This subpart contains safety planning and general safety requirements for all railroad passenger equipment subject to this part.

(a) Materials. (1) Materials used in constructing a passenger car or a cab of a locomotive ordered on or after September 8, 2000, or placed in service for the first time on or after September 9, 2002, shall meet the test performance criteria for flammability and smoke emission characteristics as specified in appendix B to this part, or alternative standards issued or recognized by an expert consensus organization after special approval of FRA under § 238.21.

(2) On or after November 8, 1999, materials introduced in a passenger car or a locomotive cab, as part of any kind of rebuild, refurbishment, or overhaul of the car or cab, shall meet the test performance criteria for flammability and smoke emission characteristics as specified in appendix B to this part, or alternative standards issued or recognized by an expert consensus organization after special approval of FRA under § 238.21.

(3) For purposes of complying with the requirements of this paragraph, a railroad may rely on the results of tests of material conducted in accordance with the standards and performance criteria for flammability and smoke emission characteristics as specified in appendix B to this part in effect on July 12, 1999 (see 49 CFR parts 200-399, revised as of October 1, 1999), if prior to June 25, 2002 the material is—

(i) Installed in a passenger car or locomotive;

(ii) Held in inventory by the railroad; or

(iii) Ordered by the railroad.

(b) Certification. A railroad shall require certification that a representative sample of combustible materials to be—

(1) Used in constructing a passenger car or a locomotive cab, or

(2) Introduced in a passenger car or a locomotive cab, as part of any kind of rebuild, refurbishment, or overhaul of the car or cab, has been tested by a recognized independent testing laboratory and that the results show the representative sample complies with the requirements of paragraph (a) of this section at the time it was tested.

(c) Fire safety analysis for procuring new passenger cars and locomotives. In procuring new passenger cars and locomotives, each railroad shall ensure that fire safety considerations and features in the design of this equipment reduce the risk of personal injury caused by fire to an acceptable level in its operating environment using a formal safety methodology such as MIL-STD-882. To this end, each railroad shall complete a written fire safety analysis for the passenger equipment being procured. In conducting the analysis, the railroad shall—

(1) Identify, analyze, and prioritize the fire hazards inherent in the design of the equipment.

(2) Take effective steps to design the equipment and select materials which help provide sufficient fire resistance to reasonably ensure adequate time to detect a fire and safely evacuate the passengers and crewmembers, if a fire cannot be prevented. Factors to consider include potential ignition sources; the type, quantity, and location of the materials; and availability of rapid and safe egress to the exterior of the equipment under conditions secure from fire, smoke, and other hazards.

(3) Reasonably ensure that a ventilation system in the equipment does not contribute to the lethality of a fire.

(4) Identify in writing any train component that is a risk of initiating fire and which requires overheat protection. An overheat detector shall be installed in any component when the analysis determines that an overheat detector is necessary.

(5) Identify in writing any unoccupied train compartment that contains equipment or material that poses a fire hazard, and analyze the benefit provided by including a fire or smoke detection system in each compartment so identified. A fire or smoke detector shall be installed in any unoccupied compartment when the analysis determines that such equipment is necessary to ensure sufficient time for the safe evacuation of passengers and crewmembers from the train. For purposes of this section, an unoccupied train compartment means any part of the equipment structure that is not normally occupied during operation of the train, including a closet, baggage compartment, food pantry, etc.

(6) Determine whether any occupied or unoccupied space requires a portable fire extinguisher and, if so, the proper type and size of the fire extinguisher for each location. As required by § 239.101 of this chapter, each passenger car is required to have a minimum of one portable fire extinguisher. If the analysis performed indicates that one or more additional portable fire extinguishers are needed, such shall be installed.

(7) On a case-by-case basis, analyze the benefit provided by including a fixed, automatic fire-suppression system in any unoccupied train compartment that contains equipment or material that poses a fire hazard, and determine the proper type and size of the automatic fire-suppression system for each such location. A fixed, automatic fire-suppression system shall be installed in any unoccupied compartment when the analysis determines that such equipment is practical and necessary to ensure sufficient time for the safe evacuation of passengers and crewmembers from the train.

(8) Explain how safety issues are resolved in the design of the equipment and selection of materials to reduce the risk of each fire hazard.

(9) Describe the analysis and testing necessary to demonstrate that the fire protection approach taken in the design of the equipment and selection of materials meets the fire protection requirements of this part.

(d) Fire safety analysis for existing passenger cars and locomotives. (1) Not later than January 10, 2001, each passenger railroad shall complete a preliminary fire safety analysis for each category of existing passenger cars and locomotives and rail service.

(2) Not later than July 10, 2001, each such railroad shall—

(i) Complete a final fire safety analysis for any category of existing passenger cars and locomotives and rail service evaluated during the preliminary fire safety analysis as likely presenting an unacceptable risk of personal injury. In conducting the analysis, the railroad shall consider the extent to which materials comply with the test performance criteria for flammability and smoke emission characteristics as specified in Appendix B to this part or alternative standards approved by FRA under this part.

(ii) Take remedial action to reduce the risk of personal injuries to an acceptable level in any such category, if the railroad finds the risk to be unacceptable. In considering remedial action, a railroad is not required to replace material found not to comply with the test performance criteria for flammability and smoke emission characteristics required by this part, if:

(A) The risk of personal injuries from the material is negligible based on the railroad's operating environment and the material's size, or location, or both; or

(B) The railroad takes alternative action which reduces the risk of personal injuries to an acceptable level.

(3) Not later than July 10, 2003, each such railroad shall—

(i) Complete a final fire safety analysis for all categories of existing passenger cars and locomotives and rail service. In completing this analysis, the railroad shall, as far as practicable, determine the extent to which remaining materials comply with the test performance criteria for flammability and smoke emission characteristics as specified in Appendix B to this part or alternative standards approved by FRA under this part.

(ii) Take remedial action to reduce the risk of personal injuries to an acceptable level in any such category, if the railroad finds the risk to be unacceptable. In considering remedial action, a railroad is not required to replace material found not to comply with the test performance criteria for flammability and smoke emission characteristics required by this part, if:

(A) The risk of personal injuries from the material is negligible based on the railroad's operating environment and the material's size, or location, or both; or

(B) The railroad takes alternative action which reduces the risk of personal injuries to an acceptable level.

