Let me continue with practical radiation protection. This time the topic is a seemingly ordinary part of the job: personnel leaving the controlled access area (CAA) and radioactive contamination monitoring.
For someone who has worked at an NPP for many years, the route through the sanitary checkpoint seems self-evident: monitoring of work clothing, removal of PPE, a shower if needed, then skin monitoring and passage to the clean side. Disputes arise not over the monitoring itself but over the details. Where exactly should a person be stopped when a monitor alarms? Should the turnstile lock automatically? And what in this scheme is really required by a regulatory document, and what has been chosen by the design?
- The first question is practical: what must be in place if contamination above the established level is detected on work clothing or skin?
- The second is a design question: must the installation itself physically block the passage on a “Contaminated” signal, or is it sufficient that bypassing the monitoring is prevented by the layout, doors and administrative arrangements?
I separate these issues deliberately below. For operations, what matters is not an argument about the word “interlock” but a clear chain of actions: detect the contamination, prevent it from being carried further, provide for a change of clothing and decontamination, re-monitor the person, and keep the exit functional even in the event of equipment failure or evacuation.
How the exit from the CAA is organized
Russian rules build the sanitary access regime around the separation of flows. Under para. 7.1 of SP AS-03, NPP buildings and structures are divided into the CAA and the free access area, and entry into the CAA is arranged through a sanitary checkpoint. The point of this arrangement is not the turnstile or door as such, but ensuring that a person cannot accidentally carry radioactive contamination from the controlled area to the outside.
Para. 16.3 of SP AS-03 explicitly sets out the purpose of the sanitary checkpoint: complete change of clothing, sanitary treatment, radiation monitoring of the body and work clothing, and collection of contaminated work clothing and its dispatch for decontamination. The layout must ensure one-way flow and prevent “dirty” and “clean” flows from crossing.
At the level of personnel actions, the sequence is clearly set out in para. 4.7 of PRB AS-99 (Radiation Safety Rules for the Operation of Nuclear Power Plants):
- place the personal dosimeter in the dosimeter rack cell;
- on entering the “dirty” section, check the contamination of work clothing, work footwear and exposed parts of the body on the radiation monitoring installation. If the contamination exceeds the established level, contact the on-duty radiation safety personnel;
- at the disciplinary barrier marked “Remove work footwear”, remove the work footwear;
- undress in the “dirty” section, put the work clothing into a locker and go to the shower room;
- in the shower room, carry out sanitary treatment if necessary: hands, head, body;
- at the exit from the shower room, check body contamination on the radiation monitoring installation. If the permissible level is exceeded, contact the on-duty radiation safety personnel;
- in the absence of a prohibiting signal, go to the “clean” section, change into personal clothing and leave.
SP AS-03 supports this with layout requirements. Hand and body contamination monitoring points after sanitary treatment are located between the drying room and the personal clothing wardrobe (para. 16.2), and the showers are located between the “dirty” and “clean” zones (para. 16.8).
Separate monitoring is also provided further along the route: personal clothing is monitored at the exit through access control points (SP AS-03, para. 6.6.4; PRB AS-99, para. 4.16).
Regulatory framework and status of documents
It is important not to mix up the legal force of documents here. Russian standards are binding within their national scope; for a project in Türkiye, their status depends on whether they are included in the licensing and design basis of the specific facility. The Turkish Regulation is a national requirement. IAEA documents serve as an international normative basis and reference: Safety Requirements use “shall” and Safety Guides use “should”, but IAEA standards do not automatically become legally binding on a State merely by virtue of their status. They become binding through national regulation, licence conditions, design commitments or other adopted mechanisms. Therefore, below I distinguish between a “national document requirement”, an “IAEA Safety Requirements requirement” and a “Safety Guide recommendation”.
Russia
NRB-99/2009 (SanPiN 2.6.1.2523-09) (Radiation Safety Standards). For this topic, the permissible contamination levels in Table 8.9 and the requirements for setting reference (control) levels in para. 7.4 are important.
OSPORB-99/2010 (SP 2.6.1.2612-10) (Basic Sanitary Rules for Radiation Safety). Three blocks are of practical use: sanitary checkpoints and sanitary locks, radiation monitoring, and requirements for PPE and personal hygiene of personnel.
