--- title: "Tenerife airport disaster: causes, timeline and findings — OnlyPlanes" description: "The disaster in Tenerife is not a short line in the chronology, but a related system of decisions and failures. In this dossier, the confirmed sequence, technical, human, organizational and environmental factors, the limits of available data and the practical changes that followed the incident are separately analyzed." canonical_url: "https://onlyplanes.ru/en/plane-crashes/tenerife-1977" locale: en meta: keywords: "aviation, aircraft, airlines, airports, flight" "og:description": "The disaster in Tenerife is not a short line in the chronology, but a related system of decisions and failures. In this dossier, the confirmed sequence, technical, human, organizational and environmental factors, the limits of available data and the practical changes that followed the incident are separately analyzed." "og:image": "https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp" "og:title": "Tenerife airport disaster — detailed analysis" --- > Index of every page on this site: [llms.txt](https://onlyplanes.ru/llms.txt) World Chronicle, detailed dossier # Tenerife airport disasterTenerife airport disaster The disaster in Tenerife is not a short line in the chronology, but a related system of decisions and failures. In this dossier, the confirmed sequence, technical, human, organizational and environmental factors, the limits of available data and the practical changes that followed the incident are separately analyzed.
Date
27 March 1977
Location
Los Rodeos, Tenerife
Aircraft
Two Boeing 747s
On board
644 people in two aircraft
Outcome
583 fatalities, 61 survivors
Planned route · main points ## Tenerife to Las Palmas Loading the geographical map… ***Event location**The mark refers to the place of the event, and not to the center of the nearest city or airport. The published coordinate does not mean geodetic accuracy.28°28′53.94″N 16°20′18.24″W**Scheduled departure from Tenerife**Tenerife to Las Palmas The line connects the main points of the planned route, and does not reproduce the actual track. The plane indicates the direction, not the position at the time of the incident. Emergency deviations and returns to this line are not included.*
Route
Las Palmas forced landing in Tenerife
Flight phase
Steering and start of takeoff
How events unfolded
From the first deviation to the end of the emergency sequence
Classification
Runway collision
The full picture ## What happened 1977-03-27 aircraft Two Boeing 747, associated with the operator KLM and Pan American, was at the center of the event in the area of Los Rodeos, Tenerife. The route and flight conditions are important to understand: Las Palmas with a forced landing on Tenerife. The official classification in the card is “Clash at the runway”, and behind it is the following outcome: 583 dead, 61 survivors. These wordings are kept separate because the editorial category should not replace the legal or technical classification of the investigative body. Two Boeing 747s collided in a busy lane in thick fog. Radiophraseology, an overloaded airfield and an incomplete picture of the situation formed in one chain. This brief description captures the external sequence, but does not reduce the incident to one convenient reason. In aviation security, the immediate mechanism, conditions, decisions of people and organizational barriers are considered separately. Only such an analysis shows at what stage the risk could still be stopped and why the next protective layer did not fulfill its task. The initial event in the published reconstruction is the following circumstance: The beginning of the KLM run-up to the confirmed permission when Pan Am is on the strip. Further development was as follows: In fog conditions, the crews did not see each other; ambiguous transmissions and the imposition of radio messages did not eliminate the conflict. Between these phrases is the most important part of the analysis - the change in the condition of the aircraft, the information available to the crew, time limits and the quality of feedback from devices, controllers or people in the cabin. The reaction of the participants is not evaluated from the point of view of a person who already knows the final. The Pan Am crew tried to free the strip, KLM tore the plane off, but it was no longer possible to avoid a collision. Decisions should be placed in a real time scale, taking into account the workload, uncertainty and irreversibility of some actions. Therefore, not only mistakes or successful steps are noted below, but also what options actually remained achievable at each stage. The main practical lesson is formulated as follows: Standard phraseology, confirmation of permission to take off and the right of any crew member to stop a dangerous action. It does not mean that one new instruction is able to eliminate repetition. Reliable protection is built in layers: design and maintenance, training, procedures, interfaces, dispatch support, airfield infrastructure, emergency response and independent supervision should compensate for inevitable human and technical deviations. Context and mechanisms ## Detailed account Background, technical details and decisions are examined separately to avoid reducing a complex event to a single explanation. 