The Invisible Shield: Earthing and Bonding in Railway Systems

The RAIB investigation report published in March 2022 into the Margam incident of 3 September 2021 makes uncomfortable reading for anyone involved in railway electrical safety. A track maintenance team working on the South Wales Main Line had been given an isolation of the 25 kV AC overhead line equipment in their work area. Two temporary earthing clamps had been applied to the contact wire at the boundaries of the isolated section, confirming to the team that the section was dead. What the investigation found was that one of the temporary earth clamps had been applied to a registration arm bracket — a structural steel element — rather than to the contact wire itself. The bracket was mechanically connected to the OCS mast and its base plate, which was bonded to the running rail and the substation protective earth, but it was not electrically continuous with the contact wire it appeared to be grounding. The contact wire in the work area remained live at 25 kV. A worker entering the isolation zone came close enough to the contact wire for flashover to occur at a distance of approximately 200 mm. The resulting arc event caused severe burns to his arm and face. He survived; others in similar circumstances have not. The Margam incident is one of six UK electrical contact incidents in the decade to 2024 in which incorrect earthing procedure — not the absence of an earthing system, but its incorrect application — was a primary causal factor. It illustrates the central paradox of railway earthing and bonding: the systems themselves are well-designed and the standards are detailed, yet the interface between the formal earthing architecture and the human beings who implement it in darkness, under time pressure, in complex lineside environments, remains the point at which the invisible shield most often fails.

What Are Earthing and Bonding in Railway Systems?

Earthing (or grounding, in North American terminology) is the intentional electrical connection of a metallic structure, circuit conductor, or equipment enclosure to the general mass of earth — the planet’s surface, which acts as an infinite reservoir of charge at a reference potential defined as zero volts. In a railway system, earthing provides fault current discharge paths, establishes voltage reference levels for protection relay operation, and limits the potential that can appear on accessible metallic surfaces during abnormal conditions.

Bonding is the intentional electrical connection of two or more metallic structures or conductors to each other, creating an equipotential zone in which all bonded components share the same electrical potential. Bonding does not require a connection to earth — it is concerned with eliminating potential differences between simultaneously touchable surfaces, regardless of what absolute potential those surfaces carry. A properly bonded railway corridor may have every metallic element — mast, fence, cable trough, signal case, bridge parapet — at the same elevated potential during a fault event, so that no voltage difference exists between them that could drive current through a person bridging two surfaces.

The governing European standards are EN 50122-1 (Railway applications — Fixed installations — Electrical safety, earthing and the return circuit — Part 1: Protective provisions relating to electrical safety and earthing), EN 50122-2 (provisions against stray current), and EN 50122-3 (interaction of AC and DC systems). In the UK, Network Rail’s NR/SP/ELP/27124 series and the Group Standard GE/RT8035 govern earthing and bonding design on the managed infrastructure.

Touch Voltage and Step Voltage: The Physiological Limits

The purpose of earthing and bonding is ultimately physiological: to prevent the human body from completing an electrical circuit at an energy level sufficient to cause ventricular fibrillation, burns, or respiratory arrest. The two voltage parameters that define this risk in a railway environment are touch voltage and step voltage.

Touch Voltage

Touch voltage (U_T) is the voltage appearing between a simultaneously accessible metallic surface and a point on the ground surface 1.0 m away — the representative distance between a person’s hand contacting the structure and their feet on the ground. During a fault event that energises a metallic structure (a fallen contact wire resting on a lineside fence, for example), the touch voltage is determined by the current flowing through the fault path and the impedance of the earth return circuit. EN 50122-1 defines the maximum permissible touch voltage as a function of fault duration:

Step Voltage

Step voltage (U_S) is the voltage between two points on the ground surface, separated by 1.0 m — the representative step length of a walking person. Step voltage appears when fault current flows through the ground from a fault injection point (e.g., a mast base with a conductor wire contact) and creates a voltage gradient in the soil radiating outward. A person walking toward the fault point with one foot closer than the other will experience step voltage across their body via the foot-to-foot path. Step voltages are typically lower than touch voltages at the same fault current because the foot-to-foot body resistance is higher (~4,000–6,000 Ω) and the external circuit impedance (soil resistance between two ground contact points) is also higher. However, on high-resistivity soils (dry gravel, frozen ground), step voltages within 3 m of a fault injection point can reach dangerous levels even when touch voltages at the structure itself are within limits. EN 50122-1 requires step voltage assessment for substations, tensioning sections, and cross-bonds that carry significant fault current to earth.

