Shell’s Safety Exemption: Internal Files Show SPDC Was Allowed to Keep Pumping Through Tampered Pipelines

A restricted 2012 application sought relief from Shell’s own global safety requirements because removing illegal oil taps would mean “considerable system downtime”. Months later, senior executives were explicitly asking whether Shell was prepared to keep producing knowing further environmental damage would occur.

There is a difference between a company discovering that one of its safety rules has been breached and a company formally deciding that the rule need not apply.

The newly disclosed Shell Nigeria documents contain evidence of the latter.

In November 2012, while oil theft was inflicting extraordinary damage on Shell Petroleum Development Company of Nigeria’s pipeline network, SPDC sought an exception from requirements contained in Shell’s global Health, Safety, Security and Environment framework.

The reason recorded in the documents was brutally practical.

Illegal connections had pushed parts of the pipeline system into a condition requiring either immediate corrective action or shutdown under Shell’s normal requirements. Removing the connections, however, would entail “considerable system downtime.”

So an exemption was requested.

According to Nigeria: Lifting the Lid, Shell executives subsequently approved an arrangement permitting SPDC to continue operating affected infrastructure despite conditions which, under the normal Shell framework, called for immediate corrective action or shut-in. The exemption reportedly remained effective through the end of 2014 and was later extended to the end of 2016.

This was not simply an engineering argument about how to repair a difficult pipeline.

It went to a more fundamental question:

When Shell’s own safety system said stop or fix the problem, was Nigeria allowed a different standard because stopping production carried an unacceptable operational and financial price?

The documents now in public raise that question squarely.

The underlying document

HEDA Resource Centre lists the central record as Document 16 — MPR-10 HB 800-804_260421_132649 among the Shell materials released through the UK proceedings.

The report identifies it as an “Application Form exception to Group HSSE & SP Control Framework Requirement” dated 12 November 2012.

The same section cites further underlying records D2_00097202 (HB/854-855) and D2_00097210 (HB/1174) through paragraph 76 of solicitor Matthew Renshaw’s Tenth Witness Statement.

The application was reportedly marked “restricted.”

Its importance lies in what Shell’s own integrity classification meant.

According to the disclosed material, the affected pipelines had numerous illegal connections and were in a condition requiring “immediate corrective action or shutting in of the line.” Shell’s HSSE framework also required safety-critical equipment to be operated “within its operating limits.”

Yet the application sought an exception that would allow production to continue.

That is documented.

Whether the decision was reasonable in the extraordinary circumstances Shell faced is contested.

Those are different propositions.

Oil theft was not imaginary

Any serious analysis must begin by acknowledging Shell’s strongest point.

The Niger Delta was experiencing industrial-scale oil theft.

Criminal gangs drilled into pipelines, installed illegal connections, stole crude and supplied illicit refining operations. The consequences included fires, spills, damage to infrastructure, lost Nigerian revenue and enormous environmental contamination.

Shell continues to maintain that large-scale theft, sabotage and illegal refining caused the majority of pollution at issue in the Bille and Ogale litigation. The company says it worked with Nigerian authorities, its government-owned partner and communities, undertook repairs and shut-ins, and cleaned spills from joint-venture facilities regardless of cause as required by Nigerian law.

None of the new documents demonstrates that the thieves did not exist.

The disturbing issue is what Shell did after it knew they existed.

Removing all the taps meant stopping the oil

The 2012 exception application puts the dilemma unusually clearly.

Shell’s rules required action.

But eliminating the illegal connections would require extensive production interruption.

The report states that managers therefore sought permission to continue operating infrastructure even though it was not considered safe under the normal global requirements.

This distinction matters.

Shell was not powerless to stop crude entering a compromised pipeline.

A shutdown was available.

The problem was what followed from shutting it down.

Production would cease.

Facilities feeding the system would be affected.

Revenue would be lost.

And criminals might attack elsewhere.

Those were real operational considerations.

But they do not make the environmental consequences disappear.

They demonstrate that management was balancing those consequences against the costs and disruption associated with shutting the system.

Then Shell’s managers saw what was happening outside

By early 2013, the environmental consequences were no longer theoretical.

