory regime. The report concluded that, although some gaps in public communication exist (particularly with NGOs) that may lead to a perception of non-transparency, the practices and procedures of the CNSC do ensure independent oversight. In particular, the report found that "there are practices within the commission itself to ensure legitimacy and voice, including strict guidelines to ensure that there is no conflict of interest."
As a licensing requirement, nuclear reactors must be qualified to withstand the level of seismic activity that is expected for each individual reactor location. Seismic qualification is a common component of civil and mechanical design, and nuclear reactors do not differ from any other major infrastructure in this respect. The same robustness and defense-in-depth approach that assures safety and security of a nuclear plant plays a major role in its seismic qualification, and often provides a level of conservatism that continues to protect even during beyond-design-basis events.
The following is a description of the events and technology behind an extended (one-month) shutdown of NRU reactor at AECL Chalk River Laboratories (CRL) in November and December 2007, which prompted highly-publicized concerns about a worldwide medical isotope shortage. This description is provided by the author for the purpose of explaining a complex situation to the public, and does not represent an official account by AECL, the CNSC, or the Government of Canada.
April 11, 2009: The Federal Court of Canada rules that the federal government's dismissal of CNSC President Linda Keen was legal.
July 28, 2008: The independent consultant's report (Talisman International LLC) on the NRU incident, commissioned jointly by AECL and the CNSC, is released to the public. It includes specific recommendations and management reponse by both parties.
While both atomic bombs and nuclear reactors make use of the energy from a nuclear fission chain reaction in uranium or plutonium, the similarity stops there. For a nuclear explosion, it is required to bring together a critical mass of fissile material (uranium-235 or plutonium-239) extremely quickly and release an enormous amount of energy in a matter of milliseconds. As with any conventional "bomb" the defining characteristic is a large amount of energy release within a contained area in a very short (almost instantaneous) time frame. For example, a gallon of gasoline poured over a driveway and ignited is a "fire"; a gallon of gasoline ignited all at once while still in a can is a "bomb".
On 11 March 2011, the T?hoku earthquake and tsunami (also called the Great East Japan Earthquake) struck the east cost of Japan, causing over 20,000 deaths and widespread destruction. It was the largest earthquake to hit Japan in recorded history (Richter magnitude 9), and the subsequent tsunami, with a peak wave height of 40 metres, travelled up to 10 km inland.
Following the Fukushima Dai-ichi nuclear plant accident in 2011, which was initiated by a powerful earthquake and tsunami that destroyed all immediate ability to cool the nuclear fuel in three recently operating reactors, the Canadian federal nuclear regulator, the Canadian Nuclear Safety Commission set up a special Task Force to determine how safe Canadian CANDU reactors are against conceptually similar low-frequency, high-consequence natural disasters, and to compile a list of lessons learned. The Task Force, in its final report concluded that the CANDU fleet is safe against such threats, due to the "defence-in-depth" strategy of reactor safety that provides robust and multi-level barriers against a range of scenarios - but also made a number of recommendations that could improve safety even more (see above link).
Technical References:
[1] P.S.W.Chan, A.R.Dastur, S.D.Grant, J.M.Hopwood, B.Chexal,
Multidimensional Analysis of the Chernobyl Accident, AECL
Technical Report, AECL-9604, January 1988.
www.nuclearfaq.ca
Search this
website:
D.6     What are the observed health effects of the Chornobyl accident?
www.nuclearfaq.ca
Search this
website:
D.7     How are Canadians insured against nuclear accidents?
updated 2015-04-16
www.nuclearfaq.ca
Search this
website:
D.8     What are the details of the accident at Chalk River's NRX reactor in 1952?
The accident also demonstrated that, due to a combination of redundant
safety features, emergency procedures, and a level of inherent
"forgiveness" (or robustness) in the technology, a major fuel-melt
accident in a nuclear reactor can occur without significant environmental
effects and radiation exposure to the surrounding population.
Further reading...
www.nuclearfaq.ca
Search this
website:
D.9     What are the details of the accident at Chalk River's NRU reactor in 1958?
Further reading...
www.nuclearfaq.ca
Search this
website:
D.10     How does Ontario Power Generation manage tritium production in its CANDU moderators?
www.nuclearfaq.ca
Search this
website:
D.11     How much radiation do nuclear plants expose the Canadian public to?