The Three Earthing Zones of a Railway Corridor

A modern electrified railway corridor contains three distinct earthing zones, each with different requirements and different interactions with the others. Failure to maintain these zones as genuinely separate — or to manage their interfaces correctly — is the most common source of earthing system design failures.

The fundamental engineering challenge is that the three zones must remain electrically distinct during normal operation (to prevent stray current leakage from Zone 2, to prevent traction return current from flowing through Zone 3 metalwork, and to prevent induced voltages on Zone 3 from corrupting Zone 2 signalling) while simultaneously being capable of establishing shared potential rapidly during a fault event (to prevent dangerous touch voltages from appearing between zones when a person spans two). This simultaneous separation and connection requirement is managed through voltage-dependent switching devices — principally polarisation cells and surge protective devices (SPDs) — that present high impedance at normal operating voltages and low impedance at fault voltages.

AC System OCS Mast Earthing: Strategies and Trade-offs

Solid Mast Earthing

In solid mast earthing, every OCS support structure — mast, portal frame, cantilever bracket — is connected by a continuous protective conductor (typically 50–95 mm² copper cable) running along the lineside from substation to substation, with the conductor bonded to each mast base. This conductor is connected to earth at the substation earth mat and at regular intermediate points. The result is that every mast sits at essentially earth potential under normal conditions and under fault conditions — if the contact wire falls and drapes over a mast, the fault current flows through the mast, down the protective conductor, and into the substation earth, tripping the substation protection within the time limits of EN 50122-1 Table 1. Touch voltage at the mast itself is limited by the low impedance of the protective conductor path.

The disadvantage of solid mast earthing is that the protective conductor, running at ground potential alongside the live OCS, creates a fault current propagation path along the entire line. A contact wire drop at one location can energise the protective conductor over a kilometre or more if the protection relay does not operate within its required time. Any metalwork connected to the protective conductor — lineside fences, cable troughs, level crossing barriers — shares this propagated potential. This is the mechanism by which a contact wire incident in one location can cause dangerous touch voltages at a pedestrian level crossing 400 m away.

Insulated Return System (IRS)

The Insulated Return System — used on France’s LGV network and adopted for HS2 in the UK — addresses the fault propagation problem by not connecting OCS mast bases to a continuous protective conductor. Instead, each mast is insulated from earth by its foundation design (non-conducting grouting, insulating base plate), and the mast-to-contact wire insulator is the primary barrier. Touch voltage at a faulted mast is controlled by rapid substation trip (target <0.3 s on the LGV network). Lineside fences are interrupted at regular intervals (typically every 300–500 m) by insulating sections to prevent fence energisation from propagating. The trade-off is that touch voltage at a faulted mast, before the substation trips, may be higher than in solid mast earthing — making the 0.3 s trip time requirement non-negotiable.

Bonding Types and Applications

Equipotential Bonding at Stations

Station environments present the most demanding equipotential bonding challenge on an electrified railway. A passenger standing on a platform may simultaneously be able to touch a steel platform bench, a canopy column, a lamp post, a lift shaft door, and a platform screen door — each potentially connected to different earthing zones through different routes. If any of these items are at different potentials during a fault event, the current path through the passenger completes the circuit. The solution is comprehensive equipotential bonding: every metallic element accessible to passengers within the station environment is bonded together and to the station’s main protective earth, which is in turn connected to the traction protective conductor through a defined impedance to limit fault current flow into the passenger area. Network Rail’s GE/RT8035 standard requires that all metallic items within 2.75 m horizontally and 5.0 m vertically of the OCS conductor are either bonded into the protective earth system or insulated to a level that withstands the full OCS voltage (26 kV AC test voltage). At high-speed stations on the LGV Méditerranée where 320 km/h services pass through at full speed, the induced electromagnetic field from the passing pantograph current imposes additional requirements on station metalwork bonding to prevent transient touch voltages from the inductive coupling.