SP AS-03 (SanPiN 2.6.1.24-03) (Sanitary Rules for the Design and Operation of Nuclear Power Plants) sets out the plant-level logic: radiation monitoring of contamination spread, the zone regime, “clean zones”, sanitary treatment and the arrangement of sanitary and amenity rooms.
PRB AS-99 (SP 2.6.1.28-2000) (Radiation Safety Rules for the Operation of Nuclear Power Plants) are particularly useful because they describe in detail the sanitary access regime and the sequence of personnel actions.
NP-001-15 (General Provisions for Ensuring the Safety of Nuclear Power Plants) is important as a general NPP safety document: it treats radiation monitoring systems as part of the safety-related systems and components, and the design must provide radiation monitoring for the plant’s intended operating modes.
Türkiye
In Türkiye, the basic document for this topic is the Nükleer Tesislerde Radyasyondan Korunma Yönetmeliği (Regulation on Radiation Protection in Nuclear Facilities, Resmî Gazete No. 30435 of 29.05.2018). For the issue at hand, the relevant provisions concern the duties of radiation protection personnel, rules for controlled areas, PPE, monitoring and record keeping.
IAEA
GSR Part 3: para. 3.90 sets out general requirements for controlled areas and the equipment of exits.
SSR-2/1 (Rev. 1): paras 6.82–6.83 contain requirements for fixed monitors at the main exits and for personnel monitoring equipment.
GSG-7: paras 7.244–7.250 deal with skin contamination, and paras 9.28–9.52 with contamination control and decontamination of personnel.
SSG-90 (2024): the most useful paragraphs for this topic are 3.48, 5.7–5.15 and 8.24–8.26. This is a new dedicated guide on radiation protection design for NPPs.
Permissible contamination levels (NRB-99/2009, Table 8.9)
The unit in the table is particles/(cm²·min). For skin, work clothing, work footwear and PPE, total contamination (removable and fixed) is regulated. For room surfaces, removable contamination is regulated (para. 8.8 and the note to Table 8.9).
| Contaminated object | Alpha, specific* | Alpha, other | Beta |
|---|---|---|---|
| Intact skin, special underwear, towels, inner surface of PPE face pieces | 2 | 2 | 200 (for ⁹⁰Sr + ⁹⁰Y — 40) |
| Main work clothing, inner surface of additional PPE, outer surface of work footwear | 5 | 20 | 2000 |
| Surfaces of rooms with permanent personnel occupancy and the equipment in them | 5 | 20 | 2000 |
| Surfaces of rooms with periodic personnel occupancy and the equipment in them | 50 | 200 | 10 000 |
| Outer surface of additional PPE removed in sanitary locks | 50 | 200 | 10 000 |
* “Specific” alpha-emitting nuclides are those for which the annual average permissible volumetric activity in the air of work rooms (DOA) is < 0.3 Bq/m³.
For skin, these levels take into account possible intake of the radionuclide through the skin into the body; para. 8.8 separately specifies the assumption of a contaminated area of no more than 300 cm².
It is easy to make a methodological error here: the values in Table 8.9 are permissible levels, not ready-made monitor setpoints. The plant establishes its own reference levels for contamination of PPE and skin. It is exceeding the reference level that should trigger the established procedure and analysis of causes (NRB-99/2009, para. 7.4; OSPORB-99/2010, para. 3.13.9; SP AS-03, para. 15.10).
The IAEA approach is formulated differently. GSG-7 does not suggest simply translating the 500 mSv/year limit into an instrument setpoint. For routine monitoring, skin contamination is averaged over an area of about 100 cm² and the result is compared with a derived level, usually expressed in Bq/cm². Such a level is set taking into account the relevant dose limits and possible exposure pathways. If contamination persists or is high from the outset and an equivalent dose assessment is required, the dose is then averaged over an area of 1 cm² (GSG-7, paras 7.248–7.249).
What must be ready in case of contamination
A monitor alarm is not the end of the procedure but its beginning. By that moment the responsible person, the place for changing clothes, the decontamination procedure, re-monitoring and recording of the result must already be defined. Otherwise even a good monitor becomes merely a source of signals at the door.
- Procedure and responsible person. Under PRB AS-99, personnel contact the on-duty radiation safety staff when the established level is exceeded. The Turkish Regulation assigns to radiation protection personnel the performance of decontamination and the establishment of investigation levels with actions in case they are exceeded (Art. 22(1)(ı), 22(1)(i)). GSG-7, para. 9.49, also recommends informing the radiation protection officer and assessing the significance of the contamination.
