AD/B727/216 - Auxiliary Fuel Tanks

Airworthiness Directive (AD): A mandatory notice issued by CASA (or a foreign airworthiness authority) that requires an operator to inspect, modify, or repair an aircraft to correct an unsafe condition. Compliance is not optional; an aircraft that fails to comply may be unairworthy and subject to grounding or enforcement action. AD/B727/216 is a “repetitive” or “one‑time” AD; here it is a one‑time deactivation requirement.

Unsafe condition: The AD states that the manufacturer’s fuel system reviews identified unsafe conditions for which the manufacturer has not provided corrective actions. Specifically, the risk is ignition sources inside fuel tanks that could combine with flammable vapours to cause explosions. The AD does not detail the nature of the ignition sources - whether they are electrical, static discharge, or other - but the deactivation criteria focus on disconnecting electrical connections, capping fuel lines, and purging vapours. The unsafe condition is therefore latent: it arises from the design or installation of the auxiliary fuel tank system, not from in‑service wear or damage.

Deactivation: The core requirement. Deactivation is not removal. The AD allows components to remain on the aeroplane provided they are secured and have no effect on safety. The deactivation procedure must be approved by CASA. Appendix A lists 11 actions that should be addressed, but it is not exhaustive; operators may need to include “any relevant information or additional steps that are deemed necessary by the operator.” This creates a delegated standard: the operator must propose a procedure that satisfies CASA’s safety expectations, but CASA retains ultimate approval.

Supplemental Type Certificate (STC): An STC is a design approval granted by a foreign authority (likely FAA) to modify an aircraft from its original type design. The AD lists the STCs that trigger applicability: SA62NE, SA392NE, SA530NE (all 727 series); plus SA387NE, ST00466NY (727‑100); plus SA84NE, SA450NE, SA496NE (727‑200). This means that an operator whose 727 is fitted with any of those STCs is captured regardless of the specific installation details. The AD does not apply to aircraft without those STCs.

CASA approval: The deactivation procedure must be “approved by CASA.” Note 1 indicates that the proposed procedures should be submitted to the Manager, Systems and New Technologies, “as soon as possible to ensure timely review and approval.” This signals that CASA expects a queue and that processing time may be a bottleneck. Operators who delay submission risk missing the compliance deadline.

Reporting obligation: Requirement 1 is a simple information‑gathering exercise: the operator must report registration, STC number, and usage frequency. This data likely assists CASA (and perhaps the FAA) to understand the fleet exposure. The usage frequency question suggests CASA wanted to assess risk exposure - more flights with the auxiliary tank in use means more cycles of pressurisation, fuel flow, and potential ignition sources.

Continued airworthiness: The AD stipulates that deactivation must not result in the need for additional instructions for continued airworthiness. This prevents the deactivation from creating new maintenance obligations. It also means the deactivation itself must be documented in a way that does not require ongoing special inspections or life limits.

The AD directly affects any person or organisation that operates a Boeing 727 series aeroplane fitted with any of the listed auxiliary tank STCs. Given that the Boeing 727 was withdrawn from large‑scale commercial passenger service years ago (the type ceased scheduled passenger service in the United States in 2003 and in Australia earlier), the affected operators are likely to be cargo operators, charter operators, leasing companies, or government organisations that still maintain these aircraft for specialised roles. The AD also affects maintenance organisations contracted to perform the deactivation work, as they must develop and submit an approved procedure and then execute it.

Indirectly, the AD affects CASA itself as the regulator. CASA’s Airworthiness Engineering Group must process the submitted procedures, review them against the criteria in Appendix A and any internal guidance, and issue approvals. This consumes public‑sector resources. The AD does not mention a fee for approval; presumably the cost is absorbed by CASA’s budget or recovered through aviation industry levies.

The AD also affects the holder of the STCs (PATS Aircraft, LLC, which the AD names, though only in the background line). An STC holder normally has obligations to provide corrective actions for unsafe conditions discovered on their design. The AD states that the manufacturer (Boeing) conducted fuel system reviews and that “the manufacturer has not provided corrective actions.” It does not say the STC holder failed to act; it simply notes that no corrective action exists. The AD therefore bypasses the STC holder and imposes a direct requirement on operators. This is notable: usually an AD targeting an STC modification would require the STC holder to issue a service bulletin or modification instructions. Here, the regulator mandated deactivation without waiting for the STC holder.

