2019 UK Power Cut: Causes and Lessons Learned

The Anatomy of a Blackout: What Happened on 9 August 2019?

On the afternoon of Friday, 9 August 2019, a series of events unfolded in rapid succession, leading to widespread disruption. While power was restored to most customers within 45 minutes, the knock-on effects, particularly on the rail network, lasted for much longer.

To get a sense of the scale and location of the incident, let's look at the areas that were affected.

The trigger for the event was surprisingly common: a lightning strike on a 400kV transmission line. The grid is designed to handle such events routinely. However, what followed was a cascade of failures that overwhelmed the system's defences.

To understand this sequence, please read the official summary of the event from the report published by the energy regulator, Ofgem.

As you read, you'll have noticed a critical chain reaction:

1. A routine fault: A lightning strike occurred.
2. A large, unexpected loss of generation: Hornsea wind farm and Little Barford gas power station almost simultaneously disconnected, losing over 1,130 MW of power. This was far greater than the system operator was prepared for.
3. A rapid frequency drop: The sudden imbalance between generation and demand caused the system frequency to fall sharply. We learned in Module 6 that frequency is the primary indicator of this balance.
4. A cascading loss of smaller generators: The falling frequency caused hundreds of megawatts of smaller, 'distributed' generators (like small solar farms or industrial generators) to automatically disconnect themselves as a safety measure. This made the frequency problem even worse.
5. The last line of defence: With the frequency dropping below the critical limit of 48.8Hz, the automatic system known as Low Frequency Demand Disconnection (LFDD) activated. This system deliberately cuts off power to around 5% of demand to stop the entire grid from collapsing. This was the power cut experienced by the public.

Unpacking the Causes: Why Did a Routine Fault Cascade?

The sequence of events tells us what happened, but the more important question for system security is why. The Ofgem report digs into the underlying causes that turned a routine event into a major incident.

The core issues can be grouped into three main areas.

1. Failure of Large Generators to Comply with the Rules:
   The Grid Code, the rulebook for the electricity system, requires large generators to "ride through" grid disturbances like a lightning strike. In this case, both Hornsea and Little Barford failed to do so. Their own internal control and safety systems were not configured correctly, causing them to trip offline when they should have remained connected to support the grid. This near-simultaneous loss was beyond the standard 'N-1' security criterion (which you'll recall from earlier in this module means securing the system against the loss of a single largest component).

2. Unexpected Behaviour of Distributed Generation (DG):
   A huge amount of power (up to 580 MW) was lost from smaller generators connected to the local distribution networks. Many of these generators had outdated protection settings that made them overly sensitive to grid disturbances. They tripped on the initial voltage change from the lightning strike or the subsequent Rate of Change of Frequency (RoCoF). This mass disconnection was a major amplifying factor, and the System Operator did not have good visibility or control over this behaviour.

3. The Challenge of a Changing Grid:
   The event highlighted a fundamental shift in the grid's characteristics. As large, heavy, spinning synchronous generators (like coal or nuclear) are replaced by non-synchronous renewable sources (like wind and solar) and smaller distributed generators, the system's overall inertia decreases. As we learned in Module 6, inertia is the inherent ability of heavy spinning machines to resist changes in frequency. With less inertia, the frequency falls much faster after a loss of generation, leaving less time for backup systems to respond and making the grid more vulnerable to the kind of rapid cascading failure seen in this event.

Let's read Ofgem's assessment, which summarises these contributing factors.

The Aftermath: Lessons Learned and Actions Taken

A major incident like this serves as a stress test for the entire system, revealing hidden weaknesses. The subsequent investigations by Ofgem and the government's Energy Emergencies Executive Committee (E3C) resulted in a series of crucial lessons and recommended actions to improve grid resilience.

The key lessons can be summarised as:

• Grid standards must be updated: The rules (like the SQSS) need to account for the risk of multiple, simultaneous generator losses, not just the single largest.
• Compliance is not optional: Generators must be properly tested to ensure their systems will behave as expected during a grid disturbance.
• Distributed generation must be made visible: The System Operator and Network Operators need better monitoring and control of the thousands of smaller generators, and their protection settings must be updated to prevent them from making a bad situation worse.
• Critical services need better protection: The LFDD scheme needs to be smarter to avoid disconnecting critical sites like hospitals and major transport hubs where possible.

To explore these in more detail, please review the final section of the Ofgem report. The table at the end provides an excellent, concise summary of the actions assigned to each party.

The government backed these findings and committed to implementing the recommendations from the E3C report, which mirrored Ofgem's conclusions.

Conclusion

The 9 August 2019 power cut was a watershed moment for the UK electricity industry. It wasn't caused by a single, catastrophic failure, but by a complex interplay of factors that exposed the vulnerabilities of a system in transition.

Key Takeaways:

• The event was triggered by a routine lightning strike but escalated due to the near-simultaneous and non-compliant tripping of two large generators.
• The problem was severely amplified by the cascading disconnection of a large volume of distributed generation with overly sensitive protection settings.
• The incident highlighted the challenge of declining system inertia, which makes frequency fall faster and leaves less time for corrective action.
• Key lessons learned involve the need to update security standards, enforce technical compliance for all generators (large and small), and improve the visibility and control of distributed energy resources.

This event vividly demonstrates why system security is not just about having protection in place, but about ensuring all parts of the system work together predictably under stress. In the event of a more severe incident leading to a total system collapse, an even more drastic recovery plan is needed.

In our next lesson, we will explore this ultimate contingency plan by explaining the procedure and challenges of black start restoration after a total system collapse.