EA-96-034 - Millstone 1, 2, 3 (Northeast Nuclear Energy Company)
December 10, 1997
EA Nos. 96-034; 96-067; 96-086; 96-106; 96-145;
96-183; 96-197; 96-198; 96-331; 96-332;
96-333; 96-350; 96-351; 96-352; 97-141
Mr. B. D. Kenyon, President & CEO
Nuclear Group
Northeast Nuclear Energy Company
Post Office Box 128
Waterford, Connecticut 06385
SUBJECT: NOTICE OF VIOLATION AND PROPOSED IMPOSITION OF CIVIL
PENALTIES - $2,100,000
[NRC Inspection Report Nos. 50-245/50-336/50-423: 95-44;95-82; 96-01;
96-03; 96-04; 96-05; 96-06; 96-08; 96-09; 96-201]
Dear Mr. Kenyon:
From October 24, 1995 through December 31, 1996, the NRC conducted numerous inspections at your Millstone facilities in Waterford, Connecticut. While several facets of plant performance were reviewed during these inspections at all three units, a principal focus of the inspections was the handling of engineering issues, as well as your corrective action programs and practices. These inspections included a special team inspection by NRC headquarters staff focused on these areas, as well as numerous inspections conducted by resident and Region I based inspectors. All of the related inspection reports were sent to you previously.
Similar to findings made at your Haddam Neck nuclear facility between November 1995 and November 1996, for which cumulative civil penalties in the amount of $650,000 were issued on May 12, 1997, numerous violations and significant regulatory concerns were identified during the inspections involving the three Millstone units. One violation (namely, the significant degradation over time of the liquid radwaste system at Unit 1) was discussed at a predecisional enforcement conference in the NRC Region I office on March 11, 1996. Most of the other violations were discussed at a predecisional enforcement conference at the Millstone facility in Waterford, Connecticut on December 5, 1996. While the conference, which was open to the public, was held to discuss the violations, their causes and your corrective actions, the December 5th conference for Millstone, like the December 4th conference for Haddam Neck, focused on the broader programmatic deficiencies underlying the violations which contributed to the problems at the Millstone Station. Certain additional violations identified subsequent to the December 5, 1996 conference (reference Inspection Report No. 96-09) are also included in this proposal, although they were not covered by the December 5th conference. Mr. R. T. Laudenat of your staff informed Mr. Jacque Durr of the NRC Special Projects Office on February 18, 1997, that you agreed another enforcement conference was not needed to discuss those issues.
The specific violations are described in the enclosed Notice of Violation (NOV) and Proposed Imposition of Civil Penalties (Notice). Many of the violations are categorized within two related programmatic areas, namely (1) longstanding deficiencies in engineering programs and practices, some of which led to safety equipment being inoperable or degraded for extended periods (these violations are described in Section I of the Notice); and (2) the failure to have effective corrective action programs and practices, which resulted, in many cases, in deficiencies previously identified by your staff not being corrected (these violations are described in Section II of the Notice). In addition to these two programmatic areas, a number of violations of your technical specifications (TS) were also identified, some of which were caused by inadequate engineering or inadequate corrective actions. Violations of the TS are described in Section III of the Notice. Additional violations assessed civil penalties are described in Sections IV of the Notice, of which several are of particular concern, including the recurring problems of inadequate procedures, and failures to follow procedures, at the Millstone facilities.
With respect to engineering issues, the violations included several examples of failing to assure that the plant was maintained in the configuration as designed and specified in the licensing basis; making design changes to the facility without performing adequate safety evaluations to assess the consequences (at times the evaluations were narrowly focused); and not updating the Updated Final Safety Analysis Report (UFSAR) as required when modifications were completed, which represented a programmatic weakness in the process for maintaining the accuracy and consistency of the UFSAR. As a result of these engineering failures, margins of safety for certain safety related equipment were reduced, at times for extended periods, and TS were at times violated.
With respect to the corrective action issues which are described in Section II of the enclosed Notice, management deficiencies in your program and practices for identifying and correcting problems adversely affected the operation of the Millstone units. For example, the NRC special inspection report dated September 20, 1996, noted numerous problems with corrective action processes, including instances where degraded and nonconforming conditions were not promptly corrected, as well as instances where line management did not respond to findings of your own quality assurance (QA) department and did not address the root causes of issues in a timely manner. The team also found several cases where your staff identified design bases issues that were inappropriately dispositioned through the use of administrative controls or temporary modifications, rather than by restoring the affected systems to their original configurations in a timely manner. Furthermore, while the team found that QA audits and third party reviews were generally effective in identifying programmatic weaknesses, management's responses to the findings were often slow and incomplete. For example, one of the violations in the attached Notice relates to the fact that while your own audits identified that your Nonconformance Report procedure was inadequate because there were no procedural controls to ensure timely resolution of nonconforming conditions, this matter went uncorrected for an extended period. Also, one of your Adverse Condition Reports (ACR), issued in May 1996, identified a programmatic breakdown in the ACR program implementation.
Although the violations described in the enclosed Notice did not result in any actual consequences to public health and safety, many of these violations and underlying causes were long-standing and indicative of a deficient safety culture, fostered by plant and corporate management, which neither set high standards or actively encouraged workers to identify and report safety issues or act upon issues once they were reported. Those deficiencies, which existed at all three units to varying degrees, have contributed to the units remaining in an extended shutdown. Also, the Millstone site has been designated as a Category 3 facility on the NRC "Watch List" as a result of the numerous problems identified by both the NRC and your staff.1 As such, the units will remain shut down until adequate programs have been established and demonstrated to the NRC to be effective. To ensure such improvement, the NRC issued a Confirmatory Order to Northeast Nuclear Energy Company (NU) on August 14, 1996, requiring independent third party oversight of corrective actions for design and plant configuration.
At the December 5, 1996 predecisional enforcement conference, you admitted all the violations that formed the basis for that conference, described your assessment of the root causes, and presented your corrective actions to address these issues. You acknowledged your failures to properly implement an effective design process, adequately maintain design basis documents, and conduct adequate safety evaluations. You noted that there was a focus on justifying deficiencies, rather than correcting problems, and you recognized that there were significant deficiencies at Millstone that must be fully addressed before you could contemplate restart of the units.
You also acknowledged that many of the issues identified during the inspections had their roots in the ineffective leadership provided by your management, who failed to establish and communicate adequate performance standards. It is clear that senior management did not foster an environment and culture where managers and supervisors were aggressive in correcting problems or sensitive to employees who brought forward such concerns. In the past year, the NRC performed a special review of the handling of employee concerns and allegations at the Millstone facility since 1985. The September 1996 report by the NRC Independent Review Group indicated that an unhealthy work environment, which did not tolerate dissenting views or welcome or promote questioning attitudes, has existed at Millstone for at least several years. That report also indicated that many of the cultural issues which lie at the root of the company's problems had been recognized by licensee management as early as August 1991.
For example, three of your internal reports issued since that time indicated a lack of respect and trust between employees and management, insufficient management sensitivity to employee concerns, persistent attitudes impeding effective problem identification and resolution, and an arrogant management style that had eroded employee trust and confidence and contributed to repeated failures to correct clearly identified problems. Also, some employees who brought forward concerns, including design issues, were discriminated against, as noted in three civil penalties issued by the NRC to you since 1993 for such instances. In essence, these findings reflect the lack of effective leadership at Millstone.
Consequently, on October 24, 1996, another Order was issued to you requiring that, prior to restart, you develop and submit to the NRC a comprehensive plan for reviewing and dispositioning safety concerns raised by your employees and ensuring that employees who raise safety concerns can do so without fear of retaliation. That Order also required that you retain an independent third party to oversee implementation of the comprehensive plan, which you have done, as noted in your January 14, 1997 letter to the NRC. It is crucial that this oversight be effective. As you indicated at the December 5, 1996 enforcement conference, in order to correct Millstone's problems and establish the necessary safety culture and safety conscious environment, it is important that line management perform effective self assessments, champion and support the oversight organizations (including staffing them with some of Millstone's best employees), lower the threshold for identifying issues, support the employee concerns program, and effectively resolve employee concerns.
The violations in the enclosed Notice have been categorized in accordance with the NRC Enforcement Policy (NUREG 1600) as follows:
The violations in Part I related to inadequate engineering are categorized at Severity Level II. This Severity Level is warranted for the substantial and longstanding failures to meet design control requirements and to maintain the licensing bases. This has resulted in a very significant regulatory concern, as indicated by a broad breakdown in the control of licensed activities.
The violations in Part II associated with corrective actions are categorized at Severity Level II. This Severity Level is warranted to reflect the longstanding unsatisfactory performance in identification and correction of significant conditions adverse to quality.
The violations of Technical Specifications in Part III involving inoperable equipment and degraded conditions are categorized at Severity Level II. The eight identified violations, a number of which could individually be categorized at Severity Level III, represent an overall lack of attention to detail regarding compliance with Technical Specifications.
The violations in Part IV related to failures in implementing various aspects of the quality assurance program are categorized at Severity Level III. This Severity Level is warranted to reflect the significant concerns with regard to quality assurance programs at the Millstone site.
