1994 Scotland RAF Chinook crash

1994 Scotland RAF Chinook crash

Accident summary
Date	2 June 1994 (1994-06-02)
Summary	CFIT, cause undetermined
Site	Mull of Kintyre, Scotland 55°18′48″N 5°47′37″W / 55.31333°N 5.79361°W / 55.31333; -5.79361Coordinates: 55°18′48″N 5°47′37″W / 55.31333°N 5.79361°W / 55.31333; -5.79361
Passengers	25
Crew	4
Fatalities	29 (all)
Injuries (non-fatal)	0
Survivors	0
Aircraft type	Boeing Chinook
Operator	Royal Air Force
Registration	ZD576
Flight origin	RAF Aldergrove (near Belfast, Northern Ireland)
Destination	Inverness, Scotland

The 1994 Mull of Kintyre RAF Chinook crash occurred on 2 June 1994 at about 18:00 hours when a Royal Air Force (RAF) Chinook helicopter (serial number ZD576, callsign F4J40) crashed on the Mull of Kintyre, Scotland. The crash, which occurred during thick foggy conditions, resulted in the deaths of all twenty-five passengers and four crew on board. Among the passengers were almost all the United Kingdom's senior Northern Ireland intelligence experts. The accident holds the distinction of being the worst peacetime disaster to have been suffered by the RAF.

In 1995, an RAF board of inquiry ruled that it was impossible to establish the exact cause of the accident. This ruling was subsequently overturned by two senior reviewing officers, who stated the pilots were guilty of gross negligence for flying too fast and too low in thick fog. This finding proved to be controversial, especially in light of irregularities and technical issues surrounding the then-new Chinook HC.2 variant which were uncovered. A Parliamentary inquiry conducted in 2001 found the previous verdict of gross negligence on the part of the crew to be 'unjustified'. In 2011, an independent review of the crash cleared the crew of negligence.

Incident

Crash

Earlier on 2 June 1994, the helicopter and crew had carried out a trooping flight, as it was considered to be unsafe for British troops to move around in certain parts of Northern Ireland using surface transport at the time due to the threat posed by Provisional IRA attacks. This mission was safely accomplished and they returned to Aldergrove at 15:20. They took off for Inverness at 17:42. Weather en route was forecast to be clear except in the Mull of Kintyre area. The crew made contact with military air traffic control (ATC) in Scotland at 17:55.^[1]

Around 18:00, Chinook ZD576 flew into a hillside in dense fog. The pilots were Flight Lieutenants Jonathan Tapper, 28, and Rick Cook, 30. Both of them were pilots in the United Kingdom Special Forces. There were two other crew. The helicopter was carrying 25 British intelligence experts from MI5, the Royal Ulster Constabulary and the British Army, from RAF Aldergrove (outside Belfast, Northern Ireland) to attend a conference at Fort George (near Inverness) in Scotland. At the time of the accident Air Chief Marshal Sir William Wratten called it "the largest peacetime tragedy the RAF had suffered".^[2]

"The initial point of impact was 810 feet [250 m] above mean sea level and about 500 metres east of the lighthouse, but the bulk of the aircraft remained airborne for a further 187 metres horizontally north and 90 feet [27 m] vertically before coming to rest in pieces. Fire broke out immediately. All those on board sustained injuries from which they must have died almost instantaneously. The points of impact were shrouded in local cloud with visibility reduced to a few metres, which prevented those witnesses who had heard the aircraft from seeing it."^[3]

In the immediate aftermath of the accident, one commentator stated that the loss of so many top level Northern Ireland intelligence officers in one stroke was a huge blow to the John Major government, "temporarily confounding" its campaign against the IRA.^[4] That the crash killed so many British intelligence experts, without any witnesses in the foggy conditions, led to considerable speculation and conspiracy theories being devised on the issue on the potential of a cover-up having been performed. Amongst these were accusations that wake turbulence from a top-secret hypersonic US aircraft had been responsible for the crash, while another postulated that it was a deliberate assassination of the intelligence operatives on board in connection with the then on-going Northern Ireland peace process.^[5][6][7]

Initial inquiry

In 1995, an RAF board of inquiry that investigated the incident determined that there was no conclusive evidence to determine the cause of the crash. An immediate suspicion that the helicopter could have been shot down by the Provisional IRA, with their known Strela 2 surface-to-air missile capability, had been quickly ruled out by investigators. A review of the evidence, carried out by two Air Chief Marshals of the Royal Air Force, found the two pilots to have been guilty of gross negligence by flying too fast and too low in thick fog.^[8] Both the incident and the first inquiry have been subject to controversy and dispute, primarily as to whether the crash had been caused by pilot error or by a mechanical failure. The 2011 Parliamentary report found the reviewing officers to have failed to correctly adhere to the standard of proof of "absolutely no doubt" in deciding the question of negligence.^[9]