(4) Where possible prior to transferring existing passenger cars and locomotives to a new category of rail service, but in no case more than 90 days following such a transfer, the passenger railroad shall complete a new fire safety analysis taking into consideration the change in railroad operations and shall effect prompt action to reduce any identified risk to an acceptable level.

(5) As used in this paragraph, a “category of existing passenger cars and locomotives and rail service” shall be determined by the railroad based on relevant fire safety risks, including available ignition sources, presence or absence of heat/smoke detection systems, known variations from the required material test performance criteria or alternative standards approved by FRA, and availability of rapid and safe egress to the exterior of the vehicle under conditions secure from fire, smoke, and other hazards.

(e) Inspection, testing, and maintenance. Each railroad shall develop and adopt written procedures for the inspection, testing, and maintenance of all fire safety systems and fire safety equipment on the passenger equipment it operates. The railroad shall comply with those procedures that it designates as mandatory for the safety of the equipment and its occupants.

The requirements of this section apply to electronic hardware and software used to control or monitor safety functions in passenger equipment ordered on or after September 8, 2000, and such components implemented or materially modified in new or existing passenger equipment on or after September 9, 2002.

(a) The railroad shall develop and maintain a written hardware and software safety program to guide the design, development, testing, integration, and verification of software and hardware that controls or monitors equipment safety functions.

(b) The hardware and software safety program shall be based on a formal safety methodology that includes a Failure Modes, Effects, Criticality Analysis (FMECA); verification and validation testing for all hardware and software components and their interfaces; and comprehensive hardware and software integration testing to ensure that the hardware and software system functions as intended.

(c) The hardware and software safety program shall include a description of how the following will be accomplished, achieved, carried out, or implemented to ensure safety and reliability:

(1) The hardware and software design process;

(2) The hardware and software design documentation;

(3) The hardware and software hazard analysis;

(4) Hardware and software safety reviews;

(5) Hardware and software hazard monitoring and tracking;

(6) Hardware and software integration safety testing; and

(7) Demonstration of overall hardware and software system safety as part of the pre-revenue service testing of the equipment.

(d)(1) Hardware and software that controls or monitors a train's primary braking system shall either:

(i) Fail safely by initiating a full service or emergency brake application in the event of a hardware or software failure that could impair the ability of the engineer to apply or release the brakes; or

(ii) Provide the engineer access to direct manual control of the primary braking system (service or emergency braking).

(2) Hardware and software that controls or monitors the ability to shut down a train's main power and fuel intake system shall either:

(i) Fail safely by shutting down the main power and cutting off the intake of fuel in the event of a hardware or software failure that could impair the ability of the train crew to command that electronic function; or

(ii) The ability to shut down the main power and fuel intake by non-electronic means shall be provided to the train crew.

(e) The railroad shall comply with the elements of its hardware and software safety program that affect the safety of the passenger equipment.

(a) General. Beginning on January 1, 2002, the following provisions of this section apply to railroads operating Tier I passenger equipment covered by this part. A railroad may request earlier application of these requirements upon written notification to FRA's Associate Administrator for Safety as provided in § 238.1(c).

(b) Each railroad shall develop, and provide to FRA upon request, a detailed inspection, testing, and maintenance plan consistent with the requirements of this part. This plan shall include a detailed description of the following:

(1) Inspection procedures, intervals, and criteria;

(2) Test procedures and intervals;

(3) Scheduled preventive maintenance intervals;

(4) Maintenance procedures; and

(5) Special testing equipment or measuring devices required to perform inspections and tests.

(c) The inspection, testing, and maintenance plan required by this section is not intended to address and should not include procedures to address employee working conditions that arise in the course of conducting the inspections, tests, and maintenance set forth in the plan. When requesting a copy of the railroad's plan, FRA does not intend to review any portion of the plan that relates to employee working conditions.

(d) The inspection, testing, and maintenance plan required by this section shall be reviewed by the railroad annually.

(a) Beginning on January 1, 2002, each railroad shall have adopted a training, qualification, and designation program for employees and contractors that perform any of the inspections, tests, or maintenance required by this part, and shall have trained such employees and contractors in accordance with the program. A railroad may request earlier application of these requirements upon written notification to FRA's Associate Administrator for Safety as provided in § 238.1(c). For purposes of this section, a “contractor” is defined as a person under contract with the railroad or an employee of a person under contract with the railroad to perform any of the tasks required by this part.

(b) As part of this program, the railroad shall, at a minimum:

(1) Identify the tasks related to the inspection, testing, and maintenance required by this part that must be performed on each type of equipment that the railroad operates;

(2) Develop written procedures for the performance of the tasks identified in paragraph (b)(1) of this section;

(3) Identify the skills and knowledge necessary to perform each task identified in paragraph (b)(1) of this section;

(4) Adopt a training curriculum that includes classroom and “hands-on” lessons designed to impart the skills and knowledge identified as necessary to perform each task identified in paragraph (b)(1) of this section. The training curriculum shall specifically address the Federal regulatory requirements contained in this part that are related to the performance of the tasks identified;

(5) Require all employees and contractors to successfully complete the training course that covers the equipment and tasks for which they are responsible that are required by this part as well as the specific Federal regulatory requirements contained in this part related to equipment and tasks for which they are responsible;

(6) Require all employees and contractors to pass either a written or an oral examination covering the equipment and tasks for which they are responsible that are required by this part as well as the specific Federal regulatory requirements contained in this part related to equipment and tasks for which they are responsible;

(7) Require all employees and contractors to individually demonstrate “hands-on” capability to successfully perform the tasks required by this part that must be performed as part of their duties on the type equipment to which they are assigned;

(8) Require supervisors to complete the program that covers the employees whom they supervise, including refresher training;

(9) Require supervisors to exercise oversight to ensure that all the identified tasks are performed in accordance with the railroad's written procedures;

(10) Designate in writing that each employee and contractor has the knowledge and skills necessary to perform the safety-related tasks that are part of his or her job;

(11) Require periodic refresher training, at an interval not to exceed three years, that includes classroom and “hands-on” training, as well as testing; except, employees and contractors that have completed their initial training under this part prior to January 1, 2002, shall not be required to complete their first periodic refresher training until four years after the completion of their initial training, and every three years thereafter;

(12) Add new equipment to the qualification and designation program prior to its introduction to revenue service; and

(13) Maintain records adequate to demonstrate that each employee and contractor performing safety-related tasks on passenger equipment is currently qualified to do so. These records shall be adequate to distinguish the qualifications of the employee or contractor as a qualified person or as a qualified maintenance person.