01Context ### Flight to the point where everything has changed Analysis does not begin at the time of the emergency signal, but earlier - with the destination of the flight, the route and the normal waiting of the crew. For the Two Boeing 747, the route “Las Palmas with a forced landing on Tenerife” was set in this story. Before the threat, people performed normal tasks: pilots controlled the trajectory and systems, the cabin crew worked with passengers, traffic controllers led the flow of traffic, and the technical service was responsible for the aircraft released on the flight. It is the normality of the beginning that explains why early weak signs may not have looked like the beginning of a catastrophic chain. The phase in which the situation has become critical is designated as "The course and the start of takeoff". Each phase of flight has its own reserve of time and space. At the cruising echelon, there may be more altitude, but the diagnosis is more difficult and further the airfield; when taking off or landing, the decision is measured in seconds; when capturing a technically sound aircraft is controlled by people whose freedom is limited by violence. Therefore, the same warning does not create the same options for action in different conditions. The card records 644 people in two planes. The number of people is important not as a dramatic reception, but as a parameter of the rescue task: the number of exits, the pace of evacuation, the need for medical care and the scale of the search operation directly depend on the download. The outcome of “583 Dead, 61 Survivors” cannot be read without context. Survival or death is determined not only by the force of the impact, but also by the integrity of the cabin, fire, water, relief, the availability of exits and the time of arrival of assistance. KLM operator and Pan American and Type Two Boeing 747 are listed to link the event to the operating system, not to generally charge the brand or company. One case may reveal a specific vulnerability of the design, maintenance program, training or supervision, but to transfer this output to all aircraft of the type or all employees is incorrect. The task of the dossier is to show the checked chain and the limits of applicability of each conclusion. 02Initial Event ### The first barrier did not stop the threat. The confirmed starting point is: Start running KLM to the confirmed resolution when Pan Am is on the strip. In the investigation, such an event is separated from the deep conditions. For example, the failure of the part explains what physically happened, but it does not yet answer why the defect appeared, why it was not detected, why the reservation did not keep control and why the procedure did not give the crew enough time. Similarly, a wrong action does not explain which interfaces, learning, or organizational stimuli made it likely. The first layer of protection usually exists before departure: design tolerances, technical documentation, inspection, mass and fuel calculation, route preparation, crew clearance or safety inspection. The second layer acts in flight - alarms, automation, control cards, mutual control and dispatch surveillance. The third reduces the consequences: emergency landing, evacuation, firefighting, search and medical care. In this case, the threat went through several layers in succession, rather than stemming from a single error. It is important to distinguish between the signal and its meaning. The device can show a deviation, but the crew must understand whether it refers to the sensor, the real state of the aircraft or the secondary consequence of another failure. Several simultaneous warnings increase the load and can hide the main thing. With illegal interference, contradictory information from invaders, services and airports plays a similar role: a technically possible solution is not always available to a person under immediate threat. In retrospect, the correct option often seems obvious. In real time, participants do not see the future sequence and work only with the available picture. Therefore, the analysis asks specific questions: what sign appeared first, to whom it was visible, how unambiguously it indicated the danger, what procedure should have been included and whether there was physical time to bring it to a result. This approach turns moral judgment into engineering. 03Development ### How an individual deviation became a chain After the initial event, the sequence developed as follows: In fog conditions, the crews did not see each other; ambiguous transmissions and the imposition of radio messages did not eliminate the conflict. This phrase describes the direction of the process, but for safety, every transition is important. The failure or external threat changes the flight mode; the new mode creates additional warnings; the crew redistributes attention; the time to test hypotheses decreases; then one of the options becomes irreversible. The speed of these transitions determines whether the standard control card could help completely or only partially. The aircraft is a connected system. The change in thrust affects speed and power supply, damage to the structure - on hydraulics and aerodynamics, fire - on wiring and visibility, the wrong configuration - on lift and braking. Even when the initial failure is local, its consequences can cross the boundaries of several systems. That is why commissions study not only the broken part, but also the tracing of lines, the separation of reserves, the logic of warnings and the ability to isolate damage. The person in this chain is neither an ideal computer nor a passive victim of automation. Pilots build a working hypothesis, check the devices, control