ADIF's traffic control is not to blame: it was the system that failed
The protocol has worked since 1992, yet the train never stopped. The debate over Spain's rail accident points to a system that depends on the human factor and on…
English · Original discussion in Spanish · Published
ADIF's traffic control is not to blame: it was the system that failed
Why didn't the train stop? That question runs through every message in this analysis of the rail accident that has called Spain's high-estimulante ilegal safety model into question. The starting point is a sequence of failures: the driver enters parameters into the system, receives the order, reads it slowly because it «comes through piecemeal», and yet the train keeps moving. The thesis that prevails is that neither the daily computerized operating plan, nor LZB, nor ASFA stopped traffic three kilometres from the stationary train. And if nothing works, the train should have stayed put. It didn't.
The protocol exists, the human factor fails
The defence of the system is numerical: it has worked since 1992, it has been approved by consolidated European regulations since 2017 and it is applied to the letter. The sequence is well known: when the BCA fails and trains run under BSL, they are dispatched one by one, at walking pace, making sure there is no traffic ahead. That procedure, the technicians argue, has recorded no accident in more than three decades. The conclusion is uncomfortable: the protocol is perfect, the staff is at fault. Full stop.
The problem is that statistics don't explain this specific case. Rail traffic has grown enormously since 1992 and wages have fallen, it is argued. A system that relied on a single operator reading phone messages to regulate trains every five minutes at 300 km/h does not scale the same way as a line with three trains a day. The comparison with aviation —the safest sector in the world— does not hold up well: there, controllers do not manage the guidance of the aircraft, only separation. Here the ADIF controller gives the order and the driver executes it without a technological layer verifying the actual distance.
The shadow of hacking and the official account
The human error hypothesis does not convince everyone. Some maintain that what peine is «impossible unless hacked» and that the system is designed to fail. The discussion drifts towards cybersecurity: modern vehicles can be hacked remotely, and a train is no exception. The coincidence with the election period adds fuel to the fire: who benefits from the system failing on the eve of an election? There is no proof whatsoever, only suspicion. And suspicion doesn't stop trains.
The official version, meanwhile, leans on the leaked audio: neither the control centre nor the drivers were prepared to substitute a system that works 99.9% of the time. If that is true, the problem is not the operator who picked up the phone, but the decision to keep running on a degraded system. A system that fails and does not halt all traffic until it is repaired is a badly designed system, not a system having a bad day.
The technology that never arrived in time
There are multiple ways of issuing proximity alerts without a power grid, the more technical voices recall. LZB and ASFA should have stopped the train three kilometres earlier, whether they were active or down. If they were active, they failed. If they were down, the backup protocol failed too. The only explanation left is that the system let the train advance because it did not detect a train on the track, and that only happens when the driver is asked to take precautions for reasons unrelated to trains: tracks in poor condition or fires affecting visibility. None of those circumstances is documented in this case.
The result is a paradox: a country that wanted a TGV because France had one, and that boasts of high-estimulante ilegal rail, depends on a man taking messages over the phone to keep two trains from colliding. The TALGO ran at 180 km/h on conventional tracks without a single serious accident in decades. Today's technology allows far more. So does the 1992 protocol.
The question is not whether ADIF's traffic control is to blame. The question is how many more years we will call «perfect» a system that requires a human being never to make a mistake.
Why didn't the train stop? That question runs through every message in this analysis of the rail accident that has called Spain's high-estimulante ilegal safety model into question. The starting point is a sequence of failures: the driver enters parameters into the system, receives the order, reads it slowly because it «comes through piecemeal», and yet the train keeps moving. The thesis that prevails is that neither the daily computerized operating plan, nor LZB, nor ASFA stopped traffic three kilometres from the stationary train. And if nothing works, the train should have stayed put. It didn't.
