A Matching Hose Is Not Proof of the Right Tank

The hazard starts before flow

A delivery hose may physically mate with more than one fill point. If a wrong connection sends one chemical into a tank holding an incompatible material, the reaction can generate heat, pressure or toxic gas. Once transfer has started, the driver and receiving operator may have little time to identify the error and stop it. A familiar delivery route, an unlocked cap or a similar-looking line is not proof of destination.

Unloading must be treated as a process operation involving the supplier and receiving facility. The receiving system, chemical identity, piping route and stop method all need positive confirmation before the pump or pressure transfer begins.

What happened at MGPI Processing

On 21 October 2016 in Atchison, Kansas, a delivery of sulfuric acid was inadvertently connected to a sodium hypochlorite fill line at MGPI Processing. The incompatible chemicals reacted and released a cloud containing chlorine and other compounds. The U.S. Chemical Safety Board (CSB) reported that more than 140 people sought medical attention and six were hospitalized. Community members were ordered to shelter in place or evacuate.

The CSB found that the acid and hypochlorite fill connections were close together, looked similar and were not clearly marked. The acid line was unlocked for delivery, but the hypochlorite line was also unlocked without the operator knowing it. The driver connected to the wrong line. The lesson is broader than a single mistaken choice: the system allowed one ordinary connection error to become an uncontrolled chemical reaction.

Critical controls for every chemical receipt

Make a wrong connection difficult. Review whether incompatible services can be physically segregated or use dedicated, incompatible connections. Clearly identify each connection at the point of use and maintain accurate line-to-tank information. Colour alone or a padlock alone is a weak substitute for an engineered arrangement.

Verify as a shared hold point. The receiving operator and driver should confirm the delivery document, product identity, assigned fill point, current tank contents, available capacity and complete route before connecting and again before transfer starts. Define who authorises the start and who can stop the job. Follow the facility’s approved procedure; do not rely on memory from a previous delivery.

Limit consequences if controls fail. Assess whether process alarms, interlocks, remote or automatic shutoffs and emergency isolation can detect or stop an unintended reaction or release. Check that drivers and workers know the accessible emergency shutdown method and withdrawal route. Response plans must account for neighbouring work areas and the surrounding community.

Stop for uncertainty. A missing line marker, unexpected unlocked connection, changed contractor, unusual tank reading or disagreement between records and the field is a reason to pause. Resolve the discrepancy before any chemical moves.

A question for today’s team

At our next chemical delivery, what prevents the hose from reaching the wrong receiving tank, and how will the driver and operator independently verify the actual line route before transfer starts?