Signalling Equipment Bonding

Signal equipment cases, trackside electronics, and axle counter heads are simultaneously part of the safety-critical signalling system (where any spurious current or voltage can corrupt track occupancy data) and part of the electrical environment (where they must not present shock hazard to maintenance staff or become conduits for traction interference). The bonding strategy for signalling equipment is therefore a compromise: cases are connected to a signal earth — a local earth mat at each equipment location, typically comprising 2–4 copper-clad steel earth rods to 1.5–3.0 m depth — that is isolated from the traction protective earth except through surge protective devices (SPDs) rated to clamp any transient above 1.5 kV AC (the standard limit for signalling electronic protection per EN 50124-1). The SPD presents >10 MΩ impedance at normal operating voltages, so no traction current flows into the signal earth under normal conditions. During a lightning strike or contact wire drop event that produces a voltage surge, the SPD conducts within nanoseconds, connecting the signal earth to the traction earth and limiting the transient voltage across the signalling electronics to below their damage threshold.

Continuity Bonding for Lineside Fences

Lineside fencing — typically steel post-and-wire or corrugated steel panel — forms a conductor running parallel to the track for kilometres at a time. Without deliberate bonding, a fence section energised by contact with a fallen wire or by inductive coupling presents different potentials at different points along its length, because the fence’s own resistance and any discontinuities (gate hinges, post insulators) create voltage drops. The solution is continuity bonding: copper bond cables welded to fence posts at intervals of 50–200 m, ensuring that the entire fence section within each bonded zone shares a common potential. The bonded fence zone is then connected at each end to the traction protective earth (in solid mast earthing systems) so that a fault event brings the entire fence section to a single potential rather than creating a progressive voltage gradient along its length. Fence zones are separated by insulated fence posts (GRP composite posts or porcelain insulating sections in the fence wire) every 300–500 m, preventing fault propagation between zones and limiting the energy that must be dissipated in any single event.

Working Earthing: The Trackworker’s Last Line of Defence

Operational earthing — also called working earths or temporary protective earths — is the application of short-circuit cables between the live overhead conductor and the running rail at the boundaries of an isolation zone, performed immediately after an electrical isolation is confirmed, before any person enters the work area. The working earth serves a purpose distinct from the permanent earthing system: it does not limit touch voltage under normal fault conditions, because the conductor is already isolated from its substation supply. Instead, it guards against the specific scenario of an isolation being re-energised unexpectedly — whether through switching error, a parallel feed route that was overlooked, or induction from an adjacent live section — by collapsing the voltage at the work site to near-zero through the short-circuit path, and simultaneously tripping any protection relay that attempts to re-energise the isolated section.

The Margam 2021 incident, and the seven prior UK electrical contact fatalities investigated by RAIB between 2010 and 2023 that involved working earth failures, share a common factor: in each case the working earth was either omitted, applied to a non-conductive element (as at Margam), or the boundary of the isolated section was misidentified so that workers were outside the protected zone. Network Rail’s Rule Book (Section TS) specifies that working earth clamps must be applied directly to the contact wire or conductor rail — not to adjacent metalwork — and that the application must be verified by a second person. Post-Margam, the standard was revised to require mandatory photographic confirmation of clamp position transmitted to the Person in Charge before any person enters the work zone.

The AC/DC Earthing Conflict and Mixed-System Solutions

No engineering problem in railway earthing is more complex than the corridor where a 25 kV AC electrified main line shares infrastructure with a 750 V DC electrified metro or suburban line — or, in the case of deep-level metro construction beneath an existing electrified surface railway, where the DC metro’s stray current field interacts with the AC mainline’s protective earthing. The conflict is fundamental: AC safety earthing requires low-impedance connections between all metallic structures and the system earth, to ensure that fault current flows and protection operates. DC stray current control requires high impedance between the rail and all metallic structures, to keep return current in the rail rather than in the ground.

