text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 7 of 141 An agency of the European Union

text: Step 1: Identify the Proposed Changes to an Aeronautical Product.

text: Step 2: Verify the Proposed Change is Not Substantial. See Note 1.

text: Step 3:

text: Will you Use the YES Latest Standards? 21.A.101(a)

text: Step 4: Arrange Changes into Related and Unrelated Groups.

text: Step 5:

text: Not Significant NO Is Each Related or Unrelated Group a Significant Change? 21A..101(b)(1)

text: Step 6: Prepare your Proposed Type-Certification Basis List. See Note 2.

text: Not Affected Areas Affected Areas

text: Step 7:

text: Do the Latest Standards Contribute Materially to YES

text: Existing Standards

text: the Level of Safety and are they Practical? 21.A.101(b)(3) See Note 2.

text: Earlier Standards Latest Standards

text: Step 8: Ensure Proposed Type-Certification Basis is Adequate.

text: Submit Proposed Type-Certification Basis to the Agency

text: Notes: 1. Changed products that are substantially changed do not follow this flowchart . Refer to 21.A19. 2. Process and propose each applicable standard individually. If Standards are linked together, then they should be assessed together.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 8 of 141

text: An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 9 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 10 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 11 of 141 An agency of the European Union

text: Fuselage Stretch

text: (physical change)

text: (physical and performance changes)

text: Thrust Increase

text: (physical and performance changes)

text: Comprehensive Flightdeck Upgrade

text: Affected Area Changed Area (typically, a stand-alone significant physical change)

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 12 of 141

text: An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 13 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 14 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 15 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 16 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 18 of 141 An agency of the European Union

text: This example is taken from the FAA experience gained prior to EASA’s start, therefore the references to the FAA sections and amendments are kept. TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 19 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 20 of 141 An agency of the European Union

text: Secondary changes

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 21 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 22 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 23 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 24 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 25 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 26 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 27 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 28 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 29 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 30 of 141 An agency of the European Union

text: APPENDIX A. CLASSIFICATION OF DESIGN CHANGES

text: Example Description of Change Notes

text: Change to wing location (tandem, forward, canard, high/low). Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 2. Fixed wing to tilt wing. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 3. A change to the number of engines. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 4. Replacement of piston or turboprop engines with turbojet or Proposed change to design is so extensive that a substantially complete turbofan engines. investigation of compliance with the applicable certification basis is required.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 31 of 141 An agency of the European Union

text: Change to engine configuration (tractor/pusher). Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required.

text: Increase from subsonic to supersonic flight regime.

text: Change from an all-metal to all-composite aeroplane. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required.

text: Certifying a CS-23 (or predecessor basis, such as JAR-23) aeroplane — into another certification category, such as CS-25.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 32 of 141 An agency of the European Union

text: Is there a change to Is there a change to Have the assumptions the general the principles of used for certification configuration? construction? Example Description of change been invalidated? Notes 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii)

text: Conventional tail to T-tail or V- Yes No Yes Change to general configuration. tail, or vice versa. Requires extensive, structural flying qualities and performance reinvestigation. Requires new aeroplane flight manual (AFM) to address performance and flight characteristics.

text: Changes to wing configuration, Yes No Yes Change to general configuration. Likely such as change to dihedral, requires extensive changes to wing changes to wing span, flap or structure. Requires new AFM to address aileron span, addition of performance and flight characteristics. winglets, or increase of more Note: Small changes to the wingtip or than 10 per cent of the original winglet are not significant changes. See wing sweep at the quarter table for ‘not significant’ changes. chord.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 33 of 141 An agency of the European Union

text: Changes to tail configuration, Yes No Yes Change to general configuration. Likely such as the addition of tail requires extensive changes to tail strakes or angle of incidence of structure. Requires new AFM to address the tail. performance and flight characteristics. Note: Small changes to tail are not significant changes.

text: Tricycle/tail wheel Yes No No Change to general configuration. Likely, undercarriage change or at aeroplane level, general configuration addition of floats. and certification assumptions remain valid.

text: Passenger-to-freighter Yes No Yes Change to general configuration configuration conversion that affecting load paths, aeroelastic involves the introduction of a characteristics, aircraft-related systems, cargo door or an increase in etc. Change to design assumptions. floor loading of more than 20 per cent, or provision for carriage of passengers and freight together.

text: Replace reciprocating engines Yes No No Requires extensive changes to airframe with the same number of structure, addition of aircraft systems, turbo-propeller engines. and new AFM to address performance and flight characteristics.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 34 of 141 An agency of the European Union

text: Addition of a turbo-charger No No Yes Invalidates certification assumptions that changes the power due to changes to operating envelope envelope, operating range, or and limitations. limitations. Requires new AFM to address performance and flight characteristics.

text: The replacement of an engine No Yes Yes Invalidates certification assumptions. of higher rated power or Requires new AFM to address increase thrust would be performance and flight characteristics. considered significant if it Likely changes to primary structure. would invalidate the existing Requires extensive construction substantiation, or would reinvestigation. change the primary structure, aerodynamics, or operating envelope sufficiently to invalidate the assumptions of certification.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 35 of 141 An agency of the European Union

text: A change to the type of No Yes Yes Change to principles of construction and material, such as composites in design from conventional practices. place of metal, or one Likely change to design/certification composite fibre material assumptions. system with another (e.g. carbon for fiberglass), for primary structure would normally be assessed as a significant change.

text: A change involving appreciable No No Yes Certification assumptions invalidated. increase in design speeds VD, Requires new AFM to address VB, VMO, VC, or VA. performance and flight characteristics.

text: Installation of a short take-off No No Yes Certification assumptions invalidated. and landing (STOL) kit. Requires new AFM to address performance and flight characteristics.

text: A change to the rated power or No No Yes Certification assumptions invalidated. thrust could be a significant Requires new AFM to address change if the applicant is performance and flight characteristics. taking credit for increased design speeds per example 10 of this table.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 36 of 141 An agency of the European Union

text: Fuel state, such as compressed No No Yes Changes to design/certification gaseous fuels or fuel cells. This assumptions. Extensive alteration of fuel could completely alter the fuel storage and handling systems. storage and handling systems and possibly affect the aeroplane structure.

text: A change to the flight control No No Yes Changes to design and certification concept for an aircraft, e.g. to assumptions. Requires extensive fly-by-wire (FBW) and systems architecture and integration side-stick control, or a change reinvestigation. Requires new AFM. from hydraulic to electronically actuated flight controls, would in isolation normally be regarded as a significant change.

text: Change to aeroplane’s No No Yes This typically invalidates certification operating altitude, or cabin assumptions and the fundamental operating pressure greater approach used in decompression, than 10 per cent in maximum structural strength, and fatigue. cabin pressure differential. May require extensive airframe changes affecting load paths, fatigue evaluation, aeroelastic characteristics, etc. Invalidates design assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 37 of 141 An agency of the European Union

text: Addition of a cabin No Yes Yes Extensive airframe changes affecting pressurisation system. load paths, fatigue evaluation, aeroelastic characteristics, etc. Invalidates design assumptions.

text: Changes to types and number Yes No Yes Emergency egress certification of emergency exits or an specifications exceed those previously increase in maximum certified substantiated. Invalidates assumptions passenger capacity. of certification.

text: A change to the required No No Yes Extensive changes to avionics and number of flight crew that aircraft systems. Invalidates certification necessitates a complete flight assumptions. deck rearrangement, and/or an Requires new AFM. increase in pilot workload.

text: Expansion of an aircraft’s No No Yes* An expansion of operating capability is a operating envelope.* significant change (e.g. an increase in *Some changes may maximum altitude limitation, approval be deemed ‘not for flight in icing conditions, or an significant’ depending increase in airspeed limitations). on the extent of the expansion.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 38 of 141 An agency of the European Union

text: Replacement of an aviation No No Yes A major change to the aeroplane. The gasoline engine with an engine general configuration and principles of of approximately the same construction will usually remain valid; horsepower utilising, e.g. however, the assumptions for diesel, hybrid, or electrical certification are invalidated. power.

text: Comprehensive flight deck No No Yes Affects avionics and electrical systems upgrade, such as conversion integration and architecture concepts from entirely federated, and philosophies. independent This drives a reassessment of the electromechanical flight human–machine interface, flight-crew instruments to highly workload, and re-evaluation of the integrated and combined original design flight deck assumptions. electronic display systems with extensive use of software and/or complex electronic hardware.

text: Introduction of autoland. No No Yes Invalidates original design assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 39 of 141 An agency of the European Union

text: Conversion from a safe life No No Yes Where the airframe-established safe life design to a damage-tolerance- limits change to damage-tolerance based design. principles, then use of an inspection program in lieu of the safe life design limit invalidates the original assumptions used during certification.

text: Extensive structural airframe Yes No No Requires extensive changes to fuselage modification, such as a large structure, affects aircraft systems, and opening in the fuselage. requires a new AFM to address performance and flight characteristics.

text: Fuselage stretch or shortening Yes No Yes Cabin interior changes are related in the cabin or pressure vessel. changes since occupant safety considerations are impacted by a cabin length change. Even if a new cabin interior is not included in the productlevel change, the functional effect of the fuselage plug has implications on occupant safety (e.g. the dynamic environment in an emergency landing, emergency evacuation, etc.), and thus the cabin interior becomes an affected area.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 40 of 141 An agency of the European Union

text: Conversion from normal Yes No Yes Requires compliance with all commuter category to commuter regulatory standards. category aeroplane. In many cases, this change could be considered a substantial change to the type design. Therefore, a proposed change of this nature would be subject to EASA determination under 21.A.19.

text: Installation of a full authority No No Yes — digital engine control (FADEC) on an aeroplane that did not previously have a FADEC installed.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 41 of 141 An agency of the European Union

text: Is there a change to Is there a change to Have the assumptions the general the principles of used for certification Example Description of change Notes configuration? construction? been invalidated?

text: 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii)

text: Addition of wingtip 1. No No No A major change to the aeroplane. modifications (not winglets). Likely, the original general 1. configuration, principles of construction, and certification assumptions remain valid.

text: Installation of skis or wheel No No No Although a major change to the skis. aeroplane, likely the original general configuration, principles of construction, and certification assumptions remain valid.

text: Forward looking infrared (FLIR) No No No Additional flight or structural or surveillance camera evaluation may be necessary, but the installation. change does not alter basic aeroplane certification.

text: Litter, berth, and cargo tie No No No Not an aeroplane-level change. down device installation.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 42 of 141 An agency of the European Union

text: Increased tire size, including No No No Not an aeroplane-level change. tundra tires.

text: Replacement of one propeller No No No Although a major change to the type with another (irrespective aeroplane, likely the original general of increase in number of configuration, principles of blades). construction, and certification assumptions remain valid.

text: Addition of a turbo-charger No No No Not an aeroplane-level change. that does not change the power envelope, operating range, or limitations (e.g. a turbo-normalised engine, where the additional power is used to enhance high-altitude or hot-day performance).

text: Substitution of one method of No No No Not an aeroplane-level change. bonding for another (e.g. change to type of adhesive).

text: Substitution of one type of No No No Not an aeroplane-level change. metal for another.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 43 of 141 An agency of the European Union

text: Any change to construction or No No No Not an aeroplane-level change. fastening not involving primary structure.

text: A new fabric type for fabric- No No No Not an aeroplane-level change. skinned aircraft.

text: Increase in flap speed or No No No Although a major change to the undercarriage limit speed. aeroplane, likely the original general configuration, principles of construction, and certification assumptions remain valid.

text: Structural strength increases. No No No Although a major change to the aeroplane, likely the original general configuration, principles of construction, and certification assumptions remain valid.

text: Instrument flight rules (IFR) No No No Not an aeroplane-level change. upgrades involving installation of components (where the original certification does not indicate that the aeroplane is not suitable as an IFR platform, e.g. special handling concerns).

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 44 of 141 An agency of the European Union

text: Fuel tanks where fuel is No No No Not an aeroplane-level change. changed from gasoline to diesel fuel and tank support loads are small enough that an extrapolation from the previous analysis would be valid. Chemical compatibility would have to be substantiated.

text: Limited changes to a No No No Although a major change to the pressurisation system, e.g. aeroplane, likely the original general number of outflow valves, type configuration, principles of of controller, or size of construction, and certification pressurised compartment, but assumptions remain valid. the system must be re-substantiated if the original test data are invalidated.

text: Install a different exhaust No No No Not an aeroplane-level change. system.

text: Changes to engine cooling or No No No Not an aeroplane-level change. cowling.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 45 of 141 An agency of the European Union

text: Changing fuels of substantially No No No Although a major change to the the same type, such as AvGas aeroplane, likely the original general to AutoGas, AvGas (80/87) to configuration, principles of AvGas (100LL), ethanol to construction, and certification isopropyl alcohol, Jet B to Jet assumptions remain valid. A.

text: Fuels that specify different No No No Although a major change to the levels of ‘conventional’ fuel aeroplane, likely the original general additives that do not change configuration, principles of the primary fuel type. Different construction, and certification additive levels (controlled) of assumptions remain valid. MTBE, ETBE, ethanol, amines, etc., in AvGas would not be considered a significant change.

text: A change to the maximum No No No Although a major change to the take-off weight of less than aeroplane, likely the original general 5 per cent, unless assumptions configuration, principles of made in justification of the construction, and certification design are thereby invalidated. assumptions remain valid.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 46 of 141 An agency of the European Union

text: An additional aileron tab (e.g. No No No Although a major change to the on the other wing). aeroplane, likely the original general configuration, principles of construction, and certification assumptions remain valid.

text: Larger diameter flight control No No No Not an aeroplane-level change. cables with no change to routing, or other system design.

text: Autopilot installation (for IFR No No No Although a major change to the use, unless the original aeroplane, likely the original general certification indicates that the configuration, principles of aeroplane is not suitable as an construction, and certification IFR platform). assumptions remain valid.

text: Increased battery capacity or No No No Not an aeroplane-level change. relocate battery.

text: Replace generator with No No No Not an aeroplane-level change. alternator.

text: Additional lighting (e.g. No No No Not an aeroplane-level change. navigation lights, strobes).

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 47 of 141 An agency of the European Union

text: Higher capacity brake No No No Not an aeroplane-level change. assemblies.

text: Increase in fuel tank capacity. No No No Not an aeroplane-level change.

text: Addition of an oxygen system. No No No Not an aeroplane-level change.

text: Relocation of a galley. No No No Not an aeroplane-level change.

text: Passenger-to-freight (only) No No No Although a major change to the conversion with no change to aeroplane, likely the original general basic fuselage structure. configuration, principles of construction, and certification assumptions remain valid. Requires certification substantiation applicable to freighter certification specifications.

text: New cabin interior with no No No No — fuselage length change.

text: Installation of new seat belt or No No No Not an aeroplane-level change. shoulder harness.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 48 of 141 An agency of the European Union

text: A small increase in centre of No No No At aeroplane level, no change to gravity (CG) range. general configuration, principles of construction, and certification assumptions.

text: Auxiliary power unit (APU) No No No Although a major change to the installation that is not flight- aeroplane level, likely the original essential. general configuration, principles of construction, and certification assumptions remain valid. Requires certification substantiation applicable to APU installation certification specifications.

text: An alternative autopilot. No No No Not an aeroplane-level change.

text: Addition of Class B terrain No No No Not an aeroplane-level change. awareness and warning system (TAWS).

text: Extending an established life No No No This extension may be accomplished limit. by various methods, such as ongoing fatigue testing, service life evaluation, component level replacement, and inspections based on damagetolerance principles.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 49 of 141 An agency of the European Union

text: Flight deck replacement of No No No Not significant if the architecture highly integrated and concepts, design philosophies, combined electronic display human–machine interface, or flightsystems with other highly crew workload assumptions are not integrated and combined impacted. electronic display systems.

text: Interior cabin reconfigurations No No No — are generally considered not significant. This includes installation of in-flight entertainment (IFE), new seats, and rearrangement of furniture.

text: Modification to ice protection No No No Recertification required, but systems. certification basis should be evaluated for adequacy.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 50 of 141 An agency of the European Union

text: Example Description of change Notes

text: Change to the number or location of engines, e.g. four to two wing- Proposed change to design is so extensive that a substantially complete mounted engines or two wing-mounted to two body-mounted investigation of compliance with the applicable certification basis is engines. required. 2. Change from a high-wing to low-wing configuration. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 3. Change from an all-metal to all-composite aeroplane. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 4. Change of empennage configuration for larger aeroplanes (cruciform Proposed change to design is so extensive that a substantially complete vs ‘T’ or ‘V’ tail). investigation of compliance with the applicable certification basis is required. 5. Increase from subsonic to supersonic flight regime. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 51 of 141 An agency of the European Union

text: Reduction in the number of No No Yes Extensive changes to avionics and flight crew (in conjunction with aircraft systems. Impact to flight-crew flight deck update). workload and human factors, pilot type rating.

text: Modify an aeroplane to add Yes No Yes New aircraft operating envelope. certification for flight in icing Requires major new systems conditions by adding systems, installation and aircraft evaluation. such as ice detection and ice Operating envelope changed. protection.

text: Conversion — passenger or Yes No Yes Extensive airframe changes affecting combination load paths, aeroelastic characteristics, freighter/passenger to all- aircraft-related systems for fire freighter, including cargo door, protection, etc. Design assumptions redesign floor structure and 9g changed from passenger to freighter. net or rigid barrier.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 52 of 141 An agency of the European Union

text: Conversion from a cargo to Yes No Yes Completely new floor loading and passenger configuration. design. Redistribution of internal loads, change to cabin safety certification specifications, system changes.

text: Increase in cabin pressurisation No No Yes A change greater than 10 per cent in greater than 10 per cent. operational cabin pressure differential is a significant change since it requires extensive airframe changes affecting load paths, fatigue evaluation, or aeroelastic characteristics, invalidating the certification assumptions.

text: Addition of leading-edge slats. Yes No Yes The addition of leading-edge slats is significant since it requires extensive changes to wing structure, adds aircraft systems, and requires a new AFM to address performance and flight characteristics.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 53 of 141 An agency of the European Union

text: Extensive structural airframe Yes No No These types of structural modifications modification, such as are significant since they require installation of a large telescope extensive changes to fuselage with large opening in the structure, affect aircraft systems, and fuselage. require a new AFM to address performance and flight characteristics.

text: Changing the number of axles Yes No No This type of landing gear change with or number of landing gear an increase in gross weight is done in context with a product significant since it requires changes to change that involves changing aircraft structure, affects aircraft the aeroplane’s gross weight. systems, and requires AFM changes, which invalidate the certification assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 54 of 141 An agency of the European Union

text: Primary structure changes No Yes No Change to principles of construction from metallic material to and design from conventional composite material. practices.

text: An increase in design weight of No No Yes Design weight increases of more than more than 10 per cent. 10 per cent result in significant design load increase that invalidates the assumptions used for certification, requiring re-substantiation of aircraft structure, aircraft performance, and flying qualities and associated systems.

text: Installation of winglets, Yes No Yes Significant if it requires extensive modification of existing changes to wing structure or aircraft winglets, or other changes to systems, or if it requires a new AFM to wing tip design. address performance and flight characteristics. It may also affect the wing fuel tanks, including fuel tank lightning protection, fuel tank ignition source prevention, and fuel tank flammability exposure.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 55 of 141 An agency of the European Union

text: Changes to wing span, chord, Yes No Yes Significant if it requires extensive or sweep. changes to wing structure or aircraft systems, or if it requires a new AFM to address performance and flight characteristics. It may also affect the wing fuel tanks, including fuel tank lightning protection, fuel tank ignition source prevention, and fuel tank flammability exposure.

text: A change to the type or Yes No Yes — number of emergency exits or an increase in the maximum certified number of passengers.

text: A comprehensive avionics No No Yes This change refers to the avionics upgrade that changes a system that feeds the output to federated avionics system to a displays and not the displays highly integrated avionics themselves. system.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 56 of 141 An agency of the European Union

text: An avionics upgrade that No No Yes A change that includes touchscreen changes the method of input technology typically does not from the flight crew, which was invalidate the assumptions used for not contemplated during the certification. A change that original certification. incorporates voice-activated controls or other novel human–machine interface would likely invalidate the assumptions used for certification.

text: Change to primary flight No No Yes When the degree of change is so controls to FBW system. extensive that it affects basic aircraft systems integration and architecture (Some aeroplanes have some concepts and philosophies. This drives degree of FBW. Achieving full a complete reassessment of FBW may be a not significant flight-crew workload, handling change on some aeroplanes.) qualities, and performance evaluation, which are different from the original design assumptions.