- Removal of contaminated work clothing. If the established level is exceeded, the clothing and underwear must not continue in normal circulation: they are sent for decontamination or to a special laundry in accordance with the adopted scheme. The worker undergoes sanitary treatment if necessary (OSPORB, paras 3.14.9, 3.14.12; SP AS-03, para. 15.14).
- Sorting and containers. Contaminated work clothing is sorted by material and contamination level, and appropriate containers are provided for collection, with separate containers for items subsequently managed as radioactive waste (SP AS-03, para. 16.13). PRB AS-99, para. 4.10, divides PPE into three groups:
- group 1 — within permissible levels;
- group 2 — exceeding them by no more than a factor of 10;
- group 3 — exceeding them by more than a factor of 10.
- Rooms. The “dirty” part of the sanitary checkpoint must be designed not only for the passage of people but also for actual handling of contaminated clothing: collection, temporary storage, sorting and monitoring. SP AS-03, para. 16.14, sets requirements for the rooms and equipment of the sorting area; OSPORB, para. 3.10.6, requires the contaminated clothing store to be located near the radiometric monitoring points and prohibits moving such clothing through clean rooms in open containers.
- Stock of clean work clothing and detergents. It is needed not “just in case” but so that a contaminated person can change immediately without creating a new route through the CAA. PRB AS-99, para. 4.9, provides for an emergency stock of PPE and detergents; during outages and accidents it must remain possible to change work clothing more frequently.
- Sanitary locks at work sites. The earlier contamination is stopped, the lower the load on the main sanitary checkpoint. Therefore, for work involving opening of equipment, temporary or permanent sanitary locks, change of work clothing and monitoring on leaving the work area are used (SP AS-03, paras 9.9, 16.19).
- Skin decontamination. Proper conditions are required, not an improvised spot next to the turnstile: washbasins, showers, suitable detergents and an approved instruction. Decontamination agents must not increase the intake of radionuclides through the skin (OSPORB, para. 3.14.14; SP AS-03, para. 15.12).
- Re-monitoring and medical assistance. After treatment, the person is monitored again. If local contamination persists, Russian rules provide for referral to the medical unit; GSG-7 specifically notes that invasive decontamination methods require medical assistance, and that for some contaminants, such as radioactive iodine, ordinary washing may be insufficient.
- Dose assessment. The equivalent dose limit for the skin of workers is 500 mSv per year, averaged over the most highly exposed 1 cm² area. According to GSG-7, dose assessment becomes particularly important if the contamination persists or was high from the outset. If the assessed equivalent dose exceeds one tenth of the relevant limit, it should be entered in the individual record. The risk of internal intake of the radionuclide is assessed separately.
- Investigation and records. An alarm is meaningful only if it allows the picture to be reconstructed: where the person worked, what was contaminated, which instrument detected it, what measures were taken and what the re-monitoring showed. Russian documents require analysis of exceedances and investigation of specified cases; the Turkish Regulation requires records of measurements, maintenance, calibration and repair of instruments.
- Operability and redundancy. Monitoring must not disappear because of the failure of a single installation. PRB AS-99 requires showers and radiation monitoring installations to be in constant operation, and, in case individual instruments fail, back-up instruments and brief instructions at the monitoring points.
The Turkish Regulation formulates this quite clearly. Article 27(1)(f) requires that the means needed under the specific conditions be provided at the exits from controlled areas: monitoring of skin and clothing contamination, monitoring of items being taken out, showers and washbasins, storage for contaminated clothing and equipment, and, where necessary, means for their decontamination and other measures against the spread of contamination.
Is an automatic interlock on the monitor signal required?