*Millisievert:
[mih-lee-see-vurt] The sievert (Sv) is the standard unit of
radiation dose, taking into account both the energy and type of the
radiation involved in a given exposure (gamma rays, alpha particles, beta
particles, neutrons, electrons, etc.). A millisievert (mSv) is
one-thousandth of a sievert. Canadians, on average, are exposed to about
3.5 mSv per year, mostly (about 80%) from natural sources in the
environment, including our own bodies. An older unit of radiation dose,
still in limited use, is the rem. One Sv is equal to 100 rems
(and one mSv is equal to 100 mrems).
www.nuclearfaq.ca
Search this
website:
D.12     How much tritium is released by CANDU plants?
Further reading...
www.nuclearfaq.ca
Search this
website:
D.13     Do nuclear power reactors have a negative health impact in surrounding communities?
Further reading...
www.nuclearfaq.ca
Search this
website:
D.14     Can radiation have beneficial health effects?
Further reading...
Biographical sketch of Richard. V. Osborne B.A., Ph.D.
Dr Richard V. Osborne, a biophysicist, retired from Atomic Energy of Canada Limited in 1998 where he was director of the Health and Environmental Sciences Division after a career spanning four decades, including 20 years as a research scientist leading a team specializing in tritium health physics. He was the first President of the Canadian Radiation Protection Association and has been Vice-President of the International Radiation Protection Association. He has worked for a variety of international agencies, including Canadian representative to the United Nations Scientific Committee on the Effects of Atomic Radiation, and Vice-Chairman of International Commission on Radiological Protection’s Committee on the practical implications of the Commission’s recommendations. He currently consults, as Ranasara Consultants Inc., in the general area of radiological protection.
www.nuclearfaq.ca
Search this
website:
D.15     How is nuclear
technology regulated in Canada?
Further reading...
www.nuclearfaq.ca
Search this
website:
D.16     Can nuclear reactors withstand earthquakes?
www.nuclearfaq.ca
Search this
website:
D.17     Why was a Chalk River reactor shut down in November 2007, causing a shortage in medical radioisotopes?
LATEST NEWS:
More info:
1The scanned 3-D drawing is from the 1960 AECL public relations booklet "An Outline of the Activities of Atomic Energy of Canada Limited". Note that the fuel for NRU was natural uranium at the time of this publication. It was converted to HEU in 1964, and again to 20%LEU in 1992.
updated 2008-07-28
www.nuclearfaq.ca
Search this
website:
D.18     Why can't a reactor explode like an atomic bomb?
The critical mass of uranium or plutonium is maintained in a subcritical state prior to the explosion either by dividing it into separate pieces that are physically separated (a uranium weapon), or by using an amount that is less than one critical mass at normal densities and pressure (plutonium weapon). In a uranium weapon at the moment of detonation, the two pieces of uranium are brought together as fast as possible, typically using a gun barrel to fire one piece of uranium at another. In a plutonium weapon, it turns out that this gun-barrel velocity would not be sufficient to overcome the tendency of the plutonium to start chain-reacting before it could be properly assembled; therefore, a more complex arrangement is used whereby a sub-critical mass of plutonium is made critical by compressing it with a spherical arrangement of conventional explosives.
Whatever the technique, the basic requirements are the same: fissile purity, fast neutrons, and fast assembly speed.
In contrast, a nuclear reactor is designed to "stretch out" the fission chain reaction so that it takes place over many decades, rather than milliseconds. In addition, reactors are designed for long-term economic and safe operation, therefore requiring a fuelling strategy that is as cost-effective as possible and a fission chain reaction that is completely controlable at all times.
A nuclear reactor achieves this slow, controlled, cost-effective energy release by:
Since the fuel is natural or low-enriched uranium, it consists mostly of non-fissile uranium-238, which acts generally as an absorber that hinders the fission chain reaction. Reactors therefore only work by spacing the fuel sufficiently far apart to allow neutrons to slow down in regions removed from uranium-238 nuclei. Therefore, under any severe accident scenario that disrupts the geometry of the core, it is not only impossible to bring fissile material together fast enough to cause an explosive chain reaction, but it is also impossible to maintain any kind of chain reaction, given the low fissile content of the fuel itself.
Therefore, although there are a number of credible accident scenarios that must be taken into account in the safe design of any nuclear reactor, the possibility of the reactor exploding like an atomic bomb is not one of them.
www.nuclearfaq.ca
Search this
website:
D.19     What is the probable public health effect from the Fukushima nuclear accident?
www.nuclearfaq.ca
Search this
website:
D.20     What impact did the Fukushima nuclear accident have on CANDU safety design?
www.nuclearfaq.ca
   
Search this
website: