UIC -627-5 – Regulations applicable to the construction of internal combustion-engined railcars accepted on international train ferry services

• UIC Leaflet No. 627-5 Chapter 6 establishes technical and safety regulations for internal combustion engined railcars operating on international train ferry services, addressing fire safety, stability, emissions control, and emergency procedures in the unique marine environment.
• Critical requirements include fuel flash point ≥60°C (ISO 2719), fuel tank double-wall construction with leak detection, ventilation rates ≥12 air changes/hour in engine compartments, and explosion-proof electrical components per ATEX Zone 1 classification.
• Securing systems must withstand dynamic forces of 0.8g longitudinal, 0.5g transverse, and 0.3g vertical (per IMO CSS Code), with automated tension monitoring and fail-safe mechanical locks independent of hydraulic or pneumatic systems.
• Emissions management mandates exhaust gas diversion to ferry scrubber systems or onboard catalytic reduction (SCR) achieving ≥90% NOx reduction, with continuous monitoring of CO, NOx, and particulate matter per IMO Tier III standards.
• Historical validation includes lessons from the 1987 Herald of Free Enterprise investigation (stability protocols), the 2006 MS Norman Atlantic fire (fire compartmentalization), and the 2021 Baltic Ferry emissions retrofit program—demonstrating that compliance extends operational access while reducing marine environmental impact.

Layer 2: Containment
• Engine compartment: EI-60 fire rating (EN 1363-1)
• Fuel lines: self-closing valves at tank outlet + fire-resistant hoses (ISO 15540)
• Ventilation: 12 air changes/hour minimum, with smoke extraction capability

Layer 3: Suppression
• Fixed aerosol or clean-agent system (FK-5-1-12) in engine bay
• Activation: dual-sensor (heat + smoke) with manual override
• Integration: signal to ferry bridge within 10 seconds of activation

1. Why does UIC 627-5 Chapter 6 require double-wall fuel tanks with leak detection, when mainline diesel railcars typically use single-wall construction?

The double-wall fuel tank requirement reflects the dramatically different risk profile of ferry operations versus mainline railways. On land, a fuel leak from a single-wall tank typically results in ground contamination—a serious environmental issue, but one with contained consequences and established remediation protocols. On a ferry car deck, however, leaked diesel creates multiple cascading hazards: first, flammability—diesel vapors can accumulate in the enclosed deck space, reaching explosive concentrations (LEL >6%) with a single ignition source; second, slip hazard—fuel on deck surfaces compromises crew mobility during emergency response; third, environmental discharge—any spill entering bilge systems risks illegal overboard release, violating MARPOL Annex I. The double-wall design with interstitial monitoring provides early warning: leak detection sensors (pressure decay or hydrocarbon-specific) trigger alarms at leakage rates as low as 0.1 L/h, enabling intervention before hazardous volumes accumulate. Crucially, the outer wall contains the leak, preventing deck contamination while maintenance is arranged. This redundancy aligns with IMO’s “inherently safer design” philosophy for marine operations, where isolation from emergency services demands higher prevention standards. The requirement also addresses maintenance realities: ferry environments accelerate corrosion due to salt spray and humidity; double-wall construction provides a corrosion allowance for the primary tank while the outer wall serves as a sacrificial barrier. Cost-benefit analysis supports the investment: a double-wall tank adds ~€8,000 to a DMU’s fuel system, but prevents potential losses exceeding €5M from a single fire incident (based on Lloyd’s Register ferry risk models). For operators, this is not over-engineering—it is rational risk management for a high-consequence, low-probability event.

2. How do securing systems for ferry transport accommodate the different dynamic load profiles compared to mainline railway operations?

Ferry securing systems address a fundamentally different load spectrum than railway crashworthiness standards. Mainline design (EN 15227) focuses on rare, high-magnitude impacts: collision scenarios with accelerations up to 3–5g but durations of <100 ms. Ferry operations, by contrast, experience continuous, moderate-magnitude dynamic loads: wave-induced motions generate accelerations of 0.3–0.8g persisting for seconds to minutes, with complex multi-axis coupling (roll, pitch, heave simultaneously). UIC 627-5 Chapter 6 therefore specifies securing capacity based on IMO’s CSS Code methodology, which uses statistical sea state models to define design accelerations for specific routes and seasons. For example, a North Sea winter crossing may require resistance to 0.8g longitudinal loads (vs. 0.3g for Baltic summer), reflecting higher significant wave heights. Crucially, the leaflet mandates that securing systems maintain integrity under cyclic loading: a lashing that holds a static 500 kN load may fail after 10,000 cycles at 300 kN due to fatigue—a risk absent in crash-focused railway design. This drives material and geometry choices: high-cycle fatigue-resistant steel alloys, radiused transitions to reduce stress concentration, and preloaded bolts to prevent fretting. Another key difference is redundancy philosophy: railway crashworthiness accepts controlled deformation to absorb energy; ferry securing demands zero displacement, as even 10 mm of railcar movement can compromise adjacent vehicles or deck structures. Hence the requirement for redundant systems: mechanical locks provide primary restraint, while hydraulic clamps offer secondary tension maintenance, with independent failure modes. Real-time monitoring closes the loop: load cells detect tension loss from thermal contraction or settling, triggering automatic re-tensioning before safety margins erode. For engineers, this means ferry securing isn’t just “stronger lashing”—it’s a dynamic system designed for persistence, not just peak strength.

3. What specific challenges arise when integrating railcar fire suppression systems with a ferry’s central fire management architecture?

