CDCL Fuel Tank PDF
CDCL Fuel Tank PDF
CDCL Fuel Tank PDF
Department Advisory
of Transportation
Federal Aviation
Administration
Circular
Subject: Incorporation of Fuel Tank System Date: 5/25/12 AC No: 120-97A
Instructions for Continued Initiated by: AFS-300 Change:
Airworthiness into Operator
Maintenance or Inspection
Programs
On May 7, 2001, the Transport Airplane Fuel Tank System Design Review, Flammability
Reduction and Maintenance and Inspection Requirements final rule was published in the Federal
Register (FR). It has since been referred to as the 2001 Fuel Tank Safety (FTS) rule. It adopted
amendments to part 25, Special Federal Aviation Regulation (SFAR) 88 and operating
requirements related to SFAR 88. The operating requirements included requirements to
implement instructions for continued airworthiness (ICA) that design approval holders (DAH)
developed in compliance with SFAR 88. On November 8, 2007, the Federal Aviation
Administration (FAA) published the Enhanced Airworthiness Program for Airplane Systems
(EAPAS)/FTS final rule. The purpose of the rule is to help ensure the continued safety of
transport category airplanes by improving the design, installation, and maintenance of electrical
wiring systems. The EAPAS/FTS rule amended the operating requirements to implement FTS
actions developed in accordance with SFAR 88. Integrating the incorporation of the fuel tank
system and electrical wiring interconnection system (EWIS) requirements helps to ensure
compatibility and to eliminate duplication. Additionally, the EAPAS/FTS rule redesignates
(replaces) Title 14 of the Code of Federal Regulations (14 CFR) part 91, 91.410(b); part 121,
121.370(b); part 125, 125.248(b); and part 129, 129.32(b) of the FTS rule. The new
sections are 91.1507, 121.1113, 125.507 and 129.113. These new rules also clarify language
with reference to the approval process of the operators program. This advisory circular (AC)
only addresses the fuel tank system safety requirements and describes acceptable means of
compliance (AMC) accordingly. The current edition of AC 120-102, Incorporation of Electrical
Wiring Interconnection Systems Instructions for Continued Airworthiness into an Operators
Maintenance Program, addresses EWIS requirements in the EAPAS/FTS rule.
/s/ for
John M. Allen
9B
CONTENTS
Paragraph Page
CHAPTER 1. GENERAL
1-1. Purpose..............................................................................................................................1
Instructions/Procedures....................................................................................................9
3-5. AD Requirements............................................................................................................12
3-8. Exceptional Short Term Extension of Fuel Tank System Airworthiness Limitations....15
(1 Page)............................................................................................................................................1
(1 Page)............................................................................................................................................1
Page iii
5/25/12 AC 120-97A
CHAPTER 1. GENERAL
1-1. PURPOSE. This advisory circular (AC) provides information regarding compliance with
the fuel tank system maintenance and inspection program requirements in Title 14 of the Code of
Federal Regulations (14 CFR) for part 91 and part 125 operators, and part 121 and part 129
air carriers hereafter referred to as operators. Instructions for continued airworthiness (ICA)
(refer to Appendix 3, Definitions) include fuel tank system inspection tasks, intervals, methods,
instructions/procedures, airworthiness limitations, and fuel tank system critical design
configuration control limitations (CDCCL), which are a specific type of airworthiness limitation.
a. Avoiding Compliance. In the past, some designers and operators avoided applying
requirements for airplanes over a specific capacity by getting a design change approval for a
slightly lower capacity. Referencing the capacity resulting from original certification removes
this means of avoiding compliance. Also, an airplane design could be originally certified with a
capacity slightly lower than the minimum specified in the rule, but through later design changes,
the capacity could be increased above this minimum. The reference to later increase in capacity
in the rule ensures that, if this occurs, the airplane would have to meet the requirements of the
rule.
b. FAA Oversight Office. The Aircraft Certification Office (ACO) or the office of the
Transport Airplane Directorate has oversight responsibility for the relevant TC or Supplemental
Type Certificate (STC), as determined by the Administrator. (Refer to Appendix 4, FAA
Oversight Offices by Airplane Manufacturer.)
c. Required ICA. Operators are required to incorporate ICA into their maintenance or
inspection program that are required by Special Federal Aviation Regulations (SFAR) 88 or
25.1529 and part 25 Appendix H, and that have been approved by the FAA Oversight Office.
Operators are not required to use the design approval holders (DAH) fuel tank ICA. While we
think it is likely that operators will use the DAH ICA, we acknowledge that they are able develop
their own or to contract with third parties to develop them. Operator-developed ICA must be
approved by the FAA Oversight Office.