text: Replace reciprocating with Yes No No Requires extensive changes to turbo-propeller engines. airframe structure, addition of aircraft systems, and new AFM to address performance and flight characteristics.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 57 of 141 An agency of the European Union

text: Maximum continuous or take- No No Yes A thrust or power increase of more off thrust or power increase of than 10 per cent is significant because more than 10 per cent or, for it does have a marked effect on turbofans, an increase of the aircraft performance and flying nacelle diameter. qualities, or requires re-substantiation of powerplant installation. An increase of the nacelle diameter as a result of an increase in the bypass ratio is significant because it results in airframe-level effects on aircraft performance and flying qualities. However, a small increase of the nacelle diameter would not have such an airframe-level effect and would not be considered a significant change.

text: Initial installation of an No No Yes Baseline aeroplane not designed for autoland system. autoland operation, potential flightcrew workload, and systems compatibility issues.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 58 of 141 An agency of the European Union

text: Installation of a new fuel tank, No No Yes Requires changes to airframe, systems, e.g. installation of an auxiliary and AFM. Results in performance fuel tank in a cargo bay or changes. These changes typically affect installation of an auxiliary fuel fuel tank lightning protection, fuel tank that converts a dry bay tank ignition source prevention, and into a fuel tank (such as a fuel tank flammability exposure. horizontal stabiliser tank).

text: Main deck cargo door Yes No No Redistribution of internal loads, installation. change to aeroelastic characteristics, system changes.

text: Expansion of an aircraft’s No No Yes* An expansion of operating capability is operating envelope.* a significant change (e.g. an increase in *Some changes may maximum altitude limitation, approval be deemed ‘not for flight in icing conditions, or an significant’ depending increase in airspeed limitations). on the extent of the expansion.

text: Changing the floor from Yes No Yes Completely new floor loading and passenger-carrying to cargo- design. Redistribution of internal carrying capability. loads, change to cabin safety certification specifications, system changes. If a cargo handling system is installed, it would be a related change.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 59 of 141 An agency of the European Union

text: Initial installation of an APU No No Yes Changes to emergency electrical essential for aircraft flight power certification specifications, operation. change to aircraft flight manual and operating characteristics.

text: Conversion from hydraulically No No Yes Assumptions of certification for actuated brakes to electrically aeroplane performance are changed. actuated brakes.

text: Installation of engine thrust Yes No Yes reversers.

text: Request for extended-range No No Yes An expansion of diversion capability operations (ETOPS) type design for ETOPS would normally be a approval for: (a) aeroplanes significant change. However, without an existing ETOPS type expanding the diversion capability for design approval, and which it was originally designed is (b) extension of an aeroplane’s generally not a significant change. In diversion time. this case, the assumptions used for certification of the basic product remain valid, and the results can be applied to cover the changed product with predictable effects or can be demonstrated without significant physical changes to the product.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 60 of 141 An agency of the European Union

text: Installation of an engine with a No No Yes A change from a mechanical control FADEC on an aeroplane that engine to a FADEC engine may be so did not previously have a extensive that it affects basic aircraft FADEC engine installed. systems integration and architecture concepts and philosophies. This drives a complete reassessment of flight-crew workload, handling qualities, and performance evaluation, which are different from the original design assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 61 of 141 An agency of the European Union

text: Alternate engine installation or 1.1 No No No It is not significant so long as there is hush kit at same position. less than a 10 per cent increase in 1. thrust or there is not a change to the principles of propulsion. A change to position to accommodate a different engine size could influence aeroplane performance and handling qualities and result in a significant change.

text: A small change to fuselage No No No For cruise performance reasons, length due to re-fairing the aft where such changes do not require body or radome. extensive structural, systems, aerodynamic, or AFM changes.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 62 of 141 An agency of the European Union

text: Re-fairing of wing tip caps (for No No No Does not require extensive structural, lights, fuel dump pipes) and AFM, or systems changes. addition of splitter plates to the trailing edge thickness of the cruise aerofoil.

text: Additional power used to No No No Usually no change to basic operating enhance high-altitude or hot- envelope. Existing certification data day performance. can be extrapolated. Could be significant product change if the additional power is provided by installation of a rocket motor or additional, on demand engine due to changes to certification assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 63 of 141 An agency of the European Union

text: Installation of an autopilot No N/A See notes It may be possible that the system. modification is adaptive in nature, with no change to original certification assumptions. However, in certain cases the installation of an autopilot may include extensive changes and design features that change both the general configuration and the assumptions for certification (i.e. installation of the autopilot may introduce a number of additional mechanical and electronic failure modes and change the hazard classification of given aircraft-level failures).

text: Change from assembled No No No Method of construction must be well primary structure to understood. monolithic or integrally machined structure.

text: Modification to ice protection No No No Recertification required, but systems. certification basis is adequate.

text: Brakes: design or material No No No Recertification required, but change, e.g. steel to carbon. certification basis is adequate.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 64 of 141 An agency of the European Union

text: Redesign floor structure. No No No By itself, not a significant product change. It is significant if part of a cargo conversion of a passenger aeroplane.

text: New cabin interior with no No No No A new cabin interior includes new fuselage length change. ceiling and sidewall panels, stowage, galleys, lavatories, and seats. Novel or unusual design features in the cabin interior may require special conditions. Many interior-related certification specifications are incorporated in operational rules. Even though the design approval holder may not be required to comply with these certification specifications, the operator may be required to comply.

text: A rearrangement of an interior No No No — (e.g. seats, galleys, lavatories, closets, etc.).

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 65 of 141 An agency of the European Union

text: Novel or unusual method of No No No The component change does not rise construction of a component. to the product level. Special conditions could be required if there are no existing certification specifications that adequately address these features.

text: Initial installation of a non- No No No A stand-alone initial APU installation essential APU. on an aeroplane originally designed to use ground- or airport-supplied electricity and air conditioning. In this case, the APU would be an option to be independent of airport power.

text: Increasing the life limit as No No No For example, a recently type-certified CS 25.571 fatigue testing aeroplane may undergo fatigue testing progresses for a recently type- as part of compliance with CS 25.571. certified aeroplane. In this case, the TC holder may specify an initial life limit in the airworthiness limitations section (ALS) and gradually increase that life limit as fatigue testing progresses. Such change to the ALS is considered not significant.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 66 of 141 An agency of the European Union

text: Extending limit of validity (LOV) No No No Extending an LOV without any other change to the aeroplane is not a significant change. However, if extending the LOV requires a physical design change to the aeroplane, the design change is evaluated to determine the level of significance of the design change.

text: Airframe life extension. No No No This does not include changes that involve changes to design loads, such as pressurisation or weight increases. Also, this does not include changing from safe life to damage tolerance.

text: Changes to the type or number No No No The new emergency egress does not of emergency exits by de- exceed that previously substantiated rating doors or deactivating because the certified number of doors with corresponding passengers is reduced. reduction in passenger capacity.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 67 of 141 An agency of the European Union

text: Request for ETOPS type design No No No A change to a product with an existing approval for a type design ETOPS type design approval without a change of a product with an change to diversion capability would existing ETOPS type design normally not be significant. approval. However, if the existing ETOPS type design approval was based on policy prior to the adoption of transport category ETOPS airworthiness standards, then there is not an adequate certification basis to evaluate the type design change for ETOPS. In this case, the change is still not significant, and the appropriate transport category ETOPS airworthiness standards would apply.

text: An avionics change from No No No Changing an electromechanical display federated electromechanical to an electronic display is not displays to federated considered significant. electronic displays.

text: An avionics change replacing No No No The assumptions used to certify a an integrated avionics system highly integrated avionics system with another integrated should be the same for another highly avionics system. integrated avionics system.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 68 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 69 of 141 An agency of the European Union

text: Example Description of change Notes

text: Change from the number and/or configuration of rotors Proposed change to design is so extensive that a substantially complete (e.g. main & tail rotor system to two main rotors). investigation of compliance with the applicable certification basis is required. 2. Change from an all-metal rotorcraft to all-composite rotorcraft. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 70 of 141 An agency of the European Union

text: Comprehensive flight deck 1. No No Yes Affects avionics and electrical systems upgrade, such as conversion integration and architecture concepts 1. from entirely federated, and philosophies. independent This drives a reassessment of the electromechanical flight human–machine interface, flight-crew instruments to highly workload, and re-evaluation of the integrated and combined original design flight deck electronic display systems with assumptions. extensive use of software and/or complex electronic hardware.

text: Certification for flight into No No Yes known icing conditions.

text: (Fixed) flying controls from No No Yes This drives a complete reassessment of mechanical to fly-by-wire. the rotorcraft controllability and flight control failure.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 71 of 141 An agency of the European Union

text: Addition of an engine; Yes Yes Yes — e.g. from single to twin or reduction of the number of engines; e.g. from twin to single.

text: A change of the rotor drive No Yes Yes — primary gearbox from a splash-type lubrication system to a pressurelubricated system due to an increase in horsepower of an engine or changing from a piston engine to turbine engine.

text: A fuselage or tail boom Yes No Yes — modification that changes the primary structure, aerodynamics, and operating envelope sufficiently to invalidate the certification assumptions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 72 of 141 An agency of the European Union

text: Application of an approved No Yes Yes — primary structure to a different approved model (e.g. installation on a former model of a main rotor that has been approved on a new model, and that results in increased performance).

text: Emergency medical service No No Yes Many EMS configurations will not be (EMS) configuration with classified as significant. Modifications primary structural changes made for EMS are typically internal, sufficient to invalidate the and the general external configuration certification assumptions. is normally not affected. These changes should not automatically be classified as significant. Note: Door addition or enlargement involving structural change would be significant.

text: Skid landing gear to wheel Yes No Yes — landing gear or wheel landing to skid.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 73 of 141 An agency of the European Union

text: Change of the number of Yes No Yes — rotor blades.

text: Change of tail anti-torque Yes Yes No — device (e.g. tail rotor, ducted fan, or other technology).

text: Passenger-configured Yes No Yes Depends on the firefighting helicopter to a firefighting- configuration. equipment-configured helicopter.

text: Passenger-configured Yes No Yes Depends on the agricultural helicopter to an agricultural- configuration. configured helicopter.

text: An initial Category A No No Yes — certification approval to an existing configuration.

text: IFR upgrades involving No No Yes Changes to architecture concepts, installation of upgraded design philosophies, components for new IFR human–machine interface, or configuration. flight-crew workload.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 74 of 141 An agency of the European Union

text: Human external cargo (HEC) No No Yes Must comply with the latest HEC certification approval. certification specifications in order to obtain operational approval. Assumptions used for certification are considered invalidated when this leads to a significant re-evaluation, for example, of fatigue, quick-release systems, HIRF, one-engine-inoperative (OEI) performance, and OEI procedures.

text: Reducing the number of No No Yes — pilots for IFR from two to one.

text: An avionics upgrade that No No Yes This change refers to the avionics changes a federated avionics system that feeds the output to system to a highly integrated displays and not the displays avionics system. themselves.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 75 of 141 An agency of the European Union

text: An avionics upgrade that No No Yes A change that includes touchscreen changes the method of input technology typically does not from the flight crew, which invalidate the assumptions used for was not contemplated during certification. the original certification. A change that incorporates voiceactivated controls or other novel human–machine interface would likely invalidate the assumptions used for certification.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 76 of 141 An agency of the European Union

text: Emergency floats. 1. No No No Must comply with the specific applicable certification specifications 1. for emergency floats. This installation, in itself, does not change the rotorcraft configuration, overall performance, or operational capability. Expanding an operating envelope (such as operating altitude and temperature) and mission profile (such as passenger-carrying operations to external-load operations, flight over water, or operations in snow conditions) are not by themselves so different that the original certification assumptions are no longer valid at the type-certifiedproduct level.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 77 of 141 An agency of the European Union

text: Forward looking infrared No No No Additional flight or structural (FLIR) or surveillance camera evaluation may be necessary but the installation. change does not alter the basic rotorcraft certification.

text: Helicopter terrain awareness No No No Certified under rotorcraft HTAWS warning system (HTAWS) for AMC guidance material and ETSOoperational credit. C194. Does not alter the basic rotorcraft configuration.

text: Health usage monitoring No No No Certified under rotorcraft HUMS GM system (HUMS) for guidance material. Does not alter the maintenance credit. basic rotorcraft configuration.

text: Expanded limitations with No No No Changes to an operating envelope minimal or no design changes, (such as operating altitude and following further temperature) and mission profile tests/justifications or different (such as passenger-carrying mix of limitations (CG limits, operations to external-load oil temperatures, altitude, operations, flight over water, or minimum/maximum weight, operations in snow conditions) that minimum/ maximum external are not so different that the original temperatures, speed, engine certification assumptions remain ratings). valid.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 78 of 141 An agency of the European Union

text: Change from a single-channel Change does not change the overall FADEC to a product configuration or the original dual-channel FADEC. certification assumptions.

text: Installation of a new engine No No No Refer to AMC 27 or AMC 29 for type, equivalent to the former guidance. Does not alter the basic one, leaving aircraft rotorcraft configuration, provided installation and limitations there is no additional capacity substantially unchanged. embedded in the new design.

text: Windscreen installation. No No No Does not change the rotorcraft overall product configuration.

text: Snow skis, ‘Bear Paws.’ No No No Must comply with specific certification specifications associated with the change. Expanding an operating envelope (such as operating altitude and temperature) and mission profile (such as passenger-carrying operations to external-load operations, flight over water, or operations in snow conditions) are not by themselves so different that the original certification assumptions are no longer valid at the type-certifiedproduct level.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 79 of 141 An agency of the European Union

text: External cargo hoist. No No No Must comply with the specific applicable certification specifications for external loads. This installation, in itself, does not change the rotorcraft configuration, overall performance, or operational capability. Expanding an operating envelope (such as operating altitude and temperature) and mission profile (such as passenger-carrying operations to external-load operations (excluding HEC), flight over water, or operations in snow conditions) are not by themselves so different that the original certification assumptions are no longer valid at the type-certified-product level.

text: IFR upgrades involving No No No Not a rotorcraft-level change. installation of upgraded components to replace existing components.

text: An avionics change from No No No Changing an electromechanical federated electromechanical display to an electronic display on a displays to federated single avionics display is not electronic displays. considered significant.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 80 of 141 An agency of the European Union

text: Flight deck replacement of No No No Not significant if the architecture highly integrated and concepts, design philosophies, combined electronic display human–machine interface, flight-crew systems with other highly workload design and flight-deck integrated and combined assumptions are not impacted. electronic display systems.

text: IFR upgrades involving No No No No changes to architecture concepts, installation of upgraded design philosophies, human–machine components for new IFR interface, or flight-crew workload. configuration.

text: Flight deck replacement or No No No — upgrade of avionics systems in non-Appendix ‘B’ (IFR) or non-CAT ‘A’ rotorcraft that can enhance safety or pilot awareness.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 81 of 141 An agency of the European Union

text: Modifications to No No No — non-crashworthy fuel systems intended to improve its crashworthiness.

text: Changing the hydraulic system No No No — from one similar type of fluid to another, e.g. a fluid change from a highly flammable mineral oil-based fluid (MIL-H-5606) to a less flammable synthetic hydrocarbon-based fluid (MIL-PRF-87257)

text: An ETSO C-127 dynamic seat No No No installed in a helicopter with an existing certification basis prior to addition of CS 29.562,

text: Emergency landing dynamic

text: conditions.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 82 of 141 An agency of the European Union

text: Example Description of Change Notes

text: Traditional turbofan to geared-fan engine. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 2. Low-bypass ratio engine to high-bypass ratio Proposed change to design is so extensive that a substantially complete investigation of engine with an increased inlet area. compliance with the applicable certification basis is required. 3. Turbojet to turbofan. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 4. Turboshaft to turbo-propeller. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 5. Conventional ducted fan to unducted fan. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required. 6. Turbine engine for subsonic operation to Proposed change to design is so extensive that a substantially complete investigation of afterburning engine for supersonic operation. compliance with the applicable certification basis is required.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 83 of 141 An agency of the European Union

text: Increase/decrease in the 1. Yes No Yes Change is associated with other number of compressor/turbine changes that would affect the 1. stages with resultant change to rating of the engine and the engine approved operational dynamic behaviour, such as limitations. backbone bending, torque spike effects on rotors and casing, surge and stall characteristics, etc.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 84 of 141 An agency of the European Union

text: New design fan blade and fan Yes No Yes Change is associated with other hub, or a bladed fan disk to a changes to the engine blisk, or a fan diameter change, thrust/power, ratings, and that could not be retrofitted. operating limitations; engine dynamic behaviour in terms of backbone bending, torque spike effects on casing, foreign object ingestion behaviour (birds, hail, rain, ice slab); blade-out test and containment; induction system icing capabilities; and burst model protection for the aircraft. If there is a diameter change, installation will be also affected.

text: Hydromechanical control to Yes No No Change to engine control FADEC/electronic engine configuration. control (EEC) without Not interchangeable. hydromechanical backup. Likely fundamental change to engine operation.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 85 of 141 An agency of the European Union

text: A change to the containment No Yes Yes Change to methods of construction case from hard-wall to that have affected inherent composite construction or vice strength, backbone bending, bladeversa that could not be to-case clearance retention, retrofitted without additional containment wave effect on major changes to the engine or installation, effect on burst model, restricting the initial limitations torque spike effects. or restrictions in the initial installation manual.

text: A change to the gas generator No No Yes Change is associated with other (core, turbine/compressor/ changes that would affect engine combustor) in conjunction with thrust/power and operating changes to approved operating limitations, and have affected the limitations. dynamic behaviour of the engine, foreign object ingestion behaviour (birds, hail storm, rain, ice shed), induction system icing capabilities. Assumptions used for certification may no longer be valid.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 86 of 141 An agency of the European Union

text: A change from traditional No Yes Yes Change to principles of metal to composite materials construction and design. on an assembly or structure that provides a load path for the engine affecting the engine dynamic behaviour and/or the engine inherent strength.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 87 of 141 An agency of the European Union

text: Convert from mechanical to Yes Yes No Change to engine configuration: electronic control system. installation interface of engine changed. Changes to principles of construction: digital controllers and sensors require new construction techniques and environmental testing.

text: Add turbocharger that Yes No Yes Change to general configuration: increases performance and installation interface of engine changes to overall product. changed (exhaust system). Certification assumptions invalidated: change to operating envelope and performance.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 88 of 141 An agency of the European Union

text: Convert from air-cooled Yes No Yes Change to general configuration: cylinders to liquid-cooled installation interface of engine cylinders. changed (cooling lines from radiator, change to cooling baffles). Certification assumptions invalidated: change to operating envelope and engine temperature certification specifications.

text: A change from traditional No Yes Yes Change to principles of construction metal to composite materials and design. on an assembly or structure that provides a load path for the engine affecting the engine dynamic behaviour and/or the engine inherent strength.

text: Convert from spark-ignition to Yes No Yes Change to general configuration: compression-ignition. installation interface of engine changed (no mixture lever). Certification assumptions invalidated: change to operating envelope and performance.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 89 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 90 of 141 An agency of the European Union

text: Change to the material from 1. No No No No change to performance. one type of metal to another Assumptions are still valid. 1. type of metal of a compressor drum.

text: Increase/decrease in the No No No No change to performance. number of compressor/turbine Assumptions are still valid. stages without resultant change to operational performance envelope.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 91 of 141 An agency of the European Union

text: Hardware design changes to No No No No change to configuration. the FADEC/EEC, the Retrofitable. introduction of which does not change the function of the Assumptions used for certification system. are still valid. Possible changes to principles of construction are insignificant.

text: Software changes. No No No —

text: Rub-strip design changes. No No No Component-level change.

text: A new combustor that does No No No Component-level change. not change the approved limitations or dynamic behaviour.* (*Exclude life limits.)

text: Bearing changes. No No No Component-level change.

text: New blade designs with similar No No No Component-level change. material that can be retrofitted.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 92 of 141 An agency of the European Union

text: Fan blade redesign that can be No No No Component-level change. retrofitted.

text: Oil tank redesign. No No No Component-level change.

text: Change from one No No No Component-level change. hydromechanical control to another hydromechanical control.

text: Change to limits on life-limited No No No Extending or reducing the life limits. components supported by data For example, extending life limits that became available after based on credits from service certification. experience or new fatigue data.

text: Changes to limits on exhaust No No No gas temperature.

text: Changes to the Airworthiness No No No — Limitations section with no configuration changes.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 93 of 141 An agency of the European Union

text: Bump ratings within the No No No — product’s physical capabilities that may be enhanced with gas path changes, such as blade re-staggering, cooling hole patterns, blade coating changes, etc.

text: New or redesigned cylinder No No No — head, valves, or pistons.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 94 of 141 An agency of the European Union

text: Changes to crankshaft. No No No Component-level change.

text: Changes to crankcase. No No No Component-level change.

text: Changes to carburettor. No No No Component-level change.

text: Changes to mechanical fuel No No No injection system.

text: Changes to mechanical fuel No No No Component-level change. injection pump.

