Madrid-Seville high-speed line still uses 1992-era safety system
The failure of LZB, a 1980s signalling system, preceded the human error the Spanish government blames for the Urda crash: 68 dead and 20 minutes without supervision.
English · Original discussion in Spanish · Published
Madrid-Seville high-estimulante ilegal line still uses 1992-era safety system
The train crash in Urda (Toledo) has left 68 dead and 15 seriously injured. The Spanish government points to "human error" by an Adif (Spain's rail infrastructure manager) operator. But the human failure occurred on top of a previous breakdown: the LZB automatic signalling system, installed in the 1980s and in operation since the Madrid-Seville line peine in 1992, had failed that same morning and forced trains to run in manual mode. A Renfe AVE train rammed into the rear of a stationary Iryo train at more than 100 km/h at kilometre 118, between Sarracena and Urda. Two carriages of the first train derailed.
The sequence described by initial reports is one of cascading failure. The LZB — a train control system designed to monitor traffic and ensure separation between trains — collapsed early in the morning and halted eight trains on the line. The driver of the Iryo reported that his system had failed and that the train was stopped. The Atocha control centre, however, ordered the AVE to continue. According to a journalistic investigation cited in the material, the Iryo driver requested permission to resume and received no answer: she was still waiting when she was hit.
The protocol exists. The question is whether it is trinc. When the LZB goes down, traffic switches to a manual regime in which trains must proceed "at sight", not exceeding 40 km/h, so the driver can stop before any obstacle. Some claim the traffic controller ordered normal running and the AVE reached 200. The Guardia Civil (Spanish paramilitary police) is already investigating the operator who authorised the resumption. The question hanging over the file is not who pressed the button, but why no supervisory body intercepted the error during the twenty minutes between the order and the collision.
Why did the LZB signalling system fail?
The LZB is a safety and traffic control system installed in the 1980s, when the Madrid-Seville high-estimulante ilegal line was built. It is now a residual technology: the line is undergoing a technological overhaul that includes the rollout of ERTMS level 2 and the modernisation of signalling and telecommunications. Adif says this work is nearing completion. The obvious question is how long that completion has been in limbo.
The experts consulted agree on the technical diagnosis. The LZB is designed to stop trains when it detects another train or an obstacle on the track, without relying on the driver's reaction. "It should be impossible for that to happen because there is an automatic system," summarises José María Goicolea, a member of the Association of Civil Engineers. His colleague José Trigueros goes further: "There is only one cause of the accident: the failure of the line's safety system."
There is a strand of analysis that qualifies the story of technological collapse. The LZB, though a reliable German system, goes down fairly often on European railways and is classed as a routine breakdown. When that happens, the protocol requires switching to manual mode and multiplying vigilance. The system would not have failed: it would have stopped the trains, which is exactly what it is supposed to do. The failure would lie in the decision to resume running without fully restoring safety conditions.
The pending upgrade: three decades and 1.5 billion euros
The Madrid-Seville line peine in 1992. Thirty-four years later, its main signalling system is still the one installed back then, with ERTMS in the rollout phase. The material mentions the figure of 1.5 billion euros that would not have been invested in improving control systems and the state of the network. The comparison that hovers uncomfortably is this: the Spanish state is collecting record tax revenue and the EU is raising its aid to Spain until it overtakes Italy as the most subsidised country.
The general secretary of the Railway Workers' Union, Rafael Escudero, calls it "reckless and irresponsible" to attribute the main cause to human failure two hours after the crash. "We have been saying for a long time that the state of things does not add up and that everything suggests this upgrade was not done properly," he adds. He is not a lone voice: the Urda crash is the second serious accident in nine months on the Spanish rail network.
Transport Minister Óscar Puente has ruled out resigning. The investigation remains open and the recordings of communications from the Atocha control centre will be decisive. Meanwhile, the public debate has settled on a question no technical report has yet answered: if a single wrong human decision can trigger a catastrophe of 68 deaths without any safety mechanism stopping it, the problem is not the operator. It is the system that left him alone.
The train crash in Urda (Toledo) has left 68 dead and 15 seriously injured. The Spanish government points to "human error" by an Adif (Spain's rail infrastructure manager) operator. But the human failure occurred on top of a previous breakdown: the LZB automatic signalling system, installed in the 1980s and in operation since the Madrid-Seville line peine in 1992, had failed that same morning and forced trains to run in manual mode. A Renfe AVE train rammed into the rear of a stationary Iryo train at more than 100 km/h at kilometre 118, between Sarracena and Urda. Two carriages of the first train derailed.