1-3. BACKGROUND. Since 1959, there have been 18 fuel tank explosions on transport
category airplanes. Most notably, on July 17, 1996, a 25-year old Boeing 747-100 series
airplane, operating as Trans World Airlines (TWA) Flight 800, was involved in an in-flight
breakup after takeoff from John F. Kennedy International Airport in New York, resulting in
230 fatalities. The National Transportation Safety Board (NTSB) determined the probable cause
of the TWA 800 accident was an explosion of the center wing fuel tank (CWT) due to ignition of
the flammable fuel vapor and air mixture in the tank. The source of ignition energy for the
explosion could not be determined conclusively, though the NTSB determined that it was most
likely a combination of failures involving the fuel quantity indicator system (FQIS). FQIS wires
are designed to carry intrinsically safe levels of electrical energy inside fuel tanks. Without an
additional failure, a short of FQIS wires inside a tank would not have sufficient energy to create
an ignition source. The NTSB determined the most likely ignition source was an existing FQIS
failure inside the CWT and a FQIS wiring failure outside the CWT. The internal failure created
the condition for an ignition source if high electrical energy was applied to the FQIS wiring
inside the CWT. The external failure applied excessive electrical energy on the FQIS wires that
enter the CWT. This accident, in particular, prompted the FAA to examine the underlying safety
issues surrounding fuel tank explosions, the adequacy of existing regulations, the service history
of airplanes certificated to these regulations, and existing fuel tank system maintenance practices.
1-4. ACs (current editions). The ACs listed below provide information that may support the
method of compliance established by this AC. An electronic copy of the following ACs can be
downloaded from the Internet at http://fsims.faa.gov/. The Regulatory and Guidance Library
H H
(RGL) is a set of searchable databases that contain regulatory, guidance, and aviation product
information. The RGL contains certain CFRs and SFARs from 14 CFR in their current version as
well as historical versions. A paper copy may be ordered from the U.S. Department of
Transportation (DOT), Subsequent Distribution Office, M30, Ardmore East Business Center,
3341 Q 75th Avenue, Landover, MD 20785.
1-5. RELATED CFRs. The following 14 CFR parts and sections apply:
Part 21, Special Federal Aviation Regulation No. 88Fuel Tank System Fault
Tolerance Evaluation Requirements.
Section 25.981, Fuel Tank Ignition Prevention.
Section 25.1529, Instructions for Continued Airworthiness.
Part 25, Appendix H, Instructions for Continued Airworthiness.
Part 26, Continued Airworthiness and Safety Improvements for Transport Category
Airplanes.
Section 43.13, Performance Rules (general).
Section 43.16, Airworthiness Limitations.
Part 91, Subpart E, Maintenance, Preventive Maintenance, and Alterations, 91.403 (c)
Airworthiness Limitations.
Part 91, Subpart L, Continued Airworthiness and Safety Improvements, 91.1507, Fuel
Tank System Inspection Program.
Part 121, Subpart AA, Continued Airworthiness and Safety Improvements, 121.1113,
Fuel Tank System Maintenance Program,
Part 125, Subpart M, Continued Airworthiness and Safety Improvements, 125.507,
Fuel Tank System Inspection Program,
Part 129, Subpart B, Continued Airworthiness and Safety Improvements, 129.113,
Fuel tank system maintenance program.
1-6. FAA FUEL TANK SYSTEM POLICY STATEMENT. The FAAs Transport Airplane
Directorate, in coordination with Flight Standards Service (AFS), other National Aviation
Authorities (NAA), and various industry representatives, developed FAA policy memorandum
ANM112-05-001, Policy Statement on Process for Developing SFAR 88-related Instructions for
Maintenance and Inspection of Fuel Tank Systems, dated October 6, 2004. This policy statement
provided standardized guidance to the DAH for developing maintenance instructions as a method
of compliance with SFAR 88.
a. Processes for Developing ICA. The policy identified two categories of potential
ignition source related ICA and provided two processes for developing those ICA:
(2) The remaining actions (that do not address unsafe conditions but are necessary to
maintain the continued airworthiness of the ignition source prevention features of the design)
were to be evaluated using a process based on the principles of Maintenance Steering
Group-3rd Task Force (MSG-3). That process is described in part 6 of the policy statement.
b. Categories of SFAR 88 ICA. These two categories of SFAR 88 ICA have been
42B
c. Design Review. The policy could also be useful to an operator in performing a design
43B
review of any field-approved auxiliary fuel tank installations (refer to paragraph 2-4).
d. Paper Copy. A paper copy of the policy letter may be ordered from the FAA,
4B
1-8. THE EAPAS/FTS RULE. The EAPAS/ FTS rule (72 Federal Register (FR) 63364
effective December 10, 2007) includes revisions to the operational requirements that were
originally adopted by the 2001 FTS rule (66 FR 23085, effective June 6, 2001). This
AC describes a method of compliance with these revised FTS operational requirements.
