In recent years the number of tailings dams failures has increased. On 25 January 2019, the Brumadinho tailings dam in Brazil suddenly failed, releasing a mudflow over 10 m deep comprising some 10
Tailings dams are earth embankments used to store waste materials, known as tailings, from mining operations. They can be more than 100 m high and in some cases several kilometres long (Kossoff et al., 2014). Tailings dams are often constructed from readily available materials, and over their operating life they are frequently raised as the quantity of stored tailings increases (Lumbroso et al., 2019).
Tailings dams are long-lived infrastructure which are often required to be in place in perpetuity (Lumbroso et al., 2019). In the context of long-lived infrastructure the rate of failure of tailings dams is high, owing to inadequate design regulations, as well as less rigorous construction and supervision methods than for normal water-retaining dams, especially in low-income countries (Bowker and Chambers, 2017). There are three principal methods via which tailings dams are constructed: upstream, downstream and centreline. These are shown in Fig. 1. The upstream method has the lowest initial cost, owing to the minimal amount of fill material required for the initial construction and subsequent raising, which normally consists entirely of the coarse fraction of the tailings (Martin and McRoberts, 1999). Martin and McRoberts (1999) describe upstream tailings dams as “unforgiving structures” with any one or a combination of improper design, construction and operation resulting in a catastrophic failure (Martin and McRoberts, 1999).
In recent years the number of tailings dam failures has increased. Around half of the significant tailings dam failures in the last 70 years occurred between 1990 and 2010 (Azam and Li, 2010). In South America there are around 1200 mines currently in operation which have tailings dams and many thousands of tailings dams which have been abandoned and/or which are no longer operational (Azam and Li, 2010). In 2001 the International Commission On Large Dams (ICOLD) stated that “the mining industry has a less than perfect record when tailings dam failures are reviewed” (ICOLD, 2001). Although this statement was made almost 20 years ago, the probability of a tailings dam failing is still high in the context of long-lived infrastructure (Bowker and Chambers, 2017; Lyu et al., 2019). In Brazil there have been 12 major tailings dam failures since 1986, which have resulted in over 1000 deaths and adversely affected the livelihoods of millions of people, as well as causing environmental damage to thousands of kilometres of rivers (Palú and Julien, 2019).
Different methods of construction for tailings dams (source: adapted from Vick, 1990).
Dam “B1” of the Córrego do Feijão mine, referred to in this paper
as the Brumadinho tailings dam, was a tailings dam 86 m high with a crest
length of 700 m and storage volume of approximately 12
Cross section of the Brumadinho tailings dam and the stages in which it was raised (source: adapted from Robertson et al., 2019).
At 12:28 LT (local time) on 25 January 2019, the Brumadinho tailings dam
suffered a sudden failure, releasing a mudflow over 10 m deep which moved
rapidly downstream (Robertson et al., 2019). The failure extended across much of the face of the dam, and its collapse was complete in less than 10 s. Around 9.7
Stills from the YouTube video of the Brumadinho dam failure (source: YouTube (2020), provided to the Brumadinho dam investigation by the National Mining Agency of Brazil).
The official report on the Brumadinho tailings dam failure found that it occurred as a result of static liquefaction (Robertson et al., 2019). The investigation deduced that the failure initiated close to the crest of the dam but very rapidly progressed through the entire structure, allowing a comparatively shallow failure to develop (Robertson et al., 2019). This was then followed by a series of retrogressive failures that released the large volume of mine waste (Robertson et al., 2019).
The failure of the Brumadinho tailings dam led to hundreds of people losing their lives and immense damage to the environment, as well as people's livelihoods. There is some anecdotal evidence to suggest that it took the mudflow between 1.5 and 2 h to reach the Paraopeba River some 10 km downstream of the tailings dam (Xinhua, 2020). The location of the Brumadinho tailings dam and the extent of the mudflow, as well as other key locations related to the event, are shown in Fig. 4. A photograph of the aftermath of the failure taken on 1 February 2019 is shown in Fig. 5.
Location of the Brumadinho tailings dams and the extent of the mudflow (source: European Space Agency Copernicus Sentinel-2A-L1C Satellite image and © OpenStreetMap contributors 2019; distributed under a Creative Commons BY-SA license; the image contains modified Copernicus Sentinel data 2019).
