Three accidents dominate the regulatory history of civilian nuclear power: Three Mile Island Unit 2 (TMI-2, USA, 1979); Chornobyl Unit 4 (USSR, now Ukraine, 1986); and Fukushima Daiichi Units 1-3-4 (Japan, 2011). Each one changed something specific in licensing, in design expectations, and in what regulators do.
Three Mile Island Unit 2 (1979)
TMI-2 was a 906 MWe Babcock & Wilcox PWR near Harrisburg, Pennsylvania. On 28 March 1979 the unit lost main feedwater, the reactor scrammed, and a pilot-operated relief valve (PORV) opened. The PORV then stuck open while its position indicator showed closed. Operators throttled high-pressure injection because they misread water level — the pressuriser was full of steam, not water — and the core uncovered for several hours, producing a partial core melt. Off-site dose was small (~0.04 mSv maximum to anyone).
Regulatory legacy of TMI
- The NRC's TMI Action Plan (NUREG-0660) ordered new requirements for operator training, control-room ergonomics, safety-parameter display systems, post-accident sampling, hydrogen monitoring and control, severe-accident management guidelines (SAMGs), and emergency response.
- Senior Reactor Operator (SRO) licensing was overhauled and simulator training elevated to mandatory status.
- The Institute of Nuclear Power Operations (INPO) was created by the US industry to promote operational excellence.
- INPO's peer reviews and WANO's later international peer-review system trace directly to TMI.
- Off-site emergency planning rules under 10 CFR 50.47 and Appendix E were tightened, with FEMA roles formalised.
Chornobyl Unit 4 (1986)
Chornobyl-4 was an RBMK-1000 (graphite-moderated, water-cooled, channel-type) reactor. On 26 April 1986 a poorly-designed turbine-coastdown test in the early morning, performed at low power outside the validated envelope and with multiple safety-system disablements, ended in a rapid positive void coefficient excursion: a steam explosion, a graphite fire, and a release of ~5 × 1018 Bq of radioactivity to the atmosphere over ten days. 31 operator and emergency-worker deaths from the immediate event and acute radiation syndrome; substantial later cancer incidence (thyroid in children especially) attributed to the release.
Regulatory legacy of Chornobyl
- The Convention on Early Notification of a Nuclear Accident and the Convention on Assistance (1986) — international notification and mutual aid.
- The Convention on Nuclear Safety (1994) — peer review of national safety programmes through triennial review meetings.
- Creation of WANO (World Association of Nuclear Operators) in 1989.
- Acceleration of IRRS-style peer review and of IAEA Safety Standards revision.
- Targeted upgrades and shutdowns of the first-generation RBMK and VVER-440/230 fleets across the former Soviet bloc; G7-funded safety improvement programmes.
- Re-emphasis on safety culture as a regulatory concern, with INSAG-3, INSAG-4 and INSAG-15 (the "safety culture" doctrine) becoming canonical.
Fukushima Daiichi (2011)
Fukushima Daiichi Units 1, 2 and 3 (BWR-3, BWR-4, BWR-4) lost off-site power on 11 March 2011 when the Tōhoku earthquake (M9.0) damaged transmission lines, and lost all AC power (station blackout) when the tsunami ~50 minutes later inundated the seaside emergency-diesel generators and switchgear. Decay-heat removal failed across multiple units; reactor cores melted in Units 1, 2 and 3; hydrogen explosions damaged the secondary containment buildings of Units 1, 3 and 4 (Unit 4's building was damaged despite the unit being shut down, because of hydrogen migration from Unit 3 via shared exhaust ducts).
Direct fatalities from the radiological event were zero in the short term; off-site population doses were lower than initially feared but the social, economic and psychological consequences of the long-term evacuations were severe. Decontamination and decommissioning of the site is expected to take decades.
Regulatory legacy of Fukushima
- Creation of the Nuclear Regulation Authority (NRA) in Japan (2012), replacing the Nuclear and Industrial Safety Agency which had been embedded in METI alongside the promotional functions.
- EU "stress tests" (ENSREG 2011-2012) reviewed every European reactor against beyond-design-basis external events and station-blackout scenarios.
- WENRA Safety Objectives for new NPPs updated to require essentially no off-site releases that would necessitate long-term protective actions.
- Sweden: SSMFS 2014:2 (emergency preparedness) and the 2021:4-7 reactor regulations explicitly carry Fukushima lessons. Independent core cooling (oberoende härdkylning) was mandated.
- France: post-Fukushima "Noyau Dur" programme and the FARN nuclear-rapid-action force.
- US: NRC Mitigation Strategies for Beyond-Design-Basis External Events (Order EA-12-049) and the FLEX equipment programme.
- UK: ONR's post-Fukushima improvements covering off-site power, ultimate heat sinks and spent-fuel-pool resilience.
- Strengthened spent-fuel-pool resilience requirements internationally.
- Increased attention to operator decision-making under cascading failures and to off-site decision support tools.
Less-publicised events
Smaller events have also shaped specific regulatory rules:
- Windscale fire (1957, UK) — first major civil accident, milk distribution restrictions, NRPB founded (now UKHSA Radiation, Chemical and Environmental Hazards).
- SL-1 (1961, US Idaho) — three operator deaths from reactivity excursion; reactivity-control regulatory lessons.
- Browns Ferry fire (1975) — Appendix R fire-protection rules in 10 CFR 50.
- Vandellós I fire (1989, ES) — turbine-hall fire prompted decommissioning.
- Tokaimura criticality (1999, JP) — accidental criticality at a fuel-conversion facility; revised criticality-safety culture and procedures in Japan.
- Davis-Besse vessel-head corrosion (2002, US) — boric-acid corrosion almost breached the reactor vessel head; revised inspection and degradation-management requirements.
- Goiânia (1987, BR) — orphan-source incident; revised global control of disused sealed sources and DSRS programmes.
Each of these informs a specific regulatory practice: orphan-source registers, fire-protection rules, criticality control, vessel-head inspection, etc. The pattern is that regulation evolves by absorbing operational experience rather than by anticipating every failure.