a. 2001 FTS Rule. On June 6, 2001, the Transport Airplane Fuel Tank System Design
Review, Flammability Reduction and Maintenance and Inspection Requirements rule became
effective. It is referred to as the 2001 FTS rule. It amended part 21 and created Special Federal
Aviation Regulation (SFAR) 88. SFAR 88 required DAH to conduct a safety review of the
applicable airplanes identified in the rule to determine that their design meets the FTS ignition
requirements described in 25.901 and 25.981(a) and (d). If their design was determined to not
meet those requirements, they were required to develop design changes for those non-compliant
designs that were determined to meet the unsafe condition criteria using FAA policy
memorandum 2003-112-15, SFAR 88 Mandatory Action Decision Criteria. The FAA is
issuing ADs mandating those design changes.
b. Design Changes. Operators must comply with the DAH, and FAA Oversight
Office-approved design changes in accordance with the respective ADs. In some instances, an
interim repetitive maintenance or inspection task is required on specific airplanes allowing the
operator additional time to accomplish the design change.
c. Compliance Dates. These fuel tank system design change ADs, and any associated
repetitive maintenance and inspection tasks, have varying compliance dates. The operator must
track these dates using its currently established AD tracking system.
d. ICA for Preventing an Ignition Source. SFAR 88 also requires the DAH to develop
specific ICA needed to maintain design features that prevent the existence or development of an
ignition source within the fuel tank, which could be accomplished using policy memorandum
ANM112-05-001. The operator must incorporate FAA Oversight Office-approved ICA into their
maintenance or inspection program by the dates specified in the operational rule or AD. The
actions specified in the ICA must be accomplished in accordance with the times specified in the
ICA.
2-1. REQUIREMENTS.
(1) Unsafe Condition. Those that are directly related to an unsafe condition and require
mandatory action.
(2) No Unsafe Condition. Those that do not have a direct adverse affect on operational
safety, but for which developing maintenance inspections, certain standard practices, or
procedural warnings can reduce the potential for an ignition source.
2-2. UNSAFE CONDITION. The DAH are required to develop design changes and ICA to
address features of the fuel tank system design that are determined to meet the SFAR-88 unsafe
condition criteria, and mandated by AD. These AD-mandated actions could include design
changes, operational procedures, or ALIs containing repetitive maintenance and inspection
instructions, or all three. FTS airworthiness limitations include CDCCL, inspections, or other
procedures that are necessary to prevent development of ignition sources within the fuel tank
system. CDCCLs are a type of fuel tank system airworthiness limitation introduced by
25.981(d) (refer to paragraph 3-4 for a detailed description of CDCCLs).
2-3. NO UNSAFE CONDITION. The DAH were also required to develop ICA for all
Safety-related Failure Effect Category (FEC) 5 and 8 tasks developed from analysis of
Maintenance Significant Items (MSI) that include those fuel tank system design features. These
tasks address those features of the fuel tank system design that are determined to be a no unsafe
condition but are necessary to maintain the continued airworthiness of the ignition source
prevention features of the fuel tank system. The DAH, through the Maintenance Review Board
(MRB) process, subjects these MSIs to maintenance program development logic using the latest
version of MSG-3. Inspection tasks, intervals, and task instructions/procedures are developed as
a result of this process. They are FAA Oversight Office-approved. They will normally be found
in the TC holders Maintenance Review Board Report (MRBR) or a source document required
by part 25 appendix H, H25.5(b). The current edition of AC 120-102, Incorporation of
Electrical Wiring Interconnection Systems Instructions for Continued Airworthiness into an
Operators Maintenance Program, provides information on the source document. The STC
ICA will be contained in the FAA-approved STC document.
NOTE: For administrative purposes, some DAH have put both the
no unsafe condition and the unsafe condition category ICA in their ALS
mandated by an AD. An operators AD tracking system must ensure it does
not make a distinction between categories such that one is tracked differently
from the other. Both are mandated by an AD and require the same level of
visibility and attention. Changes to either category must be approved by the
FAA Oversight Office as an alternative method of compliance (AMOC) to
the AD.
a. Operators without MSG-3 Programs. The FAA recognizes that some operators
may not have MSG-3 maintenance programs. Those operators must still incorporate the
FAA-approved fuel tank system ICA into their maintenance or inspection program.
c. FTS ICA or FTS/EWIS ICA. The fuel tank systems ICA are identified as FTS ICA,
or if the FTS ICA is also part of a EWIS ICA it may be identified as FTS/EWIS ICA. Both are
FAA Oversight Office-approved. AC 120-102 provides additional information on the FTS/EWIS
ICA. The DAH will sometimes identify a separate cross-referencing document where these fuel
tank systems ICA are located. While the FAA expects that the DAH fuel tank system ICA tasks
will be located in ATA, Chapter 28, Fuel Systems, some may also be located in other ATA
chapters such as Chapter 20, Standard Practices.