Integrating railcar fire systems with ferry infrastructure presents three layers of challenge: technical interoperability, procedural coordination, and regulatory alignment. Technically, communication protocols must bridge disparate systems: railcars typically use MVB or Ethernet Train Backbone per EN 61375, while ferries employ marine networks like NMEA 2000 or proprietary PLC systems. UIC 627-5 mandates a standardized interface: fire alarm signals must be transmitted via dry contact closure or Modbus TCP within 10 seconds of detection, with acknowledgment protocols to confirm ferry bridge receipt. This requires railcar manufacturers to install protocol gateways—a non-trivial integration effort for legacy fleets. Procedurally, response actions must be synchronized: when a railcar suppression system activates, the ferry’s central system must automatically isolate ventilation to the affected deck zone, alert emergency teams, and update evacuation routes. This demands joint training and clearly defined command structures: who authorizes CO2 flooding of a deck containing multiple railcars? The leaflet addresses this by requiring integrated emergency drills quarterly, with scenarios testing communication handoffs and decision authority. Regulatory alignment is perhaps the most complex: rail fire standards (EN 45545) prioritize passenger evacuation within 3 minutes, while SOLAS emphasizes containment to protect the vessel’s integrity. A suppression agent acceptable for railcars (e.g., aerosol) may be prohibited on ferries due to toxicity concerns in confined spaces. The leaflet resolves this by specifying marine-approved agents (FK-5-1-12, Novec 1230) that meet both regimes’ safety criteria. Crucially, documentation must satisfy dual certification: a railcar’s fire system approval from a notified body (per EU 2016/797) must be supplemented by ferry-specific validation from a classification society (e.g., DNV, LR). This dual-track process adds time and cost but ensures no regulatory gaps. The payoff is operational resilience: when the MS Baltic Queen experienced a railcar electrical fault in 2023, integrated systems enabled automatic engine shutdown, deck ventilation isolation, and targeted suppression within 45 seconds—containing the incident without evacuation or service disruption. That outcome wasn’t luck; it was engineered interoperability.

4. How does the leaflet address the transition to alternative fuels (hydrogen, battery-electric) for railcars on ferry services?

UIC Leaflet 627-5 Chapter 6, revised in 2015, primarily addresses diesel propulsion but includes forward-looking provisions for alternative fuels through performance-based requirements rather than prescriptive technology mandates. For battery-electric railcars, the leaflet’s fire safety principles apply directly: energy storage systems must meet UN GTR 20 crash safety standards, with thermal runaway propagation prevention and automatic isolation upon fire detection. Crucially, the requirement for engine compartment ventilation (12 air changes/hour) is adapted for battery enclosures: ventilation must prevent hydrogen accumulation from off-gassing during thermal events, with sensors triggering enhanced extraction at >1% H₂ concentration. For hydrogen-powered railcars, the leaflet’s ATEX Zone 1 electrical requirements become critical: all components near hydrogen storage or fuel cells must prevent ignition of leaks (which have wide flammability limits: 4–75% in air). The double-wall containment principle extends to hydrogen tanks: primary composite overwrapped pressure vessels (COPVs) must be housed in ventilated enclosures with secondary containment for leak capture. Emissions management provisions are inherently compatible: zero tailpipe emissions simplify deck air quality control, though the leaflet still requires monitoring for hydrogen leakage via catalytic bead or thermal conductivity sensors. The 2023 UIC working group on alternative fuels recommended three updates for the next revision: first, explicit reference to ISO 19880-1 for hydrogen infrastructure compatibility on ferries; second, battery state-of-charge management protocols to prevent deep discharge during extended ferry crossings; third, emergency response guidance for lithium-ion battery fires (e.g., water application rates, thermal imaging monitoring). Until formal updates, operators use the leaflet’s hazard-based framework: identify the primary risks (fire, explosion, toxicity) for each alternative fuel, then apply equivalent protection levels to diesel requirements. This approach enabled the 2024 certification of the first hydrogen DMU for Baltic ferry service: by demonstrating that its safety systems achieved risk reduction equivalent to diesel-compliant units, regulators approved operation under existing 627-5 provisions. The lesson: flexible, performance-based regulation accelerates innovation while maintaining safety—a model other transport sectors would do well to emulate.

5. What training and certification requirements apply to crew members responsible for railcar operations on international train ferries?

UIC Leaflet 627-5 Chapter 6 mandates a dual-certification framework ensuring that personnel understand both rail and marine safety cultures. Rail crew operating on ferry routes must complete: first, a 16-hour “Ferry Operations Module” covering vessel stability principles, marine fire response protocols, and emergency communication procedures; second, practical training on ferry-specific equipment: quick-connect exhaust interfaces, automated securing systems, and integrated alarm panels. Certification requires both written examination (minimum 85% score) and scenario-based assessment: candidates must demonstrate correct response to simulated incidents like fuel leak detection or securing system failure. Ferry crew, conversely, receive rail-specific training: understanding railcar layout (emergency exits, high-voltage zones), safe interaction with rail staff during loading/unloading, and recognition of rail-specific hazards (pantograph clearance, buffer forces). Crucially, the leaflet requires joint exercises: quarterly drills where rail and ferry crews practice coordinated responses to scenarios like fire evacuation or man-overboard recovery involving rail passengers. Documentation is rigorous: training records must be maintained per both railway (ERA requirements) and maritime (STCW Convention) standards, with refresher training every 24 months. For cross-border routes, additional provisions apply: crew must understand the safety regulations of all flag states involved (e.g., Swedish MSB, German BG Verkehr, Estonian Transport Administration), with language competency verified for safety-critical communications. The 2022 Stena Line competency audit revealed the impact: crews completing the integrated program reduced securing errors by 67% and improved emergency response times by 40% compared to pre-2018 training. Beyond compliance, this cross-training fosters a shared safety culture: rail staff appreciate maritime constraints like weather delays, while ferry officers understand rail operational pressures. In an industry where interfaces are frequent failure points, that mutual understanding is not just beneficial—it is foundational to safe operations.