(a) Passenger equipment that has previously been used in revenue service in the United States. For passenger equipment that has previously been used in revenue service in the United States, each railroad shall test the equipment on its system prior to placing such equipment in revenue service for the first time on its railroad to ensure the compatibility of the equipment with the railroad's operating system (including the track, and signal system). A description of such testing shall be retained by the railroad and made available to FRA for inspection and copying upon request. For purposes of this paragraph, passenger equipment that has previously been used in revenue service in the United States means:

(1) The actual equipment used in such service;

(2) Equipment manufactured identically to that actual equipment; and

(3) Equipment manufactured similarly to that actual equipment with no material differences in safety-critical components or systems.

(b) Passenger equipment that has not been used in revenue service in the United States. Before using passenger equipment for the first time on its system that has not been used in revenue service in the United States, each railroad shall:

(1) Prepare a pre-revenue service acceptance testing plan for the equipment which contains the following elements:

(i) An identification of any waivers of FRA or other Federal safety regulations required for the testing or for revenue service operation of the equipment;

(ii) A clear statement of the test objectives. One of the principal test objectives shall be to demonstrate that the equipment meets the safety requirements specified in this part when operated in the environment in which it is to be used;

(iii) A planned schedule for conducting the testing;

(iv) A description of the railroad property or facilities to be used to conduct the testing;

(v) A detailed description of how the testing is to be conducted, including a description of the criteria to be used to evaluate the equipment's performance;

(vi) A description of how the test results are to be recorded;

(vii) A description of any special instrumentation to be used during the tests;

(viii) A description of the information or data to be obtained;

(ix) A description of how the information or data obtained is to be analyzed or used;

(x) A description of any criteria to be used as safety limits during the testing;

(xi) A description of the criteria to be used to measure or determine the success or failure of the tests. If acceptance is to be based on extrapolation of less than full-level testing results, the analysis to be done to justify the validity of the extrapolation shall be described;

(xii) Quality control procedures to ensure that the inspection, testing, and maintenance procedures are followed;

(xiii) Criteria to be used for the revenue service operation of the equipment; and

(xiv) A description of any testing of the equipment that has previously been performed.

(2) Submit a copy of the plan to FRA at least 30 days before testing the equipment and include with that submission notification of the times and places of the pre-revenue service tests to permit FRA observation of such tests. For Tier II and Tier III passenger equipment, the railroad shall obtain FRA approval of the plan under the procedures specified in § 238.21.

(3) Comply with the plan, including fully executing the tests required by the plan.

(4) Document in writing the results of the tests. For Tier II and Tier III passenger equipment, the railroad shall report the results of the tests to the Associate Administrator at least 90 days prior to its intended operation of the equipment in revenue service.

(5) Correct any safety deficiencies identified in the design of the equipment or in the ITM procedures uncovered during testing. If safety deficiencies cannot be corrected by design changes, the railroad shall impose operational limitations on the revenue service operation of the equipment designed to ensure the equipment can operate safely. For Tier II and Tier III passenger equipment, the railroad shall comply with any operational limitations the Associate Administrator imposes on the revenue service operation of the equipment for cause stated following FRA review of the results of the test program. This section does not restrict a railroad from petitioning FRA for a waiver of a safety regulation under the procedures specified in part 211 of this chapter.

(6) Make the plan and documentation kept pursuant to that plan available for inspection and copying by FRA upon request.

(7) For Tier II or Tier III passenger equipment, obtain approval from the Associate Administrator before placing the equipment in revenue service. The Associate Administrator will grant such approval if the railroad demonstrates compliance with the applicable requirements of this part.

(c) If a railroad plans a major upgrade or introduction of new technology to Tier II or Tier III passenger equipment that has been used in revenue service in the United States and that affects a safety system on such equipment, the railroad shall follow the procedures in paragraph (b) of this section before placing the equipment in revenue service with the major upgrade or introduction of new technology.

Except as provided in § 238.439—

(a) Each powered, exterior side door in a vestibule that is partitioned from the passenger compartment of a passenger car shall have a manual override device that is:

(1) Capable of releasing the door to permit it to be opened without power from inside the car;

(2) Located adjacent to the door which it controls; and

(3) Designed and maintained so that a person may readily access and operate the override device from inside the car without requiring the use of a tool or other implement. If the door is dual-leafed, only one of the door leaves is required to respond to the manual override device.

(b) Each Tier I passenger car ordered on or after September 8, 2000, or placed in service for the first time on or after September 9, 2002, and all Tier II passenger cars shall have a minimum of two exterior side doors, one in each side of the car. Each such door shall provide a minimum clear opening with dimensions of 30 inches horizontally by 74 inches vertically. A set of dual-leafed doors is considered a single door for purposes of this paragraph. Each powered, exterior side door on each such passenger car shall have a manual override device that is:

(1) Capable of releasing the door to permit it to be opened without power from both inside and outside the car;

(2) Located adjacent to the door which it controls; and

(3) Designed and maintained so that a person may access the override device from both inside and outside the car without requiring the use of a tool or other implement.

(c) A manual override device used to open a powered, exterior door may be protected with a cover or a screen capable of removal without requiring the use of a tool or other implement.

(d)(1) Prior to January 28, 2015, all door exits intended for emergency egress shall either be lighted or conspicuously and legibly marked with luminescent material on the inside of each car, and legible and understandable instructions shall be provided for their use at or near each such door.

(2) On or after January 28, 2015, all door exits intended for emergency egress shall be marked, and instructions provided for their use, as specified in § 238.125.