d. FTS ICA. In accordance with the operational rules, operators must include fuel tank
system ICA in their maintenance or inspection program. Operators should have a tracking system
within their maintenance or inspection program so that they do not lose their identity as an FTS
ICA. Operator changes to FTS ICA must be in accordance with the guidance contained in this
AC. The operator should submit the data that supports any changes to approved ICA through the
principal inspector (PI), who may add comments and then forward them to the FAA Oversight
Office for approval.
e. Specific Instructions. The DAH no unsafe condition ICA will typically be in the
form of inspection tasks and intervals and task instructions/procedures. They may also be
specific instructions that are referenced in a task but are contained in other manuals such as the
AMM, the airplane standard wiring practice manual (SWPM), or in the STC holders manual
that contains the ICA for the STC. These DAH ICA are approved by the FAA Oversight Office.
The operator should submit its FTS ICA to their PI who will approve implementation using
operations specification (OpSpec) D097.
2-4. FIELD-APPROVED AUXILIARY FUEL TANKS. Per paragraph (b) of the operational
rules (refer to 91.1507, 121.1113, 125.507; and 129.113) if an operator has any of these
tanks installed in their airplanes and chooses to continue operation with them installed, the
operator must perform a design review and develop ICA in accordance with the design review
requirements detailed in SFAR 88. The operator, being the DAH for these tanks, is in the best
position to develop ICA for them. The operator should submit proposed field-approved auxiliary
tank data through their PI to the FAA Oversight Office responsible for approving their airplane
type. After FAA Oversight Office approval, the operator must submit the approved ICA to the PI
for review and approval. The PI for parts 121, 125, and 129 operators will approve the operators
fuel tank program on OpSpec D097. In the event the operator chooses to deactivate or remove a
field-approved auxiliary tank, such action can only be accomplished using approved data.
2-5. STC AUXILIARY FUEL TANKS. According to the operational rules, if an operator has
STC auxiliary fuel tanks installed in their airplanes, they must incorporate ICA meeting
SFAR 88, if any, into their maintenance or inspection program. This if any provision means
that if a DAH fails to develop ICA, the operator of an airplane with an affected tank is not
required to incorporate ICA for them. Under these circumstances, if the FAA determines any
particular STC auxiliary tank installations pose a safety risk, the FAA will issue ADs mandating
such tanks be deactivated or removed in accordance with data submitted by the operators and
approved in accordance with the AD. The related ADs will offer operators the opportunity to do
their own design review and present ICA to the FAA Oversight Office for approval.
2-6. APPLICABLE FTS STCs. In order for an operator to incorporate all the applicable STC
ICA they must first establish what STCs are installed on their airplanes. An FAA
engineering-approved list of applicable STCs is provided in Appendix 2 List of Applicable
Supplemental Type Certificates. The operators should review this list and determine if any of the
applicable STCs are installed on their airplanes. Under normal circumstances a records review by
the operators should be sufficient to determine which of their airplanes has any of the applicable
STCs. If records are inadequate, it may be necessary to physically inspect airplanes to confirm
applicable STC installation; however, this should not entail physically checking the routing of
wiring, etc. The operator should provide the PI a list of airplanes that have any of the applicable
STCs installed and present their proposed STC ICA for review and approval. (Refer to
paragraphs 3-10 through 3-14 for the review and approval process.)
conditions or failures are difficult, or even impossible, to detect without extensive and detailed
inspection or functional checks. Examples of such degraded conditions or failures are worn
wiring routed through conduit to fuel pumps, accumulated debris inside fuel pumps, corrosion of
bonding wire interfaces, and broken or missing bonding straps. As a result of the FTS review,
certain general visual inspections of the fuel tank system under the zonal inspection concept may
become detailed inspections, and may include specific pass/fail criteria.
3-1. AIRPLANE FUEL TANK SYSTEM. The airplanes fuel tank system is defined by the
airplanes TC, amended type design changes, and any STC and field-approved auxiliary fuel
tank systems. The fuel tank system includes components necessary for the fuel tank system to
perform its intended function (e.g., pumps, fuel pump power supplies, fuel valves, fuel quantity
indication system probes, wiring, compensators, densitometers, fuel level sensors, etc.). The
safety assessment required to address potential fuel tank ignition sources includes both analysis
of the fuel tank system and analysis of other airplane systems that could affect the fuel tank
system.
3-2. DAH FUEL TANK ALTERATIONS. Generally, DAH-developed ICA do not apply to
portions of the airplane fuel tank system modified in accordance with an STC, or those that have
field-approved auxiliary fuel tanks. The FAA has defined field-approved auxiliary fuel tank
systems as design changes approved by an aviation safety inspector (ASI) on FAA Form 337,
Major Repair and Alteration (Airframe, Powerplant, Propeller, or Appliance). DAH of auxiliary
fuel tanks are required to develop ICA, approved by the FAA Oversight Office, that meet the
requirements of SFAR 88 or 25.1529 and part 25 appendix H, effective June 6, 2001.