The report cites an internal account of a 26 February 2013 flight by SPDC’s General Manager over the affected area.

He reported that conditions between Krakama and Awoba were extremely bad, with visible free-phase oil across numerous creeks. He stopped short of recommending immediate closure of the Nembe Creek Trunk Line, but equally said he could not recommend continuing unless the situation improved dramatically and quickly.

That email is important because it removes one possible defence:

that senior management did not appreciate the physical scale of what was occurring.

They did.

Oil was visible across the waterways from the air.

“KNOWING that further environmental damage WILL occur?”

Then came Project Madrid.

HEDA identifies Document 23 — MPR-10 HB 856-891_Redacted_260421_133829 as the Project Madrid Steering Group Update dated 18 March 2013.

The presentation considered what Shell should do about the escalating theft crisis.

And one question in it now stands out above almost everything else in the disclosed archive:

“are we comfortable to continue producing, KNOWING that further environmental damage WILL occur?”

The capitalisation was in the original.

There is no need to embellish those words.

They demonstrate that the environmental consequence of continued production was expressly recognised within the decision-making process.

The issue before management was not simply whether pollution might occur.

The presentation itself framed further environmental damage as something that would occur if the existing course continued.

One hundred illegal refineries and 18,000 hectares affected

The same Project Madrid presentation reportedly identified around 100 illegal refineries along the NCTL and estimated that pollution associated with them had affected 9,000 hectares of land and another 9,000 hectares of water.

That pollution cannot simply be attributed to Shell as though the illegal refiners did not exist.

The criminals operating those sites bear responsibility for their own conduct.

But Shell’s internal dilemma was precisely that continuing to send oil through compromised infrastructure continued supplying the conditions in which the theft and associated pollution were occurring.

That is why the document’s own question is so important.

Management knew the causal chain it was considering.

Production.

Illegal tapping.

Stolen crude.

Illegal refining.

More environmental damage.

And the alternative was shutdown.

Shell examined three options

Project Madrid laid out three broad courses.

Option A involved temporary shutdowns for repairs over weeks while effectively tolerating continuing bunkering.

Option B involved a longer intervention over months to repair all known illegal connections.

Option C required fundamental change, addressing the underlying causes over years.

The internal assessment reportedly recognised serious weaknesses in the less intrusive course.

Option A was described as a “less principled stand”, difficult to defend publicly because Shell could be seen as “knowingly polluting.”

Again, that phrase came from inside the Shell decision process.

It does not constitute a legal admission that Shell unlawfully polluted.

But it proves that Shell’s own managers understood how continuation of production could reasonably be perceived.

And then the presentation calculated the money

Project Madrid did not discuss environmental risk in isolation.

It calculated the financial impact of shutdown.

According to the presentation, a fundamental solution would have a “material impact on revenues.”

The numbers were substantial.

The report says Shell estimated that shutting the NCTL for one year would sacrifice about $194 million, rising to $389 million if the closure continued for a second year.

For the Trans Niger Pipeline, the comparable estimates were reportedly $427 million for one year and $853 million over two.

Those figures do not prove that profit was the sole reason Shell kept operating.

Operational security, Nigerian production, government revenue, theft displacement and the consequences of shutting connected facilities were also relevant.

But the documents establish that revenue loss was quantified as part of the choice.

That means the financial issue is not an invention imposed on the records by campaigners.

It was within Shell’s own decision analysis.

A Shell executive foresaw the criticism

Two months later, senior management was still grappling with the consequences.

The report cites a 28 May 2013 email from Shell’s Vice-President Business Development to its Vice-President Nigeria & Gabon, itself cited in the claimants’ skeleton argument as document POC-B/1656.

The executive anticipated the obvious public reaction: people would ask why a company with Shell’s technology and resources had chosen to continue pumping when it knew about leaks, environmental damage and theft rather than stopping the oil. He warned that Shell risked creating a problem of its own making.

That email is unusually significant because the criticism came from inside.

It shows that at least one senior executive understood precisely how the decision could look when exposed to outside scrutiny.

Thirteen years later, that scrutiny has arrived.

There was an earlier special rule for SPDC

The 2012 HSSE exception was apparently not the first time Shell adapted its normal technical regime specifically for Nigeria.