(e)(1) Prior to January 28, 2015, all doors intended for access by emergency responders shall be marked on the exterior of the car with retroreflective material, and legible and understandable instructions shall be posted at or near each such door.

(2) On or after January 28, 2015, all doors intended for access by emergency responders shall be marked, and instructions provided for their use, as specified in § 238.125.

(f) Vestibule doors and other interior doors intended for passage through a passenger car. The requirements of paragraphs (f)(1) through (6) of this section apply only to passenger cars ordered on or after January 28, 2014, or placed in service for the first time on or after January 29, 2018.

(1) General. Except for a door providing access to a control compartment and a bi-parting door, which is subject to the requirements in paragraph (f)(3) of this section, each vestibule door and any other interior door intended for passage through a passenger car shall be equipped with a removable panel or removable window in the event the door will not open in an emergency, or the car is on its side and the door is difficult to open. If the door is powered, it shall have a manual override device that conforms with the requirements of paragraphs (f)(4) through (6) of this section.

(2) Removable panels and windows—(i) Ease of operability. Each removable panel or removable window shall be designed to permit rapid and easy removal from each side of the door during an emergency situation without requiring the use of a tool or other implement.

(ii) Dimensions. Removal of the panel or window shall create an unobstructed opening in the door with minimum dimensions of 21 inches horizontally by 28 inches vertically.

(iii) Location. Each removable panel or removable window shall be located so that the lowest point of the opening created by removing the panel or window is no higher than 18 inches above the floor.

(3) Bi-parting doors. Each powered, bi-parting vestibule door and any other interior, powered bi-parting door intended for passage through a passenger car shall be equipped with a manual override device and mechanism to retain each door leaf in the open position (e.g., ratchet and pawl, or sprag). Each manual override device shall conform with the requirements of paragraphs (f)(4), (f)(5)(ii), and (f)(6) of this section.

(4) Manual override devices. Each manual override device shall be:

(i) Capable of releasing the door or door leaf, if the door is bi-parting, to permit it to be opened without power;

(ii) Located adjacent to the door or door leaf, if the door is bi-parting, it controls; and

(iii) Designed and maintained so that a person may readily access and operate the override device from each side of the door without the use of a tool or other implement.

(5) Marking and instructions. (i) Each removable panel or removable window in a vestibule door or other interior door intended for passage through a passenger car shall be conspicuously and legibly marked with luminescent material on each side of the door as specified in section 5.4.2 of APTA PR-PS-S-002-98, Rev. 3, “Standard for Emergency Signage for Egress/Access of Passenger Rail Equipment,” Authorized October 7, 2007, or an alternative standard providing at least an equivalent level of safety, if approved by FRA pursuant to § 238.21. Legible and understandable operating instructions shall be posted on each side of the door at each such panel or window. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR Part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Washington, DC 20006, www.aptastandards.com. You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html.

(ii) For bi-parting doors, each manual override device and each retention mechanism shall be conspicuously and legibly marked with luminescent material. Legible and understandable operating instructions for each manual override device and each retention mechanism shall be posted at or near each such device or mechanism.

(6) Testing. At an interval not to exceed 184 days, as part of the periodic mechanical inspection, each railroad shall test a representative sample of the door removable panels, removable windows, manual override devices, and retention mechanisms on its cars, as applicable, to determine that they operate as intended. The sampling method must conform with a formalized statistical test method.

(a) Number and location. Except as provided in paragraph (a)(3) of this section, the following requirements in this paragraph (a) apply on or after April 1, 2008—

(1) Single-level passenger cars. Each single-level passenger car shall have a minimum of four emergency window exits. At least one emergency window exit shall be located in each side of each end (half) of the car, in a staggered configuration where practical. (See Figure 1 to this subpart; see also Figures 1b and 1c to this subpart.)

(2) Multi-level passenger cars—main levels. Each main level in a multi-level passenger car is subject to the same requirements specified for single-level passenger cars in paragraph (a)(1) of this section.

(3) Multi-level passenger cars—levels with seating areas other than main levels.

(i) Except as provided in paragraphs (a)(3)(ii) and (iii) of this section, on or after August 1, 2009, any level other than a main level used for passenger seating in a multi-level passenger car, such as an intermediate level, shall have a minimum of two emergency window exits in each seating area. The emergency window exits shall be accessible to passengers in the seating area without requiring movement through an interior door or to another level of the car. At least one emergency window exit shall be located in each side of the seating area. An emergency window exit may be located within an exterior side door in the passenger compartment if it is not practical to place the window exit in the side of the seating area. (See Figures 2 and 2a to this subpart.)

(ii) Only one emergency window exit is required in a seating area in a passenger compartment if:

(A) It is not practical to place an emergency window exit in a side of the passenger compartment due to the need to provide accessible accommodations under the Americans with Disabilities Act of 1990;

(B) There are no more than four seats in the seating area; and

(C) A suitable, alternate arrangement for emergency egress is provided.

(iii) For passenger cars ordered prior to April 1, 2009, and placed in service prior to April 1, 2011, only one emergency window exit is required in a seating area in a passenger compartment if—

(A) It is not practicable to place a window exit in a side of the passenger compartment (due to the presence of a structure such as a bathroom, electrical locker, or kitchen); and

(B) There are no more than eight seats in the seating area.

(4) Cars with a sleeping compartment or similar private compartment. Each level of a passenger car with a sleeping compartment or a similar private compartment intended to be occupied by a passenger or train crewmember shall have at least one emergency window exit in each such compartment. For purposes of this paragraph (a)(4), a bathroom, kitchen, or locomotive cab is not considered a “compartment.”

(b) Ease of operability. On or after November 8, 1999, each emergency window exit shall be designed to permit rapid and easy removal from the inside of the car during an emergency situation without requiring the use of a tool or other implement.

(c) Dimensions. Except as provided in paragraphs (c)(1) and (c)(2) of this section, each emergency window exit in a passenger car, including a sleeping car, ordered on or after September 8, 2000, or placed in service for the first time on or after September 9, 2002, shall have an unobstructed opening with minimum dimensions of 26 inches horizontally by 24 inches vertically. A seatback is not an obstruction if it can be moved away from the window opening without using a tool or other implement.