Therefore, in consideration of (1) the degree of noncompliance with NRC requirements, (2) the high regulatory significance that the NRC attaches to the significant conditions adverse to quality that existed at Millstone, and the importance of effective management and oversight to ensure compliance with NRC requirements and achievement of a safety conscious environment that encourages employees to bring forth and resolve concerns, (3) the need to ensure that similar management oversight is maintained at Seabrook, and (4) the importance of sending a similar message to the nuclear industry regarding the importance of such oversight, I have been authorized, after consultation with the Commission, to issue the enclosed Notice of Violation and Proposed Imposition of Civil Penalties in the cumulative amount of $2,100,000 for the violations discussed above. In arriving at the cumulative amount of the civil penalties, the staff proposes to exercise discretion, pursuant to Section VII.A.1 of the NRC Enforcement Policy, and increase the amounts consistent with the regulatory concern present in this case. I note that but for the extended shutdown of all three units, the civil penalties may have been higher.
In assessing the penalty in this case, consideration was given to the varying degrees of significance and duration of the violations described in the four parts of the Notice as well as the number of examples of the violations. This penalty is comprised of $500,000 for the violations in Part I of the Notice; $1,000,000 for the violations in Part II; $500,000 for the violations in Part III; and $100,000 for the violations in Part IV.
Finally, the violations described in the Notice are not the sum total of all apparent violations present or identified during the various inspections, but serve to represent the systemic nature of the significant regulatory problems existing at the Millstone facility. Other apparent violations described in the inspection reports referenced in the Notice are not being addressed in this enforcement action. Nevertheless, they need to be considered as part of your corrective actions.
You are required to respond to this letter and should follow the instructions specified in the enclosed Notice when preparing your response. The NRC will use your response, in part, to determine whether further enforcement action is necessary to ensure compliance with regulatory requirements.
In accordance with 10 CFR 2.790 of the NRC's "Rules of Practice," a copy of this letter, its enclosure, and your response will be placed in the NRC Public Document Room (PDR). To the extent possible, your response should not include any personal privacy, proprietary, or safeguards information so that it can be placed in the PDR without redaction. Should you have any questions concerning this letter, please contact Mr. James Lieberman, Director, Office of Enforcement, at (301) 415-2741.
Sincerely,
L. Joseph Callan
Executive Director for Operations
Docket Nos. 50-245; 50-336; 50-423
License Nos. DPR-21; DPR-65; NPF-49
Enclosure:
Notice of Violation and Proposed
Imposition of Civil Penalties
cc w/encl:
M. H. Brothers, Vice President -Millstone, Unit 3
J. McElwain, Unit 1 Recovery Officer
M. Bowling, Jr., Unit 2 Recovery Officer
D. M. Goebel, Vice President, Nuclear Oversight
D. Amerine, Vice President for Engineering and Support Services
P. D. Hinnenkamp, Director, Unit Operations
F. C. Rothen, Vice President, Work Services
J. Stankiewicz, Training Recovery Manager
R. Johannes, Director -Nuclear Training
S. J. Sherman, Audits and Evaluation
L. M. Cuoco, Esquire
J. R. Egan, Esquire
V. Juliano, Waterford Library
J. Buckingham, Department of Public Utility Control
S. B. Comley, We The People
State of Connecticut SLO Designee
D. Katz, Citizens Awareness Network (CAN)
R. Bassilakis, CAN
J. M. Block, Attorney, CAN
S. P. Luxton, Citizens Regulatory Commission (CRC)
Representative T. Concannon
E. Woollacott, Co-Chairman, NEAC
NOTICE OF VIOLATION
AND
PROPOSED IMPOSITION OF CIVIL PENALTIES
Northeast Nuclear Energy Company Docket Nos.
50-245, 336, 423
Millstone Station Units 1, 2, and 3 License Nos.
DPR-21, DPR-65, NPF-49
EA Nos.
96-034; 96-067; 96-086;
96-106; 96-145; 96-183;
96-197; 96-198; 96-331;
96-332; 96-333; 96-350;
96-351; 96-352; 97-141
During NRC inspections conducted between October 24, 1995, and December 31, 1996, violations of NRC requirements were identified. In accordance with the "General Statement of Policy and Procedures for NRC Enforcement Actions," NUREG-1600, the Nuclear Regulatory Commission proposes to impose civil penalties pursuant to Section 234 of the Atomic Energy Act of 1954, as amended (Act), 42 U.S.C. 2282, and 10 CFR 2.205. The particular violations and associated civil penalties are set forth below:
I. VIOLATIONS RELATED TO INADEQUATE ENGINEERING
A. ERRORS IN DESIGN BASIS DOCUMENTS 10 CFR Part 50, Appendix B, Criterion III, "Design Control," states, in part, that measures shall be established to assure that applicable regulatory requirements and the design basis for those structures, systems, and components to which this appendix applies are correctly translated into specifications, drawings, procedures, and instructions. These measures shall include provisions to assure that appropriate quality standards are specified and included in design documents and that deviations from such standards are controlled. Additionally, design control measures shall provide for verifying or checking the adequacy of design, such as by the performance of design reviews, by the use of alternate or simplified calculational methods, or by the performance of a suitable testing program.
Contrary to the above, the licensee did not translate design features into work instructions, did not verify the adequacy of designs, and did not adequately establish design measures, as evidenced by the following examples, each of which constitutes a separate violation.
1.*2 In 1978 and 1988, spent fuel pool (SFP) rerack modifications were made at Unit 1; however, the licensee did not translate the 0.5 inch diameter siphon break hole design feature into proper work instructions for incorporation into the modified SFP return piping. As a result, the licensee operated the SFP cooling system without the siphon break holes until the situation was identified by the licensee in August 1995, and corrected in November 1995. (01012)
2. In January and February 1994, the licensee did not properly translate a design requirement into adequate instructions for the reactor building component cooling water (RBCCW) system at Unit 1. Specifically, various design information, such as values of RBCCW flow and temperature, was provided by the licensee to one of its vendors (Holtec) to perform analyses to define acceptable hold times prior to fuel movement during refueling outage (RFO) No. 14. These hold times were then incorporated into Special Procedure (SP) 94-1-7 which was used to perform a Unit 1 full core offload during RFO 14. Although the licensee instructed Holtec to use a normal (expected) RBCCW flow of 1250 GPM in their analyses, there were no specific instructions in SP 94-1-7 for the operators to control RBCCW flow to 1250 GPM. (01022)
3. As of March 14, 1996, the licensee did not identify design inputs potentially impacting the Unit 1 SFP cooling system flow model which had been developed by its vendor (Holtec) to technically support a license amendment request describing the use of a shutdown cooling (SDC)/SFP cooling system cross-connect modification. Specifically, the temporary TriNuclear filter assembly located and used in the SFP was not evaluated for its impact on the thermal and hydraulic design work performed in 1995 in support of the license amendment. Also, the SFP cooling system flow model had not been updated to reflect recent piping changes that installed a thermal expansion loop. In addition, the licensee did not implement adequate design verification activities regarding the Unit 1 SFP cooling system flow model developed by its vendor in that the SFP cooling system flow model was not formally verified against actual plant data. (01032)
4. As of March 11, 1996, design control measures associated with a temporary modification (bypass jumper 2-95-045, dated April 14, 1995) to the Unit 2 reactor building closed cooling water (RBCCW) surge tank, were inadequate to assure seismic capability. Specifically, Calculation 95-ENG-1198 M2, Revisions 1 and 2, dated April 14, 1995, and April 3, 1996, respectively, used to support the modification, contained numerous errors in assumptions and calculations, including inaccurate bolt dimensions, omitted seismic loads and nonconservative response spectra. Also, the installed design was not in accordance with the approved temporary modification design package, in that the installation included the use of ropes and hoists (rigging). (01042)
5. Design control measures were inadequate to assure that the design basis requirements for the Unit 2 post accident hydrogen monitoring system and post accident sampling system were maintained. Specifically, in October 1995, the licensee identified that these systems did not meet the single failure criterion because a loss of one vital 125-vDC bus would render the system inoperable because a flow path could not be established in that both trains of containment monitoring are isolated; however, instead of correcting the deficiency, the licensee implemented a procedure change and a bypass jumper as a compensatory measure on January 12, 1996, and that compensatory measure did not preserve the design basis. (01052)
6. Design control measures were not adequately established for the steam generator replacement modification (ABB-CE Calculation 006-AS92-C-010, "Millstone Unit 2 LOCA Containment Pressure/Temperature Analysis for Steam Generator Replacement," dated October 15, 1992), as evidenced by the following examples:
a. NUREG 0737 (committed to by the licensee and confirmed by Order, dated July 10, 1981), Item II.F.1.6, "Containment Hydrogen Monitor," stated that if an indication is not available at all times, continuous indication and recording must be functioning within 30 minutes of the initiation of safety injection. On March 14, 1983, NRC issued an Order confirming the licensee's commitments on post-TMI related issues that indicated that Item II.F.1.6 was completed. In a letter dated March 27, 1984, the licensee stated that it was unable to satisfy the 30 minute requirement of NUREG 0737, Item II.F.1.6, because the hydrogen monitors must remain isolated until containment pressure is between 0 and 10 psig. The letter stated that containment pressure for the design basis Loss of Coolant Accident (LOCA) will be less than 10 psig in approximately three hours after the initiation of the event. However, due to the resulting higher peak containment pressure from the modification, the hydrogen monitors could not be placed in service for 24 hours.