Subsequent inquiries

The first inquiry and its conclusion proved to be highly controversial. A subsequent fatal accident inquiry (1996), House of Commons Defence Select Committee report (2000) and Commons Public Accounts Committee report have all either left open the question of blame or challenged the original conclusion. The campaign for a new inquiry was supported by the families of the pilots, and senior politicians, including former Prime Minister John Major and former Defence Secretary Malcolm Rifkind.^[2][10] The new inquiry took place in the House of Lords from September to November 2001. The findings were published on 31 January 2002, and found that the verdicts of gross negligence on the two pilots were unjustified.^[11]

In December 2007, Defence Secretary Des Browne agreed to conduct a fresh report into the crash.^[12][13] On 8 December 2008, Secretary of State for Defence John Hutton announced that "no new evidence" had been presented and the verdicts of gross negligence against the flight crew would stand.^[14] On 4 January 2010, doubts of the official explanation were raised again with the discovery that an internal MOD document, which had been written 9 months prior to the incident, described the engine software as 'positively dangerous' as it could lead to failure of both engines.^[15][16] The 2011 Review concluded that criticism that the original board had not paid enough attention to maintenance and technical issues was unjustified.^[17]

On 13 July 2011, Defence Secretary Liam Fox outlined to MPs the findings of an independent review into the 1994 crash, which found that the two pilots who were blamed for the crash had been cleared of gross negligence.^[18] In doing so, the Government accepted Lord Philip's confirmation that the Controller Aircraft Release (CAR) was "mandated" upon the RAF. Issued in November 1993, the CAR stated that the entire navigation and communications systems used on the Chinook HC2 were not to be relied upon in any way by the aircrew, and therefore it had no legitimate clearance to fly. Knowledge of the CAR had been withheld from the pilots; by withholding this when issuing their Release to Service (RTS) (the authority to fly), the RAF had made a false declaration of compliance with regulations. In December 2012, the Minister for the Armed Forces, Andrew Robathan, confirmed such a false declaration did not constitute "wrongdoing", despite it leading directly to deaths of servicemen.^[19]

ZD576's service history

RAF Chinook HC2 (ZA677) similar to accident aircraft

Boeing CH-47C Chinook, construction number B-868, RAF serial number ZD576 was originally delivered to the Royal Air Force as a Chinook HC.1 on 22 December 1984.^[20]

It was re-delivered to No 7 Squadron as a Chinook HC.2 on 21 April 1994. On arrival at RAF Odiham, its No.1 engine had to be replaced. On 10 May 1994, a post-flight fault inspection revealed a dislocated mounting bracket had caused the collective lever to have restricted and restrictive movement; this resulted in a "Serious Fault Signal"^[21] being sent as a warning to other UK Chinook operating units. On 17 May 1994, emergency power warning lights flashed multiple times and the No.1 engine was again replaced. On 25 May 1994, a serious incident occurred which had indicated that the imminent failure of the No.2 engine.^[20][22]

On 31 May 1994, two days before the accident, two Chinook HC.1s were withdrawn from RAF Aldergrove and replaced by a single HC.2, ZD576.^[23] On 2 June 1994, ZD576 crashed into a hillside, killing the four crew members and all passengers on board.^[18]

Possible causes

Pilot error

Aviation safety author Andrew Brookes wrote that the true cause will never be known, but that pilot error induced by fatigue is likely to have played a part; the crew had been on flight duty for 9 hours and 15 minutes, including 6 hours flying time, before they took off on the crash flight. Had they made it to Fort George, they would have needed special permission from a senior officer to fly back to Aldergrove.^[24]

In his book, Steuart Campbell suggested that two errors by the pilots; failure to climb to a safe altitude upon entering cloud, and a navigational error made in the poor visibility (mistaking a fog signal station for a lighthouse), together caused the crash.^[26] The Board of Inquiry had identified that several factors may have sufficiently distracted the crew from turning away from the Mull, and upon entering cloud, failed to carry out the correct procedure for an emergency climb in a timely manner.^[27]

RAF Visual Flight Rules (VFR) require the crew to have a minimum visibility of 5.5 kilometres above 140 knots (260 km/h), or minimum visibility of one kilometre travelling below 140 knots;^[28] if VFR conditions are lost an emergency climb must be immediately flown.^[29] Nine out of ten witnesses interviewed in the inquiry reported visibility at ground level in the fog as being as low as ten to one hundred metres at the time of the crash; in-flight visibility may have been more or less than this. The tenth witness, a yachtsman who was offshore, reported it as being one mile (1.6 km), though he is regarded as a less reliable witness as he changed his testimony.^[30]