Aircraft lessors and financiers may be indirectly affected. If an aircraft is subject to a lease or finance arrangement that requires the auxiliary fuel system to be functional, the lessee or owner must now deactivate it, potentially breaching contractual obligations or reducing the aircraft’s value. The lessor may require compensation or renegotiation, but the AD does not address commercial consequences.

Finally, the AD affects the broader airworthiness community: maintenance engineers, flight operations staff who must revise AFMs, and compliance managers who must track the deadline. For an aircraft type that is already at the tail end of its service life, the compliance cost might be disproportionate to the aircraft’s residual value, potentially accelerating retirement or scrapping.

Duty to report: The operator must submit a report containing the aeroplane registration, auxiliary tank STC number, and usage frequency within 45 days of the effective date (by 1 March 2009, approximately). There is no obligation to report before deactivation; the report is separate. Failure to report may be a breach of the AD, though the AD does not specify a penalty for that alone.

Duty to deactivate: The operator must deactivate the auxiliary fuel tanks before 16 December 2009, using a CASA‑approved procedure. This is the primary duty. The operator cannot simply continue operating with the auxiliary tanks in their current state; they must either deactivate or ground the aircraft.

Duty to secure retained components: Any auxiliary tank component that remains on the aeroplane after deactivation must be “secured and must have no effect on the continued operational safety and airworthiness of the aeroplane.” This imposes a clear safety standard: retained components cannot create new risks (e.g., loose wiring, unsecured fuel lines, trapped fuel vapours).

Duty to avoid new continued airworthiness instructions: The deactivation must not result in a need for additional instructions for continued airworthiness. This prevents the deactivation from generating recurring maintenance tasks that would burden the operator. The operator cannot simply leave the system inoperative and require periodic checks; the deactivation must be a permanent state that requires no further action.

Right to propose a deactivation procedure: The operator has the right to submit a procedure for approval. The AD does not prescribe a one‑size‑fits‑all method; it allows the operator to develop a procedure that suits their specific installation, provided it addresses the criteria in Appendix A. This is a modest flexibility, but it comes with administrative cost - the operator must prepare engineering documentation, submit it, and await approval.

Right to use a CASA‑approved means: Once CASA approves the procedure, the operator has a lawful path to compliance. There is no right to use an unapproved procedure.

No right to alternative compliance: The AD does not offer an alternative means of compliance (e.g., modifying the tanks to eliminate the ignition source). The only option is deactivation. This is a hard regulatory approach: the regulator determined that the unsafe condition cannot be rectified by repair, so the only acceptable solution is to disable the system.

Right to insert the AD into the AFM: Appendix A item 7 states that “the AFM revisions specified in this paragraph may be accomplished by inserting a copy of this AD into the AFM.” This is a practical simplification; operators do not need to print new AFM supplements; they can simply add the AD as a temporary revision.

Obligation to obtain CASA approval for weight and balance changes: Item 6 of Appendix A requires that the weight and balance document be revised and approved by CASA. This adds another layer of regulatory oversight, since weight and balance data directly affect performance and loading.

The AD itself does not state specific penalties for non‑compliance. Instead, it relies on the broader regulatory framework under the Civil Aviation Act 1988 (Cth) and the Civil Aviation Safety Regulations 1998 (CASR). An AD is a direction issued by a delegate of CASA. Failure to comply with an AD renders the aircraft unairworthy. Operating an unairworthy aircraft is an offence under the Act, carrying significant civil penalties (e.g., pecuniary penalties up to $10,000 per day for an individual and higher for a body corporate) and potentially criminal prosecution for reckless conduct.

Enforcement is through CASA’s enforcement powers: it can issue a notice to show cause, suspend or cancel the certificate of registration or the airworthiness certificate, or apply to a court for an injunction to ground the aircraft. In practice, an operator that fails to deactivate by the deadline will have an unairworthy aircraft and cannot legally fly it. The AD becomes self‑enforcing in that sense: the operator either complies or grounds the aircraft. However, if an operator continues to operate without deactivation, CASA can take enforcement action.

The AD’s reference to FAA AD 2008‑22‑01 suggests that the US originator also imposed a similar requirement. The FAA enforces its ADs under US law, but this is a separate matter; Australian‑registered aircraft must comply with CASA’s AD.