(1) Option one. Obtain approval from the FAA Oversight Office through the PI to
escalate the FEC 5 and 8 task/interval.
(2) Option two. Identify the FEC 5 and 8 tasks/intervals and track them individually
or identify the FEC 5 and 8 tasks/intervals and place them in a more frequent package (e.g. a
4A check).
a. Fuel System ADs. While fuel system airworthiness limitations are developed as
part of the type certification process (new designs) in compliance with 25.981,
Amendment 25-102 or later, in-service airplanes did not have this requirement for fuel system
airworthiness limitations in their certification basis. Therefore, SFAR 88 required DAH to
develop fuel system airworthiness limitations that the FAA then mandated with ADs. These fuel
system ADs require the operator incorporate the fuel system airworthiness limitations into their
maintenance or inspection program. A fuel tank system airworthiness limitation may be a
mandatory replacement time, related inspection, or procedures or a CDCCL.
b. Types of Fuel System Airworthiness Limitations. There are three types of fuel
system airworthiness limitations: inspections, procedures and CDCCL. One is an inspection that
has a specific task and interval (such as 10 years). A second type is procedures that could have
specific intervals. The third type is a CDCCL which has no interval but establishes configuration
limitations to maintain and to protect the critical design feature identified in the CDCCL.
CDCCLs can also include requirements to have placards on the airplane with information about
critical features. (Refer to AC 25.981-1 for additional information on CDCCLs.)
(1) The following is an example of a CDCCL critical design feature for a Legacy
Airplane.
(a) For an alternating current fuel pump fault current bonding strap installation, the
concern is the potential for fault current path through the pump motor housing to structure inside
the tank. Electrical faults internal to the fuel pump motor impeller are by design routed through
the motor impeller assembly to the bonding straps on the front face of the motor impeller
assembly to structure outside the tank. The bonding straps ensure that fault currents are
conducted to structure outside the tank until the circuit breaker and/or Ground Fault Interrupter
(GFI) has had time to remove power from the pump.
(b) The following features must be maintained during pump replacement per the
manufacturers AMM:
Install two bonding straps between the pump motor impeller end-cap and
structure, and
Verify that the motor impeller bonding resistance to structure is 0.0004 ohms
(0.4 milliohms) or less.
(2) These CDCCLs must be incorporated and adhered to as written. Any proposed
operator changes to the CDCCL must be approved by the DAH Oversight Office.
d. Critical Design Feature Maintenance. For example, there will also be times when a
fuel system CDCCL will involve unscheduled maintenance such as a fuel pump change due to
pump failure at a line station overnight. The CDCCL requires that the critical design feature
identified in subparagraph 3-4(b)(1) above must be maintained during the fuel pump change.
(1) Operators must have procedures in their maintenance program that ensure that any
airworthiness limitation critical design feature that is affected is maintained whether its during
scheduled or unscheduled maintenance.
(2) CDCCLs are intended to identify only critical features of a design that must be
maintained. For example, certain components of a fuel pump (or all components) may include
critical features that are identified as CDCCLs. These critical features would be identified in the
ALS of the ICA and in the component maintenance manual (CMM) as CDCCLs.
(3) Although not intended by the introduction of CDCCLs and other fuel system
airworthiness limitations, there are also DAH that have created certain airworthiness limitations
CDCCLs that include both the critical design feature as well as the tasks associated with
maintaining the CDCCL. Typically these airworthiness limitations require adhering to a specific
CMM at a specific revision level when repairing or overhauling fuel system components. In this
case, operators are required to adhere to all elements of the CMM specified in the CDCCL. Any
deviations from CMMs specified in the CDCCL, including using later revisions of those CMMs,
must be approved by the FAA Oversight Office. The operator should submit its proposed
changes through the PI, who may add comments and forward them to the FAA Oversight Office
for approval. Deviations from CMMs specified in the CDCCL may also involve an AMOC to an
AD. (Refer to the CMM deviation definition in Appendix 3, Definitions.)