the trajectory, communicate and prepare the cabin. A diagnosis error can send actions to the wrong place, but the interface must also help distinguish the primary cause from the cascade of consequences. A good system is tolerant of one wrong step and does not require you to instantly guess the hidden mechanism. A critical point occurs when the stock of altitude, speed, fuel, lane length, or freedom of decision becomes less than needed for an alternative. After it, participants no longer choose the best outcome, but reduce the damage from the remaining options. In this event, this boundary should be sought between the circumstances of "Starting KLM runoff before confirmed permission when Pan Am is on the strip." and the outcome of "583 dead, 61 survivors". It is on the earlier side of the border that preventative changes have the greatest effect. 04Decisions ### What people can see and do The published picture of the reaction of the participants is as follows: the Pan Am crew tried to free the strip, KLM tore the plane off, but it was no longer possible to avoid a collision. It should be evaluated according to the information that was in front of people at that time. The crew could not know the actual depth of damage, the controller - the exact configuration of the aircraft, the flight attendant - the state of the cabin, and the rescuers - the suitability of each exit. Teamwork is needed precisely to combine incomplete pictures, but communication itself can become a damaged barrier. The first priority is to maintain a controlled trajectory. Even if the fault looks urgent, at least one pilot must continue to monitor the pitch, roll, speed, altitude and direction. The second participant diagnoses and reads the map, the third channel - radio - connects the aircraft with external resources. When everyone simultaneously solves one technical mystery, basic control can disappear unnoticed. This is a recurring lesson, not an indictment of a particular crew. Irreversible actions require confirmation if time allows: engine shutdown, mechanization cleaning, fire extinguishing composition release, power outage, start of run-up or site selection. But the confirmation rule should not paralyze the decision in case of fire, collision or threat in the cabin. Preparation is therefore not based on memorizing one answer, but on recognizing the type of threat and maintaining several safe options until the final choice. After the plane stops, the task changes. Evacuation depends on fire, smoke, water, fuselage position, operating engines, and availability of assistance. Exit, suitable in the training cabin, can lead to fire or to dangerous heights. Flight attendants are required to assess the situation and, if necessary, deviate from the usual sequence. It is critical for passengers to leave their luggage behind and follow short orders: one person’s delay affects the entire flow. 05Investigation ### How to restore the proven picture For this case, the direction of the investigation is described as follows: Radio exchange, visibility, steering, decisions of commanders and the organization of the work of the overloaded airport. This is not a list for the sake of formality. Each source answers a separate question. The parametric recorder shows modes and commands, the speech record shows interaction and sound warnings, the debris shows the physical path of destruction, the documents show the state before the flight, and the radar and control room record place the aircraft in the external environment. No source is complete. The sensor can record not the physical magnitude itself, but the signal to a certain block; the microphone does not capture thoughts; the destruction on impact masks earlier damage; the witness sees only part of the trajectory. Therefore, the commission compares independent data and checks whether the hypothesis explains all observations without additional unconfirmed assumptions. The conclusion of an investigation is usually built on levels. First, the facts are established: the configuration, weather, trajectory, damage and operation of the systems. Causal and contributing factors are then formulated. After that, recommendations are issued to those who are able to change the design, procedure, training or supervision. The recommendation is not equal to the proof of personal guilt, and the technical report does not replace the criminal or judicial process. There is no external link to the report inside this page: the user remains in the OnlyPlanes encyclopedia. At the same time, the text should maintain the discipline of the original source - not to add fictitious negotiations, not to round up the disputed figures without reservation and not to raise the preliminary version to the final reason. Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. This boundary is part of the content, not a flaw of the page. 06System analysis ### Why One Cause Is Not Enough The convenient formula “the technique failed” or “the crew made a mistake” shortens the story, but does little to prevent it. Technical failure occurs within the program of design, manufacture, maintenance and control of the resource. A human error appears inside the interface, training, graphics, report culture, and available procedures. An external threat goes through a risk assessment, space closure, inspection, dispatch protection, or airfield infrastructure. Each branch provides a separate opportunity for prevention. The systematic approach does not remove responsibility, but makes it more accurate. He asks who owned the particular barrier, what data was available, why the deviation was not detected, and what control could have stopped it earlier. Sometimes the answer refers to the manufacturer, sometimes to the operator, the regulator, the airport, the security service or several participants at the same time. The drafting text does not designate the perpetrator where there is a separate legal procedure for doing so. A reliable recommendation should be verifiable. The phrase “be careful” does not explain how to measure change. A specific barrier is much more useful: a separate sensor, a new warning logic, a mandatory map item, a minimum fuel supply, a ban on a certain operation, an independent repair check, a scenario training or a change in the airport security zone. Such measures can be implemented, checked and, if necessary, revised. However, the new protection can create side effects. Additional warning increases the noise in the cabin, a complex card takes time, a reinforced door changes access to the cabin, and the automatic function creates a new mode that you need to understand. Therefore, post-incident changes undergo risk assessment and testing. The goal is not to add the maximum number of rules, but to make the right action the most understandable and physically achievable. 07Consequences ### What the Air Force learned from the event The recorded impact on safety is formulated as follows: The disaster accelerated the standardization of phraseology and the development of crew resource management. Usually the change does not occur by one order the next day. First, the commission publishes a recommendation, then the regulator evaluates the scope, the manufacturer prepares a technical solution, the operator changes documents and training, and supervision checks compliance. Years can pass between an event and a sustainable outcome. Some measures relate directly to the type Two Boeing 747, others are applicable more widely. A design defect can lead to a directive of airworthiness for a family of aircraft; a problem of interaction - to changes in CRM for many operators; an event on the strip - to new marking and airport control systems; capture - to a revision of the inspection and protection of the cabin around the world. The magnitude of the withdrawal must be consistent with the evidence. The main lesson of this card is “Standard phraseology, confirmation of permission for takeoff and the right of any crew member to stop a dangerous action.” The practical meaning is not to remember a slogan, but to recognize an early condition. While the chain is at the stage of preparation, parameter control or first warning, simple actions are available. After losing control, major fire, fuel generation, collision or physical capture of the cab, the price of the solution increases, and the number of safe options decreases dramatically. The story remains relevant if the reader understands not only the final, but also the work of protective barriers today. Modern passenger flight is safer due to many small changes accumulated after different incidents: more accurate alarms, mandatory cross-checks, improved materials, rare failure training and transparent data transmission. No measure is perfect, but their combination does not automatically become a disaster. Sequence ## Event timeline Rather than isolated episodes, this was an unfolding system: each stage inherited the constraints of the one before it. 1. 01Before the event ### Normal flight and hidden conditions Plane Two Boeing 747 performed the route Las Palmas with a forced landing on Tenerife. Preparation, design, maintenance, dispatching environment and safety rules formed the initial set of protective barriers. 2. 02First Signal ### Emergence of threat Start running KLM before confirmed permission when Pan Am is on the strip. 3. 03Development ### The chain accelerates. In fog conditions, the crews did not see each other; ambiguous transmissions and the imposition of radio messages did not eliminate the conflict. 4. 04Response ### Actions of people and systems The Pan Am crew tried to free the strip, KLM tore the plane off, but it was no longer possible to avoid a collision. 5. 05Outcome ### Runway collision 583 dead, 61 survivors. Location: Los Rodeos, Tenerife. These data describe the result but do not replace the causal chain analysis. 6. 06After the event ### Investigations and changes Radio exchange, visibility, steering, decisions of commanders and organization of work of the overloaded airport. Final Impact: The disaster accelerated the standardization of phraseology and the development of crew resource management. More than one cause ## Chain of contributing factors An incident develops when several weaknesses come together along the same path. 01 ### Initial condition Start running KLM before confirmed permission when Pan Am is on the strip. 02 ### Flight phase Control and start of takeoff. The available margin of time, altitude, speed, or freedom of decision determined the practical set of options. 03 ### Cascade In fog conditions, the crews did not see each other; ambiguous transmissions and the imposition of radio messages did not eliminate the conflict. 04 ### Human Capabilities Participants worked with incomplete information and increasing workload. The Pan Am crew tried to free the strip, KLM tore the plane off, but it was no longer possible to avoid a collision. 