Functional Safety in Canada: CSA Z767, AER Expectations, and How They Map to IEC 61511

Canada has no federal process safety regulation equivalent to OSHA Process Safety Management in the United States or COMAH in the United Kingdom. That absence leads a surprising number of operators to conclude they have no formal process hazard analysis obligation. The conclusion is wrong, and the route to the obligation is simply less obvious.

Canadian requirements arrive through a National Standard, through provincial regulator expectations, and through industry association guidance, rather than through a single federal rule. This guide sets out where those requirements actually sit and how they connect to IEC 61511. If you need the broader standards picture first, start with our guide to functional safety standards.

 

CSA Z767: The National Standard

CAN/CSA Z767 was published in 2017 and confirmed as a National Standard of Canada, giving it nationwide recognition by industry and by the provinces and territories. It specifies performance requirements for a process safety management system covering facilities and worksites that handle or store potentially hazardous materials.

Three requirements matter most for functional safety work. The standard requires a process hazard analysis, most commonly performed as a HAZOP. It requires that PHA to be revalidated every five years. And it requires changes to be managed through a management of change process with a PHA used to assess them.

CSA Z767 also requires demonstrated competence in risk assessment, meaning the study team must have genuine expertise in the engineering, operation and maintenance of the process being evaluated. It further requires human factors to be considered in risk identification and quantification, covering operator interfaces, staffing levels and working environment, which is a more explicit requirement than several international equivalents contain.

 

The gap most Canadian operators discover late Because there is no federal inspector arriving to check a PHA, the five-year revalidation clock is easy to lose track of. Facilities frequently find that their last full study predates several rounds of modification, and that management of change records are too incomplete to support a revalidation. At that point a full re-study is usually faster and cheaper than reconstructing the change history.

 

Alberta: AER Expectations

Alberta operators fall under Alberta Energy Regulator expectations. AER Directive 071 on emergency planning and Directive 056 on energy development applications both reference hazard assessment processes, particularly for sour gas facilities.

The AER does not prescribe HAZOP by name. What it expects is documented hazard assessment at a rigour proportionate to the facility risk profile, and HAZOP is the method operators use to meet that expectation in practice. This applies across the gas plants, oil sands operations and pipeline facilities managed from Calgary and the upgrading and refining complex around Edmonton.

 

The Alberta electrical code question

One point causes recurring confusion. CSA adopted IEC 61508 and IEC 61511 as CAN/CSA standards, and the 2018 Canadian Electrical Code referenced them, which led some parties to claim functional safety was mandatory and enforceable across Canada under the electrical code.

Alberta Municipal Affairs subsequently issued a Standata clarifying that IEC 61508-3 and IEC 61511 are not equipment standards and had been listed in error, so they are not enforceable under the electrical code in that province. They remain National Standards of Canada, and enforcement varies by jurisdiction. If a consultant tells you functional safety is mandatory in Canada under the electrical code, that history is what the claim rests on.

 

Ontario and Other Provinces

In Ontario, the Technical Standards and Safety Authority operates under the Technical Standards and Safety Act and references CSA Z767 in its process safety guidance. For the petrochemical cluster in Sarnia-Lambton, where facility density and shared infrastructure raise the consequence profile considerably, HAZOP is standard practice regardless of the precise regulatory hook.

CAPP process safety guidance, aligned to API RP 750 and to API RP 14C for offshore, also calls for hazard identification studies at facilities containing flammable or toxic process streams above threshold quantities. CSA Z767 is additionally referenced in the ECCC Technical Guidelines supporting the Environmental Emergency Regulations.

 

How Canadian Requirements Map to IEC 61511

 

Requirement	Canadian Source	IEC 61511 Equivalent
Process hazard analysis	CSA Z767; AER Directives 071 and 056	Clause 8 hazard and risk assessment
Five-year revalidation	CSA Z767	Periodic assessment within the safety lifecycle
Management of change with PHA	CSA Z767	Clause 17 modification requirements
Demonstrated competence	CSA Z767	Clause 5 competency requirements
SIL determination for safety functions	Not prescribed federally	Clause 9 SIL allocation
Cybersecurity risk assessment	Not prescribed federally	Clause 8.2.4

 

The two rows without a Canadian source are worth noting. Neither SIL determination nor cybersecurity risk assessment is prescribed by a Canadian regulation, but both are required by IEC 61511 once you operate a safety instrumented system. Operators who work only to the Canadian regulatory floor and stop there frequently have a hazard study and no defensible SIL basis behind their safety functions. Our guide to SIL assessment and determination covers how the targets are derived, and the relationship between IEC 61511 and IEC 62443 covers the security requirement.

 

What Canadian Operators Should Have in Place

• A current process hazard analysis, revalidated within the last five years
• Complete management of change records showing every modification since that study
• Documented competence records for everyone who performed hazard assessment work
• Human factors considered explicitly within the risk assessment, as CSA Z767 requires
• SIL determination traceable to documented hazard scenarios, where safety instrumented functions exist
• Evidence available for functional safety assessment at the relevant lifecycle stages

 

Why Choose Arista Cyber

Arista Cyber delivers the full functional safety lifecycle for Canadian operators, with TUV Rheinland certified practitioners and direct experience of how AER and provincial expectations are applied in practice rather than only how they read on paper.

Because CSA Z767 requires demonstrated competence in risk assessment, the credentials behind your study are themselves part of the compliance position. We provide that, and we deliver every stage from HAZOP through SIL determination to validation and verification, so the evidence chain holds together. We also work across IEC 61511 and IEC 62443, which covers the cybersecurity requirement that Canadian regulation does not prescribe but the standard does.

 

Next Steps

If your last process hazard analysis is approaching five years old, or your management of change records have gaps, that is the place to start. Explore our functional safety services in Canada, read our guide to when a HAZOP is required, or contact the Arista Cyber team.

 

Common Questions

 

Is process safety management mandatory in Canada?

There is no single federal rule equivalent to OSHA PSM. CAN/CSA Z767 is a National Standard of Canada rather than a statute, but it is widely referenced by provincial regulators, by industry associations, and in ECCC technical guidance, and it is the benchmark against which practice is judged. Provincial requirements such as AER Directives create additional expectations for hazard assessment.

Does the AER require a HAZOP specifically?

No. AER Directives 071 and 056 reference hazard assessment without naming HAZOP as the required method. What the AER expects is documented hazard assessment at a rigour proportionate to the facility risk profile. HAZOP is what operators use in practice because it is the method that withstands scrutiny for complex processes.

Is IEC 61511 legally enforceable in Canada?

It is a National Standard of Canada as CAN/CSA C22.2 No. 61511, but enforceability varies by jurisdiction. Alberta Municipal Affairs issued a Standata clarifying that IEC 61508-3 and IEC 61511 are not equipment standards and were listed in the 2018 Canadian Electrical Code in error, so they are not enforceable under the electrical code in that province. Contractual and corporate requirements frequently make it binding regardless of statutory status.

 

Is your PHA due for revalidation? Arista Cyber delivers HAZOP, SIL determination and the full IEC 61511 lifecycle for Canadian operators. TUV Rheinland certified practitioners. Book a Free Consultation