What the documents explicitly say
| Document, paragraph | Wording (essence) | Status |
|---|---|---|
| OSPORB-99/2010, para. 3.14.12 | On leaving rooms where work with radioactive substances is carried out, the cleanliness of work clothing and PPE is checked; if the level is exceeded, the clothing is sent for decontamination and the worker undergoes sanitary treatment. | Mandatory requirement, Russia |
| OSPORB-99/2010, para. 3.10.2 | Passage between zones bypassing the sanitary checkpoint is excluded; flows in personal and work clothing must not cross. | Mandatory requirement, Russia |
| SP AS-03, para. 16.3 | Entry into and exit from the CAA bypassing the sanitary checkpoint must be excluded. | Mandatory requirement, Russia |
| SP AS-03, para. 6.6.4 | Contamination of work clothing, footwear and skin is monitored with portable and fixed instruments in sanitary checkpoints and sanitary locks; personal clothing — at the exit through access control points. | Mandatory requirement, Russia |
| SP AS-03, para. 9.9 | It is prohibited to leave a repair work area in work clothing contaminated above the established level of 2000 β-particles/(min·cm²). | Mandatory requirement, Russia, for the relevant work |
| PRB AS-99, para. 4.4 | Passages between the “dirty” and “clean” sections are fitted with doors with locks or latches preventing uncontrolled exit. | Mandatory requirement, Russia; link to the monitor not specified |
| PRB AS-99, para. 4.7 | Passage to the clean section is allowed in the absence of a prohibiting signal from the body monitoring installation. | Mandatory requirement, Russia; a signal is not the same as an automatic interlock |
| PRB AS-99, para. 4.8 | It is prohibited to leave the CAA or to pass from the “dirty” part to the “clean” part bypassing the radiation monitoring installations. | Mandatory requirement, Russia |
| PRB AS-99, para. 4.9 | Contamination monitoring installations and showers must be kept in constant readiness for operation. | Mandatory requirement, Russia |
| GSR Part 3, para. 3.90(e), (g) | For controlled areas, barriers are provided and, as necessary, equipment for monitoring contamination of skin, clothing and items taken out at the exit. | IAEA Safety Requirement (shall); not automatically a rule of national law |
| SSR-2/1 (Rev. 1), para. 6.82 | Fixed monitors, such as portal monitors or hand and foot monitors, are provided at the main exits from controlled and supervised areas. | IAEA Safety Requirement (shall); applicability determined by the national/licensing basis |
| SSG-90, para. 5.8 | Interlocking of exit doors with contamination monitors is recommended; it should be possible to override the interlock in case of evacuation. | IAEA Safety Guide recommendation (should) |
| GSG-7, para. 9.30 | A person leaving a contaminated area should monitor surface contamination with a suitable portable or automatic instrument; if the background interferes, the monitoring point is relocated. | IAEA Safety Guide recommendation |
| Türkiye, 2018 Regulation, Art. 27(1)(b), (f) | The necessary means for monitoring skin and clothing contamination and items taken out, showers and decontamination means are provided at the exits; locking mechanisms are mentioned separately for restricting entry. | Mandatory requirement, Türkiye; a link between the exit door and the monitor is not explicitly stated |
The short answer
If the mandatory nature of the monitoring itself is separated from the specific way it is implemented, the picture becomes fairly clear. Russian rules make the following mandatory:
- monitoring of work clothing, work footwear and exposed skin at the exit (OSPORB, para. 3.14.12; SP AS-03, paras 6.6.4, 16.2–16.4; PRB AS-99, para. 4.7);
- physical exclusion of bypassing the sanitary checkpoint (SP AS-03, para. 16.3; OSPORB, para. 3.10.2) and a prohibition on entering the “clean” section past the monitoring installations (PRB AS-99, para. 4.8);
- doors between sections preventing uncontrolled exit (PRB AS-99, para. 4.4).
In other words, the mandatory outcome is defined unambiguously: a person must not bypass the monitoring and must not carry contamination further along the route. If the established level is exceeded, the contaminated work clothing is sent for decontamination and the worker undergoes the prescribed sanitary treatment.
Specific automation, however, is not named in the Russian sanitary rules. I have not found a requirement that the monitor signal must directly lock a turnstile, an electromagnetic lock or an exit gate. The standards require monitoring, exclusion of bypass and controlled passage between zones; the technical implementation of this outcome is determined by the design and operating documentation.
The logic of the Turkish Regulation is similar. Article 27(1)(f) requires the necessary monitoring and decontamination means at the exit. Locking mechanisms are mentioned in Art. 27(1)(b) in the context of restricting entry into the controlled area. There is no direct requirement in this text to link the exit door to the monitor signal.
For the IAEA, two levels of documents must be distinguished. SSR-2/1 (Rev. 1), para. 6.82, requires fixed monitors to be provided at the main exits from controlled and supervised areas. SSG-90, para. 5.8, as a design guide, recommends interlocking exit doors with contamination monitors while providing for the interlock to be overridden in an evacuation. This is a strong international recommendation, but not a self-standing rule of national law.
It is therefore more accurate to say that monitoring and the exclusion of uncontrolled exit are mandatory. An automatic interlock of the passage based on the measurement result is a separate engineering decision. In Russia and Türkiye, its mandatory nature must follow from the specific design, licensing basis, technical specification or operating documentation, and not from a single general provision on contamination monitoring.
Where to place the interlock so that it helps rather than hinders
The most controversial option is to automatically deny a person entry to the “dirty” part of the sanitary checkpoint immediately after the work clothing monitor alarms. Such a scheme can only work if the design has provided in advance an alternative controlled location where the person can be safely received, changed and decontaminated if necessary. Without such a location, the result is a dead end.
The reason is simple: the sanitary checkpoint exists precisely to localize such cases. It has a place to remove work clothing, showers, decontamination means, re-monitoring and collection of contaminated clothing:
- it is intended for complete change of clothing, sanitary treatment of personnel, radiation monitoring of the body and work clothing, and collection and dispatch of contaminated work clothing for decontamination (SP AS-03, para. 16.3);
- it includes a radiometric monitoring point, showers and a store for dirty work clothing (OSPORB, para. 3.10.1). Rooms for collecting and sorting dirty work clothing and containers for it are located in the “dirty” zone of the sanitary checkpoint (SP AS-03, paras 16.13, 16.14);
- if contamination exceeds the level, the work clothing is sent for decontamination and the worker is required to wash in the shower (OSPORB, para. 3.14.12). The showers, in turn, are located between the “dirty” and “clean” zones of the sanitary checkpoint (SP AS-03, para. 16.8);
- PRB AS-99, para. 4.7, requires a person who exceeds the level on entering the “dirty” section to contact the on-duty radiation safety staff. The subsequent logic of the route is to remove the work clothing, undergo sanitary treatment if necessary and then body monitoring.
If the only entrance to the “dirty” part is simply locked and the design provides no alternative controlled route, a poor operational situation arises:
- the person remains in the CAA in contaminated work clothing, waiting for a decision at the monitoring point;
- changing and initial treatment have to be moved to a place that may lack a shower, ventilation, containers and proper monitoring;
- the likelihood of secondary transfer of contamination to the floor, equipment and other people increases;
- the barrier no longer localizes the contamination and in effect holds the person back in front of the very place where the means for removing it are provided.
For a typical sanitary checkpoint layout, it is more logical to tie the strict restriction of passage to the “dirty → clean” boundary, i.e. to the stage after removal of work clothing and skin monitoring. Here PRB AS-99 already requires doors preventing uncontrolled passage and allows passage in the absence of a prohibiting signal from the body monitoring installation. If the design uses a different scheme, it must ensure the same outcome: the contaminated person remains on a controlled route and immediately has access to a change of clothing, decontamination and re-monitoring.
What is a requirement and what is a design decision
| Element | Requirement (where) | Good practice | Design decision (VVER-1200, etc.) |
|---|---|---|---|
| Monitoring of work clothing, footwear and skin at the exit | Yes: Russia — OSPORB 3.14.12, SP AS-03 6.6.4, PRB AS-99 4.7; Türkiye — Art. 27(1)(f); IAEA — GSR Part 3 3.90(g) | — | Type, number, algorithm and arrangement of installations |
| Fixed monitors at main exits | IAEA: SSR-2/1 (Rev. 1) 6.82; Russia: fixed instruments in sanitary checkpoints — SP AS-03 6.6.4 | — | Portal, booth-type, hand and foot monitors, combination of types |
| Exclusion of bypassing the sanitary checkpoint | Yes: SP AS-03 16.3; OSPORB 3.10.2 | — | Layout, doors, access control system |
| “Dirty → clean” doors with locks or latches | Yes: PRB AS-99 4.4 | — | Lock type and its logic |
| Automatic interlock on monitor signal | No direct requirement in the Russian and Turkish standards reviewed | SSG-90 5.8 | Yes, if provided for by the design, technical specification, licensing basis or operating documents |
| Interlock override in evacuation | In SSG-90 5.8 — a recommendation as part of the interlock scheme; mandatory details are determined by applicable fire codes and the design | Fail-safe approach | Emergency opening, fire system integration, failure monitoring |
| Temporary sanitary locks at repair sites | Russia: SP AS-03 9.9, 16.19 | GSG-7 9.28 | Mobile/temporary modules and their equipment |
| Stock of work clothing | Russia: PRB AS-99 4.9 | — | Storage location and prompt issue |
| Back-up instruments | Russia: PRB AS-99 6.17 | — | Number and redundancy scheme |
| Additional monitors during outages | — | SSG-90 3.48 | Number, connection points, temporary flow scheme |
| Transmission of results to the upper level | General requirements for the radiation monitoring system do not by themselves specify a particular interface for each personnel monitor | Useful for investigations and trend analysis | Integration with ASRK (automated radiation monitoring system)/access control system, archive and personnel identification |
Practical points that make all the difference in operation
Types of installations
Several classes of installations are used at exits from controlled areas. Each has its strengths and weaknesses, so choosing a monitor type without reference to the nuclide composition, background and personnel flow is pointless.
Hand and foot monitors with a remote probe. For example, the RZB-04m is designed to monitor beta contamination and to signal when set thresholds are exceeded. Hands and footwear are monitored by fixed detector units, other areas by a remote unit. This option is convenient for targeted monitoring but requires discipline in positioning the person.
Portal and booth-type monitors automatically check most of the body surface. Examples include the RZS-02A and the RZBA-09D.
- RZS-02A — a measuring booth with entry and exit gates. Monitoring covers the front and back surfaces of the body; the installation can identify the person, store results and transmit them to the upper level of the radiation monitoring system.
- RZBA-09D — a whole-body surface contamination monitor with alpha and beta channels and a gamma detection function. The manufacturer specifies automatic compensation of external gamma background, alarms and the ability to control passage when set levels are exceeded.
SSR-2/1 gives portal monitors and hand and foot monitors as examples of fixed equipment at the main exits. International standardization is also used for equipment of this class, in particular IEC 61098, which is referenced in GSG-7.
Portable radiometers are still needed: they are used to localize the contaminated area, carry out follow-up surveys and check the person after sanitary treatment.
Background
The background around a monitor is part of the measurement system. Beta detectors can respond to external gamma radiation; if this effect is not accounted for, the background starts to distort the result. GSG-7, para. 9.30, explicitly recommends relocating the monitoring point if local conditions do not allow reliable detection of surface contamination, and SSG-90, para. 8.26, recommends reducing background in monitoring rooms. The practical conclusion is simple: there should be no temporary storage of contaminated clothing, activated equipment or other sources that noticeably change the background next to the monitor.
False alarms and “misses”
Frequent false alarms quickly erode monitoring discipline: personnel begin to perceive the signal as a nuisance rather than as an event. Therefore what matters is not only the sensitivity of the installation but also a stable background, clean detectors and control of the person’s correct position. Typical causes of false alarms:
- changes in background when contaminated or activated equipment is carried past;
- contamination of the detectors themselves: the installation must be able to diagnose this;
- incorrect positioning of hands and feet.
There are limitations that cannot be “tuned out” by software. GSG-7, para. 9.31, notes that skin contamination by certain radionuclides, including tritium, cannot be reliably detected by ordinary hand-held or automatic monitors; in such cases greater weight is given to bioassay programmes, air monitoring and general contamination control. For alpha measurements, rough and uneven surfaces and self-absorption in the contamination layer are problematic (GSG-7, para. 9.36).
Monitor setpoints must be linked to the reference levels adopted at the plant and to the actual sensitivity of the measuring channel. Converting readings to surface contamination requires calibration for the radionuclides and measurement geometry actually encountered at the facility (GSG-7, paras 9.37–9.41).
Throughput at shift change
If an automatic interlock is introduced, throughput is no longer a secondary issue. Peak flow occurs at shift change and especially during outages, when the number of contractors rises sharply. SSG-90, para. 5.13, recommends providing a sufficient number of exit monitors and space that prevents cross-contamination in the queue; para. 3.48 separately suggests considering additional monitors for outage periods.
It is reasonable to determine the number of installations by calculation: the maximum flow of people in a short interval after the shift, the actual duration of one measurement cycle, the proportion of repeat measurements and a margin for failures. PRB AS-99, para. 6.17, separately requires back-up instruments in case skin and work clothing contamination monitoring equipment fails. The standards give no universal number of monitors for any plant.