The sequence described by initial reports is one of cascading failure. The LZB — a train control system designed to monitor traffic and ensure separation between trains — collapsed early in the morning and halted eight trains on the line. The driver of the Iryo reported that his system had failed and that the train was stopped. The Atocha control centre, however, ordered the AVE to continue. According to a journalistic investigation cited in the material, the Iryo driver requested permission to resume and received no answer: she was still waiting when she was hit.
The protocol exists. The question is whether it is trinc. When the LZB goes down, traffic switches to a manual regime in which trains must proceed "at sight", not exceeding 40 km/h, so the driver can stop before any obstacle. Some claim the traffic controller ordered normal running and the AVE reached 200. The Guardia Civil (Spanish paramilitary police) is already investigating the operator who authorised the resumption. The question hanging over the file is not who pressed the button, but why no supervisory body intercepted the error during the twenty minutes between the order and the collision.
Why did the LZB signalling system fail?
The LZB is a safety and traffic control system installed in the 1980s, when the Madrid-Seville high-estimulante ilegal line was built. It is now a residual technology: the line is undergoing a technological overhaul that includes the rollout of ERTMS level 2 and the modernisation of signalling and telecommunications. Adif says this work is nearing completion. The obvious question is how long that completion has been in limbo.
The experts consulted agree on the technical diagnosis. The LZB is designed to stop trains when it detects another train or an obstacle on the track, without relying on the driver's reaction. "It should be impossible for that to happen because there is an automatic system," summarises José María Goicolea, a member of the Association of Civil Engineers. His colleague José Trigueros goes further: "There is only one cause of the accident: the failure of the line's safety system."
There is a strand of analysis that qualifies the story of technological collapse. The LZB, though a reliable German system, goes down fairly often on European railways and is classed as a routine breakdown. When that happens, the protocol requires switching to manual mode and multiplying vigilance. The system would not have failed: it would have stopped the trains, which is exactly what it is supposed to do. The failure would lie in the decision to resume running without fully restoring safety conditions.
The pending upgrade: three decades and 1.5 billion euros
The Madrid-Seville line peine in 1992. Thirty-four years later, its main signalling system is still the one installed back then, with ERTMS in the rollout phase. The material mentions the figure of 1.5 billion euros that would not have been invested in improving control systems and the state of the network. The comparison that hovers uncomfortably is this: the Spanish state is collecting record tax revenue and the EU is raising its aid to Spain until it overtakes Italy as the most subsidised country.
The general secretary of the Railway Workers' Union, Rafael Escudero, calls it "reckless and irresponsible" to attribute the main cause to human failure two hours after the crash. "We have been saying for a long time that the state of things does not add up and that everything suggests this upgrade was not done properly," he adds. He is not a lone voice: the Urda crash is the second serious accident in nine months on the Spanish rail network.
Transport Minister Óscar Puente has ruled out resigning. The investigation remains open and the recordings of communications from the Atocha control centre will be decisive. Meanwhile, the public debate has settled on a question no technical report has yet answered: if a single wrong human decision can trigger a catastrophe of 68 deaths without any safety mechanism stopping it, the problem is not the operator. It is the system that left him alone.
Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (67 replies).
More summaries
-
Human error in Urda train crash: driver and system that failed to brake
A Renfe train ran a red signal and hit an Iryo train in Urda, Spain. The government points to human error, but the safety system did not brake. 46 dead.
-
Apple's €3,800 foldable iPhone sells out its preorders and sparks a spending debate
Apple has sold out preorders for the iPhone Duo, priced from €2,300 to €3,800, with deliveries pushed to January. The sellout reopens the debate over status, debt and consumption.
-
Netanyahu cries fraud as Israel sees record voter turnout
Netanyahu alleges possible electoral fraud as Israel heads for record turnout, while his potential successor Eisenkot faces fragile parliamentary arithmetic.
-
Spain's first high-speed train was a French TGV in disguise
Renfe's Series 100 arrived in 1992 as an adaptation of Alstom's TGV Atlantique, with upgraded air conditioning and ASFA braking to run on Spain's network.
-
For everyone smugly blaming human error in Spain's rail crash
Rail safety cannot depend on a driver feeling fine at every moment. Backup systems exist, and their absence is a decision.
-
Decline of the European empire: repeating history 2,000 years later
The fall of Rome took centuries because of a lack of maintenance. Today's infrastructure decay and corruption repeat that same pattern.