3-5. AD REquirements. The AD requires the operator to incorporate fuel tank system
airworthiness limitations into their maintenance or inspection program.
a. Fuel Systems Airworthiness Limitations. The information in this paragraph and the
following subparagraphs 3-5b and 3-5c is based on a transport airplane Maintenance Planning
Data (MPD) ALS. Not all airplane manufacturers use the term MPD. It includes explanatory
language, which is also referred to as the program rules/front matter, about what the fuel system
airworthiness limitations are, their regulatory basis, and what they contain. It explains the
difference between an ALI and a CDCCL. Operators must incorporate this explanatory language
into their maintenance or inspection program. This includes appropriate manuals used in the
administration of the operators maintenance or inspection program. Any changes to these
program rules must be approved by the FAA Oversight Office and may also involve an AMOC
to an AD. The operator should submit any changes through the PI, who may add comments and
forward them to the FAA Oversight Office for approval.
format used by the DAH and included in the ALS of its maintenance manual. The operator can
use its own format but it must include the airworthiness limitation number, task, interval,
airplane applicability, and description in its maintenance or inspection program. This includes
appropriate manuals and documents such as engineering orders (EO) and job/work cards used in
the administration of the operators maintenance or inspection program. It is especially important
that this information be included on the operators job/work cards so that the person performing
the task knows the safety significance of the task.
(1) When the words in accordance with or per are cited in the airworthiness
limitations, the procedures in the AMM or SWPM must be followed to ensure that the critical
design feature is maintained. Any changes to these procedures require FAA Oversight Office
approval before they are used. Proposed changes must be submitted through the PI, who may add
comments and forward them to the FAA Oversight Office for approval.
(2) When the words refer to are cited in the airworthiness limitation, the procedures
in the AMM or SWPM represent one method of complying with the airworthiness limitation. An
accepted alternative procedure may be developed by the operator in accordance with its
procedures in its maintenance program/manual. Prior FAA Oversight Office approval is not
required for this action. This does not preclude the PI from coordinating with the FAA Oversight
Office before concurring with the revision.
(3) Operators must include specific procedures in its maintenance program/manual that
identify fuel system airworthiness limitations that have AMM and SWPM procedures that are
FAA approved and can only be changed by the FAA Oversight Office, and those that can be
changed by the operator without prior FAA Oversight Office approval.
TABLE 1
TABLE 2
(1) An example of a CDCCL for current designs would be maintaining wire separation
between FQIS wiring and other high power electrical circuits. The original DAH defined a
method to ensure that this essential information will be evident to those who may perform and
approve repairs and alterations. The DAH provided visual means to alert maintenance personnel
of areas in the airplane where inappropriate actions may degrade the integrity of the design
configuration.
(2) The FAA Oversight Office approved the airworthiness limitations and the
information is communicated by statements in appropriate manuals such as Wiring Diagram
Manuals (WDM), AMMs, SWPMs, or the CMM. The FAA Oversight Office must approve any
operator changes to the airworthiness limitations or the manual following the process described
in subparagraph 3-5d.
a. ALS Approved Under 25.981. Section H25.4 (a)(2), Amendment 25-102, requires
Each mandatory replacement time, inspection interval, related inspection procedure, and all
critical design configuration control limitations approved under 25.981 for the fuel tank
system must be contained in a section of the ICA titled Airworthiness Limitations. The ALS is
FAA Oversight Office-approved and specifies maintenance required under 43.16 and 91.403.
Simply stated, each operator must incorporate the ALS approved under 25.981 for the fuel tank
system into its maintenance or inspection program. As stated in H25.4(a)(2), the fuel tank
system must include the following under 25.981 for fuel tank system:
b. Compliance with CDCCLs. All fuel tank system CMMs as specified in the
CDCCLs are FAA approved. Any changes must be submitted through the PI, who may add
comments and forward them to the FAA Oversight Office for approval. An example is provided
as follows: If required by CDCCLs, repair and overhaul of certain fuel system components must
be per or in accordance with the manufacturers CMM, or later revisions of these CMMs
that have been approved by the FAA Oversight Office. The operator must comply with the
CMMs if required by CDCCLs.
a. CMM Example. An example is the CMM for overhauling or repairing fuel pumps.
In certain CDCCLs, the entire manual is FAA Oversight Office-approved and a statement is
contained in the manual to that effect. The FAA Oversight Office must approve any operator
changes to the CMM.
b. CDCCL Example. Another example is a CDCCL where the entire CMM is not FAA
Oversight Office-approved, but the CDCCL requires following specific FAA-approved data such
as maintenance instructions, inspections, and procedures in the CMM. This data will be flagged
as FAA-approved data in the CDCCL and CMM.
c. Identify FAA-Approved Data. Operators who develop their own shop manuals and
instructions need to ensure that the FAA-approved data used in their manuals and instructions are
identified as FAA-approved data. The FAA Oversight Office must approve any changes to the
FAA-approved data in the operators shop manuals or instructions.
