Common use of System Protection Clause in Contracts

System Protection. System protection is used to limit the consequences of faults over and above the disconnection of defective components. System protection can have as its purpose to increase the system security, the transmission capacity, or a combination of these. For system protection that is used to increase the transmission capacity, the following requirements have been set: • An analysis must be implemented which shows the consequences for the power system in the event of a correct, unwarranted and missing function and simultaneously takes into account the other system protection • In the event of a correct or unwarranted function, serious operational disturbances will not be accepted in other subsystems • If the above consequence analysis shows that a missing function can entail serious operational disturbances for other subsystems, the following technical requirements shall apply to the system protection function: - Redundant telecommunications shall exist in cases where system protection is dependent on telecommunications Redundant telecommunications means that communications between the stations concerned shall be entirely duplicated. If the auxiliary power feed for one of the communications systems fails, then the other must not be affected. In practice, this means that batteries, telecom terminals, converters and communication paths must be duplicated. Communication paths may not, on any section, share connections, leads, opto cables or similar. They must take geographically separated routes. Multiplexed links can be used but communications shall use separated multiplexes that are not fed by the same battery. Having separate fuses on the same battery does not constitute full redundancy. - There must be real time monitoring of telecommunications - There must be a redundant and independent ”triggering function” A redundant triggering function, if this relates to breakers, means that the breaker has two trip magnets. Breaker fault protection shall be used to safeguard breaker operation if the ordinary breakers are not functioning correctly - The control facility and telecommunications standard shall be on the same acceptable reliability level as the one applicable to primary relay protection • If a consequence analysis shows that a missing function will not entail serious operational disturbances for other subsystems, the relevant subsystem’s system operator will decide which requirements apply to the system protection function. • If a consequence analysis shows that a correct, unwarranted or missing function can lead to more extensive consequences than dimensioning faults, system protection must be accepted separately between the parties.

System Protection. System protection is used to limit the consequences of faults over and above the disconnection of defective components. System protection can have as its purpose to increase the system security, the transmission capacity, or a combination of these. For system protection that is used to increase the transmission capacity, the following requirements have been set: •  An analysis must be implemented which shows the consequences for the power system in the event of a correct, unwarranted and missing function and simultaneously takes into account the other system protection •  In the event of a correct or unwarranted function, serious operational disturbances will not be accepted in other subsystems •  If the above consequence analysis shows that a missing function can entail serious operational disturbances for other subsystems, the following technical requirements shall apply to the system protection function: - Redundant telecommunications shall exist in cases where system protection is dependent on telecommunications Redundant telecommunications means that communications between the stations concerned shall be entirely duplicated. If the auxiliary power feed for one of the communications systems fails, then the other must not be affected. In practice, this means that batteries, telecom terminals, converters and communication paths must be duplicated. Communication paths may not, on any section, share connections, leads, opto cables or similar. They must take geographically separated routes. Multiplexed links can be used but communications shall use separated multiplexes that are not fed by the same battery. Having separate fuses on the same battery does not constitute full redundancy. - There must be real time monitoring of telecommunications - There must be a redundant and independent ”triggering function” A redundant triggering function, if this relates to breakers, means that the breaker has two trip magnets. Breaker fault protection shall be used to safeguard breaker operation if the ordinary breakers are not functioning correctly - The control facility and telecommunications standard shall be on the same acceptable reliability level as the one applicable to primary relay protection •  If a consequence analysis shows that a missing function will not entail serious operational disturbances for other subsystems, the relevant subsystem’s system operator will decide which requirements apply to the system protection function. •  If a consequence analysis shows that a correct, unwarranted or missing function can lead to more extensive consequences than dimensioning faults, system protection must be accepted separately between the parties.

System Protection. System protection is used to limit the consequences of faults over and above the disconnection of defective components. System protection can have as its purpose to increase the system security, the transmission capacity, or a combination of these. For system protection that is used to increase the transmission capacity, the following requirements have been set: •  An analysis must be implemented which shows the consequences for the power system in the event of a correct, unwarranted and missing function and simultaneously takes into account the other system protection •  In the event of a correct or unwarranted function, serious operational disturbances will not be accepted in other subsystems •  If the above consequence analysis shows that a missing function can entail serious operational disturbances for other subsystems, the following technical requirements shall apply to the system protection function: - Redundant telecommunications shall exist in cases where system protection is dependent on telecommunications Redundant telecommunications means that communications between the stations concerned shall be entirely duplicated. If the auxiliary power feed for one of the communications systems fails, then the other must not be affected. In practice, this means that batteries, telecom terminals, converters and communication paths must be duplicated. Communication paths may not, on any section, share connections, leads, opto cables or similar. They must take geographically separated routes. Multiplexed links can be used but communications shall use separated multiplexes that are not fed by the same battery. Having separate fuses on the same battery does not constitute full redundancy. - There must be real time monitoring of telecommunications - There must be a redundant and independent ”triggering function” A redundant triggering function, if this relates to breakers, means that the breaker has two trip magnets. Breaker fault protection shall be used to safeguard breaker operation if the ordinary breakers are not functioning correctly - The control facility and telecommunications standard shall be on the same acceptable reliability level as the one applicable to primary relay protection •  If a consequence analysis shows that a missing function will not entail serious operational disturbances for other subsystems, the relevant subsystem’s system operator will decide which requirements apply to the system protection function. •  If a consequence analysis shows that a correct, unwarranted or missing function can lead to more extensive consequences than dimensioning faults, system protection must be accepted separately between the parties. 3 HVDC links HVDC links shall be regarded as production facilities. The system operators for the individual HVDC links are only responsible for restoring the operation to normal state in their own subsystems after the loss of the HVDC link or after emergency power regulation has been activated.