(1) Emergency window exits in exterior side doors. An emergency window exit located within an exterior side door, in accordance with the requirements of paragraph (a)(3)(i) of this section, may have an unobstructed opening with minimum dimensions of 24 inches horizontally by 26 inches vertically.

(2) Additional emergency window exits. Any emergency window exit in addition to the minimum number required by paragraph (a) of this section that has been designated for use by the railroad need not comply with the minimum dimension requirements in paragraph (c) of this section, but must otherwise comply with all requirements in this part applicable to emergency window exits.

(d) Marking and instructions. (1) Prior to January 28, 2015, each emergency window exit shall be conspicuously and legibly marked with luminescent material on the inside of each car to facilitate egress. Legible and understandable operating instructions, including instructions for removing the window, shall be posted at or near each such window exit.

(2) On or after January 28, 2015, each emergency window exit shall be marked, and instructions provided for its use, as specified in § 238.125.

(3) If window removal may be hindered by the presence of a seatback, headrest, luggage rack, or other fixture, the instructions shall state the method for allowing rapid and easy removal of the window, taking into account the fixture(s), and this portion of the instructions may be in written or pictorial format. This paragraph (d)(3) applies to each emergency window exit subject to paragraph (d)(1) or (2) of this section.

(e) Periodic testing. At an interval not to exceed 184 days, as part of the periodic mechanical inspection, each railroad shall test a representative sample of emergency window exits on its cars to determine that they operate as intended. The sampling method must conform with a formalized statistical test method.

(a) Number and location. Except as provided in paragraph (a)(1)(ii) of this section, the following requirements in this paragraph (a) apply on or after April 1, 2008—

(1) Single-level passenger cars. Except as provided in this paragraph (a)(1) and in paragraphs (a)(1)(i), (a)(1)(ii), and (a)(5) of this section, each single-level passenger car shall have a minimum of two rescue access windows. At least one rescue access window shall be located in each side of the car entirely within 15 feet of the car's centerline, or entirely within 7 1/2 feet of the centerline if the car does not exceed 45 feet in length. (See Figure 1a to this subpart; see also Figures 1b and 1c to this subpart.) If the seating level is obstructed by an interior door or otherwise partitioned into separate seating areas, each separate seating area shall have a minimum of one rescue access window in each side of the seating area, located as near to the center of the car as practical.

(i) For a single-level passenger car ordered prior to April 1, 2009, and placed in service prior to April 1, 2011, rescue access windows may be located farther than the above prescribed distances from the car's centerline, or located within exterior side doors, or both, if at least one rescue access window is located within each side of each end (half) of the same passenger compartment.

(ii) For a single-level passenger car ordered prior to September 8, 2000, and placed in service prior to September 9, 2002, the requirements of paragraph (a)(1) apply on or after August 1, 2009 if the car has at least two exterior side doors (or door leaves), each with a manual override device, and such doors (or door leaves) are located one on each side of the car, in opposite ends (halves) of the car (i.e., in diagonally-opposite quadrants). The manual override device shall be—

(A) Capable of releasing the door (or door leaf) to permit it to be opened without power from outside the car;

(B) Located adjacent to the door (or door leaf) that it controls; and

(C) Designed and maintained so that a person can access the override device from outside the car without using a tool or other implement.

(2) Multi-level passenger cars—main levels. Each main level in a multi-level passenger car is subject to the same requirements specified for single-level passenger cars in paragraph (a)(1) of this section, with the exception of paragraph (a)(1)(ii), which is not applicable.

(3) Multi-level passenger cars—levels with seating areas other than main levels. (i) Except as provided in paragraphs (a)(3)(ii) and (a)(3)(iii) of this section, any level other than a main level used for passenger seating in a multi-level passenger car, such as an intermediate level, shall have a minimum of two rescue access windows in each seating area. The rescue access windows shall permit emergency responders to gain access to passengers in the seating area without requiring movement through an interior door or to another level of the car. At least one rescue access window shall be located in each side of the seating area. A rescue access window may be located within an exterior side door in the passenger compartment if it is not practical to place the access window in the side of the seating area. (See Figures 2 and 2a of this subpart.)

(ii) Only one rescue access window is required in a seating area in a passenger compartment if—

(A) It is not practical to place a rescue access window in a side of the passenger compartment due to the need to provide accessible accommodations under the Americans with Disabilities Act of 1990;

(B) There are no more than four seats in the seating area; and

(C) A suitable, alternate arrangement for rescue access is provided.

(iii) For passenger cars ordered prior to April 1, 2009, and placed in service prior to April 1, 2011, only one rescue access window is required in a seating area in a passenger compartment if—

(A) It is not practicable to place an access window in a side of the passenger compartment (due to the presence of a structure such as a bathroom, electrical locker, or kitchen); and

(B) There are no more than eight seats in the seating area.

(4) Cars with a sleeping compartment or similar private compartment. Each level of a passenger car with a sleeping compartment or a similar private compartment intended to be occupied by a passenger or train crewmember shall have a minimum of one rescue access window in each such compartment. For purposes of this paragraph, a bathroom, kitchen, or locomotive cab is not considered a “compartment.”

(5) Dual-function windows. If, on any level of a passenger car, the emergency window exits installed to meet the minimum requirements of § 238.113 are also intended to function as rescue access windows, the minimum requirements for the number and location of rescue access windows in paragraphs (a)(1) through (a)(4) of this section are also met for that level.

(b) Ease of operability. On or after April 1, 2008, each rescue access window must be capable of being removed without unreasonable delay by an emergency responder using either—

(1) A provided external mechanism; or

(2) Tools or implements that are commonly available to the responder in a passenger train emergency.

(c) Dimensions. Each rescue access window in a passenger car, including a sleeping car, ordered on or after April 1, 2009, or placed in service for the first time on or after April 1, 2011, shall have an unobstructed opening with minimum dimensions of 26 inches horizontally by 24 inches vertically. A rescue access window located within an exterior side door, in accordance with the requirements of paragraph (a)(3)(i) of this section, may have an unobstructed opening with minimum dimensions of 24 inches horizontally by 26 inches vertically. A seatback is not an obstruction if it can be moved away from the window opening without using a tool or other implement.

(d) Marking and instructions. (1) Prior to January 28, 2015, each rescue access window shall be marked with retroreflective material on the exterior of each car. A unique and easily recognizable symbol, sign, or other conspicuous marking shall also be used to identify each such window. Legible and understandable window-access instructions, including instructions for removing the window, shall be posted at or near each rescue access window.

(2) On or after January 28, 2015, each rescue access window shall be marked, and instructions provided for its use, as specified in § 238.125.

(a) Prior to January 1, 2017, the requirements specified in paragraphs (a)(1) through (4) of this section apply to each passenger car ordered on or after September 8, 2000, or placed in service for the first time on or after September 9, 2002. Emergency lighting shall be provided in each passenger car and shall include the following:

(1) A minimum, average illumination level of 1 foot-candle measured at floor level adjacent to each exterior door and each interior door providing access to an exterior door (such as a door opening into a vestibule);

(2) A minimum, average illumination level of 1 foot-candle measured 25 inches above floor level along the center of each aisle and passageway;

(3) A minimum illumination level of 0.1 foot-candle measured 25 inches above floor level at any point along the center of each aisle and passageway; and

(4) A back-up power system capable of:

(i) Operating in all equipment orientations within 45 degrees of vertical;

(ii) Operating after the initial shock of a collision or derailment resulting in the following individually applied accelerations:

(A) Longitudinal: 8g;

(B) Lateral: 4g; and

(C) Vertical: 4g; and

(iii) Operating all emergency lighting for a period of at least 90 minutes without a loss of more than 40% of the minimum illumination levels specified in this paragraph (a).

(b)(1) As further specified in paragraph (b)(2) of this section, on or after January 1, 2017, emergency lighting shall be provided in each passenger car in accordance with the minimum requirements specified in APTA PR-E-S-013-99, Rev. 1, “Standard for Emergency Lighting System Design for Passenger Cars,” Authorized October 7, 2007, or an alternative standard providing at least an equivalent level of safety if approved by FRA pursuant to § 238.21. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR Part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Washington, DC 20006, www.aptastandards.com. You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html.

(2) No later than December 31, 2015, at least 70 percent of each railroad's passenger cars that were ordered prior to September 8, 2000, and placed in service prior to September 9, 2002, shall be in compliance with the emergency lighting requirements provided in paragraph (b)(1) of this section.

On or after November 8, 1999, all moving parts, high voltage equipment, electrical conductors and switches, and pipes carrying hot fluids or gases on all passenger equipment shall be appropriately equipped with interlocks or guards to minimize the risk of personal injury. This section does not apply to the interior of a private car.

(a)(1) Except as provided in paragraph (a)(2) of this section, on or after November 8, 1999, no railroad shall place or continue in service any vehicle, other than a private car, that is equipped with a rim-stamped straight-plate wheel if a brake shoe acts on the tread of the wheel for the purpose of slowing the vehicle.

(2) A commuter railroad may continue in service a vehicle equipped with a Class A, rim-stamped straight-plate wheel mounted on an inboard-bearing axle until the railroad exhausts its replacement stock of wheels held as of May 12, 1999, provided the railroad does not modify the operation of the vehicle in any way that would result in increased thermal input to the wheel during braking.

(b) A rim-stamped straight-plate wheel shall not be used as a replacement wheel on a private car that operates in a passenger train if a brake shoe acts on the tread of the wheel for the purpose of slowing the car.

(c) The requirements of this section do not apply to a wheel that is periodically tread-braked for a short duration by automatic circuitry for the sole purpose of cleaning the wheel tread surface.

(a) PA system (public address system). (1) Existing Tier I passenger cars. On or after January 1, 2012, each Tier I passenger car shall be equipped with a PA system that provides a means for a train crewmember to communicate by voice to passengers of his or her train in an emergency situation.

(2) New Tier I and all Tier II passenger cars. Each Tier I passenger car ordered on or after April 1, 2008, or placed in service for the first time on or after April 1, 2010, and all Tier II passenger cars shall be equipped with a PA system that provides a means for a train crewmember to communicate by voice to passengers of his or her train in an emergency situation. The PA system shall also provide a means for a train crewmember to communicate by voice in an emergency situation to persons in the immediate vicinity of his or her train (e.g., persons on the station platform). The PA system may be part of the same system as the intercom system.

(b) Intercom system. (1) New Tier I and all Tier II passenger cars. Each Tier I passenger car ordered on or after April 1, 2008, or placed in service for the first time on or after April 1, 2010, and all Tier II passenger cars shall be equipped with an intercom system that provides a means for passengers and crewmembers to communicate by voice with each other in an emergency situation. Except as further specified, at least one intercom that is accessible to passengers without using a tool or other implement shall be located in each end (half) of each car. If any passenger car does not exceed 45 feet in length, or if a Tier II passenger car was ordered prior to May 12, 1999, only one such intercom is required. The intercom system may be part of the same system as the PA system.

(2) Marking and instructions. The following requirements apply to each passenger car:

(i) Prior to January 28, 2016, the location of each intercom intended for passenger use shall be conspicuously marked with luminescent material and legible and understandable operating instructions shall be posted at or near each such intercom.

(ii) On or after January 28, 2016, each intercom intended for passenger use shall be marked in accordance with section 5.4.2 of APTA PR-PS-S-002-98, Rev. 3, “Standard for Emergency Signage for Egress/Access of Passenger Rail Equipment,” Authorized October 7, 2007, or an alternative standard providing at least an equivalent level of safety, if approved by FRA pursuant to § 238.21. Legible and understandable operating instructions shall be posted at or near each such intercom. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Washington, DC 20006, www.aptastandards.com. You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html.