text: Engine model change to No No No — accommodate new aircraft installation. No change to principles of operation of major subsystems; no significant expansion in power or operating envelopes or in limitations.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 95 of 141 An agency of the European Union

text: A simple mechanical change, No No No — or a change that does not affect the basic principles of operation. For example, change from dual magneto to two single magnetos on a model.

text: Subsystem change produces no No No No — changes to base engine input parameters, and previous analysis can be reliably extended. For example, a change to turbocharger where induction system inlet conditions remain unchanged, or if changed, the effects can be reliably extrapolated.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 96 of 141 An agency of the European Union

text: Change to material of No No No Component-level change. secondary structure or not highly loaded component. For example, a change from metal to composite material in a nonhighly loaded component, such as an oil pan that is not used as a mount pad.

text: Change to material that retains No No No Component-level change. the physical properties and mechanics of load transfer. For example, a change to trace elements in a metal casting for ease of pouring or to update to a newer or more readily available alloy with similar mechanical properties.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 97 of 141 An agency of the European Union

text: Example Description of change Notes

text: Change to the number of blades. 1. Proposed change to design is so extensive that a substantially complete investigation of compliance with the applicable type- 1. certification basis is required.

text: Principle of pitch change, such 1. Yes Yes Yes Requires extensive modification of as a change from single acting the pitch change system with the 1. to dual acting. introduction of backup systems. The inherent control system requires re-evaluation.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 98 of 141 An agency of the European Union

text: Introduction of a different Yes Yes No Requires extensive modification of principle of blade retention, the propeller hub and blade such as a single row to a dual structure. row bearing. The inherent strength requires reevaluation.

text: A hub configuration change, Yes Yes No Requires extensive modification of such as a split hub to a one- the propeller hub structure. piece hub. The inherent strength requires reevaluation.

text: Changing the method of Yes Yes No Requires extensive modification of mounting the propeller to the the propeller hub structure. engine, such as a spline to a The inherent strength requires flange mount. re-evaluation.

text: Change to hub material from Yes Yes No Requires extensive modification of steel to aluminium. the propeller hub structure and change to method of blade retention.

text: The inherent strength requires re-evaluation.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 99 of 141 An agency of the European Union

text: Change to blade material from Yes Yes Yes Requires extensive modification of metal to composite. the propeller blade structure and change to method of blade retention. Composite construction methods required.

text: Change from hydromechanical Yes Yes Yes Electronic manufacturing and design to electronic control. methods required. Assumptions used for certification are no longer valid or not addressed in the original certification, i.e. HIRF and lightning protection, fault tolerance, software certification, and other aspects.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 100 of 141 An agency of the European Union

text: Change to the material of a No No No Component-level change. blade bearing. 2. Change to a component in the No No No Component-level change. control system. 3. Change to a propeller de-icer No No No Component-level change. boot. 4. Changes to the operational No No No Propeller’s operating characteristics design envelope, such as and inherent strength require increase in power. re-evaluation. 5. Change to the intended usage, No No No Propeller’s operating characteristics such as normal to acrobatic and inherent strength require category. re-evaluation.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 101 of 141 An agency of the European Union

text: APPENDIX B. APPLICATION CHARTS FOR CHANGED PRODUCT RULE

text: Substantial Significant Not Significant

text: (21.A.19) (21.A.101(a) and (b)) (21.A.101)(b)(1))

text: Substantially Affected area Unaffected area Affected area Unaffected area

text: changed product (Changed and/or affected areas) (Changed and/or affected No new No new areas) Compliance with all New demonstration of compliance is required demonstration of demonstration latest CSs required for compliance is New demonstration of of compliance is Previously approved type design and compliance data may be allowed if product certification. required. compliance is required. required. valid for the changed product. Previously approved Unaffected area The applicant may propose a Unaffected area type design and Compliance with the latest amendment No material continues to certification basis using an continues to compliance data may materially contributes to safety contribution to safety comply with the earlier amendment but not comply with the be allowed if valid for existing earlier than in the existing TC existing Practical Impractical The applicant may the changed product. certification basis. certification propose a certification basis. basis. — The applicant may propose Previously approved type basis using earlier CS(s), a certification basis using but not earlier than the design and compliance data earlier CS(s), but not earlier may be allowed if valid for the existing TC basis. than the existing TC basis. changed product.

text: Certification Basis Proposed by the Applicant

text: New certification basis using latest CSs. CSs at earlier amendments with supporting Existing Existing certification basis Existing rationale. certification including ‘elects to comply’. certification basis. basis.

text: EASA Resultant Type-Certification Basis

text: New certification basis using the latest New certification basis using the CSs at earlier Existing Existing certification basis (if Existing CSs, and special conditions if required. approved amendments, and special conditions if certification adequate); if not, first certification required. basis. appropriate later amendment(s) basis. and/or special conditions including ‘elects to comply’.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 102 of 141

text: An agency of the European Union

text: Affected area Unaffected area

text: (Changed areas and/or unchanged but affected) No new demonstration of compliance is required. New demonstration of compliance is required. Unaffected area continues to be Previously approved type design and compliance data may be allowed if valid for the changed product. compliant with the existing TC basis.

text: Type-Certification Basis Proposed by the Applicant

text: The existing TC basis, including ‘elects to comply’. The existing TC basis.

text: Found by EASA to be ‘significant in an area’. Not ‘significant in an area’.

text: Compliance with a later amendment materially contributes to No material contribution to safety. safety.

text: Practical Impractical

text: EASA Resultant Type-Certification Basis

text: The latest amendment The existing TC basis. The existing TC basis. designated by EASA including If inadequate, the first appropriate later amendment. special conditions and including If not appropriate, add special conditions, including ‘elects to comply’. ‘elects to comply’.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 103 of 141

text: An agency of the European Union

text: APPENDIX C. A METHOD TO DETERMINE THE CHANGED AND AFFECTED AREAS

text: Determine the changed and affected areas and applicable certification specifications

text: Sort change and affected areas: Physical and Functional

text: Functional Change: Physical Change: Make chart of Make chart to list functional change certification with certification specifications specifications

text: Combine lists of certification specifications

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 104 of 141 An agency of the European Union

text: Applicable Certification Amendment of Existing Amendment on Physical Change Specifications* Certification Basis Application Date

text: Structural change to slat 25.xxx 25-aaa 25-ddd actuator 25.yyy 25-bbb 25-eee 25.zzz 25-ccc 25-fff * These would be certification specifications related to structural aspects only.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 105 of 141 An agency of the European Union

text: Description Effects Affected Areas of Change

text: Installation of winglet Increased loads in wing structure Wing spars Wing skins Effect 2* Area 1 Area 2 Effect 3* Area 3 * There may be other effects as well.

text: Applicable Certification Amendment of Existing Amendment on Impacted Area Specifications* Certification Basis Application Date

text: Wing spar 25.xxx 25-aaa 25-ddd 25.yyy 25-bbb 25-eee 25.zzz 25-ccc 25-fff * These would be structural certification specifications only. There could be other certification specifications applicable to the wing box. But since the effect is structural, then only the structural certification specifications are applicable.

text: 25.xxx* 25-aaa 25-ddd  Wing spar 25.yyy* 25-bbb 25-eee  Leading-edge actuator 25.zzz* 25-ccc 25-fff  Wing loads

text: * These represent structural certification specifications.

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 107 of 141 An agency of the European Union

text: APPENDIX D. OTHER GUIDANCE FOR AFFECTED AREAS

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 108 of 141 An agency of the European Union

text: APPENDIX E. PROCEDURE FOR EVALUATING MATERIAL CONTRIBUTION TO SAFETY OR IMPRACTICALITY OF APPLYING LATEST CSs

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 109 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: Safety benefit of the certification standard

text: Resources to implement the certification standard

text: Potential safety enhancements

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 110 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 111 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 112 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 113 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 115 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 116 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 118 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 119 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 120 of 141 An agency of the European Union

text: TO A CHANGED PRODUCT

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 121 of 141 An agency of the European Union

text: APPENDIX F. THE USE OF SERVICE EXPERIENCE IN THE EXCEPTION PROCESS

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 122 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 123 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 124 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 125 of 141 An agency of the European Union

text: APPENDIX G. CHANGED PRODUCT RULE (CPR) DECISION RECORD

text: TC/STC No: Click here to enter text. Project Number: Click here to enter text. Step 1: Identify the proposed type design The proposed type design changes are identified here or in the following document(s): changes to the aeronautical product. Click here to enter text. (See paragraph 3.2 of GM 21.A.101) Note: The CRI process is used to track/document the decisions at Step 2 and Steps 5 through 8 as required. New Type Certificate: Proceed to point 21.A.19. Point 21.A.101 does not apply. Step 2: Is the proposed type design ☐ Yes A Certification Review Item CRI A-01 will be used to establish and document the change substantial? certification basis. (See paragraph 3.3 of GM 21.A.101) ☐ No Proceed to Step 3. Step 3: Will you use the latest standards? ☐ Yes Latest Standards: Propose a certification basis using the CSs in effect at the date (See paragraph 3.4 of GM 21.A.101) of application. Proceed to Step 8. ☐ No Proceed to Step 4. Step 4: Arrange changes into related and Note: For multiple groupings, continuation of this process should be split into separate unrelated groups. decision records. Groupings may be rationalised and recorded in separate documents: (See paragraph 3.5 of GM 21.A.101) Click here to enter text. Step 5: Is each related or unrelated group ☐ Yes Proceed to Step 6. a significant change? (See paragraph 3.6 of GM 21.A.101) ☐ No Earlier Standards: Propose a certification basis using the CSs in effect before the date of application but not earlier than the existing certification basis. Certification basis to be defined and documented as indicated (below).

text: Proceed to Step 8.

text: Step 6: Prepare your Certification Basis The Affected Area(s) is (are) detailed here or in the following Certification Basis List document List. (See paragraph 3.9 of GM 21.A.101) number(s): Click here to enter text.

text: Affected Areas:

text: Process and propose each applicable certification specification individually. Proceed to Step 7. Not Affected Areas: Existing Standards: You may continue using the existing certification basis. Step 7: Do the latest standards contribute ☐ Yes Latest Standards: Propose a certification basis using the CSs in effect on the date materially to the level of safety and are of application. they practical? ☐ No Earlier Standards: You may propose a certification basis using the CSs in effect (See paragraph 3.10 of GM 21.A.101) before the date of application but not earlier than the existing certification basis. Certification basis defined or documented as indicated below. ☐ Continuation Sheet(s) Attached Note: Several CSs may apply to each affected area, and the assessment may differ from specifications to specifications. Indicate ‘Yes’ if compliance with any latest standard(s) is required. Indicate ‘No’ only if earlier standard(s) is (are) proposed. Note: You may submit a proposal for the decision in Step 7; however, EASA will make the final certification basis determination. Step 8: Ensure the proposed certification If you deem that the certification basis is adequate, submit the proposed certification basis to basis is adequate. EASA. (See paragraph 3.11 of GM 21.A.101) If not, consult EASA. CRI A-01 may be needed to document the certification basis. Certification Basis: The certification basis is detailed here or in the following document(s): Click here to enter text. Based on the information provided above, I am proposing the certification basis with the following classification for the type design change. (check one) ☐ Significant, pursuant to point 21.A.101. ☐ Not significant, pursuant to point 21.A.101.

text: Click here to enter text. Click here to enter text. Printed Name/Title Signature Date

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 126 of 141

text: An agency of the European Union

text: APPENDIX H. EXAMPLES OF DOCUMENTING THE PROPOSED CERTIFICATION BASIS LIST

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 127 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 128 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 129 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 131 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 133 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 134 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 135 of 141

text: An agency of the European Union

text: APPENDIX I. RELATED DOCUMENTS

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 136 of 141 An agency of the European Union

text: APPENDIX J. DEFINITIONS AND TERMINOLOGY

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 137 of 141 An agency of the European Union

text: APPENDIX J. DEFINITIONS AND TERMINOLOGY

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 138 of 141 An agency of the European Union

text: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 141 of 141 An agency of the European Union

identifier: AMC & GM to Part 21 — Issue 2, Amendment 7

amnesord: Part 21 - Airworthiness and Environmental Certification

beslut: ED Decision 2017/024/R

publisher: Europeiska unionens byrå för luftfartssäkerhet

sprak: en

title: AMC & GM to Part 21 — Issue 2, Amendment 7

serie: amc-gm

text: Annex to ED Decision 2017/024/R

type: stycke

text: Annex I to ED Decision 2017/024/R

text: ‘AMC/GM to Part-21 — Issue 2, Amendment 7’

text: The Annex to ED Decision 2012/020/R of the Executive Director of the Agency of 30 October 2012 is amended as follows: The text of the amendment is arranged to show deleted text, new or amended text as shown below: — deleted text is struck through; — new or amended text is highlighted in grey; — an ellipsis ‘(…)’ indicates that the rest of the text is unchanged.

text: 1. GM 21.A.101 is replaced by the following:

text: GM 21.A.101 Establishing the certification basis of changed aeronautical products

text: Foreword

text: This guidance material (GM) provides guidance for the application of the ‘Changed Product Rule (CPR)’, pursuant to point 21.A.101, Designation of the applicable certification specifications and environmental protection requirements, and 21.A.19, Changes requiring a new type certificate, for changes made to type-certified aeronautical products.

text: 1. INTRODUCTION

type: rubrik

text: 1.1. Purpose.

text: This GM provides guidance for establishing the certification basis for changed aeronautical products pursuant to point 21.A.101, Designation of the applicable certification specifications and environmental protection requirements. The guidance is also intended to help an applicant and approved design organisations determine whether it will be necessary to apply for a new type certificate (TC) under point 21.A.19, Changes requiring a new type certificate. The guidance describes the process for establishing the certification basis for a change to a TC, for a supplemental type certificate (STC), or for a change to an STC, detailing the requirements (evaluations, classifications, and decisions) throughout the process.

text: 1.2. Applicability.

text: 1.2.1 This GM is for an applicant applying for changes to TCs under Subpart D, for STCs, or changes to STCs under Subpart E, or for changes to European Technical Standard Order Authorisations (ETSOAs) for auxiliary power units (APUs) under Subpart O. This GM is also for approved design organisations classifying changes and approving minor changes under their 21.A.263(c)(1) and (2) privileges.

text: 1.2.2 This GM applies to major changes under point 21.A.101 for aeronautical products certified under Part 21, and the certification specifications (CSs) applicable to the changed product (CS-23, CS-25, CS-27, CS-29, CS-MMEL, CS-FCD, CS-CCD, etc.). References to ‘change’ include the change and areas affected by the change pursuant to point 21.A.101.

text: 1.2.3 Minor changes are within the scope of 21.A.101 and this GM but are automatically considered not significant under the ‘does not contribute materially to the level of safety’ provision of point 21.A.101(b).

text: 1.2.4 This GM also applies to changes to restricted type-certificates.

text: 1.2.5 The term ‘aeronautical product’, or ‘product’, means a type-certified aircraft, aircraft engine, or propeller and, for the purpose of this GM, an ETSOA’d APU.

text: 1.2.6 This GM primarily provides guidance for the designation of applicable airworthiness certification specifications and other airworthiness standards for the type-certification basis for the changed product. However, portions of this GM, as specified in GM No 1 to 21.A.101(g), can be applied by analogy to establish the operational suitability data (OSD) certification basis for the changed product. This GM is not intended to be used to determine the applicable environmental protection requirements (aircraft noise, fuel venting, and exhaust emission requirements) for changed products.

text: 1.2.7 This GM is not mandatory and is not an EU regulation. This GM describes an acceptable means, but not the only means, to comply with point 21.A.101. However, an applicant who uses the means described in this GM must follow it entirely.

text: 1.3. Reserved.

text: 1.4. GM Content

text: This GM contains 5 chapters and 10 appendices.

text: 1.4.1 This chapter clarifies the purpose of this GM, describes its content, specifies the intended audience affected by this GM, clarifies which changes are within the scope of this GM, and references the definitions and terminology used in this GM.

text: 1.4.2 Chapter 2 provides a general overview of points 21.A.101 and 21.A.19, clarifies the main principles and safety objectives, and directs an applicant to the applicable guidance contained in subsequent chapters of this GM.

text: 1.4.3 Chapter 3 contains guidance for implementation of point 21.A.101(b) to establish the certification basis for changed aeronautical products. It describes in detail the various steps for developing the certification basis, a process that applies to all changes to aeronautical products. Chapter 3 also addresses point 21.A.19 considerations for identifying the conditions under which an applicant for a change is required to submit an application for a new TC, and it provides guidance regarding the stage of the process at which this assessment is performed.

text: 1.4.4 Chapter 4 provides guidance about products excepted from the requirement of point 21.A.101(a).

text: 1.4.5 Chapter 5 contains considerations for:

text: — Design-related operating requirements, — Defining a baseline product, — Predecessor standards, — Using special conditions under point 21.A.101(d), — The effective period of application for a change to a TC under point 21.A.101(e), — Documenting revisions to the TC basis, — Incorporating STCs into the type design, — Removing changes, — Determining a certification basis after removing an approved change, and — Sequential changes. 1.4.6 Appendix A contains examples of typical type design changes for small aeroplanes, large aeroplanes, rotorcraft, engines, and propellers. The European Aviation Safety Agency (EASA) has categorised these examples into individual tables according to the classifications of design change: ‘substantial’, ‘significant’, and ‘not significant.’ 1.4.7 Appendix B contains application charts for applying the point 21.A.101 process, including the excepted process. 1.4.8 Appendix C contains one method for determining the changed and affected areas of a product. 1.4.9 Appendix D contains additional guidance on affected areas not discussed in other parts of this GM. 1.4.10 Appendix E provides detailed guidance with examples for evaluating the ‘impracticality’ exception in the rule. 1.4.11 Appendix F provides guidance with examples on the use of relevant service experience in the certification process as one way to demonstrate that a later amendment may not contribute materially to the level of safety, allowing the use of earlier certification specifications. 1.4.12 Appendix G provides an example CPR decision record. 1.4.13 Appendix H provides examples of documenting a proposed certification basis list. 1.4.14 Appendix I lists the Part 21 points related to this GM. 1.4.15 Appendix J lists the definitions and terminology applicable for application of the rule.

text: 1.5. Terms Used in this GM.

text: 1.5.1 The following terms are used interchangeably and have the same meaning: ‘specifications’, ‘standards’, ‘certification specifications’ and ‘certification standards’. They refer to the elements of the type-certification basis for airworthiness or OSD certification basis.

text: 1.5.2 The term ‘certification basis’ refers to the type-certification basis for airworthiness provided for in point 21.A.17A and the operational suitability data (OSD) certification basis provided for in point 21.A.17B. For more terms, consult Appendix J.

text: 2. OVERVIEW OF POINTS 21.A.19 AND 21.A.101

text: 2.1. Point 21.A.19.

text: 2.1.1 Point 21.A.19 requires an applicant to apply for a new TC for a changed product if EASA finds that the change to design, power, thrust, or weight is so extensive that a substantially complete investigation of compliance with the applicable type-certification basis is required.

text: 2.1.2 Changes that require a substantial re-evaluation of the product’s compliance findings are referred to as ‘substantial changes.’ For guidance, see paragraph 3.3 in Chapter 3 of this GM. Appendix A of this GM provides examples of changes that will require a new TC.

text: 2.1.3 If EASA determines through point 21.A.19 that a proposed change does not require a new TC, see point 21.A.101 for the applicable requirements to develop the certification basis for the proposed change. For guidance, see Chapter 3 and the examples in appendix A of this GM.

text: 2.2. Point 21.A.101.

text: 2.2.1 Point 21.A.101(a). Point 21.A.101(a) requires a change to a TC and the area affected by the change to comply with the certification specifications that are applicable to the changed product and that are in effect at the date of application for the change (i.e. the latest certification standards in effect at the time of application), unless the change meets the criteria for the exceptions identified in point 21.A.101(b) or (c), or unless an applicant chooses to comply with the certification specifications of later effective amendments*. The intent of point 21.A.101 is to enhance safety by incorporating the latest requirements into the certification basis for the changed product to the greatest extent practicable. * NOTE: Certification specifications amended after the date of application and during the time period of the certification of the change.

text: 2.2.2 Point 21.A.101(b).

text: Point 21.A.101(b) pertains to when an applicant may show that a changed product complies with an earlier amendment of a certification specification, provided that the earlier amendment is considered adequate and meets the criteria in point 21.A.101(b)(1), (2), or (3). When changes involve features or characteristics that are novel and unusual as compared to the airworthiness standard at the proposed amendment, more recent airworthiness standards and/or special conditions will be applied for these features.

text: An applicant is considered to comply with the earlier amendment of the certification specifications consistent with point 21.A.101(b), when:

text: (a) a change is not significant (see point 21.A.101(b)(1));

text: (b) an area, system, part or appliance is not affected by the change (see point 21.A.101(b)(2));

text: (c) compliance with a later amendment for a significant change does not contribute materially to the level of safety (see point 21.A.101(b)(3)); or

text: (d) compliance with the latest amendment would be impractical (see point 21.A.101(b)(3)).

