Design basis accidents – pipe ruptures, component failure – must be controlled by the safety facilities in such a way that effects on the environment are kept below the specified planning values of the Radiological Protection Ordinance, i.e. the effective dose to a worker or members of the public is less than 50 mSv. (See ‘MCA’)