The AD gives no grace period after the deadline. The compliance date is fixed: “Before 16 December 2009.” There is no provision for extension by CASA, but in practice CASA could grant an extension if requested and justified, though the AD does not say so. Operators who miss the deadline may argue that they could not obtain approval in time, but this is unlikely to be a complete defence - the AD explicitly encourages early submission of procedures.

Deactivation is a one‑off event. Once completed, there is no ongoing penalty exposure, provided the deactivation remains effective. However, if an operator later reactivates the auxiliary tank (e.g., by reconnecting electrical and fuel lines) without new approval, that would be a fresh violation. The AD does not preclude reactivation, but it would require a new approval and essentially a reversal of the deactivation steps, which is not contemplated.

FAA AD 2008‑22‑01: The AD explicitly notes that “FAA AD 2008‑22‑01 Amdt 39‑15696 dated 9 October 2008 refers.” This is the US equivalent directive. For an Australian‑registered 727, the CASA AD is the binding law; the FAA AD is not directly enforceable in Australia. However, if the aircraft is also registered in the US or operated under a US type certificate, the FAA AD would apply separately. The CASA AD mirrors the intent of the FAA AD, ensuring consistency across jurisdictions. Operators who hold both certificates must comply with both, but since the requirements are identical, a single deactivation effort suffices.

Civil Aviation Safety Regulations (CASR): The AD is issued under the authority of the Civil Aviation Act and CASR. Part 39 of CASR deals specifically with airworthiness directives. The AD must be read in the context of CASR 39.003 (effect of ADs) and related provisions. The AD does not refer to these, but they are the legal foundation.

STCs and design‑approval regulations: The auxiliary tanks were approved under foreign STCs. The AD effectively overrides the design approvals for those STCs by requiring deactivation. The STC remains valid for other purposes, but its operational use is prohibited unless the deactivation is reversed through a new approval process. The interaction with Australian design‑approval regulations (e.g., Part 21 of CASR) is indirect; the AD does not invalidate the STC, it restricts the configuration.

Maintenance regulations: The deactivation procedure will involve maintenance actions that must be performed by licensed aircraft maintenance engineers (LAME) and in accordance with approved data. The AD does not specify who can perform the work; that is governed by Part 66 (licensing) and Part 145 (maintenance organisations) of CASR. The operator must ensure the deactivation is carried out by a suitably authorised person.

Aeroplane Flight Manual (AFM) and Airworthiness Limitations: The AD requires amendments to the AFM, including removal of auxiliary tank operating procedures and limitation sections. This interacts with the AFM approval process under the type certificate. By inserting a copy of the AD, the operator complies with the requirement for an amendment. However, the operator must also ensure that the AFM as amended remains an approved document. The use of the AD as a temporary revision is a pragmatic solution.

Weight and balance regulations: Appendix A item 6 requires revision of the weight and balance document with CASA approval. This interacts with the operator’s obligation to maintain an accurate weight and balance manual under the continuing airworthiness management system (Part 42 of CASR).

Occupational health and safety (OHS) laws: The deactivation involves draining fuel tanks and handling fuel vapours, which triggers workplace health and safety obligations. The operator must ensure that the work is performed safely to protect personnel from explosion, fire, and toxic exposure. The AD does not address OHS, but it is an additional layer of regulation.

Contractual agreements: The AD may override contractual obligations between operators, lessors, and financiers. For example, a lease that requires the aircraft to be equipped with functioning auxiliary tanks will likely be frustrated. The AD does not provide relief from contract law; the parties must resolve commercial consequences privately.

This is the original AD as issued on 27 November 2008, effective 15 January 2009. The AD number is AD/B727/216, with the series suffix 1/2009, indicating the first issue of this particular AD in 2009. The source document does not show any subsequent amendments; it is a standalone directive. However, it is possible that CASA issued later amendments (e.g., to extend the compliance date or correct errors) but those are not provided here.

The AD references FAA AD 2008‑22‑01 as a foreign counterpart. The FAA AD may have been amended later, but that does not automatically amend the CASA AD. If the FAA AD were revised to allow an alternative means of compliance, an operator would need CASA to adopt that change through a new or amended Australian AD. There is no evidence of such a change in the source.