Photograph taken on 1 February 2019 showing the aftermath of the Brumadinho dam failure directly downstream of the site (source: Felipe Werneck, Instituto Brasileiro do Meio Ambiente e dos Recursos Naturais Renováveis; reproduced under a Wikimedia Commons CC-BY-SA-2.0 licence).
Mining developments, including tailings dams, often grow gradually over long periods of time, and as a result the responsibility for the direct and indirect risks posed by these operations to downstream communities and the environment is often avoided (Downing, 2014; Owen et al., 2020). Following recent tailings dam failures there has been a renewed sense of urgency from industry, civil society and the investor community to understand the types of risks posed by tailings dams (Owen et al., 2020).
The main objectives of this work were to:
highlight the use of an agent-based model and other modelling tools to estimate the risk to people downstream of the Brumadinho tailings dam; assess if the number of fatalities could have been reduced if a warning had been received prior to or at time the dam failed, albeit one with a short lead time The lead time is the time between a warning being issued and an event occurring. demonstrate how these modelling tools can help to inform emergency plans for tailings dams. a dam breach model known as EMBREA-MUD, specially developed to model tailings dam breaches, which was used to help to generate an outflow hydrograph of the tailings; a two-dimensional hydrodynamic model of the non-Newtonian mudflow which provided depths and velocities of the mudflow at 5 s intervals; an agent-based model of people and vehicles, called the Life Safety Model (LSM), which was used to assess the loss of life and how warnings of the imminent failure could have reduced the death toll.
Three separate models were used in this research as follows:
A two-fluid dam breach model, known as EMBREA-MUD, was initially used to model the Brumadinho tailings dam failure. EMBREA-MUD models water and tailings and provides times series of water and tailings outflows in the form of hydrographs which can be used as the input to a downstream model of the subsequent mudflow. EMBREA-MUD is based on the EMBREA model, developed over a 20-year period by HR Wallingford, which simulates embankment dam breaches and was first developed by Mohamed et al. (2002) under the name HR BREACH and validated against a number of dam failures case studies including the Orós dam in Brazil in 1961, the Banqiao dam in China in 1975 (Morris, 2011) and the Teton dam in USA in 1976 (Mohamed et al., 2002).
EMBREA-MUD predicts the growth of a breach in tailings dams via a range of processes, as well as the quantity of water and tailings released from the dam in the form of a hydrograph (Mohamed et al., 2002; Petkovšek et al., 2020). Both processes, breaching and outflowing, are simulated simultaneously based on the characteristics of the dam material, predicting the evolution of a breach opening without the need to make assumptions regarding the dimensions of the breach. EMBREA-MUD has been validated against two tailings dams failures, the Merriespruit tailings dam failure in South Africa in 1994 and the Mount Polley tailings dam failure in British Columbia in Canada in August 2014 (Petkovšek et al., 2020).
The EMBREA-MUD breach model of the Brumadinho tailings dam comprised three
layers as follows:
water layer including eroded tailings and dam material in suspension, which behaves as a Newtonian fluid A Newtonian fluid is a fluid in which the viscous stresses arising from its flow, at every point, are linearly correlated to the local strain rate, the rate of change of its deformation over time. mud layer with a viscoplastic non-Newtonian behaviour representing the liquefied tailings; solid comprising material making up the tailings dam.
Soon after the Brumadinho tailings dam failed in January 2019, EMBREA-MUD
was used to develop two breach scenarios: a “base” scenario and an “extreme” scenario. Both these scenarios were based on a total mobilized
volume of material of
Utilizing the information in the expert panel report a breach hydrograph was
developed based on the simplified shape of the extreme scenario modelled
using EMBREA-MUD but using the mobilized material volume specified in the expert report and representing the progressive failure of the dam. The maximum mudflow discharge of 90 000 m
Assumed outflow breach hydrograph developed for the Brumadinho tailings dams failure in January 2019.
Outflow from the Brumadinho tailings dam was a mixture of the dam itself, tailings and water (Robertson et al., 2019). This mixture did not behave in the same manner as floodwater; it behaved as a rheological material. Rheological flows are gravity-driven mass flows whose dynamic behaviour is akin to a non-Newtonian fluid (De Blasio, 2011) and which are characterized by changes in viscosity in response to the strain rates within the fluid. The use of a method, which uses the Bingham plastic rheological model, has been shown to be a good approximation for the flow of liquefied tailings (Jeyapalan et al., 1983).