a. Extension without Approval. The FAA has determined that an operator may extend
certain fuel system airworthiness limitations by up to the maximum number of days specified in
the applicable ALS for a specific airplane without FAA Oversight Office approval. The FAA
Oversight Office-approved ALS includes a statement explaining that the exceptional short-term
extensions of fuel tank system airworthiness limitations, subject to the procedures in the
document, are FAA Oversight Office-approved. The FAA defines an exceptional short-term
extension as an increase in a fuel system ALI interval that may be used by the operator to cover
an uncontrollable or unexpected situation where the airworthiness limitation cannot be
performed within the ALI timeframe. For example, an operators airplane is scheduled for an
airworthiness limitation inspection but cannot enter the hangar bay because it is still occupied by
another airplane. In this case, the operator, in accordance with the procedures in the ALS must
request and have advance approval from the PI for the exceptional short-term extension. (For the
purposes of the FTS requirements and this AC, short-term escalation procedures authorized by
air carrier OpSpecs cannot be used for exceptional short term extension of fuel tank system
airworthiness limitations.)
a. Major Alterations. The only alterations for which fuel tank system ICA will be
developed are those for which compliance with either SFAR 88 or 25.1529 must be shown.
These are major alterations approved under STCs or amended TCs.
a. New Philosophical Approach. To fully realize the objectives of fuel tank system
ignition prevention, the operators need to rethink their current philosophical approach to
maintaining, inspecting, and altering aircraft wiring and systems that could affect the fuel tank
system ignition prevention features. This approach has begun at the airplane manufacturers with
maintenance program enhancements that address fuel tank system ignition prevention. It is
incumbent that the operators include these DAH fuel tank system maintenance program
enhancements into their respective programs. Furthermore, they should commit to training their
maintenance and inspection work force to understand the new philosophical approach to fuel
tank system ignition prevention.
b. New Procedures. In addition to CDCCLs, there will be new maintenance manual and
job card procedures, inspection devices, graphical information showing required tasks, or
changes in tasks such as wire splicing. Operators should provide training to maintenance,
inspection, and engineering personnel, including persons who write and edit job cards and EOs.
Heightened awareness of these critical areas is needed. Additionally, operators must have
procedures in place that ensure maintenance record entries for complying with a CDCCL are
consistent with 43.9 and 43.11, or in accordance with the applicable provisions of part 121 or
part 129 and the operators manual.
c. Operator Training Program. The operator training program should emphasize the
importance of accomplishing the fuel tank system airworthiness limitations, CDCCLs,
inspections, and other procedures while accomplishing scheduled and unscheduled maintenance.
(Refer to subparagraphs 3-4 b, c, d, and e for further guidance on this subject.)
d. Critical Design Features. Maintenance and engineering personnel can ensure that
the fuel tank system airworthiness limitations are properly performed throughout the operational
life of the airplane by having a thorough understanding of the airplane fuel tank system critical
design features.
Identify and record the document(s) by document number, revision number, and
dateused as the source of the FAA Oversight Office-approved EWIS/FTS ICA, or
If this information is contained in the operators manual system, a reference to that
location in their manual system can be recorded in the free text area.
b. Operator Action. The operator must have procedures in its manual that track any
changes and approvals made to the FAA Oversight Office-approved EWIS/FTS ICA.
Page 1
AC 120-97A 5/25/12
Appendix 1
RII Required Inspection Items
SFAR Special Federal Aviation Regulation
STC Supplemental Type Certificate
SWPM Standard Wring Practice Manual
TC Type Certificate
TSO Technical Standard Order
TWA Trans World Airlines
VTO Volumeric Top-off
WDM Wiring Diagram Manual
Page 2
5/25/12 AC 120-97A
Appendix 2
APPENDIX 2. LIST OF APPLICABLE SUPPLEMENTAL TYPE CERTIFICATES
7B
Page 1 (and 2)
5/25/12 AC 120-97A
Appendix 3
APPENDIX 3. DEFINITIONS
3B
a. Aircraft Evaluation Group (AEG). AFS representatives who know the operational
and maintenance aspects of the certification project and are responsible for determining the
operational acceptability and continuing airworthiness requirements of newly certified or
modified aircraft, engines, and propellers intended to be operated under the provisions of the
14 CFR. This function includes providing the cognizant ACO support in the review and approval
of the initial and subsequent changes to the type design.
h. Auxiliary Tanks. Fuel tanks installed which make additional fuel available to
increase the flight range of that airplane and are secondary to the airplanes main fuel tanks.
Auxiliary tanks have been installed in various locations including center wing structure,
horizontal stabilizers, wings, and cargo compartments.
Page 1
AC 120-97A 5/25/12
Appendix 3
k. CMM Deviation.
(1) Term used for approval of changes to CMMs that are the subject of CDCCLs
adopted by a type design change.
(2) Term used for the approval of changes to CMMs referenced in CDCCLs that are
mandated by ADs, provided the CDCCL includes wording that allows use of later approved
CMMs. Otherwise, approval is granted as an AMOC to the AD. As with AMOC approvals, a
CMM deviation approval is by a letter from the FAA Oversight Office.
n. Design Approval Holder (DAH). The holder of any design approval, including TC,
amended TC, STC, amended STC, parts manufacturer approval, TSO authorization, letter of
TSO design approval, and field approvals (refer to FAA Form 337).
s. FAA Oversight Office. The ACO or the office of the Transport Airplane Directorate
having oversight responsibility for the relevant TC or STC as determined by the Administrator.