Appendix A is included as an appendix to the AD; it is part of the AD and not a separate document. The AD number is repeated as AD/B727/216 Appendix A. This is a single‑issue appendix.

Because the Boeing 727 fleet has continued to shrink, it is very likely that CASA never amended this AD. The requirement was a one‑time action; once all affected aircraft were deactivated or withdrawn from service, the AD became spent. Any remaining aircraft that were never deactivated would have been grounded. No new aircraft would become subject to it because no new 727s with those STCs would enter the Australian register.

The source document contains no information about litigation. There are no court cases or tribunal decisions referenced in the AD text. This is not surprising; airworthiness directives rarely generate litigation because the regulatory framework is clear and the penalties for non‑compliance are severe. Operators typically comply rather than challenge. Moreover, the stakes - aircraft safety - are high, and courts give significant deference to aviation safety regulators.

It is possible that an operator could have challenged the AD on procedural grounds (e.g., inadequate opportunity to comment or insufficient evidence of an unsafe condition) or on the basis that the compliance deadline was unreasonable. However, under Australian administrative law, such a challenge would require the operator to demonstrate that CASA acted beyond its power or that the decision was so unreasonable that no reasonable decision‑maker could have made it. Given the background that the manufacturer identified unsafe conditions without providing corrective actions, and given the serious consequence (fuel tank explosions), a challenge would face formidable hurdles.

No Australian cases interpreting AD/B727/216 appear in standard legal databases. The same is likely true for the FAA counterpart. AD litigation in the US is also rare, though there have been challenges to the FAA’s rulemaking process under the APA. The source does not supply any such cases.

For the purpose of this analysis, we treat litigation history as nil. Practitioners should note that the absence of litigation does not imply the AD is beyond challenge, but any challenge must be brought on recognisable legal grounds and would face a heavy evidentiary burden.

Tight submission timeframe for procedure approval: The AD requires reporting within 45 days and deactivation by 16 December 2009. For an operator that first becomes aware of the AD after its effective date, the clock starts immediately. The AD implies that the deactivation procedure must be submitted “as soon as possible” to allow CASA time to review and approve. If an operator submits late, they risk CASA not approving the procedure before the deadline, leaving them technically non‑compliant. There is no automatic grant of extension.

CASA approval is a grey area: The AD does not specify the approval standard beyond the criteria in Appendix A. CASA has discretion to reject a procedure even if it addresses all the listed items, if they deem it insufficient. The operator cannot force approval. This creates uncertainty: a perfectly reasonable procedure might be rejected on the basis that CASA wants additional steps or documentation. The operator may need to engage in back‑and‑forth, burning time. The AD does not set a time limit for CASA’s response.

Deactivation must have no effect on operational safety: This is a strict standard. If the operator leaves disconnected wiring that could chafe or cause arcing, that would be a violation. The operator must demonstrate, through testing (leak checks, pressure checks, FQIS verification), that the deactivation did not inadvertently degrade other systems. This could require extensive troubleshooting if a problem is detected.

No alternative to deactivation: Operators who might have preferred to modify the tanks (e.g., install inerting systems or remove the tanks entirely) cannot do so under the AD. The only approved path is deactivation per CASA approval. If an operator wants to remove the tanks entirely, that might require a different approval process; the AD does not prevent removal, but the operator must still comply with the AD’s deactivation requirement until removal is complete. The AD’s deactivation steps include permanent draining and disconnection, which essentially make the tanks inert; removal would be an additional step.

Potential for residual fuel and vapour hazards: Appendix A requires permanent draining and clearing of fuel vapours. If this is not done meticulously, fuel vapours could remain and out‑gas, creating a fire hazard. The operator must ensure the draining is complete and that no fuel remains in the tanks. This is a physical challenge, especially if the tanks are not fully accessible.

Placard must be placed in flight deck: This is a simple step but easily overlooked. The placard must indicate that the auxiliary tank is deactivated. If the placard is missing or illegible, a crew member might not know the system is inoperative, leading to confusion or inadvertent operation.

AFM revision method - insertion of copy of AD: While convenient, inserting a copy of the AD into the AFM may not comply with other regulatory requirements for AFM revisions (e.g., revision number, log of changes). The AD says it “may be accomplished” by insertion, but it does not explicitly say that this alone satisfies all relevant regulations. An operator should still properly document the revision in the AFM revision log.