The Elizabeth line (Crossrail) in London provides the most technically complex recent example of a mixed-system earthing design. The central tunnel section operates at 750 V DC (collected via conductor rail), while the surface sections east and west operate at 25 kV AC (collected via pantograph from OCS). At the transition points — between Paddington and Royal Oak (west) and between Stratford and Maryland (east) — the two earthing systems must be completely separated. The design, developed by Arup and Atkins between 2010 and 2018, uses a combination of: insulated rail joints at each system boundary; separate substation earth mats for the AC and DC systems with no common bonding between them; SPD assemblies at every location where AC Zone 3 metalwork approaches DC Zone 2 infrastructure within 1.5 m; and a permanent leakage monitoring system with over 400 measurement points across the entire route. The Elizabeth line earthing design documentation runs to over 2,000 pages and was independently reviewed by Network Rail, TfL, and DNV (as Notified Body).

Earthing and Bonding Failures: Documented Incidents

Frequently Asked Questions

1. Why is the 60 V steady-state touch voltage limit in EN 50122-1 different from the 50 V limit in the general low-voltage electrical installation standard BS 7671 — and which applies to railway lineside equipment?

The 60 V AC rms steady-state limit in EN 50122-1 Table 1 is slightly higher than the 50 V extra-low voltage (ELV) boundary in BS 7671 (IEC 60364 series). The difference reflects a deliberate decision by the CENELEC TC9X working group to set the railway limit based on the IEC 60479-1 fibrillation threshold curve with a specific statistical safety margin, rather than adopting the BS 7671 boundary which was originally set for building installations with different exposure scenarios. In a railway environment, it is assumed that contact with energised metalwork is infrequent, brief, and involves healthy adults — conditions that justify a slightly higher steady-state limit than a building installation where vulnerable persons (children, elderly, medically compromised individuals) may have sustained exposure. For railway lineside equipment in the UK, both standards apply simultaneously to different aspects: EN 50122-1 governs traction-related earthing and touch voltage; BS 7671 governs the 230 V AC signalling power and station services wiring. Where the two overlap — for example, a signalling relay room with both 230 V AC mains equipment and 25 kV AC induced voltage exposure — the more restrictive requirement (typically BS 7671’s earthing provisions for the mains system, combined with EN 50122-1’s bonding requirements for traction) must both be satisfied simultaneously. Network Rail’s standard NR/SP/ELP/27124 explicitly requires design sign-off from both traction electrical and general electrical engineering disciplines where this overlap exists.

2. How does electromagnetic induction from a long isolated OCS section create a voltage hazard, and why is this not eliminated by the electrical isolation itself?

This is one of the most frequently misunderstood aspects of railway working earth design. When an OCS section is isolated — its connections to the substation opened — it is no longer conductively connected to the live supply. However, if a long isolated section (say, 2–5 km) runs parallel to a live OCS section for its full length, the live conductor’s alternating current creates a time-varying magnetic field that induces an EMF in the isolated conductor by transformer action. The induced voltage is proportional to the mutual inductance between the two conductors, their separation, and the current in the live conductor. For a 5 km isolated section running 10–20 m from a live 25 kV conductor carrying 400 A, the induced open-circuit voltage can reach 2–9 kV — not the 25 kV supply voltage, but well above the lethal threshold. This voltage appears on the isolated section as a distributed source: it is not dischargeable by simply bonding one end of the section to earth, because the induction is distributed along the full length and bonding one end merely creates a voltage gradient from zero at the bonded end to maximum at the open end. The correct solution is a working earth at both ends of the isolated section and at intermediate intervals of no more than 500 m, so that no point on the isolated conductor is more than one quarter-wavelength from a short-circuit point. The RAIB investigation into the Oxenholme 2012 near-miss (where an isolated section was induced to 9 kV) identified the absence of an intermediate working earth as the primary causal factor and recommended a mandatory calculation of induction voltage for any isolated section longer than 1 km running parallel to live OCS.

3. What is a Protective Multiple Earthing (PME) supply, and why does it create a specific hazard in railway environments that does not exist in buildings?