The report identifies Document 9 — MPR-10 HB 711-749_260421_131313, Shell’s April 2009 pipeline-repair Design and Engineering Practice for SPDC. HEDA lists that document in the disclosure archive.

According to the report, the revised Nigeria-specific policy permitted continued pipeline operation where illegal taps remained attached but were not actively leaking.

Earlier instalments in this series have already examined Shell’s clamp and maintenance practices, so that issue need not be repeated here.

Its relevance to this instalment is narrower:

the 2012 formal exception was part of a documentary history in which Shell’s Nigerian operations were permitted departures from rules that would otherwise have required more immediate intervention.

That creates an awkward comparison with Shell’s public assurances

At around the same time, Shell was publicly presenting SPDC’s environmental management in much more reassuring terms.

The report cites a 2013 Shell publication saying SPDC operated an Environmental Management Improvement Programme intended to keep infrastructure in good condition and that the programme conformed to global Shell Group standards and ISO guidelines.

The internal documents, however, record an active exemption from key Shell requirements.

Those statements are not necessarily irreconcilable in a strict technical sense.

A large management programme can generally conform to group standards while specific operations are operating under approved exceptions.

That is a possible Shell explanation.

But if Shell publicly invoked compliance with global standards while material departures from those standards had been formally approved for troubled pipelines, readers and affected communities were entitled to know about the exceptions too.

Without that disclosure, “global standards” conveys a substantially more reassuring picture than the internal record appears to support.

The Nigerian security force noticed

The operational choice apparently generated concern beyond Shell.

In a 26 March 2013 email, contained in Document 21 — MPR-10 HB 895-896_Redacted_260421_133730, a senior manager wrote that the Nigerian security force responsible for pipeline protection had accused Shell of being “complicit”because illegal bunkering points were not being removed.

That was an accusation by the security force, not an established fact.

There is no evidence in the material reviewed here that Shell institutionally participated in oil theft.

“Complicit” must therefore remain attributed precisely as the document attributes it.

But the fact that the accusation arose internally is revealing.

Even those charged with protecting the pipelines apparently struggled to understand why known theft connections remained attached while crude continued flowing.

What Shell says

Shell rejects the broader portrayal advanced by HEDA, Amnesty International and the other publishers of Nigeria: Lifting the Lid.

In its response to the organisations, Shell said:

“The characterisation and portrayal of Shell in your letter is not one we recognise.”

It said the selected documents were being presented without adequate recognition of the “challenging operating environment in the Niger Delta at the time”, including widespread organised theft, sabotage, illegal refining and security problems.

Shell makes the same case today.

Its current account of the Bille and Ogale proceedings says the vast majority of pollution resulted from large-scale theft, sabotage and illegal refining. It says SPDC invested heavily in infrastructure, monitoring, repairs, surveillance and spill response, undertook shut-ins, worked with government and communities, and cleaned spills from joint-venture facilities regardless of cause. Shell says it strongly believes in its defence and will contest the claims at the factual trial in 2027.

Those are important facts.

They do not make the exception application disappear.

The genuine difficulty should not be understated

Shell faced a situation for which there may have been no clean solution.

Shutting a pipeline could interrupt legitimate Nigerian production and government revenue.

Repair teams faced security risks.

A connection removed one day could be replaced by thieves.

Criminal gangs could migrate to another section of infrastructure.

And a prolonged shutdown could itself have operational consequences.

It is therefore entirely possible that Shell believed continuing restricted operations presented a lower overall risk than indefinite closure.

That is the strongest good-faith interpretation of the documentary record.

But if that was the reasoning, it should be demonstrated.

Because the internal documents also show the other side of the calculation:

known illegal connections;

infrastructure outside normal operating requirements;

pollution visible over large areas;

foreseeable additional environmental damage;

and quantified revenue losses from shutdown.

The decision cannot be evaluated responsibly by describing only one half of that equation.

The central question is not whether Shell caused the theft

It plainly did not follow that because Shell knew an illegal tap existed, Shell had created it.

The thieves created the tap.

But once Shell knew it existed, an additional question arose.