(c) Back-up power. PA and intercom systems in Tier I passenger cars ordered on or after April 1, 2008, or placed in service for the first time on or after April 1, 2010, and in all Tier II passenger cars shall have a back-up power system capable of—

(1) Operating in all equipment orientations within 45 degrees of vertical;

(2) Operating after the initial shock of a collision or derailment resulting in the following individually applied accelerations:

(i) Longitudinal: 8g;

(ii) Lateral: 4g; and

(iii) Vertical: 4g; and

(3) Powering each system to allow intermittent emergency communication for a minimum period of 90 minutes. Intermittent communication shall be considered equivalent to continuous communication during the last 15 minutes of the 90-minute minimum period.

Except as provided in § 238.441 of this chapter—

(a) Number and dimensions. Each passenger car ordered on or after April 1, 2009, or placed in service for the first time on or after April 1, 2011, shall have a minimum of two emergency roof access locations, each with a minimum opening of 26 inches longitudinally (i.e., parallel to the longitudinal axis of the car) by 24 inches laterally.

(b) Means of access. Emergency roof access shall be provided by means of a hatch, or a conspicuously marked structural weak point in the roof for access by properly equipped emergency response personnel.

(c) Location. Emergency roof access locations shall be situated as practical so that when a car is on its side—

(1) One emergency access location is wholly within each half of the roof as divided top from bottom; and

(2) One emergency access location is wholly within each half of the roof as divided left from right. (See Figure 3 to this subpart.)

(d) Obstructions. The ceiling space below each emergency roof access location shall be free from wire, cabling, conduit, and piping. This space shall also be free of any rigid secondary structure (e.g., a diffuser or diffuser support, lighting back fixture, mounted PA equipment, or luggage rack) where practicable. If emergency roof access is provided by means of a hatch, it shall be possible to push interior panels or liners out of their retention devices and into the interior of the vehicle after removing the hatch. If emergency roof access is provided by means of a structural weak point, it shall be permissible to cut through interior panels, liners, or other non-rigid secondary structures after making the cutout hole in the roof, provided any such additional cutting necessary to access the interior of the vehicle permits a minimum opening of the dimensions specified in paragraph (a) to be maintained.

(e) Marking and instructions. (1) Prior to January 28, 2015, each emergency roof access location shall be conspicuously marked with retroreflective material of contrasting color. As further specified, legible and understandable instructions shall be posted at or near each such location. If emergency roof access is provided by means of a structural weak point—

(i) The retroreflective material shall conspicuously mark the line along which the roof skin shall be cut; and

(ii) A sign plate with a retroreflective border shall also state as follows:

(2) On or after January 28, 2015, each emergency roof access location shall be marked, and instructions provided for its use, as specified in § 238.125.

On or after January 28, 2015, emergency signage and markings shall be provided for each passenger car in accordance with the minimum requirements specified in APTA PR-PS-S-002-98, Rev. 3, “Standard for Emergency Signage for Egress/Access of Passenger Rail Equipment,” Authorized October 7, 2007, or an alternative standard providing at least an equivalent level of safety, if approved by FRA pursuant to § 238.21. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR Part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Washington, DC 20006, www.aptastandards.com. You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html.

On or after January 28, 2015, low-location emergency exit path marking shall be provided in each passenger car in accordance with the minimum requirements specified in APTA PR-PS-S-004-99, Rev. 2, “Standard for Low-Location Exit Path Marking,” Authorized October 7, 2007, or an alternative standard providing at least an equivalent level of safety, if approved by FRA pursuant to § 238.21. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR Part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Washington, DC 20006, www.aptastandards.com. You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to: http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html

(a) Safety systems for powered exterior side doors. All powered exterior side door safety systems in passenger cars, and connected door safety systems in locomotives used in passenger service, that are ordered on or after April 5, 2016, or placed in service for the first time on or after February 5, 2018, shall:

(1) Be built in accordance with APTA standard PR-M-S-18-10, “Standard for Powered Exterior Side Door System Design for New Passenger Cars,” approved February 11, 2011. In particular, locomotives used in passenger service shall be connected or interlocked with the door summary circuit to prohibit the train from developing tractive power if an exterior side door in a passenger car is not closed, unless the door is under the direct physical control of a crewmember for his or her exclusive use. The incorporation by reference of this APTA standard was approved by the Director of the Federal Register in accordance with 5 U.S.C. 552(a) and 1 CFR part 51. You may obtain a copy of the incorporated document from the American Public Transportation Association, 1666 K Street NW., Suite 1100, Washington, DC 20006 (telephone 202-496-4800; www.apta.com). You may inspect a copy of the document at the Federal Railroad Administration, Docket Clerk, 1200 New Jersey Avenue SE., Washington, DC or at the National Archives and Records Administration (NARA). For information on the availability of this material at NARA, call 202-741-6030, or go to http://www.archives.gov/federal_register/code_of_federal_regulations/ibr_locations.html;

(2) Be designed based on a Failure Modes, Effects, Criticality Analysis (FMECA);

(3) Contain an obstruction detection system sufficient to detect and react to both small and large obstructions and allow the obstruction to be released when detected;

(4) Be designed so that activation of a door by-pass feature does not affect the operation of the obstruction detection system;

(5) Require a door control panel key or other secure device to activate a door control panel;

(6) Not be operated from a door control panel when the door control panel key or other secure device is removed; and

(7) Not be affected by the movement or position of the locomotive throttle. A train's throttle position shall neither open nor close the exterior side doors on the train.

(b) Safety system for manual and powered exterior side doors. All manual and powered exterior side door systems in passenger cars, and connected door safety systems in locomotives used in passenger service, that are ordered on or after April 5, 2016, or placed in service for the first time on or after February 5, 2018 shall be:

(1) Designed with a door summary circuit and so connected or interlocked as to prohibit the train from developing tractive power if an exterior side door in a passenger car is not closed, unless the door is under the direct physical control of a crewmember for his or her exclusive use;

(2) Connected to interior and exterior side door status indicators;

(3) Connected to a door summary status indicator that is readily viewable to the engineer from his or her normal position in the operating cab; and

(4) If equipped with a door by-pass device, designed so that the by-pass device functions only when activated from the operating cab of the train.

(c) Additional requirements. In addition to the requirements of this section, requirements related to exterior side door safety on passenger trains are provided in §§ 238.112, 238.133, 238.135, 238.137, and 238.439.