text: Earlier amendments may not precede the amendment level of the identified baseline product’s certification basis.

text: Points 21.A.101(b)(1)(i) and (ii) pertain to changes that meet the automatic criteria where the change is significant.

text: 2.2.3 Point 21.A.101(c). Point 21.A.101(c) provides an exception from the requirements of point 21.A.101(a) for a change to certain aircraft with less than the specified maximum weight. An applicant who applies for a change to an aircraft (other than rotorcraft) of 2 722 kg (6 000 lb) or less maximum weight, or to a non-turbine-powered rotorcraft of 1 361 kg (3 000 lb) or less maximum weight, can show that the changed product complies with the standards incorporated by reference in the type certificate. An applicant can also elect to comply or may be required to comply with the later standards. See paragraph 4.1 of this GM for specific guidance on this provision.

text: 2.2.4 Point 21.A.101(d). Point 21.A.101(d) provides for the use of special conditions, under 21.A.16B, when the proposed certification basis and any later certification specifications do not provide adequate standards to the proposed change because of a novel or unusual design feature.

text: 2.2.5 Point 21.A.101(e). Point 21.A.101(e) prescribes the effective period that an application will remain valid for a change.

text: 2.2.6 Point 21.A.101(f). Point 21.A.101(f) requires that if an applicant chooses (elects) to comply with a certification specification of an amendment to the certification specifications that is effective after the filing of the application for a change to a TC, the applicant shall also comply with any other certification specification that EASA finds is directly related. The certification specifications which are directly related must be, for the purpose of compliance demonstration, considered together at the same amendment level to be consistent.

text: 2.2.7 Point 21.A.101(g). Point 21.A.101(g) pertains to designation of the applicable OSD certification basis when the application for a change to a type certificate for an aircraft includes, or is supplemented after the initial application to include, changes to the OSD. It implies that the same requirements of paragraphs (a), (b), (c), (d) and (f) applicable to the establishment of the airworthiness typecertification basis also apply to the establishment of the OSD certification basis. For specific guidance, see GM No 1 to 21.A.101(g).

text: 3. PROCESS FOR ESTABLISHING THE CERTIFICATION BASIS FOR CHANGED PRODUCTS

text: 3.1. Overview.

text: 3.1.1 The applicant and EASA both have responsibilities under point 21.A.101(a) and (b). As an applicant for the certification of a change, the applicant must demonstrate that the change and areas affected by the change comply with the latest applicable certification specifications unless the applicant proposes exception(s) under point 21.A.101(b). An applicant proposing exception(s) should make a preliminary classification whether the change is ‘significant’ or ‘not significant’, and propose an appropriate certification basis. EASA is responsible for determining whether the applicant’s classification of the change, and proposal for the certification basis, are consistent with the applicable rules and their interpretation. The EASA determination does not depend on whether the TC holder or applicant for an STC is originating the change. The certification basis can vary depending on the magnitude and scope of the change. The steps below present a streamlined approach for making this determination.

text: 3.1.2 The tables in appendix A of this GM are examples of classifications of typical type design changes. See paragraph 3.6.3 of this chapter for instructions on how to use those tables.

text: 3.1.3 If a proposed change is not in the examples provided in appendix A, the applicant may use the following steps in conjunction with the flow chart in Figure 3-1 of this GM to develop the appropriate certification basis for the change. For clarification, the change discussed in the flow chart also includes areas affected by the change. See paragraph 3.9.1 of this GM for guidance about affected areas.

text: Figure 3-1. Developing a Proposed Certification Basis for a Changed Product Pursuant to point 21.A.101

text: 3.2. Step 1. Identify the proposed changes to an aeronautical product.

text: — Identify the type design being changed (the baseline product). — Identify the proposed change. — Use high-level descriptors.

text: 3.2.1 Identify the type design being changed (the baseline product). Prior to describing the proposed change(s), it is important to clearly identify the specific type design configuration being changed. Note: For additional guidance on the baseline product, see paragraph 5.3 of this GM.

text: 3.2.2 Identify the proposed change.

text: 3.2.2.1 The purpose of this process step is to identify and describe the change to the aeronautical product. Changes to a product can include physical design changes and functional changes (e.g. operating envelope or performance changes). An applicant must identify all changes and areas affected by the change, including those where they plan to use previously approved data. EASA considers all of these changes and areas affected by the change to be part of the entire proposed type design and they are considered as a whole in the classification of whether the proposed change is substantial, significant, or not significant. The change can be a single change or a collection of changes. In addition to the proposed changes, an applicant should consider the cumulative effect of previous relevant changes incorporated since the last time the certification basis was upgraded. An applicant for a change must consider all previous relevant changes and the amendment level of the certification specifications in the certification basis used for these changes.

text: 3.2.2.2 When identifying the proposed changes, an applicant should consider previous relevant changes that create a cumulative effect, as these may influence the decisions regarding the classification of the change later in the process. By ‘previous relevant changes,’ EASA means changes where effects accumulate, such as successive thrust increases, incremental weight increases, or sectional increases in fuselage length. An applicant must account for any previous relevant changes to the area affected by the proposed change that did not involve an upgrade of the certification basis in the proposed change.

text: 3.2.2.3 Example: An applicant proposes a 5 per cent weight increase, but a previous 4 per cent and another 3 per cent weight increase were incorporated into this aircraft without upgrading the existing certification basis. In the current proposal for a 5 per cent weight increase, the cumulative effects of the two previous weight increases that did not involve an upgrade of the certification basis will now be accounted for as an approximate 12 per cent increase in weight. Note that the cumulative effects the applicant accounts for are only those incremental increases since the last time the airworthiness certification specifications in the

text: type-certification basis applicable to the area affected by the proposed change were upgraded.

text: 3.2.3 Use High-Level Descriptors. To identify and describe the proposed changes to any aeronautical product, an applicant should use a high-level description of the change that characterises the intent of, or the reason for, the change. No complex technical details are necessary at this stage. For example, a proposal to increase the maximum passenger-carrying capacity may require an addition of a fuselage plug, and as such, a ‘fuselage plug’ becomes one possible high-level description of this change. Similarly, a thrust increase, a new or complete interior, an avionics system upgrade, or a passenger-to-cargo conversion are all high-level descriptions that characterise typical changes to the aircraft, each driven by a specific goal, objective, or purpose.

text: 3.2.4 Evolutionary changes that occur during the course of a certification program may require re-evaluation of the certification basis, and those changes that have influence at the product level may result in re-classification of the change.

text: 3.3. Step 2. Verify the proposed change is not substantial.

text: 3.3.1 Point 21.A.19 requires an applicant to apply for a new TC for a changed product if the change to design, power, thrust, or weight is so extensive that a substantially complete investigation of compliance with the applicable regulations is required. A new TC could be required for either a single extensive change to a previously type-certified product or for a changed design derived through the cumulative effect of a series of design changes from a previously typecertified product.

text: 3.3.2 A ‘substantially complete investigation’ of compliance is required when most of the existing substantiation is not applicable to the changed product. In other words, an applicant may consider the change ‘substantial’ if it is so extensive (making the product sufficiently different from its predecessor) that the design models, methodologies, and approaches used to demonstrate a previous compliance finding could not be used in a similarity argument. EASA considers a change ‘substantial’ when these approaches, models, or methodologies of how compliance was shown are not valid for the changed product.

text: 3.3.3 If it is not initially clear that a new TC is required, appendix A of this GM provides some examples of substantial changes to aid in this classification. A substantial change requires an application for a new TC. See points 21.A.17 and 21.A.19. If the change is not substantial, proceed to Step 3.

text: 3.4. Step 3. Will the applicant use the latest standards?

text: An applicant can use the latest certification specifications for their proposed change and the area affected by the change. If they use the latest certification specifications, they will have met the intent of point 21.A.101 and no further classification (significant or not significant) and justification is needed. Even though an applicant elects to use the latest certification specifications, the applicant will still be able to apply point 21.A.101 for future similar changes, and use the exceptions under point 21.A.101(b). However, the decision to comply with the

text: latest certification specifications sets a new basis for all future related changes to the same affected area for that amended TC. — If using the latest certification specifications, an applicant should proceed to Step 6 (in paragraph 3.9 of this GM). — If not using the latest certification specifications, an applicant should proceed to Step 4 below.

text: 3.5. Step 4. Arrange changes into related and unrelated groups.

text: 3.5.1 An applicant should now determine whether any of the changes identified in Step 1 are related to each other. Related changes are those that cannot exist without another, are co-dependent, or a prerequisite of another. For example, a need to carry more passengers could require the addition of a fuselage plug, which will result in a weight increase, and may necessitate a thrust increase. Thus, the fuselage plug, weight increase, and thrust increase are all related, highlevel changes needed to achieve the goal of carrying more passengers. A decision to upgrade the flight deck to more modern avionics at the same time as these other changes may be considered unrelated, as the avionics upgrade is not necessarily needed to carry more passengers (it has a separate purpose, likely just modernisation). The proposed avionics upgrade would then be considered an unrelated (or a stand-alone) change. However, the simultaneous introduction of a new cabin interior is considered related since occupant safety considerations are impacted by a cabin length change. Even if a new cabin interior is not included in the product-level change, the functional effect of the fuselage plug has implications on occupant safety (e.g. the dynamic environment in an emergency landing, emergency evacuation, etc.), and thus the cabin interior becomes an affected area. Figure 3-2 below illustrates the grouping of related and unrelated changes using the example of increasing the maximum number of passengers. Note: An applicant who plans changes in sequence over time should refer to the discussion on ‘sequential design changes’ in paragraph 5.13 of this GM.

text: Figure 3-2. Related and Unrelated Changes for Example of Increasing the Maximum Number of Passengers

text: The Aeronautical Product Grouping of Related Changes (significant change) Changed Area MTOW Increase Affected Area Not Affected Area

text: 3.5.2 Once the change(s) is (are) organised into groupings of those that are related and those that are unrelated (or stand-alone), an applicant should proceed to Step 5 below.

text: 3.6. Step 5. Is each group of related changes or each unrelated (stand-alone) change a significant change?

text: 3.6.1 The applicant is responsible for proposing the classification of groups of related changes or unrelated changes as ‘significant’ or ‘not significant’. Significant changes are product-level changes that could result from an accumulation of changes, or occur through a single significant change that makes the changed product distinct from its baseline product. The grouping of related and unrelated changes is particularly relevant to EASA’s significant Yes/No decision (point 21.A.101(b)(1)) described in Step 1 of Figure 3-1. EASA evaluates each group of related changes and each unrelated (stand-alone) change on its own merit for significance. Thus, there may be as many evaluations for significance as there are groupings of related and unrelated changes. Step 1 of Figure 3-1 explains the accumulation of changes that an applicant must consider. Additionally, point 21.A.101(b)(1) defines a change as ‘significant’ when at least one of the three automatic criteria applies:

text: 3.6.1.1 Changes where the general configuration is not retained (significant change to

text: general configuration).

text: A change to the general configuration at the product level is one that distinguishes the resulting product from other product models, for example, performance or interchangeability of major components. Typically, for these changes, an applicant will designate a new product model, although this is not required. For examples, see appendix A of this GM.

text: 3.6.1.2 Changes where the principles of construction are not retained (significant

text: change to principles of construction).

text: A change at the product level to the materials and/or construction methods that affects the overall product’s operating characteristics or inherent strength and would require extensive reinvestigation to demonstrate compliance is one where the principles of construction are not retained. For examples, see appendix A of this GM.

text: 3.6.1.3 Product-level changes that invalidate the assumptions used for certification of

text: the baseline product.

text: Examples include: — change of an aircraft from an unpressurised to pressurised fuselage, — change of operation of a fixed-wing aircraft from land-based to water-based, and — operating envelope expansions that are outside the approved design parameters and capabilities. For additional examples, see appendix A of this GM.

text: 3.6.2 The above criteria are used to determine whether each change grouping and each stand-alone change is significant. These three criteria are assessed at the product level. In applying the automatic criteria and the examples in appendix A of this GM, an applicant should focus on the change and how it impacts the existing product (including its performance, operating envelope, etc.). A change cannot be classified or reclassified as a significant change on the basis of the importance of a later amendment.

text: 3.6.3 Appendix A of this GM includes tables of typical changes (examples) for small aeroplanes, transport aeroplanes, rotorcraft, engines, and propellers that meet the criteria for a significant design change. The Appendix also includes tables of typical design changes that EASA classifies as not significant. The tables can be used in one of two ways:

text: 3.6.3.1 To identify the classification of a proposed design change listed in the table, or

text: 3.6.3.2 In conjunction with the three automatic criteria, to help classify a proposed design change not listed in the table by comparison to determinations made for changes with similar type and magnitude.

text: 3.6.4 In many cases, a significant change may involve more than one of these criteria and will be obvious and distinct from other product improvements or production changes. There could be cases where a change to a single area, system, component, or appliance may not result in a product-level change. There could also be other cases where the change to a single system or component might result in a significant change due to its effect on the product overall. Examples may include the addition of winglets or leading-edge slats, or a change to primary flight controls of a fly-by-wire system.

text: 3.6.5 If an unrelated (stand-alone) change or a grouping of related changes is classified as—

text: Significant (point 21.101(a)):

text: You must comply with the latest airworthiness standards for certification of the change and areas affected by change, unless you justify use of one of the exceptions provided in point 21.101(b)(2) or (3) to show compliance with earlier amendment(s). The final certification basis may consist of a combination of the requirements recorded in the certification basis ranging from the original aircraft certification basis to the most current regulatory amendments

text: Not Significant (point 21.101(b)(1)): You may comply with the existing certification basis unless the standards in the proposed certification basis are deemed inadequate. In cases where the existing certification basis is inadequate or no regulatory standards exist, later requirements and/or special conditions will be required. See paragraph 3.11 of this GM for a detailed discussion.

text: 3.6.6 A new model designation to a changed product is not necessarily indicative that the change is significant under point 21.A.101. Conversely, retaining the existing model designation does not mean that the change is not significant. Significance is determined by the magnitude of the change.

text: 3.6.7 EASA determines the final classification of whether a change is significant or not significant. To assist an applicant in its assessment, EASA has predetermined the classification of several typical changes that an applicant can use for reference, and these examples are listed in appendix A of this GM.

text: 3.6.8 At this point, the determination of significant or not significant for each of the groupings of related changes and each stand-alone change is completed. For significant changes, an applicant that proposes to comply with an earlier certification specification should use the procedure outlined in paragraph 3.7 below. For changes identified as not significant, see paragraph 3.8 below.

text: 3.7. Proposing an amendment level for a significant change.

text: 3.7.1 Without prejudice to the exceptions provided for in point 21.A.101(b) or (c), if the classification of a group of related changes or a stand-alone unrelated change is significant, all areas, systems, components, parts, or appliances affected by the change must comply with the certification specifications at the amendment level in effect on the date of application for the change, unless the applicant elects to comply with certification specifications that have become effective after that date (see point 21.A.101(a)).

text: 3.7.2 In certain cases, an applicant will be required by EASA to comply with certification specifications that have become effective after the date of application (see point 21.A.101(a)):

text: 3.7.2.1 If an applicant elects to comply with a specific certification specification or a subset of certification specifications at an amendment which has become effective after the date of application, the applicant must comply with any other certification specification that EASA finds is directly related (see point 21.A.101(f)).

text: 3.7.2.2 In a case where the change has not been approved, or it is clear that it will not be approved under the time limit established, the applicant will be required to comply with an upgraded certification basis established according to point 21.A.101(e)(1) or (2) from certification specifications that have become effective after the date of the original application.

text: 3.7.3 Applicants can justify the use of one of the exceptions in point 21.101(b)(2) and (3) to comply with an earlier amendment, but not with an amendment introduced earlier than the existing certification basis. See paragraphs 3.9 and 3.10 of this GM. Applicants who elect to comply with a specific certification specification or a subset of certification specifications at an earlier amendment will be required to comply with any other certification specification that EASA finds are directly related.

text: 3.7.4 The final certification basis may combine the latest, earlier (intermediate), and existing certification specifications, but cannot contain certification specifications preceding the existing certification basis.

text: 3.8. Proposing an amendment level for a not significant change.

text: 3.8.1 When EASA classifies the change as not significant, the point 21.A.101(b) rule allows compliance with earlier amendments, but not prior to the existing certification basis. Within this limit, the applicant may propose an amendment level for each certification specification for the affected area. However, each applicant should be aware that EASA will review their

text: proposals for the certification basis to ensure that the certification basis is adequate for the proposed change under Step 8. (See paragraph 3.11 of this GM.)

text: 3.8.2 Even for a not significant change, an applicant may elect to comply with certification specifications which became applicable after the date of application. Applicants may propose to comply with a specific certification specification or a subset of certification specifications at a certain amendment of their choice. In such a case, any other certification specifications of that amendment that are directly related should be included in the certification basis for the change.

text: 3.9. Step 6. Prepare the proposed certification basis list.

text: As part of preparing the proposed certification basis list, an applicant must identify any areas, systems, parts or appliances of the product that are affected by the change and the corresponding certification specifications associated with these areas. For each group, the applicant must assess the physical and/or functional effects of the change on any areas, systems, parts or appliances of the product. The characteristics affected by the change are not only physical changes, but also functional changes brought about by the physical changes. Examples of physical aspects are structures, systems, parts and appliances, including software in combination with the affected hardware. Examples of functional characteristics are performance, handling qualities, aeroelastic characteristics, and emergency egress. The intent is to encompass all aspects where there is a need for re-evaluation, that is, where the substantiation presented for the product being changed should be updated or rewritten. Appendix H of this GM contains two examples of how to document a proposed certification basis list.

text: 3.9.1 An area affected by the change is any area, system, component, part, or appliance of the aeronautical product that is physically and/or functionally changed.

text: 3.9.2 Figure 3-33 of this GM illustrates concepts of physical and functional changes of an affected area. Appendix C of this GM contains a method used to define the change and areas affected by the change. This Appendix is meant to assist applicants when they propose large, complex changes. For each change, it is important for the applicant to properly assess the effects of such change on any areas, systems, parts or appliances of the product because areas that have not been physically changed may still be considered part of the affected area. If a new compliance finding is required, regardless of its amendment level, it is an affected area.

text: Figure 3-3. Affected Areas versus Not Affected Areas

text: The Aeronautical Product

text: Not Affected Area Significant Change and Area Affected by the Significant Change Physical Changes Functional changes

text: 3.9.3 An area not affected by a change can remain at the existing certification basis, provided that the applicant presents to EASA an acceptable justification that the area is not affected.

text: 3.9.4 For sample questions to assist in determining affected areas, see paragraph D.1 of appendix D of this GM.

text: 3.9.5 Consider the following aspects of a change:Physical aspects. The physical aspects include direct changes to structures, systems, equipment, components, and appliances, and may include software/airborne electronic hardware changes and the resulting effects on systems functions.

text: 3.9.5.1 Performance/functional characteristics. The less obvious aspect of the word ‘areas’ covers general characteristics of the type-certified product, such as performance features, handling qualities, emergency egress, structural integrity (including load carrying), aeroelastic characteristics, or crashworthiness. A product-level change may affect these characteristics. For example, adding a fuselage plug could affect performance and handling qualities, and thus the certification specifications associated with these aspects would be considered to be part of the affected area. Another example is the addition of a fuel tank and a new fuel conditioning unit. This TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 17 of 141 An agency of the European Union

text: change affects the fuel transfer and fuel quantity indication system, resulting in the aircraft’s unchanged fuel tanks being affected. Thus, the entire fuel system (changed and unchanged areas) may become part of the affected area due to the change to functional characteristics. Another example is changing turbine engine ratings and operating limitations, affecting the engine rotors’ life limits.

text: 3.9.6 All areas affected by the proposed change must comply with the latest certification specifications, unless the applicant shows that demonstrating compliance with the latest amendment of a certification specification would not contribute materially to the level of safety or would be impractical. Step 7 below provides further explanation.

text: 3.9.7 The applicant should document the change and the area affected by the change using highlevel descriptors along with the applicable certification specifications and their proposed associated amendment levels. The applicant proposes this change to the certification basis that EASA will consider for documentation in the type certificate data sheet (TCDS) or STC, if they are different from that recorded for the baseline product in the TCDS.

text: 3.10. Step 7. Do the latest standards contribute materially to the level of safety and are they practical?

text: Pursuant to point 21.A.101(a), compliance with the latest certification specifications is required. However, exceptions may be allowed pursuant to point 21.A.101(b)(3). The applicant must provide justification to support the rationale for the application of earlier amendments for areas affected by a significant change in order to document that compliance with later standards in these areas would not contribute materially to the level of safety or would be impractical. Such a justification should address all the aspects of the area, system, part or appliance affected by the significant change. See paragraphs 3.10.1 and 3.10.1.4 of this GM.