What was Shell obliged to do about it?

That question becomes especially serious where Shell’s own rules indicated immediate corrective action or shutdown.

A corporation cannot invoke a safety standard as evidence of responsible management and then treat departures from that standard as irrelevant when the standard becomes commercially or operationally inconvenient.

Exceptions may sometimes be justified.

But an exception transfers the burden of proof.

Shell should be able to demonstrate why continued operation was safer, or at least less harmful, than shutdown.

Publish the complete exception record

There is a straightforward way to resolve much of the dispute.

Shell says the documents lack context.

Then publish the context.

Publish the complete 12 November 2012 exception application.

Publish the risk assessment supporting it.

Publish the approvals granted in March 2013.

Identify the executives and technical authorities responsible, subject to legitimate privacy restrictions.

Publish the conditions imposed upon continued operation.

Publish the monitoring results used to determine when a pipeline had to be shut.

Publish the extension that reportedly continued the exemption through the end of 2016.

And publish the evidence showing whether the anticipated environmental consequences were reduced, increased or accepted during that period.

If the exception prevented greater harm, the record should demonstrate it.

If it merely kept production flowing while pollution continued, communities are entitled to know that too.

This is why the word “exception” matters

Shell has long asked the public to judge its Nigerian record in the context of extraordinary criminal interference.

That context matters.

But context must not become exemption from scrutiny.

The newly disclosed paperwork shows that Shell had rules specifying how safety-critical equipment was supposed to operate.

Nigeria departed from those requirements.

The departure was formalised.

The reason included the downtime required to remove illegal connections.

Senior managers subsequently discussed the environmental damage that would result from continued production.

And Project Madrid calculated the revenue sacrificed by shutting major pipelines.

Those are documentary facts.

The report publishers infer from them that Shell put profit above people and environmental protection. Shell rejects that characterisation.

The court has not yet determined the contested factual and liability issues.

But whatever conclusion the eventual trial reaches, one thing is already clear from the documents themselves.

Shell did not merely find itself confronted by tampered pipelines.

It made management decisions about whether to keep pumping through them.

And at least some of those decisions were made under formal exceptions to the company’s own safety framework while senior executives knew that further environmental damage was likely.

That is not a side issue in the Shell Nigeria story.

It goes to the heart of it.

Documentary record

The central source is Document 16 — MPR-10 HB 800-804_260421_132649, identified in Nigeria: Lifting the Lid as the 12 November 2012 Application Form for exception to Group HSSE & SP Control Framework Requirement. HEDA lists the document in its public disclosure archive. The report additionally cites D2_00097202 (HB/854-855) and D2_00097210 (HB/1174) in connection with approval and extension of the exception.

The March 2013 decision analysis is Document 23 — MPR-10 HB 856-891_Redacted_260421_133829, Project Madrid Steering Group Update, 18 March 2013. The report cites pages HB/860, HB/862, HB/870, HB/873, HB/882 and HB/888 in relation to anticipated environmental damage, available options and estimated financial consequences.

The earlier Nigeria-specific pipeline policy is Document 9 — MPR-10 HB 711-749_260421_131313, while the 26 March 2013 email recording the Nigerian security force’s accusation is Document 21 — MPR-10 HB 895-896_Redacted_260421_133730. Both are listed by HEDA among the released Shell documents.

The 28 May 2013 senior-management email is cited by the claimants in their skeleton argument as POC-B/1656 and reproduced in substance in the report.

Editorial note

The documents establish that Shell approved exceptions from specified internal requirements and that senior managers considered environmental harm, production shutdown and revenue consequences when deciding how to respond to widespread illegal connections.

They do not, by themselves, prove that profit was Shell’s sole or dominant motive, that the exemptions were unlawful, or that every subsequent spill was caused by Shell rather than criminal third parties.

The report publishers contend that the documents show Shell accepted unacceptable environmental harm in order to maintain production. Shell disputes that interpretation, says the documents are being selectively presented without the necessary operational context, and maintains that large-scale theft, sabotage and illegal refining caused the majority of the pollution at issue.

Those questions remain contested ahead of the factual trial scheduled for 2027.

Site wide disclaimer also applies.