The mudflow generated by the Brumadinho tailings dam failure was modelled
using MIKE 21. MIKE 21 is a two-dimensional hydrodynamic model which can model mudflows. The mudflow flow model extended from the location of the
Brumadinho tailings dam (location A in Fig. 4) to the confluence with the
Paraopeba River (location E in Fig. 4), a distance of some 10 km in total.
MIKE 21 uses the full Bingham model (Bingham, 1916), which is based on the
2006 work by Naef et al. (2016). The model determines the flow resistance term
MIKE 21 solves the equation numerically to give
The selection of the three key parameters for the MIKE 21 mudflow model are
discussed below:
In addition to the above parameters the roughness of the floodplain needed
to be set. The MIKE 21 mudflow model uses “Manning's
Manning's
The roughness values in Table 1 are based on those in standard texts such as Chow (1959).
The Airbus WorldDEM Digital Terrain Model (DTM) which represents a bare-earth surface on a 0.4 arcsec grid (approximately 12 m) was used to represent the topography of the downstream valley. The accuracy of this earth-observation-based DTM surpasses that of any global satellite-based elevation model available. Previous modelling of the Brumadinho mudflow used the HEC-RAS (Hydrologic Engineering Center's River Analysis Stream) hydrodynamic modelling software, which can only model Newtonian flows and used a less accurate 30 m grid DTM (see Raman and Liu, 2019). In the MIKE 21 mudflow model, a flexible triangular mesh was used with a maximum element area of 150 m
Comparison of the maximum modelled mud extent and the observed maximum mud extent downstream of the Brumadinho tailings dams.
This Brumadinho tailings dam failure was a rarity in that there are high-quality video images of the event, which provide an insight into the failure mechanism, the speed at which the mudflow initially moved downstream and the approximate time at which some of the buildings were destroyed. The results of the mudflow modelling showed that the outputs provided a good representation of the actual event both in terms of reproducing the maximum mudflow envelope and the velocity at which the flow moved based on the video of the event and other evidence available.
Figure 7 shows a comparison between the maximum modelled mudflow and the maximum extent estimated from remote sensing data, and Table 2 provides the modelled mudflow depths and arrival times at key locations. The mudflow maximum extent agreed well with the observed extent from the remote sensing data. Where there are differences these are mainly a result of the DTM and the challenges in estimating the exact maximum mudflow extent from the remote sensing data available at the time of the disaster. The mudflow model was run using a 5 s time step which provides a suitable fine temporal resolution for the loss-of-life and evacuation modelling carried out as part of this work.
Modelled mudflow depths and arrival times at key locations.
At least 270 people perished as a result of the collapse, most of them employees of the mine. The mine's canteen and administrative offices, as well as three locomotives and some 130 wagons, were buried in the mine plant area (Porsani, 2019). The mudflow destroyed some parts of the Córrego do Feijão district, including a nearby inn and several rural properties, as well as sections of a railway bridge and about 100 m of railway track. Agricultural areas in the valley below the dam were also damaged by the failure (Porsani, 2019). It is essential that the risks to people associated with tailings dams be evaluated rigorously and managed proactively at all stages of their lives so that the risks posed by a failure remains “as low as reasonably practicable” (ALARP) (Bowles, 2003). This section of the paper describes the modelling of the risk to people using an agent-based model and investigates if the risk to people could have been reduced via the use of warnings and designated evacuation routes.
To model the loss of life and how this could have been reduced, an agent-based model called the Life Safety Model (LSM) was employed. The LSM is an agent-based model An agent-based model comprises a collection of autonomous decision-making entities called agents. Each agent individually assesses its situation and makes decisions on the basis of a set of rules.
Prior to the development of the LSM, simple empirical methods, such as those developed by the US Bureau of Reclamation (see Graham, 1999; USBR, 2014), were mainly used to assess the risk to people from dams. These models are based on limited data sets, include few large dams (i.e. greater than 15 m high) and also have a mix cases of where warnings were and were not received (Assaf and Hartford, 2001), and, although commonly used, owing to their limitations they are not particularly helpful in formulating emergency plans; however, they are useful as a screening tool to prioritize structures which pose the greatest risk. The LSM simulates the interaction of people with the modelled flood or mudflow. This allows for various scenarios to be investigated that could help to reduce the risk to people (e.g. improvements in warnings, development of new evacuation routes and sensitivity of people's response times to warnings). The LSM has been validated for a number of historical dam failures (see Lumbroso et al., 2011; Johnstone and Garret, 2014) and used to assess the risks to people and improve emergency planning in 12 countries worldwide (Lumbroso and Di Mauro, 2008; Lumbroso et al., 2010; Lumbroso and Davison, 2018).