Weight and balance revision requires CASA approval: This is a bureaucratic hurdle. The operator must update the weight and balance document to account for the removal of auxiliary fuel weight and any structural changes. CASA approval may take time and may require submission of engineering justification.

No explicit allowance for ferry flight after deactivation: If an operator needs to fly the aircraft to a maintenance base to perform deactivation, the AD does not provide a ferry flight permission. The AD becomes effective on 15 January 2009, so any flight after that date must be in compliance. If the aircraft is already at a remote location without deactivation capability, the operator may be forced to either perform deactivation on site (perhaps with limited resources) or not operate the aircraft.

Residual STC applicability: Even after deactivation, the STC remains on the aircraft’s configuration data. The AD does not revoke the STC. If the aircraft is later sold to a buyer who wants to reactivate the auxiliary tank, the new operator would need to obtain a new approval to reverse the deactivation. That would likely require a new engineering process.

Compliance with AD/B727/216 involves two sequential phases: reporting and deactivation. The steps are as follows based on the AD text and Appendix A.

Phase 1 - Reporting (within 45 days of 15 January 2009):

1. Identify all Boeing 727 series aeroplanes on your registration that are fitted with any of the STCs listed in Table 1 of the AD. Cross‑reference the STC numbers against your aircraft records.
2. For each affected aircraft, gather:
   • Registration mark.
   • Installed auxiliary tank STC number.
   • Total number of flights per year (use the most recent 12‑month period, or a representative year).
   • Total number of flights per year for which the auxiliary tank was used. This requires operational data; if not recorded, the operator must estimate or use a proxy (e.g., flights where fuel burn exceeded OEM tank capacity).
3. Prepare a written report containing this information and submit it to the Manager, Systems and New Technologies, Airworthiness Engineering Group, CASA, fax (02) 6217 1914. The AD does not specify an email or address, so fax was the intended method.
4. Keep a copy of the submitted report for your records.

Phase 2 - Deactivation (by 16 December 2009):

1. Develop a deactivation procedure that addresses each of the actions listed in Appendix A items 1-11. You may add additional steps as necessary. The procedure should be specific to each aircraft configuration, including the exact routing of electrical wiring, fuel lines, and vent lines. Include details of how to secure disconnected components.
2. Submit the proposed deactivation procedure to the same CASA contact “as soon as possible” to allow time for review and approval. The AD suggests submitting well before the compliance deadline. You may need to iterate if CASA rejects or requests modifications.
3. Once CASA approves the procedure, execute it. Steps include:
   • Drain fuel from auxiliary tanks and purge vapours (item 1).
   • Disconnect all electrical connections (FQIS, fuel pumps, float switches) and stow them at the tank interface (item 2).
   • Disconnect pneumatic connections and cap at source (item 3).
   • Disconnect fuel feed and vent plumbing from OEM tanks, cap at the aeroplane side, and secure. Use the method from AC 25‑8 or other CASA‑approved method. Leave auxiliary tank vent lines open but secured (item 4).
   • Pull and collar circuit breakers that operate the tank (item 5).
   • Revise weight and balance document and obtain CASA approval (item 6).
   • Revise the AFM: remove auxiliary tank operating procedures, indicate that the AFM Supplement for the STC is not in effect, and place a placard in the flight deck stating the tank is deactivated. The AFM revision may be done by inserting a copy of this AD (item 7).
   • Revise the maintenance manual to remove auxiliary tank maintenance procedures (item 8).
   • Perform leak checks and pressure checks to confirm that the OEM FQIS and fuel distribution systems are not adversely affected. This must be done before return to service (item 9).
   • Revise instructions for continued airworthiness as necessary (item 10).
4. After deactivation, ensure that any retained auxiliary tank components are secured and have no effect on safety. Ensure no new continued airworthiness instructions are required.
5. Record the deactivation in the aircraft’s maintenance records, including the AD compliance statement.
6. Before returning the aircraft to service, conduct a final check that all steps are complete and approve for release in accordance with Part 42 or Part 145 requirements.

Operators should note that the deactivation is permanent for the purpose of this AD. If the auxiliary tank system is later desired to be reactivated, a new approval from CASA would be required.