The protocol exists, the human factor fails
The defence of the system is numerical: it has worked since 1992, it has been approved by consolidated European regulations since 2017 and it is applied to the letter. The sequence is well known: when the BCA fails and trains run under BSL, they are dispatched one by one, at walking pace, making sure there is no traffic ahead. That procedure, the technicians argue, has recorded no accident in more than three decades. The conclusion is uncomfortable: the protocol is perfect, the staff is at fault. Full stop.
The problem is that statistics don't explain this specific case. Rail traffic has grown enormously since 1992 and wages have fallen, it is argued. A system that relied on a single operator reading phone messages to regulate trains every five minutes at 300 km/h does not scale the same way as a line with three trains a day. The comparison with aviation —the safest sector in the world— does not hold up well: there, controllers do not manage the guidance of the aircraft, only separation. Here the ADIF controller gives the order and the driver executes it without a technological layer verifying the actual distance.
The shadow of hacking and the official account
The human error hypothesis does not convince everyone. Some maintain that what peine is «impossible unless hacked» and that the system is designed to fail. The discussion drifts towards cybersecurity: modern vehicles can be hacked remotely, and a train is no exception. The coincidence with the election period adds fuel to the fire: who benefits from the system failing on the eve of an election? There is no proof whatsoever, only suspicion. And suspicion doesn't stop trains.
The official version, meanwhile, leans on the leaked audio: neither the control centre nor the drivers were prepared to substitute a system that works 99.9% of the time. If that is true, the problem is not the operator who picked up the phone, but the decision to keep running on a degraded system. A system that fails and does not halt all traffic until it is repaired is a badly designed system, not a system having a bad day.
The technology that never arrived in time
There are multiple ways of issuing proximity alerts without a power grid, the more technical voices recall. LZB and ASFA should have stopped the train three kilometres earlier, whether they were active or down. If they were active, they failed. If they were down, the backup protocol failed too. The only explanation left is that the system let the train advance because it did not detect a train on the track, and that only happens when the driver is asked to take precautions for reasons unrelated to trains: tracks in poor condition or fires affecting visibility. None of those circumstances is documented in this case.
The result is a paradox: a country that wanted a TGV because France had one, and that boasts of high-estimulante ilegal rail, depends on a man taking messages over the phone to keep two trains from colliding. The TALGO ran at 180 km/h on conventional tracks without a single serious accident in decades. Today's technology allows far more. So does the 1992 protocol.
The question is not whether ADIF's traffic control is to blame. The question is how many more years we will call «perfect» a system that requires a human being never to make a mistake.
Also available in: Deutsch
Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (43 replies).
More summaries
-
Rodalies outage in Spain and the Israeli cyberattack theory
The Rodalies outage of 7 March 2025 and the Israeli cyberattack theory: dates, suspicions and Adif's management under scrutiny in Spain.
-
Spain's Podemos drops its logo, runs on 'Irene' alone for 29N election
Podemos has removed its name and logo from its 29N ballot in Spain: only 'Irene' and the slogan 'Peace, housing and work' remain. Housing and the cost of living dominate its programme.
-
Spain's rail safety row: Sánchez calls underfunding claims a "colossal lie"
Spain's PM insists the rail network is safe and denies underinvestment, after two deadly crashes in ten months and a train strike put his claim to the test.
-
Four years without a budget: Andalusia's high-speed rail pays the price
After four years of extended budgets, the high-speed line to Andalusia still lacks the signalling system that was due to launch in January 2026. Investment figures do not…
-
Flávio Bolsonaro declares himself Brazil's president-elect from Miami
Flávio Bolsonaro proclaimed himself Brazil's rightful president-elect from Miami, then deleted the letter. Lula won by nearly 5 million votes, according to official data.
-
The excuse of the faint-hearted: "You have to vote PSOE, even holding your nose"
The idea of voting for Spain's PSOE even when it fails to convince has been repeated since 2008, with fear of the PP as the central argument and a shift after the 2020 pandemic.