The number of people at risk before the Brumadinho tailings dam collapsed was estimated to be 502. This number included the number of people working in the mine's buildings including the canteen directly downstream of the dam, as well as people residing in houses in villages further downstream. The number of people at risk was an estimate based on the best available information from media reports. It is important to note that there is likely to be a relatively high degree of uncertainty in the estimated number of
people at risk (e.g.
The number of people at risk was built up as follows:
The dam failed at lunchtime, and many of the workers were eating in the staff canteen. It was assumed that there were 200 people in the canteen at the time of the incident. Media reports point to the canteen being the worst hit in terms of fatalities. In addition, it was assumed that there were 10 people in each of the other site buildings, most of which were located near to the canteen, giving a total of 400 people on the site.
The number and location of residential buildings at risk was estimated from remote sensing data and the maximum observed mudflow extent. It was estimated that there were 51 houses at risk and that at the time of the dam collapse each house was assumed to have had two people in it.
The LSM has a function which relates the damage and possible collapse of buildings to the velocity and depth of the flow. The majority of buildings
in the LSM model were considered to be of an average masonry construction,
which means that significant damage and collapse will only commence after
the combination of the maximum velocity and depth of the flow exceeds 10 m
The LSM modelling considered evacuation routes both by vehicle and on foot. These possible evacuation routes were digitized from remote sensing data. The pathways and trails were set up in the LSM to only allow pedestrian access, and only existing roads were set up to take vehicles. The evacuation routes used in the LSM were based on existing paths and roads. In the LSM the evacuation route from each building is determined by the shortest route to a safe location (i.e. the “least-cost path”). However, the LSM is dynamic, and so when evacuation routes are inundated and become impassable, this leads to a recalculation of the least-cost path. People evacuating are then directed to the next-closest safe location.
Safe locations were placed at heights above the maximum flood depth at the
end of each evacuation route. The location of the buildings, evacuation
routes and safe locations are shown in Fig. 8. More information on the technical details of the LSM are available in Lumbroso and Davison (2018)
together with various other publications available at
Location of buildings, safe locations and evacuation routes downstream of the Brumadinho tailings dams.
Schematic diagram showing how results from a two-dimensional fully hydrodynamic mudflow model are linked to the LSM.
Two evacuation scenarios were considered in the modelling as follows:
Everybody at risk evacuates from the area at risk on foot. Half of the 400 mine workers evacuate by vehicle and half by foot, with villagers downstream evacuating on foot. In this scenario it was assumed that there were 40 pickup trucks available and that each one had the capacity for five mine workers.
Velocities and depths from the two-dimensional mudflow model were used to provide the hazard posed to the modelled agents (e.g. people, vehicles and
buildings) in the LSM. Figure 9 shows how the results of the external hydraulic model are linked to the LSM.
An example of an output from the LSM emergency planning modelling 90 s after the Brumadinho tailings dam failure assuming a warning is issued at the time of the breach.
When developing the two-dimensional mudflow model and the LSM, both models
need to be discretized at suitable, regular temporal (
Each person (i.e. agent) in the LSM can have six states as follows:
“unaware” – the person does not know that the mudflow is happening either because it has not reached them or because they have not received a warning; “aware” – the person is conscious that the dam break has occurred either because they have received a warning in advance or the mudflow has reached them; “evacuating” – the person is making a conscious effort to reach safety (i.e. a defined location outside the area at risk) by a designated evacuation route; “safe” – the person has reached safety and is no longer at risk; “injured” – the person has been knocked over by the flow but is not fatally injured; however, they are immobile; “deceased” – the person has died as a result of the mudflow.
Further details on the LSM model can be found in Lumbroso and Davison (2018), Lumbroso et al. (2011), Di Mauro and Lumbroso (2008), and Johnstone (2012).