Protective Multiple Earthing (PME), also called TN-C-S in IEC 60364 terminology, is a distribution network earthing arrangement in which the neutral conductor and the protective earth conductor are combined in the supply cable and separated only at the building entry. The combined PEN conductor is earthed at multiple points along the distribution network — hence “multiple earthing.” PME is the standard supply arrangement for most UK grid-connected premises because it provides good fault protection and eliminates the need for a separate earth conductor in the supply cable. The specific hazard in railway environments arises because the PME earthing arrangement creates an earth reference that is tied to the distribution network neutral potential — which floats relative to true earth by a few volts under normal load conditions but can rise significantly (30–200 V) during network faults, neutral conductor breaks, or high-resistance neutral connections. In a non-railway building, this floating PME earth potential is shared by all metalwork in the building, so there is no touch voltage between any two metallic items. In a railway environment, where lineside buildings and equipment have both a PME supply earth (from the distribution network) and a traction protective earth (from the OCS earthing system), the two earth references may be at different potentials — separated by whatever the rail potential or PME float voltage produces. A person touching a signal case connected to the traction earth and simultaneously touching a PME-earthed cable tray will experience the voltage difference between the two systems. Network Rail’s standard NR/SP/ELP/21155 requires that PME earthing is not used for any electrical installation within the railway infrastructure earth zone without an isolating transformer between the PME supply and the installation, specifically to break the earth continuity between the two systems.

4. How are the earthing and bonding requirements managed for a level crossing — where the railway electrical zone intersects with the public road environment?

Level crossings represent the most publicly visible and legally complex earthing interface in railway infrastructure. A level crossing has: running rails (Zone 2, return current conductor), lineside fencing (Zone 3, continuity bonded), signal and barrier equipment (Zone 3, signal earth), road surface (Zone 3, with embedded steel rails and anti-skid surfaces potentially conducting), and approaching road users and pedestrians (members of the public, with no knowledge of the electrical environment). The earthing design must ensure that: (1) steel rail inserts in the road crossing surface are bonded to the track return circuit so that stray current does not flow through the road surface and corrode buried utilities; (2) level crossing barrier arms and their metalwork are bonded to the traction protective earth so that a contact wire drop event does not leave the barrier arm live at 25 kV; (3) the steel crossing surface panels (used on many level crossings to provide a smooth road surface across the rails) are bonded to the protective earth but isolated from the running rail so that a road vehicle bridging the crossing surface and the rail does not short-circuit the track circuit; and (4) signal equipment controlling the crossing is protected against traction interference through its independent signal earth with SPD protection. EN 50122-1 Annex B provides specific guidance for level crossing earthing design, requiring a risk assessment for each crossing that considers traffic type (road vehicles only, mixed, pedestrian), crossing speed, and proximity to substations. Network Rail’s level crossing electrical standard NR/SP/ELP/21225 runs to 84 pages specifically for this one infrastructure type.

5. When a train is stabled in a depot with its pantograph lowered and the OCS de-energised, is earthing still required — and what are the risks if it is not applied?

Depot earthing is a frequently under-regarded area of railway electrical safety, and the answer to whether it is required is unambiguously yes — for reasons that go beyond the obvious case of preventing accidental re-energisation. When a train’s pantograph is lowered in a depot, it is in contact with an OCS conductor that may or may not be isolated from the main line supply depending on the depot sectioning. The first risk is inadvertent re-energisation: if a depot road’s OCS section is fed via a section switch from the main line, and that switch is closed by error, the entire OCS section (and the train’s roof) becomes live at 25 kV. Depot workers on or around the vehicle are exposed to touch voltage at the pantograph head, the roof metalwork, and any bonding paths to the underframe. The second risk is inductive energisation from adjacent live roads: even with the local road’s OCS isolated, induced voltages from an adjacent live road can reach several hundred volts on the isolated section if the depot road is long and the separation small. The third risk, specific to DC depots, is that the conductor rail may be energised in a section the worker believes to be isolated, due to sectioning errors or missing indication in the depot control panel. Depot working practice under Network Rail’s Rule Book T3 requires that working earths are applied on all electrical roads where any person will be within 2.0 m of the OCS or conductor rail, regardless of whether a formal isolation has been established. Stabling without isolation — permitted for short-duration (under 15 minutes) staff-clear periods — requires a registered electrical supervisor to confirm that no person is within the electrical clearance zone before the pantograph is raised and the road is re-energised.