b. NUREG 0737, "TMI Action Plan Requirements," Item II.B.3, "Post Accident Sampling Capability," requires the capability to promptly obtain reactor coolant and containment atmosphere samples. The combined time allotted for sampling and analysis should be three hours or less from the time a decision is made to take a sample. In a letter to the NRC, dated November 1, 1982, the licensee stated that the entire sampling operation, including preparation, sample recirculation, sample isolation, purge of the system piping, sample retrieval, transport to the chemistry laboratory, and analysis, for both reactor coolant and containment air samples, can be completed within 3 hours. In a safety evaluation report (SER) dated June 14, 1984, the NRC stated that based on a review of the licensee's letters dated January 12 and April 19, 1984, the provisions of NUREG 0737, Item II.B.3 were satisfied. The SER stated that the licensee has provided the capability to promptly sample and analyze containment atmosphere samples within three hours from the time the decision is made to take the sample. However, due to the resulting higher peak containment pressure resulting from the modification, the licensing basis requirement to promptly sample and analyze containment atmosphere samples within three hours could not be met because the containment atmosphere post-accident sampling system could not be placed in service for 24 hours. (01062)
7. Design control measures were inadequate to assure that the Design Basis Documentation Packages (DBDPs) at Units 2 and 3 were adequate source documents for design applications. Nuclear Generation Procedure (NGP) 5.28, "Development, Review, Update and Use of Design Basis Documentation Packages (DBDPs)," Revision 1, dated August 2, 1994, states that DBDPs are quality related design documents and are acceptable for use during safety-related design applications. The NU Design Control Manual states that design input source documents include DBDPs. However, as of March 20, 1996, programmatic inadequacies were identified in the development, revision, and control of DBDPs, in that DBDPs were developed using information spot checks with little field verification, were not being updated through the design change notice (DCN) process, and were not being maintained as quality records. (01072)
8.* Design control measures associated with Engineering & Design Coordination Report T-P-06677, dated August 1, 1985, were inadequate. Specifically, T-P-06677 introduced two 0.375-inch restricting orifices, RO-153A and B, into the Unit 3 service water (SW) system without assuring that the system would still adequately mitigate water hammer effects (a previous calculation, Stone and Webster Engineering Corporation (SWEC) P(T)-1070, dated January 26, 1985, found that a 0.5 inch orifice was acceptable). (01082)
9. Design control measures associated with temporary modifications at Unit 3, namely, housekeeping filters taped on battery room fire dampers 3HVC*DMPF33, 38, 40, and 43, were inadequate to assure operability of the fire dampers. Specifically, filters were installed in 1984 without any measures to ensure that the ventilation systems would provide adequate ventilation or that the dampers would be able to close in the event of a fire. The condition existed until April 1995 when Calculation 95-ENG-1109 MS evaluated the filter impact on air flow to the battery rooms and concluded that the ventilation systems in the battery rooms could adequately ventilate the rooms with clean filters installed. However, as of May 20, 1996, the lack of acceptance criteria for the cleanliness requirements for the air filters, and the impact on the operation of the fire dampers, had not been evaluated. (01092)
10. Design control measures were inadequate to assure operability of the Unit 3 turbine-driven auxiliary feedwater (TDAFW) pump following a loss of all electrical power. Specifically, Calculation 91-074-324M3, dated March 1, 1993, assumed an incorrect and nonconservative steam exhaust pressure, which had the potential to adversely impact the effectiveness of operator actions contained in Emergency Operating Procedure EOP 35 ECA-0.0, Revision 11, dated October 3, 1995, to assure TDAFW pump operability in that the higher turbine exhaust pressure may have limited turbine horsepower to less than required. (01102)
11.* Design control measures were inadequate to assure that the Unit 3 TDAFW pump containment isolation valves (3FWA*HV36A, B, C, and D) were capable of isolating the containment under design basis accident conditions, as required by Unit 3 TS 3.6.3, "Containment Isolation Valves." Specifically, bench testing conducted on March 30, 1996, demonstrated that since initial installation the valves were only capable of remaining closed when exposed to a differential back pressure of up to 8 psid, rather than the design-basis peak containment accident pressure of 38.6 psig specified in Millstone 3 FSAR Section 6.2, "Containment Systems." This resulted in these containment isolation valves being declared inoperable and requiring the Unit 3 shutdown on March 30, 1996. (01112)
12. Design control measures were inadequate to assure that the design basis was correctly translated into drawings and that the selection of material and parts was reviewed for the suitability of application to the safety-related function of the affected component. Specifically, the Millstone Nuclear Power Station Unit 3 FSAR in Table 3.2-1 lists the letdown heat exchanger as an ASME III, Class 2 component on its tube side. The ASME Code, Section III (1983 edition, summer 1983 addenda) specifies in subsection NC-2123 the requirements for the design allowable stress values for ASME III, Class 2 material. However, as of November 1993, a plant design change request (PDCR) MP3-90-243, Revision 1, did not correctly translate the Unit 3 design basis into the revised drawings for the letdown heat exchanger. Specifically, flange studs were replaced with new studs and credit was taken for a minimum yield strength that was greater than the design allowable stress values for ASME III, Class 2 material. Furthermore, the design change control measures applied to PDCR MP-3-90-243 did not assure adequate review of the modification detail in that the replacement of a certain number of the original letdown heat exchanger studs with the specified material was not controlled with regard to the suitable application of structural integrity to the safety-related Class 2 pressure boundary. (01122)
13.* Provisions to assure that appropriate quality standards are specified and included in design documents and that deviations from such standards are controlled were inadequate. Specifically, filter regulators originally installed upstream of 48 ASCO safety related solenoid-operated valves (SOVs) to limit the differential pressure on the SOVs in accordance with SWEC design specification No. 2472.110-185, "Electro-Hydraulic and Air-Operated Control Valves," were procured as non safety-related components. This resulted in the installation of 48 SOVs in Unit 3, procured in accordance with SWEC design specification No. 2472.110-185, that could be subject to air pressure (e.g. 80 psig) in excess of the component designed maximum operating pressure differential (e.g. 60 psid) if there was a failure of the non safety-related air regulator located upstream of each SOV. (01132)
14.* At some unknown time subsequent to initial licensing, an inadequate modification to the Unit 2 service water system common strainer backwash line was made that added a horizontal piping section to the existing vertical section. This resulted in minor leakage past the strainer backwash valves forming an ice plug when it contacted the horizontal leg of piping that was exposed to a long period of sub-freezing temperatures. There were no records of a formal engineering review of this modification. This inadequate modification permitted the formation of an ice plug which rendered the service water system inoperable on January 8, 1995. (01142)
B. INADEQUATE, OR LACK OF SAFETY EVALUATIONS AND FAILURES TO UPDATE THE FINAL SAFETY ANALYSIS REPORT
10 CFR 50.59, "Changes, tests and experiments," in part permits the licensee to make changes to its facility and procedures as described in the safety analysis report and conduct tests or experiments not described in the safety analysis report without prior Commission approval provided the change does not involve a change in the technical specifications or an Unreviewed Safety Question (USQ). The licensee shall maintain records of changes in the facility and these records must include a written safety evaluation which provides the bases for the determination that the change does not involve a USQ.
10 CFR 50.71(e) requires, in part, a licensee to update the FSAR originally submitted as part of the application for the operating license to assure that the information included in the FSAR contains the latest material developed. The updated FSAR shall be revised to include the effects of, in part, all safety evaluations performed by the licensee in support of conclusions that changes did not involve a USQ.
10 CFR 50.9(a) requires, in part, that information provided to the NRC by a licensee or information required to be maintained by a licensee shall be complete and accurate in all material respects.
1. Unit 3 TS 3.7.1.2, "Auxiliary Feedwater System," requires that in operating Modes 1, 2, and 3 at least three independent AFW pumps and associated flow paths are required to be operable.
Contrary to the above, on May 10, 1994, the licensee made a procedural change to shut the TDAFW pump discharge isolation valve during startup and shutdown operations, rendering the TDAFW pump inoperable, when the motor-driven AFW (MDAFW) pumps were being used for steam generator water level control. The licensee's safety evaluation to support this change was inadequate in that the need to revise the TS was not recognized. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01152)
2. Unit 2 UFSAR, Chapter 7, states that the engineered safety features actuation system is designed to meet the provisions of Institute of Electrical and Electronic Engineers (IEEE) 279-1971, "Criteria for Protection Systems for Nuclear Power Generating Stations." IEEE 279 specifies, in part, that the system be designed to meet the single failure criterion.
Contrary to the above, on January 12, 1996, the licensee approved Revision 18 to operating procedure (OP) 2313C, "Containment Post-Incident Hydrogen Control," to address the fact that the as-built containment gas and particulate radiation monitors, the post-accident sampling system, and the hydrogen monitors did not meet the single failure criterion (the licensee had identified that the loss of one vital DC bus would render these systems inoperable). This revision was made without an adequate safety evaluation to ensure that it did not involve a USQ, in that the possibility of a malfunction of a different type than previously evaluated was not appropriately considered and evaluated. The safety evaluation was also inadequate in that the design bases were not appropriately considered. (01162)
3. Unit 1 UFSAR, Section 11.2, "Liquid Waste Management Systems," (LWMS), states, in part, that the LWMS are designed to be operated and maintained to collect, store, process, and dispose of, or recycle, safely, all radioactive or potentially radioactive liquid waste generated by plant operation. The Radwaste Building and equipment arrangement provide assurance that the Radwaste Building will form a radioactive waste boundary and prevent excessive radioactive material release.