Figure 10 shows an example of the output from one time step of the Brumadinho LSM modelling. Table 3 provides the results of the LSM modelling showing people's different states. Five scenarios were modelled, including the actual event together with scenarios where warnings were exactly at the point of failure and 5, 10 and 15 min before the dam failed. Animations of the LSM modelling for three of the modelled scenarios and some of the GIS (geographic information system) files used in the modelling are available to download (see Lumbroso, 2020). Two methods of evacuation were considered, (i) on foot only and (ii) a combination of vehicles and on foot.
Results of the LSM modelling showing the distribution of modelled fatalities for the January 2019 incident.
Results of the Life Safety Model (LSM).
The reported number of fatalities as a result of the Brumadinho tailings dam
failure was probably between
Producing “accurate” estimates of fatalities caused by tailings dam failures is challenging to achieve given the uncertainty associated with natural variability, dependent on chance (US Department of Homeland Security, 2011), together with the spatial location of people when the event occurs. In the case of the Brumadinho event there was only anecdotal evidence available with respect to the number of mine workers in the canteen and other buildings, as well as the number of people in houses downstream that were at risk. The value of using complex loss-of-life models is not to estimate the exact number of deaths but to assess if emergency management interventions can make a significant difference in reducing the likely fatalities should the worst happen (Lumbroso and Davison, 2018). This information can then be used to inform emergency plans to make them more effective.
If a warning had been received at the exact time the dam failed and assuming that people took 1 min to react and knew where to evacuate to, the number of fatalities could have been reduced from a total of 456 to 354 or 299 depending on the method via which people were assumed to have evacuated. This is a reduction in the death toll of between 102 to 157. A warning 5 min before the dam failed could have reduced the number of fatalities by between 200 and 270, and a warning received 15 min before the failure could have reduced the number of deaths to zero.
Results of the Life Safety Model (LSM) showing how the delay in response time affects the number of fatalities downstream of the Brumadinho tailings dam assuming a warning is issued at the time of its failure.
The Brumadinho tailings dam was monitored using in situ instruments. Whether additional instrumentation of the dam could have provided a 15 min warning time is debatable. However, Rotta et al. (2020) in a paper entitled “The Brumadinho tailings dam collapse: Possible cause and impacts of the worst human and environmental disaster in Brazil” published in April 2020 found that “A time series analysis of satellite-driven soil moisture index showed that the water accumulated over the Brumadinho dam surface during a protracted period increased its moisture contents and accelerated seepage erosion (piping) through the fill. We provide solid evidence of the seepage erosion from the top through the fill, which chronically weakened the structure and likely led to the collapse of the dam”. Remote sensing data could have potentially flagged up issues with the structure several weeks or even months in advance of the failure (see Lumbroso et al., 2019, 2020), allowing people to have been put on a high state of alert or to be moved out of the danger zone. However, the main reason for running the LSM with a 15 min warning time was to find the warning time required in order for there to be no fatalities.
As part of the research a sensitivity analysis was undertaken of the time it takes people to respond to a warning. The results of this sensitivity analysis are shown in Table 4. Although the results in Table 4 are intuitively obvious (i.e. the longer it takes people to respond to a warning, the higher the number of fatalities) they are useful to formulate emergency management plans. For example, people in the village of Parque da Cachoeira could have delayed their response for over 45 min after the dam had failed and avoided any fatalities. The number of people at risk in the village of Parque da Cachoeira is relatively low; however, there are many cases worldwide where there are tailings dams with a significant number of people at risk living 5 to 10 km downstream. The richness in the data output from the LSM means that they can help to inform and improve emergency plans.
The probability of a tailings dam failing is relatively high compared to other pieces of infrastructure that pose similar risks to people and for which the consequences of a failure are also high. In addition, even if there are no people directly at risk, the pollutants released into the environment can have health implications for those living further downstream, as well as impact the environment and people's livelihoods. For example, in 1998 the failure of a tailings dam at Boliden Apirsa's mine in southern Spain led to over 40 km river being polluted and 2600 ha of agricultural land being covered with tailings (Emery, 2005). The lack of an emergency plan addressing this particular situation meant that the clean-up operation was not effective as it could have been because responsibilities and objectives were established after the event (Emery, 2005). The lack of a coherent plan led directly to five fatalities on public roads during the clean-up operation (Emery, 2005).