(Refer to Appendix 4 FAA Oversight Offices by Airplane Manufacturer, for a list of FAA
Oversight Offices for certain transport airplane TC holders.)
Page 2
5/25/12 AC 120-97A
Appendix 3
u. Failure Effect Category (FEC).
(4) Category 8. Functional failures that have hidden function safety effects.
(5) Category 9. Functional failures that have hidden function non-safety effects.
v. Field Approval. A method for obtaining FAA approval of a design change to the
airplane. An FAA Flight Standards inspector can approve the design change using
FAA Form 337.
w. Flammable Fluid Leakage Zones. Any area where flammable liquids or vapors are
not intended to be present, but where they might exist due to leakage from flammable fluid
carrying components (e.g., leakage from tanks, lines). Examples of these areas include:
The wing leading (including any adjacent compartment such as the strut) and
trailing edges;
Fairings located below the fuel tanks;
Wheel wells;
Fuel pump enclosures;
Unpressurized areas of the fuselage surrounding fuel tanks; and
Areas containing flammable fluid lines or tanks.
z. Hidden Failure. A failure whose presence may not be readily apparent to the
flightcrew or maintenance personnel.
aa. Hidden Functional Failure Safety Effect. A combination of a hidden (or latent)
functional failure and one additional failure of a system-related or backup function that will have
an adverse effect on operational safety.
bb. Hot Short. Electrical energy introduced into equipment or systems as a result of
unintended contact with a power source, such as bent pins in a connector or damaged insulation
on adjacent wires.
Page 3
AC 120-97A 5/25/12
Appendix 3
cc. Instructions for Continued Airworthiness (ICA). The information developed in
accordance with applicable airworthiness requirements that include the applicable inspection
tasks, intervals, methods, processes, procedures, and airworthiness limitations to keep the
product airworthy throughout its operational life.
dd. Maintenance and Inspection Instructions. Information that provides, for each part
of the airplane and its engine auxiliary power units, propellers, accessories, instruments, and
equipment, the recommended periods at which they should be cleaned, inspected, adjusted,
tested, lubricated, and the degree of inspection, the applicable wear tolerances, and work
recommended at these periods needed to provide for the continued airworthiness of the airplane.
The recommended overhaul periods and necessary cross-reference to the airworthiness ALS of
the manual are also included.
ff. Maintenance Review Board (MRB). An FAA group that supports industry
development of the Maintenance Review Board Report (MRBR) and approves the final MRBR.
gg. Maintenance Review Board Report (MRBR). A report which contains the initial
minimum scheduled maintenance and inspection requirements for a particular transport category
airplane and on-wing engine program. Air carriers may use those provisions, along with other
maintenance information contained in the ICA, in the development of their maintenance
programs.
(1) Under MSG 3rd Task Force (MSG-3), items other than ALI that are identified by
the DAH whose failure could cause one of the following effects:
Page 4
5/25/12 AC 120-97A
Appendix 3
kk. Mandatory Action Advisory Board. A committee composed of representatives from
the cognizant FAA Oversight Office and the Transport Airplane Directorate whose function was
to review the findings from the SFAR 88 safety review for determination of an unsafe condition
using the criteria in FAA policy memorandum 2003-112-15, SFAR 88Mandatory Action
Decision Criteria.
ll. National Aviation Authority (NAA). The aviation authority responsible for the
certification and continued airworthiness of those airplanes having a U.S. TC within its state of
design as established in accordance with agreements with the United States.
nn. Supplemental Type Certificate ICA. The STC holder ICA consists of the inspection
tasks, intervals, methods, processes, and procedures to keep an alteration affecting the fuel tank
system approved under an STC airworthy throughout its operational life. The STC holder ICA
must meet the requirements of SFAR 88, or 25.981 and part 25 appendix H, and be approved
by the FAA Oversight Office.
oo. Type Certificate Holder ICA. The TC holder ICA consists of the inspection tasks,
intervals, methods, processes, procedures to keep the products fuel tank system airworthy
throughout its operational life. It is typically the result of the MRB process. During this process
the TC holder develops MSIs and subjects them to maintenance program development logic,
such as in MSG-3 or later revisions. The TC holder ICA must comply with the requirements of
SFAR 88, or 25.981 and part 25 appendix H, and be approved by the FAA Oversight Office.
Page 5 (and 6)
5/25/12 AC 120-97A
Appendix 4
APPENDIX 4. FAA OVERSIGHT OFFICES BY AIRPLANE MANUFACTURER
8B
Page 1 (and 2)