text: 3.10.1 Do the latest standards contribute materially to the level of safety? Applicants could consider compliance with the latest standards to ‘not contribute materially to the level of safety’ if the existing type design and/or relevant experience demonstrates a level of safety comparable to that provided by the latest standards. In cases where design features provide a level of safety greater than the existing certification basis, applicants may use acceptable data, such as service experience, to establish the effectiveness of those design features in mitigating the specific hazards by a later amendment. Applicants must provide sufficient justification to allow EASA to make this determination. An acceptable means of compliance is described in appendix E of this GM. Justification is sufficient when it provides a summary of the evaluation that supports the determination using an agreed evaluation method, such as that in appendix E of this GM. This exception could be applicable in the situations described in the paragraphs below. Note: Compliance with later standards is not required where the amendment is of an administrative nature and made only to correct inconsequential errors or omissions, consolidate text, or to clarify an existing requirement.

text: 3.10.1.1 Improved design features. Design features that exceed the existing certification basis standards, but do not meet the latest certification specifications, can be used as a basis for granting an

text: exception under point 21.A.101(b)(3) since complying with the latest amendment of the certification specifications would not contribute materially to the level of safety of the product. If EASA accepts these design features as justification for an exception, the applicant must incorporate them in the amended type design configuration and record them, where necessary, in the certification basis. The description of the design feature would be provided in the TCDS or STC at a level that allows the design feature to be maintained, but does not contain proprietary information. For example , an applicant proposes to install winglets on a Part 25 aeroplane, and part of the design involves adding a small number of new wing fuel tank fasteners. Assuming that the latest applicable amendment of § 25.981 is Amendment 25-102, which requires structural lightning protection, the applicant could propose an exception from these latest structural lightning protection requirements because the design change uses new wing fuel tank fasteners with cap seals installed. The cap seal is a design feature that exceeds the requirement of § 25.981 at a previous amendment level, but does not meet the latest Amendment 25-102. If the applicant can successfully substantiate that compliance with Amendment 25- 102 would not materially increase the level of safety of the changed product, then this design feature can be accepted as an exception to compliance with the latest amendment.

text: 3.10.1.2 Consistency of design. This provision gives the opportunity to consider the consistency of design. For example, when a small fuselage plug is added, additional seats and overhead bins are likely to be installed, and the lower cargo hold extended. These components may be identical to the existing components. The level of safety may not materially increase by applying the latest certification specifications in the area of the fuselage plug. Compliance of the new areas with the existing certification basis may be acceptable.

text: 3.10.1.3 Service experience.

text: 3.10.1.3.1 Relevant service experience, such as experience based on fleet performance or utilisation over time (relevant flight hours or cycles), is one way of showing that the level of safety will not materially increase by applying the latest amendment, so the use of earlier certification specifications could be appropriate. Appendix F of this GM provides additional guidance on the use of service experience, along with examples.

text: 3.10.1.3.2 When establishing the highest practicable level of safety for a changed product, EASA has determined that it is appropriate to assess the service history of a product, as well as the later airworthiness standards. It makes little sense to mandate changes to well-understood designs, whose service experience has

text: been acceptable, merely to comply with new standards. The clear exception to this premise is if the new standards were issued to address a deficiency in the design in question, or if the service experience is not applicable to the new standards.

text: 3.10.1.3.3 There may be cases for rotorcraft and small aeroplanes where relevant data may not be sufficient or not available at all because of the low utilisation and the insufficient amount and type of data available. In such cases, other service history information may provide sufficient data to justify the use of earlier certification specifications, such as: warranty, repair, and parts usage data; accident, incident, and service difficulty reports; service bulletins; airworthiness directives; or other pertinent and sufficient data collected by the manufacturers, authorities, or other entities.

text: 3.10.1.3.4 EASA will determine whether the proposed service experience levels necessary to demonstrate the appropriate level of safety as they relate to the proposed design change are acceptable.

text: 3.10.1.4 Secondary changes.

text: 3.10.1.4.1 The change proposed by the applicant can consist of physical and/or functional changes to the product. See Figure 3-4 below. There may be aspects of the existing type design of the product that the applicant may not be proposing to change directly, but that are affected by the overall change. For example, changing an airframe’s structure, such as adding a cargo door in one location, may affect the frame or floor loading in another area. Further, upgrading engines with new performance capabilities could require additional demonstration of compliance for minimum control speeds and aeroplane performance certification specifications. For many years, EASA has required applicants to consider these effects, and this practice is unchanged under the procedures of point 21.A.101.

text: Figure 3-4. Change-Affected Areas with Secondary Changes

text: The Aeronautical Product

text: 3.10.1.4.2 For each change, it is important that the effects of the change on other systems, components, equipment, or appliances of the product are properly identified and assessed. The intent is to encompass all aspects where there is a need for re-evaluation, that is, where the substantiation presented for the product being changed should be reviewed, updated, or rewritten.

text: 3.10.1.4.3 In assessing the areas affected by the change, it may be helpful to identify secondary changes. A secondary change is a change to physical and/or functional aspects that is part of, but consequential to, a significant physical change, whose only purpose is to restore, and not add or increase, existing functionality or capacity. The term ‘consequential’ is intended to refer to: — a change that would not have been made by itself; it achieves no purpose on its own; — a change that has no effect on the existing functionality or capacity of areas, systems, structures, components, parts, or appliances affected by the change; or

text: — a change that would not create the need for: (1) new limitations or would affect existing limitations; (2) a new aircraft flight manual (AFM) or instructions for continued airworthiness (ICA) or a change to the AFM or ICA; or (3) special conditions, equivalent safety findings, or deviations.

text: 3.10.1.4.4 A secondary change is not required to comply with the latest certification specifications because it is considered to be ‘not contributing materially to the level of safety’ and, therefore, eligible for an exception under point 21.A.101. Determining whether a change meets the description for a secondary change, and is thus eligible for an exception, should be straightforward. Hence, the substantiation or justification need only be minimal. If this determination is not straightforward, then the proposed change is not a secondary change.

text: 3.10.1.4.5 In some cases, a secondary area of change that restores functionality may in fact contribute materially to the level of safety by meeting a later amendment. If this is the case, it is not considered a secondary change.

text: 3.10.2 Are the latest specifications practical? The intent of point 21.A.101 is to enhance safety by applying the latest certification specifications to the greatest extent practicable. The concepts of contributing materially and practicality are linked. If compliance with the latest certification specifications does contribute materially to the level of safety, then the applicant may assess the incremental costs to see whether they are commensurate with the increase in safety. The additional resource requirements could include those arising from changes required for compliance and the effort required to demonstrate compliance, but excluding resource expenditures for prior product changes. The cost of changing compliance documentation and/or drawings is not an acceptable reason for an exception.

text: 3.10.2.1 Applicants should support their position that compliance is impractical with substantiating data and analyses. While evaluating that position and the substantiating data regarding impracticality, EASA may consider other factors (e.g. the costs and safety benefits for a comparable new design).

text: 3.10.2.2 A review of large aeroplane projects showed that, in certain cases where EASA allowed an earlier amendment of applicable certification specifications, the applicants made changes that nearly complied with the latest amendments. In these cases, the applicants successfully demonstrated that full compliance would require a substantial increase in the outlay or expenditure of resources with a very small increase in the level of safety. These design features can be used as a basis for granting an exception under point 21.A.101(b)(3) on the basis of ‘impracticality.’

text: 3.10.2.3 Appendix E of this GM provides additional guidance and examples for evaluating the impracticality of applying the latest certification specifications to a changed product for which compliance with the latest certification specifications would contribute materially to the level of safety of the product.

text: 3.10.2.3.1 The exception of impracticality is a qualitative and quantitative cost–safety benefit assessment for which it is difficult to specify clear criteria. Experience to date with applicants has shown that a justification of impracticality is more feasible when both the applicant and EASA agree during a discussion at an early stage that the effort (in terms of cost, changes to manufacturing, etc.) required to comply would not be commensurate with a small incremental safety gain. This would be clear even without the need to perform any detailed cost–safety benefit analysis (although an applicant could always use cost analysis to support an appropriate amendment level). However, there should be enough detail in the applicant’s rationale to justify the exception. Note: An applicant should not base an exception due to impracticality on the size of the applicant’s company or their financial resources. The applicant must evaluate the costs to comply with a later amendment against the safety benefit of complying with the later amendment.

text: 3.10.2.3.2 For example, a complex redesign of an area of the baseline aircraft may be required to comply with a new requirement, and that redesign may affect the commonality of the changed product with respect to the design and manufacturing processes of the existing family of models. Relevant service experience of the existing fleet of the baseline aircraft family would be required to show that there has not been a history of problems associated with the hazard that the new amendment in question was meant to address. In this way, the incremental cost/impact to the applicant is onerous, and the incremental safety benefit realised by complying with the later amendment would be minimal. This would be justified by demonstrated acceptable service experience in relation to the hazard that the new rule addresses.

text: 3.11. Step 8. Ensure the proposed certification basis is adequate.

text: EASA considers a proposed certification basis for any change (whether it is significant or not significant) to be adequate when: — the certification standards provide an appropriate level of safety for the intended change, and — the change and the areas affected by the change do not result in unsafe design features or characteristics for the intended use.

text: 3.11.1 For a change that contains new design features that are novel and unusual for which there are no later applicable certification specifications at a later amendment level, EASA will designate special conditions pursuant to point 21.A.16B. EASA will impose later certification specifications that contain adequate or appropriate safety standards for this feature, if they exist, in lieu of special conditions. An example is adding a flight-critical system, such as an electronic air data display on a CS-25 large aeroplane whose existing certification basis does not cover protection against lightning and high-intensity radiated fields (HIRF). In this case, EASA will require compliance with the certification specifications for lightning and HIRF protection, even though EASA determined that the change is not significant.

text: 3.11.2 For new design features or characteristics that may pose a potential unsafe condition for which there are no later applicable certification specifications, new special conditions may be required to address point 21.A.21(c)(3).

text: 3.11.3 In cases where inadequate or no standards exist for the change to the existing certification basis, but adequate standards exist in a later amendment of the applicable certification specifications, the later amendment will be made part of the certification basis to ensure the adequacy of the certification basis.

text: 3.11.4 EASA determines the final certification basis for a product change. This may consist of a combination of those standards ranging from the existing certification basis of the baseline product to the latest amendments and special conditions.

text: 4. Excepted Products under point 21.A.101(c)

text: 4.1. Excepted products.

text: For excepted products as defined in paragraph 4.1.1 below, the starting point for regulatory analysis is the existing certification basis for the baseline product.

text: 4.1.1 Point 21.A.101(c) provides an exception to the compliance with the latest certification specifications required by point 21.A.101(a) for aircraft (other than rotorcraft) of 2 722 kg (6 000 lb) or less maximum weight, or to a non-turbine rotorcraft of 1 361 kg (3 000 lb) or less maximum weight. In these cases, the applicant may elect to comply with the existing certification basis. However, the applicant has the option of applying later, appropriate certification specifications.

text: 4.1.2 If EASA finds that the change is significant in an area, EASA may require the applicant to comply with a later certification specification and with any certification specification that EASA finds is directly related. Starting with the existing certification basis, EASA will progress through each later certification specification to determine the amendment appropriate for the change. However, if an applicant proposes, and EASA finds, that complying with the later amendment or certification specification would not contribute materially to the level of safety of the changed product or would be impractical, EASA may allow the applicant to comply with an earlier amendment appropriate for the proposed change. The amendment may not be earlier than the existing certification basis. For excepted products, changes that meet one or more of the following criteria, in the area of change, are automatically considered significant:

text: 4.1.2.1 The general configuration or the principles of construction are not retained.

text: 4.1.2.2 The assumptions used for certification of the area to be changed do not remain valid.

text: 4.1.2.3 The change contains new features (not foreseen in the existing certification basis and for which appropriate later certification specifications exist). In this case, EASA will designate the applicable certification specifications, starting with the existing certification basis and progressing to the most appropriate later amendment level for the change.

text: 4.1.2.4 The change contains a novel or unusual design feature. In this case, EASA will designate the applicable special conditions appropriate for the change, pursuant to point 21.A.101(d).

text: 4.1.3 The exception for products under point 21.A.101(c) applies to the aircraft only. Changes to engines and propellers installed on these excepted aircraft are assessed as separate typecertified products using point 21.A.101(a) and (b).

text: 5. Other Considerations

text: 5.1. Design-related requirements from other aviation domains.

text: Some implementing rules in other aviation domains (air operations, ATM/ANS) (e.g.

text: Commission Regulation (EU) No 965/2012

text: on air operations or

text: Commission Regulation (EU) 2015/640

text: on additional airworthiness specifications for a given type of operations (Annex I (Part-26)) impose airworthiness standards that are not required for the issue of a TC or STC (e.g. CS-26, CS-ACNS, etc.). If not already included in the certification basis, any such applicable airworthiness standard may be added to the type certification basis by mutual agreement between the applicant and EASA. The benefit of adding these airworthiness standards to the type certification basis is to increase awareness of these standards, imposed by other implementing rules, during design certification and future modifications to the aircraft. The use of exceptions under point 21.A.101(b) is not intended to alleviate or preclude compliance with operating regulations.

text: 5.2. Reserved.

text: 5.3. Baseline product.

text: A baseline product consists of one unique type design configuration, an aeronautical product with a specific, defined, approved configuration and certification basis that the applicant proposes to change. As mentioned in paragraph 3.2.1 of this GM, it is important to clearly identify the type design configuration to be changed. EASA does not require an applicant to assign a new model name for a changed product. Therefore, there are vastly different changed products with the same aircraft model name, and there are changed products with minimal differences that have different model names. Since the assignment of a model name is based solely on an applicant’s business decision, the identification of the baseline product, for the purposes of point 21.A.101, is, as defined below. The baseline product is an approved type design that exists at the date of application and is representative of: — a single certified build configuration, or — multiple approvals over time (including STC(s) or service bulletins) and may be representative of more than one product serial number. Note: The type design configuration, for this purpose, could also be based on a proposed future configuration that is expected to be approved at a later date but prior to the proposed changed product.

text: 5.4. Predecessor standards.

text: The certification specifications in effect on the date of application for a change are those in CS-22, CS-23, CS-25, CS-27, CS-29, CS-CCD, CS-FCD, CS-MMEL, etc., issued by EASA after 2003. However, the type-certification basis of some ‘grandfathered’ products, i.e. those with a pre- EASA TC deemed to have been issued in accordance with

text: Commission Regulation (EU) No 748/2012

text: (see

text: Article 3

text: ), may consist of other standards issued by or recognised in the EU Member States. These standards may include Joint Aviation Requirements (JARs) issued by the

text: Joint Aviation Authorities (JAA) or national regulations of an EU Member State (e.g. BCARs) or national regulations of a non-EU State of Design with which an EU Member State had concluded a bilateral airworthiness agreement (e.g. US FARs, CARs etc.). Consequently, when using one of the exception routes allowing electing to comply with earlier standards, the predecessor standards may be applicable. Such predecessor standards are not recognised under point 21.A.101(a), but may be allowed under point 21.A.101(b) or (c).When choosing the amendment level of a standard, all related standards associated with that amendment level would have to be included.

text: 5.5. Special conditions, point 21.A.101(d).

text: Point 21.A.101(d) allows for the application of special conditions, or for changes to existing special conditions, to address the changed designs where neither the proposed certification basis nor any later certification specifications provide adequate standards for an area, system, part or appliance related to the change. The objective is to achieve a level of safety consistent with that provided for other areas, systems, parts or appliances affected by the change by the other certification specifications of the proposed certification basis. The application of special conditions to a design change is not, in itself, a reason to classify it as either a substantial change or a significant change. Whether the change is significant, with earlier certification specifications allowed through exceptions, or not significant, the level of safety intended by the special conditions must be consistent with the agreed certification basis.

text: 5.6. Effective Period for an Application to Change a Type Certificate, point 21.A.101(e).

text: According to point 21.A.101(e), an application for a change to a TC for large aeroplanes and large rotorcraft is effective for 5 years from the date of application, and an application for a change to any other TC is effective for 3 years. EASA intended this to ensure that the certification basis for the changed product is as current as practicable.

text: 5.6.1 If EASA has not approved a change, or if it is clear that EASA will not approve the change, within the time limit, the applicant may do either of the following: (1) file for a new application, or (2) file for an extension to the original application.

text: 5.6.2 When filing for an extension, the applicant must choose a completion date, then apply the applicable effectivity from point 21.A.101(e) to determine an effective application date. The effective application date must not precede the new completion date for the proposed change by more than the time limit provided for in point 21.A.101(e) for the original application.

text: 5.6.3 If an applicant requests an extension to the application date, and the product change is significant, a new certification basis is required. The new certification basis requires the additional latest certification specifications that became effective through the new effective date of application. However, the applicant may use earlier certification specifications by documenting their justification that the latest certification specifications for the change would not contribute materially to the level of safety or would be impractical.

text: 5.6.4 If the product change is not significant, the applicant may continue to use the existing certification basis for product certification. However, if the applicant makes additional changes

text: to the product, and EASA finds the existing certification basis for the change inadequate, the new certification basis will require the later appropriate standards.

text: 5.7. Reserved.

text: 5.8. Reserved.

text: 5.9. Documentation.

text: 5.9.1 Documenting the proposal. In order to efficiently determine and agree upon a certification basis with EASA, the following information is useful to understand the applicant’s position: — The current certification basis of the product being changed, including the amendment level. — The amendment level of all the applicable certification specifications at the date of application. — The proposed certification basis, including the amendment levels. — Description of the affected area. — Applicants who propose a certification basis that includes amendment levels earlier than what was in effect at the date of application should include the exception as outlined in point 21.A.101(b) and their justification if needed. Please see appendix H for examples of optional tools an applicant can use to document your proposed certification basis.

text: 5.9.2 Documenting the significant/not significant decision.

text: 5.9.2.1 EASA determines whether the changes are significant or not significant, and this decision is documented in the Certification Review Item(s). However, EASA provides an optional decision record for the applicant to make a predetermination to facilitate EASA decision. This form is provided in appendix G of this GM and follows the flow chart in Figure 3-1 of this GM. If it is used, the applicant should submit it along with the certification plan.

text: 5.9.2.2 Changes that are determined to be significant changes under point 21.A.101, the exceptions, and the agreement of affected and unaffected areas is typically documented through the Certification Review Item (CRI) A-01 process. An example tool is provided in appendix H of this GM.

text: 5.9.3 Documenting the certification basis.

text: 5.9.3.1 EASA will amend the certification basis for all changes that result in a revision to the product’s certification basis on the amended TCDS or STC. In case of a significant change, EASA will document the resulting certification basis in CRI A-01.

text: 5.9.3.2 EASA will document the certification basis of each product model on all STCs, including approved model list STCs.

text: 5.10. Incorporation of STCs into the Type Design.

text: The incorporation of STCs into the product type design may generate an additional major change when that change is needed to account for incompatibility between several STCs that were initially not intended to be applied concurrently.

text: 5.10.1 If the incorporation of the STC(s) does not generate an additional major change, the incorporation is not evaluated pursuant to point 21.A.101. The existing certification basis should be updated to include the later amendments of the STC(s) being incorporated.

text: 5.10.2 If the incorporation of the STC(s) generates an additional major change, the change must be evaluated pursuant to point 21.A.101, and the existing certification basis should be updated to include the amendments resulting from the application of point 21.A.101.

text: 5.11. Removing changes.

text: Approved changes may be removed after incorporation in an aeronautical product. These changes will most commonly occur via an STC or a service bulletin kit.

text: 5.11.1 The applicant should identify a product change that they intend at its inception to be removable as such, and should develop instructions for its removal during the initial certification. EASA will document the certification basis for both the installed and removed configuration separately on the TCDS or STC.

text: 5.11.2 If specific removal instructions and a certification basis corresponding to the removed condition are not established at the time of the initial product change certification, the removal of changes or portions of those changes may constitute a significant change to type design. A separate STC or an amended TC may be required to remove the modifications and the resulting certification basis established for the changed product.

text: 5.12. The certification basis is part of the change.

text: A new change may be installed in a product during its production or via a service bulletin or STC. In terms of point 21.A.101, each of the approved changes has its own basis of certification. If an applicant chooses to remove an approved installation (e.g. an interior installation, avionics equipment) and install a new installation, a new certification basis may be required for the new installation, depending on whether the change associated with the new installation is considered significant compared to the baseline configuration that the applicant chooses. If the new installation is a not significant change, the unmodified product’s certification basis may be used (not the previous installation certification basis), provided the certification basis is adequate. For example, a large aeroplane is certified in a ‘green’ configuration. The aeroplane certification basis does not include CS 25.562. An interior is installed under an STC, and the applicant elects to include CS 25.562 (dynamic seats) in the certification basis to meet specific operational requirements. At a later date, the aeroplane is sold to another operator who does not have the same operational requirements. A new

text: interior is installed; there will be no requirement for CS 25.562 to be included in the new certification basis.