It is often not possible to reduce the risk posed by a tailings dam to zero. In many countries the philosophy adopted to risk is reducing risks to as low as reasonably practicable (ALARP). The ALARP principle is founded on the obligation of tailings dam owners to reduce risks to the point that additional risk reduction would “cost” “disproportionally” more than the risk reduction (i.e. benefit) achieved (Bowles, 2003). To evaluate if the ALARP principle has been met for a tailings dam it is necessary to firstly quantify the risk and then to assess any “physically possible” structural or non-structural options that could further reduce the risk (Bowles, 2003). The ALARP principle is an important consideration in the US Bureau of Reclamation's Public Protection Guidelines (USBR, 2003) and an important factor in the UK's Health and Safety Executive's decision-making process (HSE, 2001) with respect to societal risk.
Graphs showing the acceptable risk in terms of the annual probability of failure and loss of life for dams in Australia and the USA and major hazards in the UK (sources: ANCOLD, 2003; HSE, 2001; NSW Department of Planning, 2011; USACE, 2011).
Societal risk is defined as the relationship between frequency (or probability) of an event occurring and the number of people suffering from a
specified level of harm in a given population from the realization of specified hazards (Jones, 1992). The assessment of societal risk is concerned with the estimation of the probabilities of more than one individual being harmed simultaneously by an incident (HSE, 2009). Societal risk can be represented by “
Effective emergency plans can help to reduce the risks posed by tailings dam failures. The effectiveness of an emergency plan depends on the scenarios studied and how well the plan is disseminated. Dam owners in Brazil are responsible for preparing the emergency action plans; however, these are often not checked by the relevant government authorities (Sampaio, 2016). It is important that an emergency plan is based on evidence-based dam break scenarios and inundation maps of possible extents of the mudflow, as well as the social, economic and environmental impacts (Sampaio, 2016). Plans need to be revised periodically, and procedures should be established so that if a failure is likely to or has occurred, a warning can be effectively disseminated to the people affected and the area can be evacuated to minimize the number of victims. In Brazil a federal law related to emergency planning for dams only came into effect in 2010 (Sampaio, 2016). This law established a National Dam Safety Policy and created the National Dam Safety Information System (Sampaio, 2016). Tailings dam owners in Brazil have to produce an Emergency Action Plan for each of their dams (Sampaio, 2016).
There is a real danger that emergency plans for tailings dams are not realistic or effective. In his book they make statements or promises which will never be fulfilled;
they make claims that the event being planned for is understood and can be controlled; there is a failure to consider human factors, for example how age, gender, culture, disability and socio-economic status affect people's response to different emergencies; the risks are not fully or sufficiently well assessed and described; the coherence of the organizational coordination and the simplicity of society are often overstated; the plan describes a rational sequence of events during a disaster which is not necessarily the case.
In November 2015 a tailings dam near the town of Bento Rodrigues in the state of Minas Gerais in Brazil failed, releasing more than 30
The production of ineffective emergency plans is not something that is unique to Brazil, as numerous disasters worldwide have shown. For emergency plans for tailings dams to be effective they need to be realistic and meaningful to regulators and stakeholders. In preparing emergency plans there is sometimes a philosophy of “this will never happen, so why do we need to care?”. This is especially true for events that are perceived to have a low probability of occurrence. This can lead to some organizations suffering from a “it can't happen here” mentality (McConnell and Drennan, 2006) and for the “worst-case scenarios” not to be considered because they are perceived to be purely “hypothetical” (Clarke, 2006). However, things that have never happened before happen all the time (Sagan, 1993).
Research has found that in France and the UK tools to assess evacuation times and loss of life for floods appear to be rarely used by emergency planners (Lumbroso and Vinet, 2012). This means that these risks and the way they can be reduced are rarely evaluated in a quantitative manner using a phenological, rather than empirical, approach that provides a transparent basis for making and interpreting the various outcomes. In Brazil and in many other countries emergency plans for tailings dam are often not a high priority. The inadequate planning for the 2015 Bento Rodrigues tailings dam disaster, included the absence of response planning and the lack of an effective alarm system, as well as no quantitative or qualitative description of the worst-case scenarios (De Carvalho, 2019). In Brazil there has been a lack of clarity about the minimum contents required for emergency plans, and rather than being an essential tool for risk management and response planning they end up being “a mere bureaucratic formality” (De Carvalho, 2019).
