FPSO Cidade de São Mateus gas explosion - Lessons learned

- Design of CDSM such that the hazard potential and death toll increased significantly.
- Mitigation not focusing on protection of emergency personnel.
- Mitigation actions contributed significantly to the high death toll.
- Organizational root causes may often be learned quicker from unignited HC leaks.
- CDSM accident demonstrates severe threat represented by pump room on a FPSO vessel.

The explosion accident in February 2015 on the Floating Production, Storage and Offloading (FPSO) unit Cidade de São Mateus in the Brazilian offshore sector was the most severe offshore petroleum accident since the Macondo blowout in the US in 2010. The paper aims to discuss the critical implications for the safety of such installations and to recommend solutions to improve safety of FPSO vessels. The root causes are discussed and compared with those of the Macondo blowout and gas leaks on offshore installations in the Norwegian sector. Most of the root causes of the Cidade de São Mateus accident are similar to those of the Macondo accident and gas leaks on offshore installations in the Norwegian sector. Two root causes of a technical nature, related to aspects of safe design, were completely neglected in the investigation into the Cidade de São Mateus accident. These safety features are implemented on virtually all Norwegian FPSO vessels: first, replacing the use of a pump room with individual deep well, submerged cargo pumps in order to eliminate the pump room explosion hazard and second, locating living quarters in the bow of the vessel to avoid exposure to fire.