text: 5.13. Sequential changes — cumulative effects.

text: 5.13.1 Any applicant who intends to accomplish a product change by incorporating several changes in a sequential manner should identify this to EASA up front when the first application is made. In addition, the cumulative effects arising from the initial change, and from all of the follow-on changes, should be included as part of the description of the change in the initial proposal. The classification of the intended product change will not be evaluated solely on the basis of the first application, but rather on the basis of all the required changes needed to accomplish the intended product change. If EASA determines that the current application is a part of a sequence of related changes, then EASA will re-evaluate the determination of significance and the resulting certification basis as a group of related changes.

text: 5.13.2 Example: Cumulative effects — advancing the certification basis. The type certificate for aeroplane model X lists three models, namely X-300, X-200, and X-100. The X-300 is derived from the X-200, which is derived from the original X-100 model. An applicant proposes a change to the X-300 aeroplane model. During the review of the X-300 certification basis and the certification specifications affected by the proposed change, it was identified that one certification specification, CS 25.571 (damage tolerance requirements), remained at the same amendment level as the X-100 original certification basis (exception granted on the X-200). Since the amendment level for this particular certification specification was not changed for the two subsequent aeroplane models (X-200 and X-300), the applicant must now examine the cumulative effects of these two previous changes that are related to the proposed change and the damage tolerance requirements to determine whether the amendment level needs to advance.

text: The following tables of ‘substantial’, ‘significant’, and ‘not significant’ changes are adopted by the FAA, Agência Nacional de Aviação Civil (ANAC), the European Aviation Safety Agency (EASA), and Transport Canada Civil Aviation (TCCA) through international collaboration. The classification may change due to cumulative effects and/or combinations of individual changes.

text: A.1 Examples of Substantial, Significant, and Not Significant Changes for Small Aeroplanes (CS-23).

text: A.1.1 Table A-1 contains examples of changes that are ‘substantial’ for small aeroplanes (CS-23).

text: Table A-1. Examples of Substantial Changes for Small Aeroplanes (CS-23)

text: Table A-1. Examples of Substantial Changes for Small Aeroplanes (CS-23) (continued)

text: Example Description of Change Notes

text: A.1.2 Table A-2 contains examples of changes that are ‘significant’ for small aeroplanes (CS-23).

text: Table A-2. Examples of Significant Changes for Small Aeroplanes (CS-23)

text: Table A-2. Examples of Significant Changes for Small Aeroplanes (CS-23) (continued)

text: Have the Is there a change Is there a change assumptions used to the general to the principles Example Description of change for certification Notes configuration? of construction? been invalidated? 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii)

text: A.1.3 Table A-3 contains examples of changes that are ‘not significant’ for small aeroplanes CS-23).

text: Table A-3. Examples of Not Significant Changes for Small Aeroplanes (CS-23)

text: Table A-3. Examples of Not Significant Changes for Small Aeroplanes (CS-23) (continued)

text: Have the Is there a change Is there a change assumptions used for to the general to the principles Example Description of change certification been Notes configuration? of construction? invalidated? 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii)

text: A.2 Examples of Substantial, Significant, and Not Significant Changes for Large Aeroplanes (CS-25).

text: A.2.1 Table Table A-4 contains examples of changes that are ‘substantial’ for large aeroplanes (CS-25).

text: Table A-4. Examples of Substantial Changes for Large Aeroplanes (CS-25)

text: A.2.2 Table A-5 contains examples of changes that are ‘significant’ for large aeroplanes (CS-25).

text: Table A-5. Examples of Significant Changes for Transport Large Aeroplanes (CS-25)

text: Table A-5. Examples of Significant Changes for Transport Large Aeroplanes (CS-25) (continued)

text: A.2.3 Table A-6 contains examples of changes that are ‘not significant’ for large aeroplanes (CS-25).

text: Table A-6. Examples of Not Significant Changes for Large Aeroplanes (CS-25)

text: Table A-6. Examples of Not Significant Changes for Large Aeroplanes (CS-25) (continued)

text: A.3 Examples of Substantial, Significant, and Not Significant Changes for Rotorcraft (CS-27 and CS-29).

text: A.3.1 Table A-7 contains examples of changes that are ‘substantial’ for rotorcraft (CS-27 and CS-29).

text: Table A-7. Examples of Substantial Changes for Rotorcraft (CS-27 and 29)

text: A.3.2 Table A-8 contains examples of changes that are ‘significant’ for rotorcraft (CS-27 and CS-29).

text: Table A-8. Examples of Significant Changes for Rotorcraft (CS-27 and CS-29)

text: Table A-8. Examples of Significant Changes for Rotorcraft (CS-27 and CS-29) (continued)

text: A.3.3 Table A-9 contains examples of changes that are ‘not significant’ changes for rotorcraft (CS-27 and CS-29).

text: Table A-9. Examples of Not Significant Changes for Rotorcraft (CS-27 and CS-29)

text: Table A-9. Examples of Not Significant Changes for Rotorcraft (CS-27 and CS-29) (continued)

text: A.4 Examples of Substantial, Significant, and Not Significant Changes for Engines (CS-E)

text: A.4.1 Table A-10 contains examples of changes that are ‘substantial’ for engines (CS-E).

text: Table A-10. Examples of Substantial Changes for Engines (CS-E)

text: Turbine Engines

text: A.4.2 Table A-11 contains examples of changes that are ‘significant’ for engines (CS-E).

text: Table A-11. Examples of Significant Changes for Engines (CS-E)

text: Turbine Engines

text: Table A-11. Examples of Significant Changes for Engines (CS-E) (continued)

text: Turbine Engines

text: Turbine Engines

text: Turbine Engines

text: Have the Is there a change Is there a change assumptions used to the general to the principles for certification configuration? of construction? been invalidated?

text: Example Description of change 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii) Notes

text: Piston Engines

text: Piston Engines

text: A.4.3 Table A-12 contains examples of changes that are ‘not significant’ for engines (CS-E).

text: Table A-12. Examples of Not Significant Changes for Engines (CS-E)

text: Turbine Engines

text: Table A-12. Examples of Not Significant Changes for Engines (CS-E) (continued)

text: Have the Is there a change Is there a change assumptions used to the general to the principles for certification Example Description of change Notes configuration? of construction? been invalidated? 21.A.101(b)(1)(i) 21.A.101(b)(1)(i) 21.A.101(b)(1)(ii)

text: Turbine Engines

text: Turbine Engines

text: Turbine Engines

text: Piston Engines

text: Piston Engines

text: Piston Engines

text: Piston Engines

text: A.5 Examples of Substantial, Significant, and Not Significant Changes for Propellers (CS-P).

text: A.5.1 Table A-13 contains an example of a change that is ‘substantial’ for propellers (CS-P).

text: Table A-13. Example of a Substantial Change for Propellers (CS-P)

text: A.5.2 Table A-14 contains examples of changes that are ‘significant’ for propellers (CS-P).

text: Table A-14. Examples of Significant Changes for Propellers (CS-P)

text: Table A-14. Examples of Significant Changes for Propellers (CS-P) (continued)

text: A.5.3 Table A-15 contains examples of changes that are ‘not significant’ for propellers (CS-P).

text: Table A-15. Examples of Not Significant Changes for Propellers (CS-P)

text: Table A-16. Application Chart for 21.A.101(a) and (b) and 21.A.19

text: Table A-17. Application Chart for 21.A.101(c) Excepted Products

text: C.1 Overview.

text: C.1.1 When a product is changed, some areas may change physically, while others may change functionally. EASA refers to this combination as changed and affected areas. For example, an extension to the wing of a fixed-wing aircraft would physically change the wing tip and likely other wing structure. Some areas of the airframe may have sufficient strength for the increase in load and would change functionally, i.e. they would carry greater load, but they would not change physically. These areas have associated certification specifications, which become part of the certification basis for the change.

text: C.1.2 Figure C-1 below provides an overview of one method that applicants may use to determine the changed and affected areas and the applicable certification specifications.

text: Figure C-1. Method to Determine the Changed and Affected Areas

text: C.2 Physical Changes.

text: C.2.1 Steps. — Step 1. Make a list of the physical changes. — Step 2. List the corresponding certification specifications applicable to the physical changes. — Step 3. List the amendment level recorded on the existing certification basis of the baseline product and the amendments on the date of application.

text: C.2.2 Example. The change is adding a winglet to a fixed-wing aircraft and a change to the leading-edge slats for a performance increase. As part of the change, an electrically driven slat actuator is modified by changing the mounting structure of the actuator used to connect the actuator to the slat. The actuator structure is changed. The electrical system in the actuator is not affected. The applicant would list certification specifications applicable to the actuator. The applicant would not list the certification specifications applicable to the electrical system of the actuator. See Table C-1 below for an example of how to chart a physical change and the associated certification specifications.

text: Table C-1. Example of Associating a Physical Change with the Applicable Certification Specifications

text: C.3 Functional Changes.

text: C.3.1 Steps. — Step 1. Describe each change. — Step 2. Describe the effects of the change (e.g. structural, performance, electrical, etc.). — Step 3. List the areas, systems, parts, and appliances that are affected by those effects. — Step 4. List the certification specifications associated with the effects for each area, system, part, or appliance. — Step 5. List the amendment level recorded on the existing certification basis of the baseline product and the amendments on the date of application.

text: C.3.2 Example. The change is adding a winglet to a fixed-wing aircraft and a change to the leading-edge slats for a performance increase. The wing root bending moment has increased. The loads in the wing box are increased but the wing box has sufficient structural margins to carry the higher loads. Thus, the wing box is not physically changed but its function has changed because it carries greater loads. See Table C-2 below for an example of how to chart a functional change, its effects, and the affected areas (steps 1 through 3 above). See Table C-3 below for an example of how to chart an area affected by a functional change and the associated certification specifications (steps 4 and 5 above).

text: Table C-2. Example of a Functional Change, Affected Areas, and Associated Effects

text: Table C-3. Example of Associating Affected Areas with the Applicable Certification Specifications

text: C.4 Combine the Lists.

text: C.4.1 EASA typically presents the certification basis for a product by certification specification and not by area. The next step is to combine these two lists. However, since only a portion of the product is being changed, the changed and affected areas of the new certification basis need to be identified. The unchanged area is not required to comply with the certification specifications in effect at the date of application. (See point 21.A.101(b)(2))

text: C.4.2 When the change is quite extensive, applicants will save time by listing all the certification specifications applicable to the category of product they are certifying. They can use Table C-4 below in the next step where they will identify any other exceptions that they would like EASA to consider. TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 106 of 141 An agency of the European Union

text: C.4.3 Example. If we use the examples above for the combined list for the actuator structural changes and the wing box functional change, then the certification basis would be listed as shown in Table C-4 below.

text: Table C-4. Example of a Combined List of Physical and Functional Changes with Applicable Certification Specifications

text: Amendment Levels

text: Certification Amendment of Changed and Affected Area Specification Existing Amendment on Certification Application Date Basis

text: D.1 Sample Questions in Determining Affected Areas. Below are sample questions to assist in determining whether an area is affected by the change. If the answer to any of these questions is yes, then the area is considered to be affected. 1. Is the area changed from the identified baseline product? 2. Is the area impacted by a significant product-level change? 3. Is there a functional effect on the unchanged area by a change to the system or system function that it is a part of? 4. Does the unchanged area need to comply with a system or product-level certification specification that is part of the change? 5. Are the product-level characteristics affected by the change? 6. Is the existing compliance for the area invalidated?

text: D.2 Sub-Areas within an Affected Area. Within areas affected by a change, there may be ‘sub-areas’ of the area that are not affected. For those sub-areas, the amendment levels at the existing certification basis remain valid, along with the previous compliance findings. For example, if a passenger seat fitting is changed as part of a significant change, then the structure of the seat is affected. Thus, the amendment level for CS 25.561 and CS 25.562, along with other applicable structural certification specifications, would be at the amendment level on the date of application (unless an exception is granted). However, the seat fabric is not affected, so the amendment level for CS 25.853 (flammability) may remain at the existing certification basis, and a new compliance finding would not be required.

text: APPENDIX E. PROCEDURE FOR EVALUATING MATERIAL CONTRIBUTION TO SAFETY OR IMPRACTICALITY OF APPLYING LATEST CERTIFICATION SPECIFICATIONS TO A CHANGED PRODUCT

text: E.1 Introduction.

text: E.1.1 The basic principle of enhancing the level of safety of changed aeronautical products is to apply the latest certification specifications for significant changes to the greatest extent practical. In certain cases, the cost of complying fully with a later certification specification may not be commensurate with the small safety benefit achieved. These factors form the basis where compliance with the latest standard may be considered impractical, thereby allowing compliance with an earlier certification specification. This Appendix gives one method of determining whether compliance with a later certification specification is impractical; however, it does not preclude the use of other methods for improving the safety of aeronautical products.

text: E.1.2 EASA recognises that other procedures can be used and have historically been accepted on a case-by-case basis. The acceptance of results through the use of these procedures may vary from state to state. Consequently, they may not be accepted through all bilateral certification processes. Regardless of which method is used, the process must show that a proposed certification basis is able to achieve a positive safety benefit for the overall product.

text: E.1.3 Regarding impracticality, any method used must encourage the incorporation of safety enhancements that will have the most dramatic impact on the level of safety of the aircraft while considering the effective use of resources. This important point is illustrated graphically in Figure E-1 below. This Figure notionally shows the interrelation between the total resources required for incorporating each potential safety enhancement with the corresponding net increase in safety benefit.

text: Figure E-1. Safety Benefits versus Resources

text: E.1.4 Typically, it is found that, for impractical certification basis changes, there are proposals that can achieve a positive safety benefit that are resource-effective. Conversely, there are proposals that may achieve a small safety benefit at the expense of a large amount of resources to implement them. Clearly, there will be a point where a large percentage of the potential safety benefit can be achieved with a reasonable expenditure of resources. The focus of the methods used should be to determine the most appropriate certification standards relative to the respective incremental cost to reach this point.

text: E.1.5 This Appendix provides procedural guidance for determining the material contribution to the level of safety, or the practicality of applying a certification standard at a particular amendment level to a changed product. The procedure is generic in nature and describes the steps and necessary inputs that may be used on any project to develop a position.

text: E.1.6 The procedure is intended to be used, along with good engineering judgment, to evaluate the relative merits of a changed product complying with the latest certification standards. It provides a means, but not the only means, for applicants to present their position regarding an exception under point 21.A.101(b)(3).

text: E.1.7 The certification basis for a change to a product will not be at an amendment level earlier than the existing certification basis.

text: E.2 Procedure for evaluating the material contribution or impracticality of applying the latest

text: certification specifications to a changed product.

text: The following are steps to determine the material contribution or impracticality of applying a certification specification at a particular amendment level.

text: E.2.1 Step 1: Identify the regulatory change being evaluated. In this step, applicants should document:

text: E.2.1.1 The specific standard (e.g. CS 25.365),

text: E.2.1.2 The amendment level of the existing certification basis for the standards, and

text: E.2.1.3 The latest amendment level of the certification specification.

text: E.2.2 Step 2: Identify the specific hazard that the certification specification addresses.

text: E.2.2.1 Each certification specification and its subsequent amendments addresses a hazard or hazards. In this step, the specific hazard(s) is (are) identified. This identification will allow for a comparison of the effectiveness of the amendment levels of the certification specification in addressing the hazard.

text: E.2.2.2 In many cases, the hazard and the cause of the hazard will be obvious. When the hazard and its related cause are not immediately obvious, it may be necessary to review the explanatory note (EN) and/or the impact assessment (IA) in the ED Decision by which the certification specification or its amendment was adopted. It may also be helpful to discuss the hazard with the responsible EASA team.

text: E.2.3 Step 3: Review the consequences of the hazard(s).

text: E.2.3.1 Once the hazard is identified, it is possible to identify the types of consequences that may occur due to the hazard. More than one consequence can be attributed to the same hazard. Typical examples of consequences would include but are not limited to: — incidents where only injuries occurred, — accidents where a total hull loss occurred, — accidents where less than 10 per cent of the passengers died, — accidents where 10 per cent or more passengers died, and — engine- and propeller-specific hazards.

text: E.2.3.2 The explanatory note (EN) and/or the impact assessment (IA) in the ED Decision may provide useful information regarding the consequences of the hazard that the certification specification addresses.

text: E.2.4 Step 4: Identify the historical and predicted frequency of each consequence.

text: E.2.4.1 Another source for determining impracticality is the historical record of the consequences of the hazard that led to a certification specification or an amendment to a certification specification. From these data, a frequency of occurrence for the hazard can be determined. It is important to recognise that the frequency of occurrence may be higher or lower in the future. Therefore, it also is necessary to predict the frequency of future occurrences.

text: E.2.4.2 More than one consequence can be attributed to the same hazard. Therefore, when applicable, the combination of consequences and frequencies of those consequences should be considered together.

text: E.2.4.3 The explanatory note (EN) and/or the impact assessment (IA) in the ED Decision may provide useful information regarding the frequency of an occurrence.

text: E.2.5 Step 5: Determine how effective full compliance with the latest amendment of the certification specification would be in addressing the hazard.

text: E.2.5.1 When each amendment is issued, it is usually expected that compliance with the certification specification would be completely effective in addressing the associated hazard for the designs and technology envisioned at the time. It is expected that the hazard would be eliminated, avoided, or mitigated. However, experience has shown that this may not always be the case. It is also possible that earlier amendment levels may have addressed the hazard but were not completely effective. A product may also contain a design feature(s) that provides a level of safety that approaches that of the latest certification specifications, yet is not fully compliant with the latest certification specifications. Therefore, in comparing the benefits of compliance with the existing certification basis to the latest amendment level, it is useful to estimate the effectiveness of both amendment levels in dealing with the hazard.

text: E.2.5.2 It is recognised that the determination of levels of effectiveness is normally of a subjective nature. Therefore, prudence should be exercised when making these determinations. In all cases, it is necessary to document the assumptions and data that support the determination.

text: E.2.5.3 The following five levels of effectiveness are provided as a guideline: 1. Fully effective in all cases. Compliance with the certification specification eliminates the hazard or provides a means to avoid the hazard completely. 2. Considerable potential for eliminating or avoiding the hazard. Compliance with the certification specification eliminates the hazard or provides a means to completely avoid the hazard for all probable or likely cases, but it does not cover all situations or scenarios. 3. Adequately mitigates the hazard. Compliance with the certification specification eliminates the hazard or provides a means to avoid the hazard

text: completely in many cases. However, the hazard is not eliminated or avoided in all probable or likely cases. Usually this action only addresses a significant part of a larger or broader hazard. 4. Hazard only partly addressed. In some cases, compliance with the certification specification partly eliminates the hazard or does not completely avoid the hazard. The hazard is not eliminated or avoided in all probable or likely cases. Usually this action only addresses part of a hazard. 5. Hazard only partly addressed but action has a negative side effect. Compliance with the certification specification does not eliminate or avoid the hazard or may have negative safety side effects. The action is of questionable benefit.

text: E.2.5.4 If it is determined that compliance with the latest certification specifications does not contribute materially to the product’s level of safety, applicants should skip Step 6 of this Appendix and go directly to Step 7 to document the conclusion. If it is determined that complying with the latest amendment of the certification specification contributes materially to the product’s level of safety, applicants should continue to Step 6 of this Appendix.

text: E.2.6 Step 6: Determine the incremental resource costs and cost avoidance.

text: E.2.6.1 There is always cost associated with complying with a certification specification. This cost may range from minimal administrative efforts to the resource expenditures that support full-scale testing or the redesign of a large portion of an aircraft. However, there are also potential cost savings from compliance with a certification specification. For example, compliance with a certification specification may avoid aircraft damage or accidents and the associated costs to the manufacturer for investigating accidents. Compliance with the latest amendment of a certification specification may also help a foreign authority to certify a product.

text: E.2.6.2 When determining the impracticality of applying a certification specification at the latest amendment level, only the incremental costs and safety benefits from complying with the existing certification basis should be considered.