The level of detail and aspects addressed in an emergency plan for a tailings dam need to be commensurate with the potential consequences if an emergency occurs. For tailings dams with potentially large consequences, such as ones constructed using the upstream method, the risks should be comprehensively assessed in a transparent manner via active engagement with the potentially affected stakeholders. The ICOLD Bulletin 139 on improving the safety of tailings dams states that the “the consequential damage from a tailings dam failure [should be] generally assessed in terms of its potential effect on the four categories of: 1. Loss of life; 2. Environmental damage; 3. Cost of physical damage; and 4. Social impact including public perception” (ICOLD, 2011).
The employment of models of breach, inundation and agent-based risk to people (i.e. the Life Safety Model – LSM) allow for the risks to people from tailings dam failures to be quantified and, more importantly, strategies for reducing this risk to be evaluated in an evidence-based manner. Work on tsunamis has shown that, despite the short lead time for a near-field tsunami, there is still value in providing rapid warnings to the people at risk providing that people know where to evacuate to (National Research Council, 2011), and these are useful for saving lives. This research has shown that this is also the case for tailings dam.
The sirens designed to warn nearby communities and workers of any problems with the Brumadinho dam did not sound. However, if they had sounded as the dam failed, this research has shown that even a warning just as the dam was failing could have saved between 100 and 150 lives. On the morning of 27 January 2019, 2 d after the disaster, sirens were sounded at the site because there were concerns regarding the stability of Dam VI (location B in Fig. 4), a process water reservoir, adjacent to the structure which had failed, owing to the detection of increased water levels. As a result of the risk posed by this structure, approximately 24 000 residents downstream of the site were successfully evacuated (Vale, 2020). There is a large body of evidence showing that sirens are an effective method of warning of possible dam failures provided that they are tested regularly, that the test soundings are different from the emergency signal and that people know where to evacuate to when they hear them (Graham, 2008; Tudor et al., 2012).
For emergency plans to be effective it is important that they incorporate foresight about the changing nature of risk and facilitate evidence-based action, before people are harmed. There have been a number of models and frameworks developed (see Tagg et al., 2012) that can be employed to estimate risks to people from dam failures. For example, there are some simple, empirically based equations which allow elementary estimates of the risks to people from tailings dam failures to be made. Although these equations may be suitable for simple risk-screening exercises, they do not provide the ability to model each individual person, how they interact with the mudflow and the effects of measures such as improvements in early warnings, as well as improvements to evacuation routes. Agent-based models, such as the LSM, provide the ability to simulate each person, building and vehicle at risk and their interaction with the mudflow based on fundamental physical equations. Often agent-based models are seen by government regulators and mine owners as being “expensive” to implement compared to simple empirical methods. However, agent-based models can be an effective tool in helping to reduce the loss of life and injuries to people caused by tailings dams by making evidence-based contributions to emergency plans, especially with respect to evacuation planning and risk management. The LSM agent-based model provides a useful tool via which this can be done and provides an evidence-based way of exploring ways of reducing risks to people and improving emergency planning. Recent tailings dam tragedies, such as Brumadinho, have prompted institutional investors active in extractive industries, including major asset owners and asset managers, to call for an improvement in the safety of tailings dams (Church of England, 2020). As part of a review, led by institutional investors, a new independent and publicly accessible international standard for tailings dams, based upon the consequences of failure, has been called for (Church of England, 2020). In the future, for high-risk tailings dams, it is recommended that agent-based models, such as the LSM, should be used to gain a better understanding of how the dangers posed by these facilities to downstream communities can be reduced.
Animations of the LSM and mudflow modelling outputs, together with GIS files of the mudflow extent and files used in the LSM modelling such as roads and building locations can be downloaded from
The supplement related to this article is available online at:
All authors contributed to the research carried out as part of this study. MD developed and ran the Life Safety Model. RB developed and ran the mudflow model. GP provided advice on tailings dam breaching and ran the EMBREA-MUD model. DL co-ordinated the research, provided advice on loss-of-life and hydraulic modelling, and wrote the text.
The authors declare that they have no conflict of interest.
The authors would like to acknowledge the Satellite Applications Catapult in the UK and the UK Space Agency's International Partnership Programme for supporting this work.
This paper was edited by Paolo Tarolli and reviewed by Derek Sakamoto, Bruce Feinberg, and Carlos Antonio da Silva Junior.