(a) By-pass device verification—(1) Visual inspection. Except as provided in paragraphs (a)(2) and (3) of this section, a member of the crew of each passenger train must verify by observation that all door by-pass devices that can affect the safe operation of the train are sealed in the normal (non-by-pass) position when taking control of the train.

(2) Functional test. Instead of a visual inspection of the door by-pass devices, the railroad may develop a plan to perform a functional test to determine that the door summary status indicator is functioning as intended. The functional test plan shall be made available for inspection by FRA.

(3) Face-to-face relief. Crewmembers taking control of a train do not need to perform either a visual inspection or a functional test of the door by-pass devices in cases of face-to-face relief of another train crew and notification by that crew as to the functioning of the door by-pass devices.

(b) Unsealed door by-pass device. A crewmember must notify the railroad's designated authority pursuant to the railroad's defect reporting system if a door by-pass device that could affect the safe operation of the train is found unsealed during the train's daily operation. If the train crew can test the door safety system and determine that the door summary status indicator is functioning as intended, the train may travel in service until the next forward repair point where a seal can be applied by a qualified maintenance person (QMP) or until its next calendar day inspection, whichever occurs first; if not, the train crew must follow the procedures outlined in paragraph (c) of this section.

(c) En route failure. If it becomes necessary to activate a door by-pass device, the train may continue to its destination terminal, provided that the train crew conducts a safety briefing that includes a description of the location(s) where crewmembers will position themselves on the train in order to observe the boarding and alighting of passengers, notifies the railroad's designated authority that the train's door by-pass device has been activated, and adheres to the operating rules required by § 238.135. After the train has reached its destination terminal, the train may continue in passenger service until its arrival at the next forward repair point or its next calendar day inspection, whichever occurs first, provided that prior to movement of equipment with a door by-pass device activated:

(1) An on-site QMP shall determine that repairs cannot be made at the time and it is safe to move the equipment in passenger service. If a QMP is not available on site, these determinations may be made based upon a description of the condition provided by an on-site qualified person (QP) to a QMP offsite; and

(2) The QP or QMP shall notify the crewmember in charge of the movement of the train that the door by-pass device has been activated. The train crew must then hold a safety briefing that includes information such as the locations where each crewmember will position himself or herself on the train to ensure that passengers board and alight from the train safely.

(d) Records. The railroad shall maintain a record of each door by-pass activation and each unintended opening of a powered exterior side door, including any repair(s) made, in the defect tracking system as required by § 238.19.

(e) Door control panels. Exterior side doors shall not be capable of operation from a door control panel when the key or other similar device is removed.

(f) End-of-train circuit. End-of-train circuit integrity shall be maintained. When switches are used to establish the end-of-train circuit, the switches shall be secured in a manner to prevent access by unauthorized personnel.

(g) Exterior side door safety system override devices. (1) Exterior side door safety system override devices that can adversely affect the train's door safety system must be inactive and sealed in all passenger cars and locomotives in the train consist, including cab cars and MU locomotives, if they are so equipped.

(2) As part of the equipment's calendar day inspection, all exterior side door safety system override devices must be inactive and sealed in all passenger cars and all locomotives in the train consist, including cab cars and MU locomotives, if they are so equipped.

(a) At the beginning of his or her duty assignment prior to the train's departure, each crewmember must participate in a safety briefing that identifies each crewmember's responsibilities relating to the safe operation of the train's exterior side doors, including responsibilities for the safe operation of the exterior side doors when arriving at or departing a station.

(b) After April 5, 2016, all passenger train exterior side doors and trap doors must be closed when a train is in motion between stations except when:

(1) The train is departing or arriving at a station if:

(i) A crewmember needs to observe the station platform; and

(ii) The open door is attended by the crewmember; or

(2) A crewmember must perform on-ground functions, such as, but not limited to, lining switches, making up or splitting the train, providing crossing protection, or inspecting the train.

(c)(1) Except as provided in paragraph (b) of this section, passenger railroads must receive special approval from FRA's Associate Administrator for Railroad Safety/Chief Safety Officer to operate passenger trains with exterior side doors or trap doors, or both, open between stations.

(2) Any request for special approval must include:

(i) A written justification explaining the need to operate a passenger train with its exterior side doors or trap doors, or both, open between stations; and

(ii) A detailed hazard analysis, including a description of specific measures to mitigate any added risk.

(3) The request must be signed by the chief executive officer (CEO), or equivalent, of the organization(s) making the request.

(4) FRA may request that the passenger railroad submit additional information to support its request before FRA approves the request.

(d) No later than December 6, 2018, each railroad shall adopt and comply with operating rules on how to safely override a door summary circuit or no-motion system, or both, in the event of an en route exterior side door failure or malfunction on a passenger train. Railroads shall provide these written rules to their crewmembers and control center personnel and make them available for inspection by FRA. These written rules shall include:

(1) Instructions to crewmembers and control center personnel, describing what conditions must be present in order to override the door summary circuit or no-motion system, or both; and

(2) Steps crewmembers and control center personnel must take after the door summary circuit or no-motion system, or both, have been overridden to help provide for continued passenger safety.

(e) No later than December 6, 2018, each passenger train crewmember must be trained on:

(1) The requirements of this section; and

(2) How to identify and isolate equipment with a malfunctioning exterior powered or manual side door.

(f) No later than December 6, 2018, each railroad shall adopt and comply with operating rules requiring train crewmembers to determine the status of their train's exterior side doors so that their train may safely depart a station. These rules shall require crewmembers to determine that there are no obstructions in their train's exterior side doors before the train departs.

(g) Beginning December 6, 2018, each railroad shall periodically conduct operational (efficiency) tests and observations of its operating crewmembers and control center personnel as appropriate to their roles, to determine each individual's knowledge of the railroad's powered and manual exterior side door safety procedures for its passenger trains.

(a) A train made up of equipment with incompatible exterior side door systems shall be operated within the constraints of each such door system.

(b) No later than December 6, 2018, each railroad shall adopt and comply with operating rules to provide for the safe use of equipment with incompatible exterior side door systems when utilized in a mixed consist.