text: E.2.6.3 When evaluating the incremental cost, it may be beneficial for applicants to compare the increase in cost of complying with the latest certification specifications with the cost of incorporating the same design feature in a new aircraft. In many cases, an estimate for the cost of incorporation in a new aircraft is provided by EASA in the regulatory impact assessment, which was presented when the corresponding certification specification was first issued. Incremental costs of retrofit/incorporation on existing designs may be higher than that for production. Examples of costs may include but are not limited to the following: Costs

text: The accuracies of fleet size projections, utilisation, etc., may be different from those experienced for derived product designs and must be validated. — Labour: work carried out in the design, fabrication, inspection, operation, or maintenance of a product for the purpose of incorporating or demonstrating compliance with a proposed action. Non-recurring labour certification specifications, including training, for the applicant supporting development and production of the product, should be considered. — Capital: construction of new, modified, or temporary facilities for design, production, tooling, training, or maintenance. — Material: costs associated with product materials, product components, inventory, kits, and spares. — Operating costs: costs associated with fuel, oil, fees, training, and expendables. — Revenue/utility loss: costs resulting from earning/usage capability reductions from departure delays, product downtime, and performance loss due to seats, cargo, range, or airport restrictions. — The cost of changing compliance documentation and/or drawings in itself is not an acceptable reason for an exception. Cost Avoidance. — Avoiding costs of accidents, including investigation of accidents, lawsuits, public relations activities, insurance, and lost revenue. — Foreign certification: conducting a single effort that would demonstrate compliance with the certification specifications of most certifying authorities, thus minimising certification costs.

text: E.2.7 Step 7: Document the conclusion. With the information from the previous steps documented and reviewed, the applicant’s position and rationale regarding whether complying with the latest certification specifications contributes materially to the product’s level of safety or its practicality can be documented. EASA records the determination of whether the conditions for the proposed exception were met. That determination is based on the information and analysis provided by the applicant in the preceding steps. If the determination to grant the exception is based on the product’s design features, those features are documented at a high level in the TCDS. Documentation in the TCDS is required so that the features are maintained during subsequent changes to the product, therefore, maintaining the product’s agreed level of safety. If the results of this analysis are inconclusive, then further discussions with EASA are warranted.

text: E.3 Examples of how to certify changed aircraft. The following examples illustrate the typical process an applicant follows. The process will be the same for all product types.

text: E.3.1 Example 1: FAR § 25.963, Fuel Tank Access Covers. TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 114 of 141 An agency of the European Union

text: NOTE: This example is taken from the FAA’s certification experience, so references to FAR sections and amendments are kept. This example is part of a significant change to a transport aeroplane that increases passenger payload and gross weight by extending the fuselage by 20 feet (6.1 metres). To accommodate the higher design weights and increased braking requirements and to reduce runway loading, the applicant will change the landing gear from a two-wheel to four-wheel configuration; this changes the debris scatter on the wing from the landing gear. EASA will require the new model of the aeroplane to comply with the latest applicable certification specifications based on the date of application. The wing will be strengthened locally at the side of the body and at the attachment of engines and landing gear, but the applicant would not like to alter the wing access panels and the fuel tank access covers. Although the applicant recognises that the scatter pattern and impact loading on the wing from debris thrown from the landing gear will change, the applicant proposes that it would be impractical to redesign the fuel tank access covers. Note: Point 21.A.21(c)(3) may be an additional reason why EASA would require compliance with CS 25.963(e), regardless of the ‘significant’ determination.

text: E.3.1.1 Step 1: Identify the regulatory change being evaluated. The existing certification basis of the aeroplane that is being changed is Part 25 prior to Amendment 25-69. Amendment 25-69 added the requirement that fuel tank access covers on transport category aeroplanes be designed to minimise penetration by likely foreign objects, and that they be fire-resistant.

text: E.3.1.2 Step 2: Identify the specific hazard that the certification specification

text: addresses.

text: Fuel tank access covers have failed in service due to impact with high-energy objects, such as failed tire tread material and engine debris following engine failures. In one accident, debris from the runway impacted a fuel tank access cover, causing its failure and subsequent fire, which resulted in fatalities and loss of the aeroplane. Amendment 25-69 will ensure that all access covers on all fuel tanks are designed or located to minimise penetration by likely foreign objects, and that they are fire-resistant.

text: E.3.1.3 Step 3: Review the history of the consequences of the hazard(s). There have been occurrences with injuries and with more than 10 per cent deaths.

text: E.3.1.4 Step 4: Identify the historical and predicted frequency of each consequence. In 200 million departures of large jets, there was: — 1 occurrence with more than 10 per cent deaths, and — 1 occurrence with injuries. There is no reason to believe that the future rate of accidents will be significantly different from the historical record.

text: E.3.1.5 Step 5: Determine how effective full compliance with the latest amendment of

text: the certification specifications would be in addressing the hazard.

text: There is considerable potential for eliminating or avoiding the hazard. Compliance with Amendment 25-69 eliminates the hazard or provides a means to avoid the hazard completely for all probable or likely cases. However, it does not cover all situations or scenarios.

text: E.3.1.6 Step 6: Determine resource costs and cost avoidance. Costs. — For a newly developed aeroplane, there would be minor increases in labour resulting from design and fabrication of new fuel tank access covers. — There would be a negligible increase in costs related to materials, operating costs, and revenue utility loss. Cost avoidance. — There were 2 accidents in 200 million departures. The applicant believes that it will manufacture more than 2 000 of these aeroplanes. These aeroplanes would average 5 flights a day. Therefore, statistically there will be accidents in the future if the hazard is not alleviated. Compliance will provide cost benefits related to avoiding lawsuits, accident investigations, and public relations costs. — There are cost savings associated with meeting a single certification basis for EASA’s and foreign standards.

text: E.3.1.7 Step 7: Document the conclusion. It is concluded that compliance with the latest certification specification increases the level of safety at a minimal cost to the applicant. Based on the arguments and information presented by the applicant through the certification review item (CRI) process, EASA determined that meeting the latest amendment would be practical. EASA has also found that fuel tank access covers that are not impact-resistant and fire-resistant, and which are located where a strike is likely, is an unsafe feature or characteristic which precludes the issue of a type certificate under 21.21(c)(3).

text: E.3.2 Example 2: FAR § 25.365, Pressurized Compartment Loads. NOTE: This example is taken from the FAA’s certification experience, so references to FAR sections and amendments are kept. This example is a passenger-to-freighter conversion STC. This change affects the floor loads on the aeroplane as well as the decompression venting.

text: E.3.2.1 Step 1: Identify the regulatory change being evaluated.

text: The existing certification basis of the aeroplane that is being changed includes § 25.365 at Amendment 25-00. The initial release of § 25.365 required that the interior structure of passenger compartments be designed to withstand the effects of a sudden release of pressure through an opening resulting from the failure or penetration of an external door, window, or windshield panel, or from structural fatigue or penetration of the fuselage, unless shown to be extremely remote. Amendment 25-54 revised § 25.365 to require that the interior structure be designed for an opening resulting from penetration by a portion of an engine, an opening in any compartment of a size defined by § 25.365(e)(2), or the maximum opening caused by a failure not shown to be extremely improbable. The most significant change is the ‘formula hole size’ requirement introduced into § 25.365(e)(2) at Amendment 25-54. Amendment 25-71/72 (Amendments 25-71 and 25-72 are identical) extended the regulation to all pressurised compartments, not just passenger compartments, and to the pressurisation of unpressurised areas. Pressurisation of unpressurised areas had previously been identified as an unsafe feature under § 21.21(b)(2). Amendment 25-87 redefined the pressure differential load factor that applies above an altitude of 45 000 feet. Compliance with Amendment 25-87 is not affected since the aeroplane does not operate above an altitude of 45 000 feet. The applicant proposes to meet the ‘pressurisation into unpressurised areas’ requirement introduced in Amendment 25-71/72. The applicant does not propose to comply with the ‘formula hole size’ requirement introduced in § 25.365(e)(2) at Amendment 25-54.

text: E.3.2.2 Step 2: Identify the specific hazard that the certification specification

text: addresses.

text: The hazard is a catastrophic structure and/or system failure produced by a sudden release of pressure through an opening in any compartment in flight. This opening could be caused by an uncontained engine failure, an opening of a prescribed size due to the inadvertent opening of an external door in flight, or an opening caused by a failure not shown to be extremely improbable. The opening could be caused by an event that has yet to be identified.

text: E.3.2.3 Step 3: Review the history of the consequences of the hazard(s). There have been occurrences with injuries, with less than 10 per cent deaths and with more than 10 per cent deaths.

text: E.3.2.4 Step 4: Identify the historical and predicted frequency of each consequence. In 200 million departures of large jets, there were: — 2 occurrences with more than 10 per cent deaths, — 1 occurrence with less than 10 per cent deaths, and — 1 occurrence with injuries. TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 117 of 141 An agency of the European Union

text: There is no reason to believe that the future rate of accidents will be significantly different from the historical record.

text: E.3.2.5 Step 5: Determine how effective full compliance with the latest amendment of

text: the certification specifications would be at addressing the hazard.

text: Compliance with the latest amendment eliminates the hazard or provides a means to avoid the hazard completely. Design changes made to the proposed aeroplane bring it closer to full compliance with § 25.365 at Amendment 25-54. The original aeroplane was shown to meet the requirements for a hole size of 1.1 square feet. Amendment 25-54 would require a hole size of 5.74 square feet, and the current reinforcements for the converted aeroplane can sustain a hole size of 3.65 square feet in the forward area and 2.65 square feet at the aft area. This is 3.1 and 2.4 times, respectively, better than the original design condition of Amendment 25-0 and is a significant improvement over the worldwide passenger fleet in service.

text: E.3.2.6 Step 6: Determine resource costs and cost avoidance. Costs. There would be savings in both labour and capital costs if compliance were shown to Amendment 25-0 instead of Amendment 25-54. Major modifications to the floor beams would be necessary to meet the ‘formula hole size’ requirement in Amendment 25-54. Cost avoidance. There were 4 accidents in 200 million departures. The applicant believes that it will manufacture more than 2 000 of these aeroplanes. These aeroplanes would average 2 flights a day. Therefore, statistically there will be accidents in the future if the hazard is not alleviated. Compliance will provide cost benefits related to avoiding lawsuits, accident investigations, and public relations costs. There are cost savings associated with meeting a single certification basis for FAA and foreign regulations.

text: E.3.2.7 Step 7: Document the conclusion regarding practicality. The design complies with § 25.365 at Amendments 25-0, 25-71/72, and 25-87, and it is nearly in full compliance with Amendment 25-54. The design would adequately address the hazard at an acceptable cost. Therefore, based on arguments of impracticality discussed in an issue paper, the FAA accepts the applicant’s proposal to comply with § 25.365 at Amendment 25-0.

text: E.3.3 Example 3: FAR § 25.981, Fuel Tank Ignition Prevention. NOTE: This example is taken from the FAA’s certification experience, so references to FAR sections and amendments are kept.

text: This example is part of a significant change to a transport aeroplane that increases passenger payload and gross weight by extending the fuselage by 20 feet (6.1 metres). To accommodate the longer fuselage, the applicant will modify systems wiring installations; this includes changing fuel tank system wiring. The new model of the aeroplane will be required to comply with the latest applicable certification specifications based on the date of application.

text: E.3.3.1 Step 1: Identify the regulatory change being evaluated. The existing certification basis of the aeroplane that is being changed is Part 25 prior to Amendment 25-102 but includes Amendment 25-40. Note: If the original certification basis does not include Amendment 25-40, the certification basis should be considered not adequate for fuel tank ignition prevention. The 2001 Fuel Tank Safety (FTS) rule adopted Amendment 25-102 to add explicit requirements in § 25.981(a)(3) for demonstrating that the design precludes fuel tank ignition sources. This was required, but had in several cases not been properly applied in demonstrating compliance with §§ 25.901 and 25.1309. Amendment 25-102, § 25.981(b), added a requirement to develop fuel tank system airworthiness limitations to maintain the ignition prevention features of the design. Section H25.4, Amendment 25-102, requires the inclusion of those fuel tank system airworthiness limitations in the Airworthiness Limitations section of the Instructions for Continued Airworthiness (ICA). Since the FAA policy for performing the failure analysis to demonstrate compliance with §§ 25.901 and 25.1309 at Amendment 25-40 and 25-46 was adopted in the explicit fuel tank ignition prevention failure analysis requirements of § 25.981(a)(3), the incremental requirement for demonstrating compliance with the ignition prevention requirements of Amendment 25-102 is to develop and implement the fuel tank system airworthiness limitations instead of developing Certification Maintenance Requirements in accordance with § 25.901(b)(2) at Amendments 25-40 through 25-46 and AC 25-19A.

text: E.3.3.2 Step 2: Identify the specific hazard that the certification specification

text: addresses.

text: The FAA issued the 2001 FTS rule to preclude fuel tank ignition sources because of a history of fuel tank explosions. The catastrophic TWA Flight 800 in-flight fuel tank explosion on July 17, 1996, caused the death of all 230 people on board.

text: E.3.3.3 Step 3: Review the history of the consequences of the hazard(s). There have been occurrences with injuries, with more than 10 per cent deaths, less than 10 per cent deaths, and no deaths.

text: E.3.3.4 Step 4: Identify the historical and predicted frequency of each consequence. The 1998 Aviation Rulemaking Advisory Committee Fuel Tank Harmonisation Working Group report documented the number of historical fuel tank explosions as 16, which caused a total of 539 fatalities.

text: There have been 2 additional fuel tank explosions since that report was issued: — March 3, 2001: Thai Airways International Flight 114 experienced a fuel tank explosion on the ground that caused 1 fatality and 3 serious injuries. The explosion and subsequent fire destroyed the aeroplane. — May 4, 2006: A Malaysia Airlines Boeing 727 experienced a wing tank low pressure explosion during ground operations. There was no fire and no injuries. The wing structure suffered significant damage. There is no reason to believe that the future rate of accidents will be significantly different from the historical record if fuel tank system airworthiness limitations are not included in the ICA as is permitted in earlier amendment levels.

text: E.3.3.5 Step 5: Determine how effective full compliance with the latest amendment of

text: There is considerable potential for eliminating or avoiding the hazard. In the 2008 Fuel Tank Flammability Reduction (FTFR) rule, the FAA estimated that compliance with the ignition prevention requirements of Amendment 25-102, together with the fuel tank ignition prevention airworthiness directives issued as a result of the Special Federal Aviation Regulation number 88 reviews, resulted in the range of effectiveness in preventing fuel tank explosions between 25 to 75 per cent with a median value of 50 per cent (73 FR 42449).

text: E.3.3.6 Step 6: Determine resource costs and cost avoidance. Costs. — For newly developed designs, there would be minor increases in costs resulting from the identification and implementation of fuel tank system airworthiness limitations. — There would be no increase in costs related to materials, operating costs, and revenue utility loss. Cost avoidance. There were 18 accidents in 200 million departures. The applicant believes that it will manufacture more than 2 000 of these aeroplanes or derivatives of these aeroplanes. These aeroplanes would average 5 flights a day. Therefore, statistically there will be accidents in the future if the hazard is not alleviated. Compliance will provide cost benefits related to avoiding fatalities and injuries.

text: E.3.3.7 Step 7: Document the conclusion. It is concluded that compliance with the latest certification specification increases the level of safety at a minimal cost to the applicant. Based on the arguments and information presented by the applicant through the issue paper process, the FAA determined that meeting the latest amendment would be practical.

text: The following is additional background on the specific hazard that the certification specification addresses: As stated in the 2001 FTS rule under ‘Changes to Part 25’, § 25.981(a)(3) was adopted because the previous regulations (§§ 25.901 and 25.1309) were not always properly applied. Section 25.901(b)(2), Amendments 25-40 through 46, requires in part preventative maintenance as necessary to ensure that components of the powerplant installation, which includes the fuel tank system, will safely perform their intended function between inspections and overhauls defined in the maintenance instructions. When demonstrating compliance with the requirements of § 25.901(b) for maintenance of fuel tank ignition prevention features, the policy has been that the applicant identify critical features as critical maintenance requirements using the guidance in AC 25-19A.

text: F.1 Introduction. Service experience may support the application of an earlier certification specification pursuant to point 21.A.101(b)(3) if, in conjunction with the applicable service experience and other compliance measures, the earlier certification specification provides a level of safety comparable to that provided by the latest certification specification. The applicant must provide sufficient substantiation to allow EASA to make this determination. A statistical approach may be used, subject to the availability and relevance of data, but sound engineering judgment must be used. For service history to be acceptable, the data must be both sufficient and pertinent. The essentials of the process involve: — A clear understanding of the certification specification change and the purpose for the change, — A determination based on detailed knowledge of the proposed design feature, — The availability of pertinent and sufficient service experience data, and — A comprehensive review of that service experience data.

text: F.2 Guidelines. The CRI process (either as a stand-alone CRI or included in the CRI A-01) would be used, and the applicant should provide documentation to support the following: F.2.1 The identification of the differences between the certification specification in the existing basis and the certification specification as amended, and the effect of the change to the specification. F.2.2 A description as to what aspect(s) of the latest certification specifications the proposed changed product would not meet. F.2.3 Evidence showing that the proposed certification basis for the changed product, together with applicable service experience, relative to the hazard, provides a level of safety that approaches the latest certification specification, yet is not fully compliant with the latest certification specifications. F.2.4 A description of the design feature and its intended function. F.2.5 Data for the product pertinent to the requirement. F.2.5.1 Service experience from such data sources, such as: — Accident reports, — Incident reports, — Service bulletins,

text: — Airworthiness directives, — Repairs, — Modifications, — Flight hours/cycles for fleet leader and total fleet, — World airline accident summary data, — Service difficulty reports, — Accident Investigation Board reports, and — Warranty, repair, and parts usage data. F.2.5.2 Show that the data presented represent all relevant service experience for the product, including the results of any operator surveys, and is comprehensive enough to be representative. F.2.5.3 Show that the service experience is relevant to the hazard. F.2.5.4 Identification and evaluation of each of the main areas of concern with regard to: — Recurring and/or common failure modes, — Cause, — Probability by qualitative reasoning, and — Measures already taken and their effects. F.2.5.5 Relevant data pertaining to aircraft of similar design and construction may be included. F.2.5.6 Evaluation of failure modes and consequences through analytical processes. The analytical processes should be supported by: — A review of previous test results, — Additional detailed testing as required, or — A review of aircraft functional hazard assessments (FHA) and any applicable system safety assessments (SSA) as required. F.2.6 A conclusion that draws together the data and the rationale. F.2.7 These guidelines are not intended to be limiting, either in setting the required minimum elements or in precluding alternative forms of submission. Each case may be different, based on the particulars of the system being examined and the requirement to be addressed.

text: F.3 Example: 25.1141(f) for Transport Category Aeroplanes. NOTE: This example is taken from the FAA’s certification experience, so references to FAR sections and amendments are kept.

text: F.3.1 The following example, for transport category aeroplanes (§ 25.1141(f), APU Fuel Valve Position Indication System), illustrates the typical process an applicant follows. The process will be the same for all product types.

text: F.3.2 This example comes from a derived model transport aeroplane where significant changes were made to the main airframe components, engines and systems, and APU. The baseline aeroplane has an extensive service history. The example shows how the use of service experience supports a finding that compliance with the latest certification specifications would not contribute materially to the level of safety and that application of the existing certification basis (or earlier amendment) would be appropriate. The example is for significant derived models of transport aeroplanes with extensive service history. It illustrates the process, following the guidelines in this Appendix, but does not include the level of detail normally required.

text: F.3.2.1 Determine the differences between the certification specifications applied in the original certification basis and the latest certification specification, and the effect of the change to the certification specifications. The original certification basis of the aeroplane that is being changed is the initial release of Part 25. Amendment 25-40 added requirement § 25.1141(f), which mandates that power-assisted valves must have a means to indicate to the flight crew when the valve is in the fully open or closed position, or is moving between these positions. The addressed hazard would be risk of APU fire due to fuel accumulation caused by excessive unsuccessful APU start attempts.

text: F.3.2.2 What aspect of the proposed changed product would not meet the latest certification specifications? The proposed APU fuel valve position indication system does not provide the flight crew with fuel valve position or transition indication and, therefore, does not comply with the requirements of § 25.1141(f).

text: F.3.2.3 The applicant provides evidence that the proposed certification basis for the changed product, together with applicable service experience of the existing design, provide a level of safety that approaches, yet is not fully compliant with, the latest certification specifications. The APU fuel shut-off valve and actuator are unchanged from those used on the current family of aeroplanes, and have been found to comply with the earlier Amendment 25-11 of § 25.1141. The existing fleet has achieved approximately (#) flights during which service experience of the existing design has been found to be acceptable. If one assumes a complete APU cycle, i.e. start-up and shutdown for each flight, the number of APU fuel shut-off valve operations would be over 10 cycles, which demonstrates that the valve successfully meets its intended function and complies with the intent of the certification specification.

text: F.3.2.4 The applicant provides a description of the design feature and its intended function. The fuel shut-off valve, actuator design, and operation is essentially unchanged with the system design ensuring that the valve is monitored for proper cycling from closed to open at start. If the valve is not in the appropriate position (i.e. closed), then the APU start is terminated, an indication is displayed on the flight deck, and any further APU starts are prevented. Design improvements using the capability of the APU electronic control unit (ECU) have been incorporated in this proposed product change. These design changes ensure that the fuel valve indication system will indicate failure of proper valve operation to the flight crew, and these features increase the level of functionality and safety, but the system does not indicate valve position as required by § 25.1141(f).

