The railway union demands that trains be prohibited from continuing when safety systems fail

The railway union is demanding a clear rule: if an automatic safety system stops working, the train must not simply continue. The concern is that drivers may have to operate with reduced protection while the fault is being assessed. That matters because safety systems normally help supervise speed and movement, leaving less room for human error.

The immediate example is a failure of the LZB system. Renfe told drivers to remain below 40 km/h when restarting after such a failure. Reports also mention audio recordings in which drivers sounded stressed and appeared unfamiliar with the procedure. The union says workers do not trust the railway system.

The source does not identify one single technical defect or a complete chain of events. Instead, it describes a wider breakdown of confidence among operators and drivers. The union wants stopping to be mandatory, while experts call for a double safety check. Those demands aim to prevent uncertain decisions during a system failure.

LZB is a railway protection system whose name comes from the German term Linienzugbeeinflussung. It continuously exchanges information between the track and the train. That information can show the driver permitted speeds and movement limits. The system can warn about unsafe speed and, where configured, apply braking automatically. This reduces dependence on a driver noticing every danger in time.

Its key mechanism is supervision rather than ordinary signaling alone. The train receives movement information, compares its actual speed with the permitted speed, and triggers warnings or braking if necessary. The source does not describe LZB’s technical design, so these details come from established railway knowledge. In the reported case, the important fact is that the LZB became unavailable.

After that failure, Renfe instructed drivers not to exceed 40 km/h when restarting. The restriction provides a cautious fallback while automatic protection is absent. The union, however, wants an even stricter rule: trains should be prohibited from continuing when safety systems fail. Experts additionally seek a double-check protocol.

When LZB fails, a train may no longer receive the same continuous automatic supervision of its speed and movement. That changes the risk of restarting. A lower speed gives the driver more time to observe signals, react to unexpected conditions, and stop if necessary. It also limits the consequences of an incorrect decision.

Renfe’s concrete instruction was to keep drivers below 40 km/h when resuming movement after an LZB outage. The mechanism is simple: reduce speed to compensate for the missing protection. The source does not explain the precise operational rule or why 40 km/h was selected. It does show that the company considered restarting possible under a strict restriction.

The instruction has not ended the dispute. Railway operators and drivers reportedly distrust Adif and have requested lower operating speeds. The union wants trains prevented from continuing when safety systems fail, while experts recommend a double-check protocol. The disagreement concerns whether a speed limit is enough or whether stopping should be mandatory.

A 40 km/h limit is a major reduction compared with ordinary main-line running. On many conventional main lines, passenger trains commonly travel around 100 to 160 km/h, while some high-speed services travel considerably faster. Those figures are general railway context, not numbers given in the source. Actual speeds depend on the line, train, curves, signals, and temporary restrictions.

Using a typical 120 km/h comparison, 40 km/h is one-third as fast. A train covering 120 kilometres in an hour at normal speed would cover only 40 kilometres in an hour under the restriction. The practical purpose is not to maintain schedules. It is to give the driver more time to react when LZB protection is unavailable.

The article itself provides only the 40 km/h figure and does not state a normal speed for the affected route. Therefore, no precise percentage can be calculated for that operation. What is clear is that Renfe treated 40 km/h as a special restarting limit, while unions and experts questioned whether even that fallback was sufficient.

Automatic railway protection exists to reduce the chance that a train exceeds a permitted speed or continues into an unsafe movement. If it stops functioning, the driver must rely more heavily on signals, procedures, and personal judgment. If the driver does not understand the fallback rules, a delay or mistake can occur at precisely the moment extra caution is needed.

Possible consequences include exceeding a speed limit, failing to stop where required, or entering a section without adequate authorization. At high speed, errors leave less time and distance for correction. A collision or derailment is a possible severe outcome, although the source does not report that either occurred in this case. Its reports instead highlight stress and apparent uncertainty in driver audio.

That uncertainty explains the competing demands. Renfe imposed a 40 km/h limit after LZB failures. The union wants trains stopped altogether, and experts propose a double-check protocol. Together, these responses seek to prevent a technical failure from becoming a human-procedure failure as well.

A failed automatic system does not leave only one possible response. Railway operators can stop the train and investigate, move under a formal manual procedure, or permit restricted movement at a much lower speed. The safest choice depends on the failure, available signals, communication, driver training, and railway rules. Any alternative needs clear authorization and checks.

The source provides one concrete example. After an LZB failure, Renfe told drivers to restart only below 40 km/h. That is a controlled fallback: the driver continues, but at a speed intended to reduce risk. The union proposes a stricter alternative, banning further movement when safety systems fail. Experts propose adding a double-check protocol.

The dispute is therefore about the boundary between recovery and unacceptable exposure. Operators and drivers have asked for lower speeds and expressed distrust of Adif. The reports also mention stress and lack of knowledge in driver communications. Those concerns make training, communication, and a verified procedure as important as the speed limit itself.

Railways combine automatic protection, operating rules, driver observation, and checks because safety should not depend on one judgment alone. A driver can become distracted, misread information, or face an unfamiliar failure. An automatic system can also malfunction. Separate safeguards make it less likely that one mistake or breakdown immediately produces an unsafe movement.

The LZB dispute illustrates this principle. Under normal operation, LZB provides continuous protection, but the reported failures forced drivers to rely more on procedures. Renfe responded with a 40 km/h restarting limit. Experts went further, asking for a double-check protocol. A second verification can catch an incorrect interpretation before the train moves.

The source also reports stress and apparent lack of knowledge in driver audio, plus distrust among workers and operators. That makes layered protection especially important during unusual events. The union’s demand to stop trains represents the strongest barrier. The broader implication is that systems need clear failure procedures, trained staff, and independent confirmation before movement resumes.