Contrary to the above, the licensee changed the LWMS and as of February 9, 1996, did not perform an evaluation to ensure that the change did not involve a USQ. Specifically, the radwaste facility would not perform the function for which it was designed due to long standing leakage of radioactive waste, deterioration of numerous pipe flanges and valve bodies, significant cracking and deterioration of the sludge tank boundary, and overfill of the spent resin tank resulting in an uncontrolled release and dispersal of highly radioactive material in that room, and deterioration of transfer piping, pipe supports and restraints. As a result, not all radioactive liquid waste was stored or processed by the LWMS as described in the UFSAR. The licensee, by its inaction over years to correct the degradation of the LWMS, made a decision to maintain the LWMS in a manner different from that described in the UFSAR. Therefore, the facility was changed but no evaluation existed to determine that the conditions did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect the differing use of the LWMS from that described in the UFSAR. (01172)
4. Unit 1 UFSAR, Section 9.1.3.3, states that water circulates to the heat exchangers, filter demineralizer, and back through diffusers at the bottom of the SFP.
Contrary to the above, from 1988 until November 1995, the facility was not as described in the FSAR in that a Unit 1 spent fuel pool cooling (SFPC) system modification, PDCR 1-24-88, SFP Rerack, existed that removed the SFPC diffusers without an adequate safety evaluation. The safety evaluation for the PDCR performed prior to the change was inadequate in that the removal of the SFPC diffusers was not addressed. An adequate safety evaluation that addressed the removal of the SFPC diffusers was not conducted until November 1995. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01182)
5. Unit 1 UFSAR, Section 8.3.1.1.5.1, "Diesel Generator System," states, in part, that the starting air system consists of one AC motor-driven compressor capable of recharging the empty dual air receivers in 30 minutes. This compressor is backed up by a DC air compressor. The two air receivers are each capable of a minimum of three independent cold diesel engine starts without recharging when the starting air pressure is 250 psig. The air starting system automatically maintains the necessary inventory of compressed air. The two air compressors are started if the pressure in the reservoirs falls to 225 psig and are stopped when the pressure reaches 250 psig.
Contrary to the above:
a. From at least February 14, 1991, to 1996 the facility was not as described in the UFSAR in that the diesel starting air receiver discharge check valve internals were removed, which defeated the capability for each air receiver to provide three independent cold diesel engine starts. No evaluation existed to determine that this change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change.
b. Prior to December 31, 1996, the Emergency Diesel Generator (EDG) starting air system was configured in a manner different than described in the UFSAR in that (1) while the ability to start the diesel engine three times at 250 psig without recharging the receivers was successfully demonstrated in the preoperational test, no supporting documentation was found that provided reasonable assurance that the receivers would contain sufficient inventory for three starts when the air receiver pressure is as low as 220 psig; (2) both compressors do not simultaneously receive a start signal; and (3) while the AC compressor starts at 225 psig, the DC compressor starts at 220 psig. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01192)
6. Unit 1 UFSAR, Section 8.3.2.2, states that the Class 1E 125 vDC power sources and the DC distribution system have sufficient independence, redundancy, and testability to perform their safety functions assuming a single failure. The Class 1E 125 vDC power system consists of two redundant and independent DC systems.
Contrary to the above, since initial construction, an electrical separation deficiency existed which constituted a change to the facility as described in the UFSAR. Specifically, on April 11, 1995, the licensee identified an electrical separation deficiency associated with a feedwater regulating valve (FRV) interlock, due to its dependency on both 125 vDC logic trains. No evaluation existed to determine that the change did not constitute a USQ. Further, this change to the facility as described in the UFSAR remained until November 4, 1995 without a written safety evaluation in that the licensee chose to resolve the issue using an analytical basis without a supporting safety evaluation rather than restore the configuration as described in the UFSAR. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01202)
7. Unit 2 UFSAR, Section 9.2.3.3, states that (1) the operator does not insert the shutdown group of control element assemblies (CEAs) until the cooldown is completed; and (2) the boron concentration is increased to the cold shutdown value prior to the cooldown of the plant.
Contrary to the above, from initial licensing until July 7, 1996, Unit 2 OP 2206, "Reactor Shutdown," and OP 2207, "Plant Cooldown," required operators to insert all shutdown group CEAs prior to starting a plant cooldown, and allowed a plant cooldown to proceed prior to the boron concentration being increased to the cold shutdown value. This constituted a change in procedures described in the FSAR. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01212)
8. Unit 3 UFSAR, Section 8.3.1.1.7, "Alternate AC Design Criteria and Compliance," describes the licensee's response to 10 CFR 50.63 and states that (1) 4160-V power cables are protected from adverse weather by running the cables almost entirely in buried ductbanks, except for a small transition area where the power cables are supported by rigidly mounted cable trays, (2) a start and full load test of the Station Blackout (SBO) EDG is performed every refueling outage, and (3) the surveillance and maintenance procedures for SBO equipment are designed and maintained with due consideration for vendor recommendations, the history of past maintenance practices, and engineering judgement.
Contrary to the above, as of March 11, 1996; (1) two approximately four foot sections of 4160-V cable were not protected from adverse weather in that they were not in buried ductbanks or supported by rigidly mounted cable trays; (2) the credited tests of the SBO EDG did not test the EDG start times and did not reach the expected accident loads; and (3) no maintenance or surveillance had been performed on the electrical support equipment for the SBO EDG despite recommendations in the related vendor manuals. This as-built configuration of the plant and accompanying maintenance and surveillance practices constituted a change in the facility from the description in the FSAR. No evaluation existed to determine that the inaccuracy did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01222)
9. Unit 3 UFSAR, Section 9.2.1, "Service Water System," describes the SW system and includes a description of the motor control center (MCC) and rod control area booster pumps and the design features that provide the automatic valve actuation and pump start.
Contrary to the above, on May 3, 1990, the licensee changed the facility as described in the FSAR by installing a temporary modification in the Unit 3 SW system which added jumpers to the booster pump initiation circuit in order to address a fire protection concern regarding both trains of SW being in the same fire area. This temporary modification, which was still in effect in May 1996, defeated portions of the automatic initiation and alignment of the booster pumps, and added steps to alarm response procedures to prompt the operator to manually align and start the booster pumps when needed. While a safety evaluation was performed, it was inadequate in that it did not address (1) the substitution of a manual operator action for an automatic feature and (2) the removal of an automatic pump actuation. Further, the added compensatory alarm response steps were deleted in a subsequent revision to the alarm response procedure without a written safety evaluation being performed. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01232)
10. Unit 3 UFSAR, Section 10.4.9.2, "AFW System-System Description," describes the automatic starts of the TDAFW pump to be either of two signals: low level in two of four steam generators or a sensed loss-of-power event.
Contrary to the above, in the as-built condition prior to 1995, only the SG low-level signal would automatically start the TDAFW pump, constituting a change in the facility from the description in the FSAR. No evaluation existed to determine that the change did not constitute a USQ. Following recognition of the discrepancy, FSAR Change Request 95-MP3-12 deleted the description in the UFSAR of the TDAFW autostart on loss of offsite power so as to match the as-built configuration, without performing a written safety evaluation to assure that the as-found condition did not involve a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01242)
11. Unit 2 UFSAR, Section 6.6.3.1, states that the hydrogen monitoring system is manually initiated within 12 hours following an accident.
Contrary to the above, the licensee's letter to the NRC, dated March 27, 1984, in response to NUREG 0737 (committed to by the licensee and confirmed by Order, dated July 10, 1981), Item II.F.1.6, "Containment Hydrogen Monitor," states that the system is initiated within 3 hours. Following installation of steam generator replacement modification (which included ABB-CE Calculation 006-AS92-C-010, "Millstone Unit 2 LOCA Containment Pressure/Temperature Analysis for Steam Generator Replacement," dated October 15, 1992), the actual time for containment pressure to fall below 10 psig, at which point the hydrogen monitors can be placed in service, was determined to be 24 hours. These conditions constituted changes in the facility as described in the FSAR. An inadequate evaluation existed to determine that the changes did not constitute a USQ in that the licensee failed to identify that the time needed to place the hydrogen monitors in service could no longer be met. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect theses changes. (01252)
12. Unit 3 UFSAR, Section 8.3.1.2.4, "Cables and Routing Analysis," and Table 8.3-2, "Cable in Trays," specified the allowable electrical fill for safety-related cable trays.
Contrary to the above, since initial construction, several trays were filled above the limits which constituted a change to the facility as described in the UFSAR. Specifically, as of May 22, 1996, five safety-related L-service cable trays had electrical fill greater than the allowable 100-percent (i.e., Tray 3TL1070 at 105-percent fill, Tray 3TL2040 at 132-percent fill, Tray 3TL204P at 108-percent fill, Tray 3TL2060 at 132-percent fill, and Tray 3TL210P at 108-percent fill) and four safety-related C-service cable trays had electrical fill greater than the allowable 157 percent (i.e., Tray 3TC402P at 159-percent fill, Tray 3TC442P at 158-percent fill, Tray 3TC4430 at 173- percent fill, and Tray 3TC4620 at 172-percent fill). An inadequate evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01262)
13. Unit 3 UFSAR, Section 9.4.8.1, "Circulating and Service Water Pumphouse Ventilation System," indicated that total exhaust air flow from the circulating and SW pumphouse during the summer and winter months is 8200 cfm and 3100 cfm, respectively.
Contrary to the above, as of May 22, 1996, the calculated total fan flow was 16,500 cfm and 15,500 cfm, respectively, which constitutes a change in the facility as described in the FSAR. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01272)
14. Unit 3 UFSAR, Section 10.4.9.2, "AFW System - System Description," specified the recirculation flow minimum acceptance criteria of 45 gpm for the MDAFW pumps and 90 gpm for the TDAFW pump.