If witness accounts of visibility are correct, the pilots should have transferred to Instrument Flight Rules,^[31] which would require the pilots to slow the aircraft and climb to a safe altitude at the best climbing speed.^[32] In the area around the Mull of Kintyre, the safe altitude would be 2,400 feet (730 m) above sea level, 1,000 feet (300 m) above the highest point of the terrain.^[33] The height of the crash site of ZD576 was 810 feet (250 m), 1,600 feet (490 m) below the minimum safe level.^[3] The Board of Inquiry into the accident recommended formal procedures for transition from Visual Flight Rules to Instrument Flight Rules in mid-flight be developed, and the RAF has since integrated such practices into standard pilot training.^[34]

Regarding negligence on the part of the pilots, the 2011 Report said "the possibility that there had been gross negligence could not be ruled out, but there were many grounds for doubt and the pilots were entitled to the benefit of it... [T]he Reviewing Officers had failed to take account of the high calibre of two Special Forces pilots who had no reputation for recklessness."^[35]

FADEC problems

At the time of the crash, new FADEC (Full Authority Digital Engine Control) equipment was being integrated onto all RAF Chinooks, as part of an upgrade from the Chinook HC.1 standard to the newer Chinook HC.2 variant. The Ministry of Defence was given a £3 million settlement from Textron, the manufacturers of the system, after a ground-test of the FADEC systems on a Chinook in 1989 resulted in severe airframe damage. Contractors, including Textron, had agreed that FADEC had been the cause of the 1989 incident and that the system needed to be redesigned.^[37]

The committee investigating the crash were satisfied that the destructive error in 1989 was not relevant to the 1994 crash.^[30] Information provided from Boeing to the investigation led to the following conclusion regarding FADEC performance: "Data from the Digital Electronics Unit (DECU) of the second engine showed no evidence of torque or temperature exceedance and the matched power conditions of the engines post-impact indicate that there was no sustained emergency power demand. No other evidence indicated any FADEC or engine faults."^[38] It was expected that in a FADEC engine runaway, engine power would become asynchronous and mismatched. The investigation found the engines at the crash to have matched settings, decreasing the likelihood of a FADEC malfunction being involved.^[39]

EDS-SCICON was given the task of independently evaluating the software on the Chinook HC.2 in 1993. According to the House of Commons report: "After examining only 18 per cent of the code they found 486 anomalies and stopped the review... intermittent engine failure captions were being regularly experienced by aircrew of Chinook Mk 2s and there were instances of uncommanded run up and run down of the engines and undemanded flight control movements".^[3]

Tests upon the Chinooks performed by the MOD at Boscombe Down in 1994 reported the FADEC software to be "unverifiable and ... therefore unsuitable for its purpose".^[3] In June 1994, the MoD test pilots at Boscombe Down had refused to fly the Chinook HC.2 until the engines, engine control systems and FADEC software had undergone revision.^[22] In October 2001, Computer Weekly reported that three fellows of the Royal Aeronautical Society had said that issues with either control or FADEC systems could have led to the crash.^[40]

The main submission to Lord Philip (see above) revealed that the FADEC Safety Critical software did not have a Certificate of Design, and was therefore not cleared to be fitted to Chinook HC2. It further revealed that John Spellar MP had been wrong when claiming the software was not Safety Critical, providing the original policy document governing this definition to Lord Philip. MoD subsequently claimed it did not have its own copy, calling into question how it could advise Spellar one way or the other.

Other factors

The onboard Tactical Air Navigation System, which only retained the last measured altitude, gave an altitude reading of 468 feet (143 m).^[41] The investigation observed that it was possible for some of the avionics systems to interfere with the Chinook's VHF radio, potentially disrupting communications.^[42]

Flight data recorders and cockpit voice recorders were not fitted to all RAF Chinooks at the time of the accident. The absence of this data greatly reduced the amount and quality of data available to subsequent investigations.^[43] Information on speed and height were derived from the position of cockpit dials in the wreckage, and the wreckage's condition. During 1994, the RAF had begun to fit these recording devices across the Chinook HC.2 fleet prior to the accident; this process was completed in 2002.^[44]

The aircraft had not been classified as being airworthy. It was mandated upon the RAF that it was "not to be relied upon in any way".^[45]

Dramatisation

The documentary series Seconds From Disaster featured the accident in the episode "Chinook Helicopter Crash".^[46]

References

Citations

Bibliography

External links

• BBC timeline of events
• Simon Rogerson's article, from IMIS Journal
• Computer Weekly publications
  • MPs Boost Chinook Fight 2000
  • Chinook report slams flawed MoD procurement methods 2000
• House of Lords select committee publications
  • Written evidence
  • Report
  • Conclusions