What to do after a “Contaminated” signal
The procedure must be written before the first real alarm. Then the person does not argue with the turnstile, and the radiation safety staff do not have to decide on the spot where to take them. A workable sequence looks like this:
- a repeat measurement to rule out a false alarm due to positioning;
- calling the on-duty dosimetrist (PRB AS-99, para. 4.7) using a button or telephone next to the installation;
- localization of the contamination with a portable instrument, removal of the contaminated work clothing and issue of a replacement set on the spot, in the “dirty” section;
- sanitary treatment of the skin according to the instruction (SP AS-03, para. 15.12), re-monitoring, and, if unsuccessful, referral to the medical unit (para. 15.13);
- recording the result: who was monitored, where they worked, what was found to be contaminated, which instrument confirmed it and what measures were taken. These data are needed both for the investigation and, if necessary, for dose assessment;
- lifting the passage restriction after a confirmed clean result or by a decision of the responsible personnel as provided for in the procedure, with mandatory recording of that decision.
An interlock must not become a locking device without a safe failure mode. SSG-90, para. 5.8, recommends the ability to disable the interlock in an evacuation. The specific emergency opening scheme, its link to fire automation and fail-safe requirements must be determined by applicable fire safety codes and the design.
How to prevent bypassing the monitoring
A reliable scheme starts not with the turnstile but with the layout:
- one-way flow without crossing flows (SP AS-03, para. 16.3);
- no open passages between sections (PRB AS-99, para. 4.4);
- a minimum number of entrances to and exits from the controlled area (SSG-90, para. 5.7);
- a physical barrier between the clean and potentially contaminated parts (SSG-90, para. 5.13);
- “Remove work footwear” disciplinary barriers (PRB AS-99, para. 4.7).
A technical interlock is useful as an additional line of defence, but by itself it does not solve the problem. If there is an uncontrolled door nearby, if it is possible to follow another person through, or if a faulty sensor is simply switched off, a formally strict system quickly turns into window dressing. Therefore, the following are particularly useful in operation:
- monitoring of emergency doors with alarms in the radiation safety service;
- an installation event log transmitted to the ASRK;
- analysis of “passed without measurement” cases using access control system data;
- review of each case to find the cause and corrective actions, not just the name of the violator.
Clean and potentially contaminated zones
The monitoring boundary does not begin at the main sanitary checkpoint. It must be formed already at the workplace: fencing off the work area, a temporary sanitary lock, a change of work footwear or clothing, monitoring when leaving a local contaminated zone. The less contamination reaches the main exit from the CAA, the more robust the whole system and the less temptation there is to bypass the monitor because of queues and repeated alarms.
What most often goes wrong
- Monitor setpoints are mechanically set equal to the NRB permissible levels, without linking them to the plant’s reference levels and the actual calibration of the instrument.
- The monitor is placed where the background changes noticeably due to equipment, transport of radioactive materials or temporary storage of contaminated clothing.
- The number of installations is calculated for a normal shift, but the outage mode and mass exit of contractors are not checked.
- The interlock has no safe failure mode, no emergency opening and no clear fault signalling.
- The “dirty” part has no accessible stock of clean work clothing and no place where a person can calmly change after confirmed contamination.
- There is no short and clear alarm procedure. As a result, radiation safety staff learn about the problem only when a queue has formed at the installation.
- Events are not recorded or analysed, so the same source of contamination at the workplace continues to cause repeated alarms.
- The automatic interlock is mistaken for the entire monitoring system, although without proper flow, physical separation of zones and measurement discipline a single turnstile guarantees nothing.
Conclusion
Contamination monitoring at the exit from the CAA is not a matter of choice. Russian rules require monitoring of work clothing, work footwear and skin, exclusion of bypassing the sanitary checkpoint and prevention of uncontrolled passage from the “dirty” part to the “clean” part. The Turkish Regulation likewise requires the necessary contamination monitoring and decontamination means at exits from controlled areas.