Contrary to the above, as of May 22, 1996, surveillance procedures (SPs) 3622.1 and 3622.2, "MDAFW Pump 3FWA*P1A&B Operational Readiness Tests," and SP 3622.3, "TDAFW Pump 3FWA*P2 Operational Readiness Tests," specified minimum acceptance criteria of 43.2 to 52.8 gpm and 87.3 to 106.7 gpm, respectively, which constitute a change in procedures as described in the FSAR. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01282)
15. Unit 3 UFSAR, Section 8.3.1.1.4.2.e, "Electrical System Protection - Motor Feeder, Emergency Switchgear," for the 4.16-kV safety-related motors stated that an overload condition alarm is set for 125 percent of motor full load current and that the instantaneous overcurrent trip is set at 175 percent of motor locked-rotor current.
Contrary to the above, as of May 22, 1996, the values used in licensee Specification SP-EE-321, Revision 0, "NUSCO Control of Electrical Setpoint Data Base," for the 4.16-kV safety-related motors overload condition alarm and the instantaneous overcurrent trip are 115 and 200 percent, respectively, and the values used in the Stone & Webster document which provided design criteria for protective relay settings, NERM-46, "4.16kV and 6.9kV Station Service Protection Philosophy," are 115 and 190 percent, respectively, which constitutes a change in the facility as described in the FSAR in that the actual settings were based on these documents. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01292)
16. Unit 3 UFSAR, Table 6.2-65, "Containment Penetration," identified the AFW flow control valves as containment isolation valves and indicates that they are motor operated and fail "as is." UFSAR Section 6.2.4, "Containment Isolation System," states that "all air and solenoid-operated containment isolation valves fail in the closed position."
Contrary to the above, as of May 22, 1996, the AFW flow control valves as originally installed are solenoid-operated and fail "open," which constitutes a change in the facility as described in the FSAR. No evaluation existed to determine that the change did not constitute a USQ. In addition, the updated FSAR was not complete and accurate in all material respects in that it did not reflect this change. (01302)
17. Unit 3 UFSAR, Section 8.3.1.1.6, "Alternate AC System Description," states that the alternate alternating current (AAC) system switchgear enclosure contains a battery with a 125 ampere hour rating.
Contrary to the above, as of May 22, 1996, the FSAR was not accurate in all material respects in that the installed battery in the enclosure had a 80 ampere hour rating. The AAC system was installed and tested in August 1993 with the 80 ampere hour rated battery. However, when the UFSAR was updated by the licensee to include the AAC system description, the information provided did not reflect the correct as-installed battery configuration. (01312)
These violations in Sections I.A and I.B represent a Severity Level II problem (Supplement I).
Civil Penalty - $500,000
II. VIOLATIONS RELATED TO INADEQUATE OR LACK OF CORRECTIVE ACTIONS
A. 10 CFR Part 50, Appendix B, Criterion XVI, "Corrective Action," requires in part, that measures be established to assure that conditions adverse to quality are promptly identified and corrected. In the case of significant conditions adverse to quality, the measures shall assure that the cause of the condition is determined and corrective action taken to preclude repetition.
Contrary to the above, the licensee did not assure that conditions adverse to quality were promptly identified and corrected. Moreover, the causes of significant conditions adverse to quality were not determined, nor were corrective actions taken to preclude repetition, as evidenced by the following examples, each of which constitutes an individual violation:
1. On March 30, 1995, the licensee identified that incorrect stud material existed in Unit 1 Reactor Water Cleanup valve 1-CU-3; however, as of April 27, 1995, adequate measures were not established to correct this condition adverse to quality in that the licensee did not perform short term reviews or inspections following the identification of the incorrect stud material to determine if the incorrect bolting material was used in other applications. In June 1995, incorrect studs were identified in other safety-related valves, namely, low pressure coolant injection valves 1-LP-10A&B, 1-LP-29A, and 1-LPA, B & D. (02012)
2. On June 7, 1996, the licensee completed an Event Review Team (ERT) report that assessed the findings of a QA Services audit of the adverse condition report (ACR) process. The ERT report indicated a continued inadequate implementation of the corrective action program at Unit 1, and the licensee did not establish measures to assure that the cause of the condition was determined and corrective actions taken to preclude repetition. Specifically, the ERT root cause report, causal factors, and corrective action plan took credit for a draft Operating Experience Manual which was part of the Nuclear Excellence Plan. This plan was not implemented and, therefore, no corrective actions were taken. (02022)
3. On November 17, 1995, the licensee identified a significant condition adverse to quality at Unit 2. Specifically, a 1992 containment temperature profile analysis was performed using an incorrect RBCCW system flow rate through the shutdown heat exchangers. Upon discovery of the error in November 1995, the licensee issued ACR 8344 to document the issue; however, the ACR was closed without identifying the cause of the error and did not document actions to ensure that the other assumed values in the analyses were correct. (02032)
4. Conditions adverse to quality identified in 1992, related to the adequacy of the environmental qualification (EQ) of the Unit 2 MCC enclosures which surround MCCs B51 and B61, were not corrected. Specifically, in 1993 and 1994, similar additional concerns were identified by the licensee related to assumptions in the EQ analysis, as well as with regard to the operator actions needed following an accident, and the cooling capability of the MCC enclosures. However, when excessive door seal gaps were identified in the Unit 2 MCC enclosures in March 1996, degrading the capability of the MCCs to mitigate the effects of a harsh environment, it was determined that the licensee had not taken or planned corrective actions to address those conditions adverse to quality identified in 1992, 1993, and 1994. (02042)
5. On September 29, 1995, the licensee identified that Unit 2 seismically-qualified, vital switchgear room cooler X-182 would not be available following a seismic event. As a result of modification PDCR 2-064-94, "Vital Switchgear Ventilation System-Service Water Isolation," completed June 22, 1995, cooler X-182 would be isolated in the event of any leakage in the vital switchgear room, including leakage from the non-seismically-qualified fire protection piping above. Although the licensee issued DCN DM2-S-1246-95, "Modification to Fire Protection Piping Cable Spreading Area Turbine Building," on February 27, 1996, to address potential leakage from Victaulic couplings, this corrective action was inadequate because the fire protection system's 2-over-1 seismic design criteria were less conservative than the criteria for the safety-related cooler and switchgear below the piping. As a result, as of May 22, 1996, the licensee had not taken adequate corrective action to assure the availability of cooler X-182 following a seismic event. (02052)
6. In 1993, the licensee identified deficiencies in the maintenance and testing of dual-function containment isolation valves at Unit 2 which resulted in certain of those valves being unable to fulfill their safety function, a significant condition adverse to quality. The licensee's valve maintenance and test program had failed to specify the proper bench-settings or retest requirements for certain pneumatic valves. As a result, certain containment isolation valves would not be able to close against full system pressure in performing their line-break isolation function. The NRC issued an NOV for this issue on February 2, 1994 (NRC Inspection Report 50-245/93-27; 50-335/93-20; and 50-423/93-23). Also, the licensee identified on June 8, 1995, that corrective actions specified to address this significant condition adverse to quality had not been taken. However, as of March 20, 1996, the licensee had not implemented corrective actions for this deficiency. (02062)
7. Procedure NGP 2.40, "Issues Management and Action Tracking," states that Level A and B Adverse Condition Reports (ACRs) represent significant conditions adverse to quality, and specifies that Level A ACRs be resolved within 30 days and Level B ACRs be resolved within 45 days. NGP 2.40 states that Level A ACRs represent events or issues of such importance they deserve the immediate, undivided attention of whatever resources are required to mitigate the consequences, determine the causes, and implement at least sufficient interim corrective measures to prevent recurrence. However, as of May 22, 1996, numerous Unit 2 Level A and B ACRs had not been promptly resolved within the time periods specified by NGP 2.40. Specifically, nine Level A and B ACRs were identified that remained open for over 90 days, with several that had been unresolved for over 9 months. (02072)
8. The environmental qualification required by 10 CFR 50.49 of certain Unit 2 valves subject to a harsh environment was discussed in NRC Inspection Report No. 50-336/88-20, issued on October 14, 1988, and in a related Enforcement Conference conducted on July 20, 1988. At that time, the licensee determined that only one of the 10 valves, an atmospheric dump valve, had terminations that required environmental qualification because this was the only valve that required energization to perform its safety function (i.e., valve opening). The other nine valves, all feedwater or containment isolation valves, were said to reposition to their safe (i.e., closed) positions when their coils are deenergized. The licensee failed to identify, however, that four containment isolation valves also had a safety-related function to open. As a result, in part, until March 26, 1996, seven of those safety significant solenoid valves (listed in Licensee Event Report (LER) 50-336/96-19) that are required to function in a harsh environment were electrically connected using devices for which no record of qualification existed for that environment. Thus, equipment required to perform post-accident functions, including containment air radiation and hydrogen monitoring, sampling, reactor coolant charging, pressurizer auxiliary spray, and containment hydrogen purge were not demonstrated to be environmentally qualified. (02082)
9. A third-party audit entitled "Station Blackout Assessment," Report 24-00116, Revision 0, dated October 1994, had identified deficiencies in the licensee's implementation of the NRC's SBO requirements in 10 CFR 50.63 at Units 2 and 3. The deficiencies included potentially inadequate loading calculations, voltage drop calculations, and battery sizing calculations. In addition, the licensee's failure to address the issues was identified in a QA surveillance of October 1995 and a Nuclear Safety Engineering Group report of February 1996. However, as of May 22, 1996, the licensee had not taken corrective action to address the deficiencies identified in the third-party audit of SBO equipment. (02092)