text: F.3.2.5 The FAA and the applicant record this in an issue paper. The FAA can use the G-1 or a technical issue paper for this purpose. An issue paper was coordinated, included data, or referenced reports documenting relevant service experience compiled from incident reports, fleet flight hour/cycle data, and maintenance records. The issue paper also discussed existing and proposed design details, failure modes, and analyses showing to what extent the proposed aeroplane complies with the latest amendment of § 25.1141. Information is presented to support the applicant’s argument that compliance with the latest amendment would not materially increase the level of safety. Comparative data pertaining to aircraft of similar design and construction are also presented.

text: F.3.2.6 The conclusion, drawing together the data and rationale, is documented in the G-1 issue paper. The additional features incorporated in the APU fuel shut-off valve will provide a significant increase in safety to an existing design with satisfactory service experience. The applicant proposes that compliance with the latest amendment would not materially increase the level of safety and that compliance with § 25.1141 at Amendment 25-11 would provide an acceptable level of safety for the proposed product change.

text: CHANGED PRODUCT RULE (CPR) DECISION RECORD

text: H.1 Example 1. H.1.1 This optional tool may be used to establish the applicable airworthiness and OSD certification specifications that will become part of the type-certification basis for airworthiness or OSD certification basis. For a significant change, the applicant must demonstrate compliance for the change and the area affected by the change with the certification specifications that were in effect at the date of application. However, in some cases earlier or later certification specifications can be used, as allowed in point 21.A.101. H.1.2 In order to efficiently determine and agree upon a certification basis with EASA, the following information is useful to understand the applicant’s position: H.1.2.1 The scope of the change. This includes a high-level description of the physical and functional changes and performance/functional characteristics, which are changed as a result of the physical or functional change, and the certification specifications for which compliance demonstration is required as a result of the change. H.1.2.2 The amendment level of all the applicable certification specifications at the date of application. H.1.2.3 The proposed certification basis, including amendment levels. H.1.2.4 Applicants who propose a certification basis that includes amendment levels earlier than what was in effect at the date of application should include the exception as outlined in point 21.A.101 and their justification if needed. H.1.3 Exceptions. H.1.3.1 Unrelated changes that are not significant (point 21.A.101(b)(1)). H.1.3.2 Not affected by the change (point 21.A.101(b)(2)). H.1.3.3 Compliance with the certification specification would not contribute materially to the level of safety (point 21.A.101(b)(3)). H.1.3.4 Compliance with the certification specification would be impractical (point 21.A.101(b)(3)). H.1.4 One easy way to document the proposed certification basis is using a tabular form as shown in Table below.

text: Table H-1. Tabular Form for Documenting a Proposed Certification Basis

text: Amendment Levels Applicant Justification for CS Amendment Proposed Affected Area Existing TCDS Lower Amendment at Date of Amendment Amendment Level and Comments Application Level

text: Subpart A — General

text: Subpart B — Flight

text: H.1.5 Best Practices.

text: H.1.5.1 Account for all certification specifications, even if they are not applicable.

text: H.1.5.2 Mark certification specifications that are not applicable as ‘N/A’.

text: H.1.5.3 If more than one amendment level is used depending on the area of the product, list all areas and amendment levels at each area with proper justification.

text: H.1.5.4 If the justification is long, provide the justification below the table and only place the certification specification reference and note in the comment field.

text: H.1.5.5 Include airworthiness and OSD standards required by other EU regulations (e.g. Part-26) of affected areas.

text: H.2 Example 2. Pages 129 through 135 of this Appendix contain another example for documenting a proposed certification basis.

text: Title of Design Change

text: Product Name or Change to Type Certificate [XXXX]

text: Proposed Certification Basis Pursuant to point 21.A.101

text: 1. INTRODUCTION.

text: 1.1 REFERENCE DOCUMENTS.

text: Reference Title

text: [1] Point 21.A.101 Designation of applicable certification specifications and environmental protection requirements [2] GM 21.A.101-1B Establishing the Certification Basis of Changed Aeronautical Products [3] XXXX Application letter [4] Type Certificate Product type-certification basis YYYY [5] Document ZZZZ Certification plan [6] <The above-referenced documents are examples. Each applicant should reference documents appropriate to their products and procedures.>

text: 1.2 ACRONYMS.

text: Acronym Meaning

text: AFM Aircraft Flight Manual AMC Acceptable Means of Compliance CRI Certification Review Item ELOS Equivalent Level of Safety ESF Equivalent Safety Finding GM Guidance Material MOC Means of Compliance SC Special Condition TC Type Certificate <This section constitutes a representative list of acronyms. Each applicant should provide an acronym list appropriate for their product and document.>

text: 1.3 PURPOSE OF THE DOCUMENT.

text: The purpose of this document is to propose the certification basis applicable to [Product Design Change] in accordance with point 21.A.101. <Note that this optional document is intended to be used for changes to type-certified products for which the change or a portion of the change is significant at the product level pursuant to TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 130 of 141 An agency of the European Union

text: 21.A.101. Not significant changes being accomplished concurrently with significant changes(s) would also be identified in this document.>

text: 1.4 PURPOSE OF THE CHANGE.

text: High-level description of the project (e.g. aircraft Model 123 is being modified from a passenger configuration to an all-cargo configuration).

text: 2. DESIGN DEFINITION.

text: 2.1 BASELINE PRODUCT.

text: The type design to be changed, which is also known as the ‘baseline product,’ is the Model Series___ (this should be a specific product configuration, such as a specific serial number or line number). The reference product certification basis is TCDS No. [XXXX], issued on [DATE].

text: 2.2 DESIGN CHANGE AND BASELINE PRODUCT COMPARISON SUMMARY.

text: <Example table where the product is an aeroplane. This is a representative set of data that may be provided by the applicant.>

text: Specification Model Series X Model Series Y

text: Max Taxi Weight — MTW (lb) A1 A2 Max Take-off Weight — MTOW (lb) B1 B2 Max Landing Weight — MLW (lb) C1 C2 Max Zero Fuel Weight — MZFW (lb) D1 D2 Max Length (ft, in) E1 E2 Max Height (ft, in) F1 F2 Wing Span (ft, in) G1 G2 Horizontal Tail Span (ft, in) H1 H2 Fuel Capacity (gal) I1 I2 Total Cargo Volume (ft ) J1 J2 Max Passenger Limit — one class seating K1 K2 (occupants) Engine Types L1 & M1 L2 Maximum Engine Thrust T1 T2

text: 2.3 DESCRIPTION OF DESIGN CHANGE, GROUPING AND CLASSIFICATION.

text: 2.3.1 SIGNIFICANT CHANGE(S).

text: <Describe here the stand-alone change(s) and/or change grouping(s) that are part of the proposed changed product and are proposed as significant. Include with each stand-alone change or change grouping the relevant accumulated change(s) and the applicable physical and/or functional effects. Note, the description should be detailed enough to identify why the change or change grouping is proposed as significant.> The following group of changes is proposed as significant based on [GM 21.A.101-1, Appendix A, ‘[Description of Change in Appendix A]] or [the general configuration is not retained, principles of construction are not retained, or assumptions for certification of the product to be changed do not remain valid].

text: Changes Related to [Title of Significant Change X]:

text: [Title of High-Level Change C1]

text: The areas of physical change are: — [design change xx] — [design change yy] — [design change zz] The areas unchanged but affected by the change are: — [affected area aaa] — [affected area bbb] — [affected area ccc]

text: [Title of High-Level Change C2]…

text: 2.3.2 UNRELATED NOT-SIGNIFICANT CHANGES.

text: <Describe here the not significant stand-alone changes or change groupings that are part of the modification but are unrelated to any of the significant changes described in paragraph 2.3.1.> [Title of High-Level Change D1]. [Description]. <The description must be just detailed enough to serve its purpose, which is to identify why each of those changes is not significant and unrelated.> [Title of High-Level Change D2]. [Description]…

text: 3. IDENTIFICATION OF APPLICABLE CERTIFICATION STANDARDS.

text: 3.1 PROPOSED CERTIFICATION BASIS.

text: Based on the effective application date, [date], under the provisions of 21.A.101, the applicable certification standards for the [Title of Design Change] are proposed as follows. The proposed TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 132 of 141 An agency of the European Union

text: certification basis includes exceptions to earlier amendments (reversions), deviations, special conditions, and equivalent (level of) safety findings.

text: 3.1.1 Certification specifications effective at the date of application.

text: Applicable certification specifications in effect on the date of the application are: <List the applicable parts and amendment levels here.> Example for large aeroplanes: A. Airworthiness: — CS-25, — CS-AWO. B. Operational Suitability Data: — CS-CCD, — CS-FCD, — CS-MCSD (to be published), — CS-MMEL, — CS-SIMD. C. Environmental Protection: — CS-34, — CS-36.

text: 3.1.2 Point 21.A.101 exception rationale.

text: The completed rationale for each does not contribute materially to the level of safety (DCMLS) or impracticality exception is provided in this section. Exception 1: … Exception 2: …

text: 3.1.3 Optional certification standards

text: Applicable certification specifications in effect on the date of the application are: <List the applicable parts and amendment levels here.> Example for large aeroplanes: — CS 25.803, Emergency evacuation, Amendment 12, — CS 25.1810, Emergency egress assisting means and escape routes, Amendment 17.

text: 3.1.4 Design-related requirements from other aviation domains.

text: Applicable certification specifications in effect on the date of the application are:

text: <List the applicable parts and amendment levels here.> Example for large aeroplanes: — CS-ACNS Communications, Navigation and Surveillance — Initial Issue, dated 17 December 2013, Subpart D Sections 2/3, — CS-26.

text: 3.1.5 Proposed Special Conditions.

text: Special Condition Effective Date Title (or TBD) (or TBD)

text: 3.1.6 Equivalent Safety Findings.

text: ELOS Memo No Title Applicable Standard (or TBD)

text: 3.1.7 Deviations.

text: Deviation No Date Issued Title Applicable Standard (or TBD) (or TBD)

text: 3.1.8 Elect to comply

text: Elect to Comply No Date Issued Title Applicable Standard (or TBD) (or TBD)

text: Proposed Certification Basis

text: The certification basis is a complete extract from the applicable FAA 14 CFR part [A] and it references the certification basis [B]. Column [C] identifies the amendment level for the specific requirement on the date of application. The changed product’s certification basis is proposed in last column [D]. References to FAR sections and amendments are kept.

text: Example for a Part 25 aeroplane:

text: [A] [C] [D] [B] Amendment Proposed Title Existing Level on Amendment Applicable Area Notes (or subparagraph) Certification Basis Application for Changed Amendment Level Requirement Date Product

text: Weight limits

text: 25.25 25-23 25-63 25-63 Product

text: Propeller speed and pitch limits

text: Not applicable to 25.33 N/A 25-72 N/A — Changed Product (Jet Aircraft)

text: Equipment, systems, and installations

text: Changed and Affected 25-41 25-123 25-123 25.1309(a) Areas

text: Exception — Not See example 1 in 25-41 25-123 25-41 Affected section 3.1.2

text: Function and installation: EWIS

text: 25.1703 See example 2 in N/A 25-123 N/A Exception — Product section 3.2.1

text: APPENDIX I. RELATED DOCUMENTS

text: I.1 Related Part 21 requirements. — 21.A.15, Application — 21.A.16A, Certification specifications — 21.A.16B, Special conditions — 21.A.17A, Type-certification basis — 21.A.17B, Operational suitability data certification basis — 21.A.19, Changes requiring a new type certificate — 21.A.21, Issue of type certificate — 21.A.23, Issue of restricted type certificate — 21.A.31, Type design — 21.A.41, Type certificate — 21.A.91, Classification of changes to a type certificate — 21.A.93, Application — 21.A.101, Designation of applicable certification specifications and environmental protection requirements. — 21.A.103, Issue of approval — 21.A.113, Application for supplemental type certificate — 21.A.115, Issue of a supplemental type certificate

text: APPENDIX J. DEFINITIONS AND TERMINOLOGY

text: J.1 Aeronautical product. The terms ‘aeronautical product’ or ‘product’ used in this guidance material include type-certified aircraft, engines, or propellers and, for the purpose of this GM, an ETSOA’d APU.

text: J.2 Assumptions used for certification. The assumptions used for certification are the evaluations and decisions that led to the approval of the baseline product’s characteristics. Examples of the product’s baseline characteristics include but are not limited to the following: — Design methodologies, methods of compliance, and standards used to achieve compliance with the certification specifications making up the certification basis; — Structural, mechanical, electrical, propulsion, aerodynamic, performance, operational, and maintenance characteristics; — Operational and flight envelopes defining the product performance and capabilities at specified weights, speeds, altitudes, load factors, and centres of gravity; — Crashworthiness; — Role or mission; — Airworthiness and operational limitations; or — Pilot training, if necessary.

text: J.3 Baseline product. It is an aeronautical product with a specific, defined approved configuration and certification basis that the applicant proposes to change.

text: J.4 Certification basis. The applicable airworthiness and OSD certification specifications as provided for in points 21.A.17A and 21.A.17B and established for the change according to point 21.A.101, as appropriate, special conditions, equivalent level of safety findings, elects to comply, and deviations applicable to the product to be certified.

text: J.5 Change The term ‘change’ refers to a change to a product type certificate (as defined in point 21.A.41) approved or to be approved under Subpart D or Subpart E (as a supplemental type certificate) of Part 21, including a change to an STC or a change to the ETSOA for auxiliary power units (APUs) under Subpart O. A change may consist of a single stand-alone change to one TC component or several interrelated changes to different TC components (e.g. type design, operating characteristics, OSD, environmental protection characteristics, etc. (see point 21.A.41 and GM to 21.A.90)).

text: J.6 Design change. The term ‘design change’ refers to a change to the type design (as defined in point 21.A.31) of an aeronautical product. In the context of this document, the terms ‘change to the type design’, ‘modification’, ‘design change’, and ‘type design change’ are synonymous.

text: J.7 Earlier standards. The certification specifications or previous standards in effect prior to the date of application for the change, but not prior to the existing certification basis.

text: J.8 Existing certification basis. The certification specifications or previous standards incorporated by reference in the type certificate of the baseline product to be changed.

text: J.9 Latest standards. The certification specifications in effect on the date of application for the change.

text: J.10 Previous relevant design changes. Previous design changes, the cumulative effect of which could result in a product significantly or substantially different from the original product or model, when considered from the last time the latest standards were applied.

text: J.11 Product-level change. A change or combination of changes that makes the product distinct from other models of the product (e.g. range, payload, speed, design philosophy). Product-level change is defined at the aircraft, aircraft engine, or propeller level of change.

text: J.12 Secondary change. A change that is part of a significant physical change that does not contribute materially to the level of safety. Guidance is contained in paragraph 3.10.1.4 of this GM.

text: J.13 Significant change. A change to the type certificate to the extent that it changes one or more of the following, but not to the extent to be considered a substantial change: the general configuration, principles of construction, or the assumptions used for certification. The significance of the change is considered in the context of all previous relevant design changes and all related revisions to the applicable standards. Not all product-level changes are significant.

text: J.14 Significant change to area. For aircraft excepted under point 21.A.101(c) only: a change to an area is significant if the general configuration or the principles of construction in that area are not retained, or the assumptions used for the certification of that area do not remain valid.

text: J.15 Substantial change. A change that is so extensive that a substantially complete investigation of compliance with the applicable certification basis is required, and consequently a new type certificate is required pursuant to point 21.A.19.

text: 2 AMCs to 21.A.143, 21.A.243, 21.A.14(b), 21.A.112B(b) and 21.A.432B(b) are amended as follows:

text: Flight Test Operations Manual (FTOM)

text: 1. General a. Scope: The FTOM covers flight test operations. The FTOM complexity should be proportionate to the aircraft and the organisation complexity. b. Format The FTOM may: – be included in the Design Organisation Approval (DOA)/Production Organisation Approval (POA)/Alternative Procedure to DOA (APDOA) documents, or – be a separate manual. The FTOM may make reference to other documents to cover the contents listed below, e.g. for record-keeping. c. Use by contractors or sub-contractors: When flight tests are performed by contractors or sub-contractors, they should comply with the FTOM of the primary organisations, unless they have established an FTOM in compliance with Part 21, the use of which has been agreed between the two organisations. 2. The FTOM should contain the following elements: a. Exposition (not applicable in the case of APDOA): If the FTOM is presented as a separate document, it should include a chart indicating the structure of the organisation and, more specifically, the functional links of the people in charge of flight test activities. It should also mention the coordination between all departments affecting flight test, e.g. Design Office, Production and Maintenance, in particular coordination for the establishment and update of a Flight Test Programme. b. Risk and safety management: The FTOM should describe the organisation’s policy in relation to risk and safety assessment, mitigation and associated methodologies. c. Crew members: According to the flight test category, the FTOM should describe the organisation’s policy on the composition of the crew (including the need to use a Lead Flight Test Engineer (LFTE)) and the competency competence and currency of its flight test crew members, including procedures for appointing crew members for each specific flight. All crew members should be listed in the FTOM. A flight time limitation policy should be established. d. Carriage of persons other than crew members: According to the flight test category, the FTOM should describe the organisation’s policy in relation TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 139 of 141 An agency of the European Union

text: to the presence and safety on-board of people other than crew members (i.e. with no flying duties). People other than crew members should not be allowed on board for Category 1 flight tests. e. Instruments and equipment: The FTOM should list, depending on the nature of the flight, the specific safety-related instruments and equipment that should be available on the aircraft or carried by people on board. The FTOM should contain provisions to allow flights to take place in case of defective or missing instruments or equipment. f. Documents: The FTOM should list the documents to be produced for flight test, and include (or refer to) the procedures for their issue, update and follow-up to ensure the documents’ configuration control: (i) documents associated with a Flight Test Programme: - Flight Order for a given flight, which should include:  a list of the tests to be performed and associated conditions;  safety considerations relevant to the flight;  category of the flight (e.g. Category 1);  composition of the crew;  names of persons other than crew members;  aircraft configuration items relevant to the test to be highlighted to the crew;  loading of the aircraft;  reference to approved flight conditions; and  restrictions relevant to the flight to be highlighted to the crew. - Flight crew report. (ii) documentation and information to be carried on the aircraft during flight test; (iii) record-keeping: the FTOM should describe the policy relative to record-keeping. g. Permit to fly: The FTOM should describe the involvement of the flight test organisation or flight test team (as appropriate) in the process for the approval of flight conditions and the issue of permits to fly in accordance with Subpart P. h. Currency and training: The FTOM should describe how training for flight test is organised. Currency of the flight test crew may be ensured either through recent experience or refresher training. For aircraft for which Appendix XII is applicable, minimum flight experience by year should be: – for pilots: 50 hours. In addition: TE.RPRO.00088-001 © European Aviation Safety Agency. All rights reserved. ISO 9001 certified. Proprietary document. Copies are not controlled. Confirm revision status through the EASA intranet/internet. Page 140 of 141 An agency of the European Union

text:  for pilots with a flight test rating, the 50 hours should include 20 flight test hours in any flight test category.  for pilots performing a Category 3 flight test, the flight test experience should be expressed in terms of a number of flights leading to the issue of a Certificate of Airworthiness (CofA) (e.g. first flights).  for pilots performing a Category 4 flight test, the minimum flight test experience should be proportionate to the activity envisaged. – for LFTEs: 10 flight test hours in any flight test category. The FTOM should specify the requirements for a refresher training in order to ensure that crew members are sufficiently current to perform the required flight test activity. A system should be established to record the currency of the flight test crew’s training. A valid national document (i.e. licence), issued by an EASA Member State under its national regulations and ensuring compliance with the agreed currency requirements, is an acceptable means of compliance to demonstrate currency for a pilot that holds a flight test rating and for an LFTE.

text: 3. A new AMC No 3 is added to Appendix XII after AMC No 2, as follows:

text: AMC No 3 to Appendix XII. Demonstration of compliance with competence level 1 or level 2 requirements

text: The design organisation could demonstrate compliance with the LFTE competence level 1 or level 2 training course Part 21 requirements using one of the following: 1. training carried out internally, established in accordance with AMC No 1 to Appendix XII under a procedure agreed with EASA; 2. a certificate of course completion for the training established in accordance with AMC No 1 to Appendix XII, issued by an approved training organisation under its privilege in accordance with ORA.ATO.355; or 3. a national document (i.e. licence) issued by an EASA Member State after 1 January 2018, under its national regulations, ensuring compliance with the competence requirements of Part 21.

text: 4. A New GM No 3 is added to Appendix XII after GM No 2, as follows:

text: GM No 3 to Appendix XII. Demonstration of compliance with competence level 1 or level 2 requirements

text: It is the organisation’s responsibility to show proof of compliance with the competence requirements of Part 21 defined in AMC No 3 to Appendix XII.