The dispute begins elsewhere: whether the automation itself must lock the passage based on the measurement result. In the Russian and Turkish standards I reviewed, I found no direct requirement for such a “monitor → lock” link. At the same time, SSG-90, para. 5.8, explicitly recommends interlocking the exit door with the contamination monitor, and SSR-2/1, para. 6.82, requires fixed monitors at the main exits. For a specific plant, therefore, whether an automatic interlock is mandatory must be checked not only against general standards but also against the licensing basis, design documentation, technical specification and approved operating procedures.
Another important point is where the interlock is placed. If a person is stopped before entering the “dirty” part of the sanitary checkpoint, the design must give them another controlled route to change and decontaminate. Without such a route, the interlock creates a dead end and may increase the risk of secondary transfer of contamination. In a typical layout, it is more logical to keep the person within the sanitary access route and not let them into the clean part until a satisfactory monitoring result is obtained.
So I would not formulate the conclusion as “forced monitoring is not mandatory”. The monitoring itself and the exclusion of its bypass are mandatory. What is not always directly mandatory is an automatic interlock triggered by the instrument signal. This is a more accurate distinction, from both the regulatory and the operational point of view.
A well-designed interlock strengthens the system. A poorly designed one creates queues, false alarms and the urge to find a way around it. Ultimately, what is judged is not the presence of a turnstile but whether the main task is accomplished: contamination does not leave the established boundaries, and a person who triggers an alarm quickly gets to where they can be safely changed, treated and re-monitored.
It is this outcome that should be the starting point for design decisions.
Sources
- NRB-99/2009 (SanPiN 2.6.1.2523-09) (in Russian). GARANT: https://base.garant.ru/4188851/
- OSPORB-99/2010 (SP 2.6.1.2612-10) (in Russian). GARANT: https://base.garant.ru/12177986/
- SanPiN 2.6.1.24-03 (SP AS-03) “Sanitary Rules for the Design and Operation of Nuclear Power Plants” (in Russian). GARANT: https://base.garant.ru/12130991/
- SP 2.6.1.28-2000 (PRB AS-99) “Radiation Safety Rules for the Operation of Nuclear Power Plants” (in Russian). GARANT: https://base.garant.ru/71618122/
- NP-001-15 “General Provisions for Ensuring the Safety of Nuclear Power Plants” (in Russian). SEC NRS: https://docs.secnrs.ru/documents/nps/%D0%9D%D0%9F-001-15/%D0%9D%D0%9F-001-15.html
- Type description of the measuring instrument “RZB-04m personnel radioactive contamination monitors”, State Register No. 54359-13 (in Russian): https://grmetr.ru/gosreestr/366803-54359-13-rzb-04m
- Type description of the measuring instrument “RZS-02A NPP personnel radioactive contamination monitors”, State Register No. 49307-12 (in Russian): https://all-pribors.ru/opisanie/49307-12-rzs-02a
- RZBA-09D personnel surface contamination monitor (State Register No. 83216-21), manufacturer’s page (in Russian): https://www.doza.ru/catalog/contamination_monitors/ustanovki-kontrolya-zagryaznennosti-vsego-tela/RZBA-09/
- Nükleer Tesislerde Radyasyondan Korunma Yönetmeliği (Resmî Gazete No. 30435, 29.05.2018) (in Turkish): https://www.resmigazete.gov.tr/eskiler/2018/05/20180529-17.htm
- NDK, Akkuyu NPP page: https://www.ndk.gov.tr/akkuyu-nukleer-santrali
- IAEA GSR Part 3. Radiation Protection and Safety of Radiation Sources: International Basic Safety Standards (2014): https://www-pub.iaea.org/MTCD/Publications/PDF/Pub1578_web-57265295.pdf
- IAEA SSR-2/1 (Rev. 1). Safety of Nuclear Power Plants: Design (2016): https://www-pub.iaea.org/MTCD/Publications/PDF/Pub1715web-46541668.pdf
- IAEA GSG-7. Occupational Radiation Protection (2018): https://www-pub.iaea.org/MTCD/Publications/PDF/PUB1785_web.pdf
- IAEA SSG-90. Radiation Protection Aspects of Design for Nuclear Power Plants (2024): https://www-pub.iaea.org/MTCD/Publications/PDF/p15554-PUB2078_web.pdf
- IAEA. Status of IAEA Safety Standards: the standards are not automatically legally binding on Member States and may be adopted through national regulation: https://www.iaea.org/topics/iaea-safety-standards-on-emergency-preparedness-and-response