10. Licensee Audit Reports Nos. A25092, A21065, A22065 and A23065, entitled "Nonconformance Reports," dated July 14, 1994, identified that NGP 3.05, "Nonconformance Reports," was inadequate in that there were no procedural controls associated with the timeliness of resolving nonconforming conditions, a significant condition adverse to quality. However, as of March 11, 1996, the licensee had not taken measures to correct this condition adverse to quality to assure the timely resolution of identified nonconformances, as evidenced by several uncorrected MP3 nonconformance reports (NCRs), which dated back to 1988-1989, associated with damaged air-operated valves in the Unit 3 Volume Control System, deficiencies associated with 480V load centers, and nonconforming conditions in the containment recirculation spray system (RSS). (02102)
11. Between May 1990 and March 1996, a Unit 3 temporary modification resulted in the deletion of the SW booster pump autostart interlock described in Unit 3 UFSAR Section 9.2.1. A special instruction to manually restart the booster pumps was subsequently deleted from an alarm response procedure. This constituted a condition adverse to quality because the SW supply to the motor control center/rod control area (MCC/RCA) air handling units would not automatically initiate on high temperature in the return duct. This condition adverse to quality was not previously identified, despite numerous opportunities to do so following installation of this temporary modification, including approximately 70 required monthly audits of temporary modifications by the Operations Department, four reviews by the Plant Operations Review Committee, and the August 1994 reviews associated with the Design Basis Documentation Package program. (02112)
12. On May 20, 1996, Unit 3 safety-related SW booster pump 3SWP*3B was found to be significantly degraded in that its concrete support pedestal had been damaged for an extended but indeterminate period such that there was no longer assurance that the pump would meet applicable seismic requirements; however, this condition had not been previously identified and evaluated by the licensee. (02122)
13. In May 1992, the licensee determined that there was no assurance that there existed an adequate combined inventory of the Unit 3 Condensate Storage Tank (CST) and the Demineralized Water Storage Tank (DWST). Specifically, existing procedures required a minimum combined CST and DWST inventory of 334,000 gallons, even though a minimum of 364,000 gallons was required to meet design basis requirements, because 30,000 gallons of water in the CST were unusable due to the tank configuration. Although a proposed TS change was submitted to the NRC in May 1995 to correct the TS, the proposed change was withdrawn in June 1995 because of other unrelated issues. Also, as of March 11, 1996, the licensee had not revised the applicable procedures or taken interim measures to correct this condition adverse to quality by assuring adequate CST and DWST inventory. (02132)
14. NRC Inspection Report 50-423/95-07, dated April 26, 1995, included a violation for inadequate control of scaffolding that did not prevent safety-related components from being potentially impacted. The licensee response to the NOV, dated June 12, 1995, stated the actions taken to resolve the identified problems including actions to prevent recurrence. However, additional examples of inadequate control of scaffolding with the potential to impact safety-related equipment were identified at Unit 3 on March 12, 1996. (02142)
15. DCN DM3-S-0677-93, dated August 12, 1993, documented that the Unit 3 protective relay criteria documents for safety-related motor design had previously not been adequately controlled. However, as of March 12, 1996, the licensee had not taken adequate corrective measures to control those documents in that Stone & Webster design specifications NERM-45 and NERM-46, which were used as design criteria for protective relay settings, were uncontrolled and inconsistent with the UFSAR and NUSCO specification SP-EE-321. As result, a quench spray pump motor overcurrent relay needed to be reset. (02152)
16. On March 12, 1996, unauthorized temporary I-beams were identified above 3 of 4 Unit 3 RSS heat exchangers. This constituted a significant condition adverse to quality because during a seismic event, the resulting damage from the falling beams could have rendered multiple trains of RSS inoperable. The licensee had no instructions or technical justification for the installation; however, this condition had not been previously identified and corrected by the licensee. (02162)
17. In March 1996, the licensee identified that the No. 9 upper main bearing for the "B" EDG at Unit 2 was significantly degraded, a significant condition adverse to quality, in that excessive bearing-to-shaft clearance was detected. However, the cause of the condition was not determined and corrective actions were not taken to preclude repetition in that on April 17, 1996, the "B" EDG engine experienced severe damage to the upper crankshaft main and connecting rod bearings during surveillance testing from causes related to the earlier No. 9 upper main bearing degradation. (02172)
B. 10 CFR 50.9(a), "Completeness and Accuracy of Information," requires, in part, that the information provided to the Commission by a licensee be complete and accurate in all material respects.
Contrary to the above, the licensee submitted Letter B154600, dated December 13, 1995, to the Commission concerning the Radwaste Facilities at Millstone Unit 1, which was not accurate in certain material respects. Specifically, the letter stated that "Upon determining the degree to which the material conditions had deteriorated, an ACR was initiated to document the findings. The ACR was assigned a significance Level "B", thus requiring a root cause analysis." The letter also discussed the results of a root cause investigation. However, the only Level "B" ACR on this issue was ACR 2372, dated January 18, 1996, and the root cause evaluation associated with ACR 2372 was completed on March 8, 1996. Both of these occurred after the December 13, 1995, letter was issued. (02182)
These violations in Section II.A and II.B represent a Severity Level II problem (Supplement I).
Civil Penalty - $1,000,000
III. VIOLATIONS OF TECHNICAL SPECIFICATIONS
A. Unit 1 TS 3.7.B.1, "Containment Systems, Standby Gas Treatment System," requires that both trains of the SGTS and their associated power sources required for operation of such circuits shall be operable at all times when containment integrity is required.
Contrary to the above, between July 5, 1995 and November 19, 1995 when containment integrity was required, whenever the outside temperature was less than 45F, the B train of the SGTS was inoperable, and whenever the outside temperature was less than 30F, the A train of the SGTS was inoperable. On several occasions during this period the ambient temperature dropped below 45F, with a low of 26F, rendering one or both trains inoperable. Specifically, if actuation of the SGTS had occurred during the time period that the temperature was less than the values stated herein, coincident with a loss of normal power and a single failure in one train, the required negative pressure may not have been maintained throughout the secondary containment, thereby resulting in a reduction of the system's ability to perform its intended safety function. (03012)
B. Unit 1 TS 3.9.B.4, "Auxiliary Electrical System," requires, in part, that when either emergency power source is made or found inoperable for any reason, reactor operation is permissible according to specification 3.5.F/4.5.F.
Unit 1 TS 3.5.F, "Minimum Core and Containment Cooling System Availability," Items 3.5.F.2 and 3.5.F.3 respectively require, in part, that from and after the date that the EDG is made or found to be inoperable for any reason, continued reactor operation is permissible only during the succeeding seven days provided that the gas turbine generator is operable; and from and after the date that the gas turbine generator is made or found to be inoperable for any reason, continued reactor operation is permissible only during the succeeding four days provided that the EDG is operable.
Contrary to the above,
1. On multiple occasions since May 18, 1994, and continuously from
July 14, 1995, until January 1996, the gas turbine generator was inoperable because one of its two fuel forwarding pumps was inoperable and unable to transfer fuel from the fuel storage tank to the gas turbine, and during those times, reactor operation was continued in excess of the succeeding four days;
2. On multiple occasions between May 18, 1994 and January 1996, the EDG was inoperable (taken out of service) at times when the gas turbine was also inoperable because one of its two fuel forwarding pumps was inoperable and unable to transfer fuel from the fuel tank to the gas turbine, and during those times, reactor operation continued. (03022)
C. Unit 1 TS 3.5.B.1, "Containment Cooling Subsystems," requires, in part, that both containment cooling subsystems shall be operable whenever irradiated fuel is in the reactor vessel. A subsystem includes two emergency SW pumps and associated valves.
Unit 1 TS 3.5.F.1, "Minimum Core and Containment Cooling System Availability," requires, in part, that both emergency power sources shall be operable whenever irradiated fuel is in the reactor. TS 3.5.F.2 states that from and after the date that the EDG is made or found to be inoperable, for any reason, reactor operation is permissible only during the succeeding seven days provided that the feedwater coolant injection (FWCI) system subsystem shall be operable. The SW system is a support system for the EDG and the FWCI subsystem.
Contrary to the above, from initial plant operation until 1996, neither containment cooling subsystems, the EDG nor the FWCI subsystem were operable, including periods with irradiated fuel in the reactor vessel. Specifically, these systems were inoperable because the operability for the emergency SW pump motors could not be demonstrated during several postulated loss of intake structure ventilation scenarios, and with the emergency SW pump motors inoperable, there would be insufficient cooling of the containment cooling subsystems, the EDG and the FWCI subsystem. (03032)
D. Unit 1 TS 3.6.F, "Structural Integrity," states that the structural integrity of the primary boundary shall be maintained as specified in TS 3.13. Unit 1 TS 3.13, "Inservice Inspection," states that the structural integrity of ASME Code Class 1, 2, and 3 equivalent components shall be maintained at an acceptable level in accordance with 10 CFR 50.55a(g).
10 CFR 50.55a(g)(4) requires, in part, that components (including supports) which are classified as ASME Code Class 1, 2, and 3 components meet the requirements set forth in ASME Code, Section XI. ASME Code, Section XI, requires that unacceptable flaws be evaluated per Paragraph IWB-3640.
Contrary to the above, between 1984 and 1995, the licensee did not evaluate unacceptable flaws in six ASME Class 1 reactor coolant components (RCAJ-2, RCBJ-1A, RRJJ-4, RREJ-4, RRCJ-4 and CUBJ-18) as required by ASME Section XI, 1986 Edition, Paragraph IWB-3640. The components were placed back into service without flaw analyses with an unacceptable structural integrity and a high probability of abnormal leakage. (03042)
E. Unit 2 TS 3.5.2 and 3.5.3, "Emergency Core Cooling Systems (ECCSs)," requires ECCSs to be maintained operable during plant operations in Modes 1-4. Unit 2 TS 3.6.2, "Containment Spray System," requires two separate and independent containment spray systems to be maintained operable during plant operations in Modes 1-3.
