A significant number of R44 helicopters, including VH-HFH, were not fitted with bladder-type fuel tanks and the other modifications detailed in the manufacturer's service bulletin 78 that were designed to provide improved resistance to post-impact fuel leaks.
High service time stage-2 LP turbine blades were susceptible to a reduction in fatigue endurance as a result of vibratory stresses sustained during operation at speeds close to the maximum.
LP turbine support bearings (part numbers LK30313 and UL29651) showed increased susceptibility to breakdown and collapse under vibratory stress conditions associated with LP turbine blade release.
The Australian Transport Safety Bureau encourages all operators and owners of R44 helicopters that are fitted with all-aluminium fuel tanks to note the circumstances of this accident as detailed in this preliminary report. It is suggested that those operators and owners actively consider replacing these tanks with bladder-type fuel tanks as detailed in the manufacturer's Service Bulletin (SB) 78A as soon as possible.
The Williamtown air traffic control procedures did not clearly define the separation responsibilities and coordination requirements between the Approach sectors for departing aircraft.
An important alerting function within the Australian Defence Air Traffic System had been disabled at Williamtown to prevent nuisance alerts.
The Department of Defence’s air traffic controllers had not received training in compromised separation recovery techniques.
The aircraft operator’s flight crews were probably not adequately equipped to manage the vertical profile of non-precision approaches in other than autopilot managed mode.
The operators procedures did not include a validation check of the landing weight generated by the flight management system which resulted in lack of assurance that the approach and landing speeds were valid.
The operators recurrent simulator training did not address the recovery from a stall or stick shaker activation such that the ongoing competency of their flight crew was not assured.
The operator's procedure for confirming the validity of the flight management system generated take-off weight did not place sufficient emphasis on the check against the load sheet.
The presentation on the aircraft load sheet of the zero fuel weight immediately below the operating weight, increased the risk of selecting the inapropriate figure for flight management system data entry.
The available Cross Crew Qualification and Mixed Fleet Flying guidance did not address how flight crew might form an expectation, or conduct a ‘reasonableness' check, of the speed/weight relationship for their aircraft during takeoff.
Industry practices for tracking faults or performance problems with line-replaceable units are limited, unless the units are removed for examination. Consequently, the manufacturers of aircraft equipment have incomplete information for identifying patterns or trends that can be used to improve the safety, availability or reliability of the units.
Single event effects (SEE) have the potential to adversely affect avionics systems that have not been specifically designed to be resilient to this hazard. There were no specific certification requirements for SEE, and until recently there was no formal guidance material available for addressing SEE during the design process.
Although passengers are routinely advised after takeoff to wear their seat belts when seated, this advice typically does not reinforce how the seat belts should be worn.
One of the aircraft’s three air data inertial reference units (ADIRU 1) exhibited a data-spike failure mode, during which it transmitted a significant amount of incorrect data on air data parameters to other aircraft systems, without flagging that this data was invalid. The invalid data included frequent spikes in angle of attack data. Including the 7 October 2008 occurrence, there have been three occurrences of the same failure mode on LTN-101 ADIRUs, all on A330 aircraft.
The LTN-101 air data inertial reference unit (ADIRU) model had a demonstrated susceptibility to single event effects (SEE). The consideration of SEE during the design process was consistent with industry practice at the time the unit was developed, and the overall fault rates of the ADIRU were within the relevant design objectives.
For the data-spike failure mode, the built-in test equipment of the LTN 101 air data inertial reference unit was not effective, for air data parameters, in detecting the problem, communicating appropriate fault information, and flagging affected data as invalid.
There has been very little research conducted into the factors influencing passengers’ use of seat belts when the seat-belt sign is not illuminated, and the effectiveness of different techniques to increase the use of seat belts.