Contrary to the above, prior to February 1996, the ECCS systems and the Containment Spray Systems were inoperable in that several deficiencies with the containment sump strainer existed. Specifically, debris much larger than the screen mesh size could pass through the strainer because (1) two end panels and a center partition of the strainer were constructed of wire mesh greater than the 0.187 square inch designed openings; and (2) there were ten locations where openings as large as 0.25 inches by 2 feet were identified. (03052)
F. Unit 2 TS 3.6.4.1 requires that two independent hydrogen monitors be operable in modes 1 and 2. Unit 2 UFSAR Section 6.6.2.1 states that two full capacity hydrogen concentration monitoring systems are provided outside the containment for periodic or continuous analysis of hydrogen concentration of the containment atmosphere and that uniform mixing of the containment post-accident atmosphere is provided by the post-accident recirculation system.
Contrary to the above, since original installation, during operation in modes 1 and 2:
1. Two full capacity hydrogen monitors were not operable or available for periodic or continuous analysis because vacuum regulating valves PCV-7852 and PCV-7856 would have prevented air flow through the monitor cell when containment pressure was low, thereby rendering both trains of hydrogen monitors inoperable.
2. The hydrogen monitors could not provide continuous analysis of hydrogen concentration of a uniformly mixed post-accident containment atmosphere because the hydrogen monitor suction lines were tied into suction ductwork of the non-vital containment auxiliary circulating fans rather than the vital post-incident recirculation fans. This condition would have resulted in a non-representative containment sample, thereby rendering both trains of hydrogen monitors inoperable (this condition also rendered both trains of the containment atmosphere post-accident sampling system inoperable since the system was installed in 1983). (03062)
G. Unit 2 TS 1.6, "Operable - Operability," defines, in part, that a system, subsystem, train, component or device shall be operable or have operability when it is capable of performing its specified function(s) and when all other auxiliary equipment that is required for the system, subsystem, train, component or device to perform its function(s) is also capable of performing its related support function(s).
Unit 2 TS 3.7.4, "Service Water System," requires that two independent service water loops be operable while in modes 1, 2, 3 and 4. The associated action statement states that with one service water loop inoperable, restore the inoperable loop to operable status within 48 hours or be in cold shutdown within the next 36 hours.
Unit 2 TS 3.0.3 states that when a Limiting Condition for Operation is not met, except as provided in the associated action requirements, within one hour action shall be initiated to place the unit in a mode in which the specification does not apply by placing it, as applicable, in:
1. At least hot standby within the next 6 hours,
2. At least hot shutdown within the following 6 hours, and
3. At least cold shutdown within the subsequent 24 hours.
Contrary to the above, at approximately 1:00 a.m. on January 8, 1996 both independent service water loops were identified as being in a condition such that the service water system and auxiliary equipment, the service water strainers, would not perform their functions, thus requiring entry into TS 3.0.3, and the service water system was not declared inoperable and no action was initiated within one hour to place the unit in a mode in which the specification did not apply. Specifically, at approximately 12:10 a.m. an operator identified that no service water strainer backwash flow existed despite high differential pressure across the service water strainers, a condition for which strainer backwash flow was required. At approximately 1:00 a.m., licensee personnel concluded that an ice plug had formed in a common horizontal backwash line for the service water strainers, which resulted in the inability to backwash the strainers, thus rendering the service water system inoperable but did not declare the service water system inoperable. (03072)
H. Unit 3 TS 3.7.1.2, "Auxiliary Feedwater System," requires that at least three independent steam generator AFW pumps and associated flow paths be operable in Modes 1, 2, and 3. The associated action statement requires that with one AFW pump inoperable, the required pump be restored to operable status within 72 hours or be in at least hot standby within the next 6 hours and in hot shutdown within the following 6 hours. Unit 3 TS 3.0.4 states that entry into an operational mode shall not be made when the conditions for the LCO are not met and the associated action requires a shutdown if they are not met.
Contrary to the above, on at least five occasions (June 1, 1995 (entry into Mode 3), June 3, 1995 (entry into Mode 2), June 4, 1995 (entry into Mode 1), and December 15, 1995 (entries into Mode 2 and Mode 1)), Unit 3 entered an operational mode with an inoperable TDAFW pump in that the pump discharge isolation valves were closed. (03082)
These violations in Section III represent a Severity Level II problem (Supplement I).
Civil Penalty - $500,000
IV. OTHER VIOLATIONS OF NRC QUALITY ASSURANCE REQUIREMENTS ASSESSED A CIVIL PENALTY
A. 10 CFR Part 50, Appendix B, Criterion II, "Quality Assurance Program," states in part that the licensee shall identify the structures, systems, and components to be covered by the QA program. The QA program shall provide control over activities affecting the quality of the identified structures, systems, and components, to the extent consistent with their importance to safety.
Contrary to the above, as of March 14, 1996, the licensee's QA program did not provide control over activities affecting the quality of the Unit 1 SFPC system in that the system was modified and operated in advance of the full knowledge of the quality standards of the SDC system which was part of the modification. Specifically, the licensee installed a cross connect between the SDC system and the SFPC system and declared the systems operable after completing the modification work; however, the licensee did not determine if the SDC system components fully met the QA Category I classification similar to the SFPC system. (04013)
B. 10 CFR Part 50, Appendix B, Criterion V, "Instructions, Procedures, and Drawings," requires in part that activities affecting quality shall be prescribed by documented instructions and accomplished in accordance with these instructions.
1. Vendor manuals for the Unit 3 motor-driven AFW pumps (Bingham Willamette 01M041-001C and -002C) direct that the pumps be lubricated every 30 days if they are normally in standby service. In 1987, that interval was extended to 40 days with the concurrence of the vendor. Surveillance Test Procedures SP 3622.1 and 3622.2 directed the operator to manually prelubricate the pump bearings if the pump had not been operated during the previous 40 days.
Contrary to the above, as of March 20, 1996, the licensee failed to ensure that the 40 day lubrication requirement was met or appropriately changed after the AFW pump surveillance test interval was changed in January 1995 to 90 days. (04023)
2. Unit 3 OP 3208, "Plant Cooldown," Revision 16, Steps 4.3.10 and 4.3.11, requires the operator to monitor reactor plant closed cooling water (RPCCW) system return temperatures from the outlet of the A and B residual heat removal (RHR) heat exchangers to ensure the design maximum RPCCW temperature of 115F is not exceeded. The procedure also requires that operators initiate an ACR and notify system engineering personnel if this temperature is exceeded.
Contrary to the above, during a shutdown on December 1, 1995, Unit 3 operators failed to maintain RPCCW below 115F and failed to initiate an ACR to document and notify system engineering that the temperature had been exceeded, as required by OP 3208. Specifically, the RPCCW temperature at the outlet of RHR heat exchanger A exceeded the 115 F limit and reached a maximum temperature of 120 F. Subsequent to the identification of this occurrence, the licensee identified that during Unit 3 shutdowns on September 9, 1994, and April 15, 1995, the RPCCW temperature limit of 115 F had also been exceeded. (04033)
3. 10 CFR Part 50, Appendix B, Criterion XV, "Nonconforming Materials, Parts, or Components," requires, in part, that measures shall be established to control materials, parts, or components which do not conform to requirements in order to prevent their inadvertent use or installation.
NGP 6.01, "Material, Equipment, and Parts Lists (MEPL) for Inservice Nuclear Generation Facilities," implements the licensee's QA program and procedural controls associated with the classification of safety-related equipment.
a. Contrary to the above, neither NGP 6.01 nor NGP 3.05, "Nonconformance Reports," provided adequate guidance regarding the evaluation of the adequacy of non-QA material identified in safety-related applications. As a result, between 1993 and 1996, approximately 25 MEPL deficiencies that had been identified by the licensee at Units 2 & 3 were not corrected, and the justification for not doing so was inadequate. (04043)
b. Contrary to the above, as of May 22, 1996, several instances were identified in which the requirements of NGP 6.01 were not followed for Unit 2, resulting in the inappropriate reclassification of safety-related equipment as non-safety. Specifically, the technical review requirements of NGP 6.01, section 6.1.2.4, were not properly executed such that required discipline reviews were not completed; the requirements of section 6.1.2.6 were not met in that the specified review verifications were signed prior to reviews; and the requirements of section 6.1.2.2 were not complied with in that revisions of completed individual MEPL determinations were issued which superseded portions of existing MEPL determinations. (04053)
C. 10 CFR Part 50, Appendix B, Criterion XI, "Test Control," requires in part that a test program be established to assure that all testing required to demonstrate that structures, systems, and components will perform satisfactorily in service is identified and performed in accordance with written test procedures that incorporate the requirements and acceptance limits contained in applicable design documents.
1. Contrary to the above, on several occasions between September 30, 1994, and January 2, 1995, written test procedures were not properly performed at Unit 2. Specifically, the licensee failed to follow PI-13, "Evaluation of Dynamic Test Results," which stated that negative load sensitive behavior could not be used to increase motor-actuator capability at the control switch trip for Valve MS-202 (No. 2 steam generator to Terry Turbine steam supply valve), and that thrust calculations were to be updated with dynamic test results prior to the next static test. Consequently, the licensee used an incorrect acceptance criterion and on three occasions erroneously evaluated the design-basis capability of valve MS-202. (04063)
2. Contrary to the above, testing required to demonstrate that components will perform satisfactorily in service was not properly performed in that as of May 21, 1996, test data taken in December 1995 following the May 1995 replacement of safety-related cooling coils for the Unit 3 SW MCC/RCA room coolers, accomplished as part of PDCR MP3-94-122, "3HVR*ACU1A/B Service Water Cooling Coil Replacement," had not been evaluated to assure that the design change had been adequately implemented. Specifically, upon review, the test results differed significantly from the purchase specification, necessitating additional analysis. (04073)
3. 10 CFR 50.55a(f) and (g) require that licensees comply with ASME Code, Section XI requirements associated with inservice testing and inservice inspection. Paragraph IWC-5222(a) of ASME Code (1986), Section XI, requires that hydrostatic testing of systems be conducted at a pressure of at least 1.25 times the corresponding relief valve setting if the system design temperature exceeds 200F.
Contrary to the above, on September 26, 1993, per Engineering Form 31063-1, "Hydrostatic Pressure Test," the licensee accepted hydrostatic test results on the Unit 3 high pressure safety injection (SIH) system, an ASME Code system with a design temperature greater than 200F, at pressures less than 1.25 times the settings of relief valves 3SIH*RV-8851, -8853A, and -8853B. (04083)
4.* 10 CFR 50.55a(a)(3) requires that alternatives to the ASME Code inservice testing and inservice inspection requirements must be authorized by the NRC.
Contrary to the above, as part of PDCR MP3-91-075, dated April 11, 1991, the licensee deferred conducting the ASME Code required hydrostatic testing of the Unit 3 SIH system without approval of the NRC. (04093)
D. 10 CFR Part 50, Appendix B, Criterion XV, "Nonconforming Materials, Parts, or Components," requires in part that measures shall be established to control materials, parts, or components which do not conform to requirements in order to prevent their inadvertent use or installation.
NGP 3.05, "Nonconformance Reports," Section 6.1.1, written to comply with 10 CFR Part 50, Appendix B, Criteria XV and XVI, states that in the field, the NCR is not used to identify deficiencies but to provide engineering direction when a condition adverse to quality cannot be made to conform to requirements or when an organization requires engineering direction concerning an identified deficiency. In the field, deficiencies in installed plant equipment are identified by trouble reports, automated work orders, ACRs, surveillances, inspections, and audits which require a prompt assessment of operability for degraded or nonconforming conditions.
Contrary to the above, on April 8, 1996, the licensee used NCR 1-96-248 (rather than a trouble report, automated work order, ACR, surveillance, inspection, or audit), to identify a degraded concrete base beneath a SW pipe support. As a result, a prompt assessment of operability for this degraded condition on installed plant equipment was not conducted. (04103)
E. 10 CFR Part 50, Appendix B, Criterion XVII, "Quality Assurance Records," requires in part that sufficient records be maintained to furnish evidence of activities affecting quality, and that such records be identifiable and retrievable.
Contrary to the above, as of March 11, 1996, two technical evaluations, entitled "MP3 Service Water Operability Under a Loss of Offsite Power Given a 77F Ultimate Heat Sink Temperature" and "MP3 Service Water Operability During a Steam Generator Tube Rupture Event Without a Loss of Offsite Power Given a 77F Ultimate Heat Sink Temperature," listed as references to support a Unit 3 TS Amendment dated April 28, 1995, were neither retrievable nor retained within the licensee's QA records. (04113)
These violations in Section IV represent a Severity Level III problem (Supplement I).
Civil Penalty - $100,000
V. VIOLATIONS OF NRC REQUIREMENTS NOT ASSESSED A CIVIL PENALTY
A. 10 CFR 50.59, "Changes, tests and experiments," permits the licensee, in part, to make changes to the facility as described in the safety analysis report without prior Commission approval provided the change does not involve a USQ. The licensee shall maintain records of changes in the facility and these records must include a written safety evaluation which provides the bases for the determination that the change does not involve a USQ.
Unit 3 UFSAR, Section 9.4.6, "Emergency Generator Enclosure Ventilation System," describes the EDG room ventilation system, including the room low temperature alarm setpoint of 45F.
Contrary to the above, in October 1995, the licensee changed the EDG room low temperature alarm setpoint from 45F to 52F without performing a written safety evaluation to assure that the change did not involve a USQ. (05014)
This is a Severity Level IV violation (Supplement I).
B. 10 CFR 50.73(a), "Reportable Events," requires that the holder of an operating license for a nuclear power plant (licensee) shall submit an LER for any event of the type described in 50.73(a)(2) within 30 days after the discovery of the event.
Contrary to the above, the licensee did not submit an LER for certain events of the type described in 50.73(a)(2) within 30 days after the discovery of the event. Specifically:
1. On November 9, 1995, a condition prohibited by the Unit 1 TS was identified, involving a loss of secondary containment, because the SGTS was inoperable with the reactor mode switch not in the shutdown condition; however, LER 50-245/95031, which describes this event, was not issued until January 25, 1996.
2. On January 9, 1996, a condition outside the design basis of Unit 1 was identified involving the isolation condenser makeup water being less than the design basis limit; however, LER 50-245/96009, which describes this event, was not issued until March 5, 1996.
3. On March 6, 1996, a condition outside the design basis of Unit 1 was identified involving movement of new fuel assemblies over the SFP; however, LER 50-245/96023, which describes this event, was not issued until April 19, 1996. (05024)
This is a Severity Level IV violation (Supplement I).
Pursuant to the provisions of 10 CFR 2.201, Northeast Nuclear Energy Company (Licensee) is hereby required to submit a written statement or explanation to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, within 30 days of the date of this Notice of Violation and Proposed Imposition of Civil Penalties (Notice). This reply should be clearly marked as a "Reply to a Notice of Violation" and should include for each alleged violation: (1) admission or denial of the alleged violation, (2) the reasons for the violation if admitted, and if denied, the reasons why, (3) the corrective steps that have been taken and the results achieved, (4) the corrective steps that will be taken to avoid further violations, and (5) the date when full compliance will be achieved. If an adequate reply is not received within the time specified in this Notice, an order or a Demand for Information may be issued as to why the license should not be modified, suspended, or revoked or why such other action as may be proper should not be taken. Consideration may be given to extending the response time for good cause shown. Under the authority of Section 182 of the Act, 42 U.S.C. 2232, this response shall be submitted under oath or affirmation.
Within the same time as provided for the response required above under 10 CFR 2.201, the Licensee may pay the civil penalties by letter addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, with a check, draft, money order, or electronic transfer payable to the Treasurer of the United States in the cumulative amount of the civil penalties proposed above, or may protest imposition of the civil penalties, in whole or in part, by a written answer addressed to the Director, Office of Enforcement, U.S. Nuclear Regulatory Commission. Should the Licensee fail to answer within the time specified, an order imposing the civil penalties will be issued. Should the Licensee elect to file an answer in accordance with 10 CFR 2.205 protesting the civil penalties, in whole or in part, such answer should be clearly marked as an "Answer to a Notice of Violation" and may: (1) deny the violations listed in this Notice, in whole or in part, (2) demonstrate extenuating circumstances, (3) show error in this Notice, or (4) show other reasons why the penalties should not be imposed. In addition to protesting the civil penalties, in whole or in part, such answer may request remission or mitigation of the penalties.
In requesting mitigation of the proposed penalties, the factors addressed in Section VI.B.2 of the Enforcement Policy should be addressed. Any written answer in accordance with 10 CFR 2.205 should be set forth separately from the statement or explanation in reply pursuant to 10 CFR 2.201, but may incorporate parts of the 10 CFR 2.201 reply by specific reference (e.g., citing page and paragraph numbers) to avoid repetition. The attention of the Licensee is directed to the other provisions of 10 CFR 2.205, regarding the procedure for imposing civil penalties.
Upon failure to pay any civil penalties due which subsequently have been determined in accordance with the applicable provisions of 10 CFR 2.205, this matter may be referred to the Attorney General, and the penalties, unless compromised, remitted, or mitigated, may be collected by civil action pursuant to Section 234(c) of the Act, 42 U.S.C. 2282c.
The response noted above (Reply to Notice of Violation, letter with payment of civil penalties, and Answer to a Notice of Violation) should be addressed to: Director, Office of Enforcement, U.S. Nuclear Regulatory Commission, ATTN: Document Control Desk, Washington, D.C. 20555 with a copy to the Regional Administrator, U.S. Nuclear Regulatory Commission, Region I, and a copy to the NRC Resident Inspector at the facility that is the subject of this Notice.
Because your response will be placed in the NRC Public Document Room (PDR), to the extent possible, it should not include any personal privacy, proprietary, or safeguards information so that it can be placed in the PDR without redaction. However, if you find it necessary to include such information, you should clearly indicate the specific information that you desire not to be placed in the PDR, and provide the legal basis to support your request for withholding the information from the public.
Dated at Rockville, Maryland
this 10th day of December 1997
1 For example, 17 civil penalties have been issued since 1990 for violations at Millstone, some of which included failures of our corrective action programs to prevent recurrence of problems.
2 Violations annotated with an asterisk (*) are violations occurring beyond the five year statute of limitations period for assessing civil penalties or are violations for which definitive dates to establish their occurrence are unavailable to determine the statute of limitations' applicability. In either case, these violations were not considered for purposes of determining any civil penalties.
Page Last Reviewed/Updated Wednesday, March 24, 2021