05 ### Organizational protection The preparation, procedures, maintenance, dispatch or protection system was supposed to prevent one deviation from becoming the result of “583 dead, 61 survivors”. 06 ### Boundaries of knowledge Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. From the flight deck ## Decisions and constraints Decisions are assessed against the information, altitude, time and aircraft condition at that moment, rather than what became known later. 01 ### First the trajectory Control of speed, height, heel, pitch and direction remains the first task even with a complex diagnosis. If the plane is controlled, one pilot flies, the other works with failure and communication. 02 ### Confirm irreversible action Disabling the system, changing the configuration or abandoning the reachable site is confirmed by the second crew member, if the time scale of the threat allows for verification. 03 ### Declare a real priority The emergency status gives dispatchers the opportunity to free the route, prepare the lane and services. Late or unclear transmission reduces outside assistance, although not always dependent on the crew. 04 ### Prepare people after landing A safe run does not complete the event yet. Fire, smoke, water and damaged exits require quick assessment and short commands, and hand luggage should not delay the flow. Summary ## Investigation findings - The confirmed external sequence begins with the circumstance: The beginning of the KLM run to the confirmed resolution when Pan Am is on the strip. - Critical phase: Steering and start of takeoff. - Further development: In fog conditions, the crews did not see each other; ambiguous transmissions and the imposition of radio messages did not eliminate the conflict. - Reaction of the participants: The Pan Am crew tried to free the strip, KLM tore off the plane, but it was no longer possible to avoid a collision. - The investigation focused on the following set of data: Radio exchange, visibility, steering, command decisions and the organization of the overloaded airport. - Official card classification: WFP collision. - Confirmed outcome: 583 dead, 61 survivors. - The boundary of a confident conclusion: Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. After the investigation ## What aviation learned A lesson becomes useful when it leads to a procedure, training, a design change or a new safety barrier. Lesson 01 ### Early detection The barrier should be triggered before the deviation deprives the crew of time and controllability: through inspection, sensor, alarm, dispatch control or security procedure. Lesson 02 ### Clear procedure Practical page lesson - Standard phraseology, confirmation of takeoff permission and the right of any crew member to stop a dangerous action. The procedure should be short, training and feasible in real conditions. Lesson 03 ### Sustainability of design and organization One error, one sensor or one missed item should not immediately destroy all levels of protection. Reserve independence is more important than the formal number of systems. Lesson 04 ### Preparation of a rare scenario The simulator and the analysis of events allow you to meet an unusual combination in advance, distribute duties and recognize early signs without knowing the future outcome. Lesson 05 ### Checking the result The disaster accelerated the standardization of phraseology and the development of crew resource management. Its relevance today ## The memory of an event is measured by modified barriers The Tenerife disaster remains part of the history of aviation not because of the scale of the title, but because it allows you to see the work of a complex system under load. Two Boeing 747s collided in a busy strip in thick fog. Radiophraseology, overloaded airfield and an incomplete picture of the situation have formed in one chain. "becomes useful only after the separation of the mechanism, conditions, decisions and consequences. Then the reader sees not an inevitable tragedy, but a sequence of points at which another design or procedure could change the result. The main heritable conclusion is Standard phraseology, confirmation of the take-off permit and the right of any crew member to stop the dangerous action. It does not only apply to the crew of a particular flight. The manufacturer is responsible for clear and sustainable equipment, the operator is responsible for maintenance and training, the airport and dispatch service is responsible for a safe environment, the regulator is responsible for independent control, and the passenger is responsible for executing evacuation commands. Security arises at the intersection of these responsibilities. The disaster accelerated the standardization of phraseology and the development of crew resource management. It is important not to attribute all subsequent improvements to one incident: major changes are usually shaped by multiple investigations, studies, and trials. But the concrete case provides evidence that makes abstract risk a measurable task and makes postponing protection more difficult. Continue exploring ## More analyses [Browse the archive](https://onlyplanes.ru/en/plane-crashes) [World chronicle · 2024

Jeju Air Flight 2216 accident

Distinguish the confirmed sequence from early theories and design runway overrun areas without rigid obstacles.](https://onlyplanes.ru/en/plane-crashes/jeju-air-2216-2024) [World chronicle · 2023

Yeti Airlines Flight 691 accident

Preventing lever confusion, strict configuration monitoring and immediate recognition of lost thrust in both engines.](https://onlyplanes.ru/en/plane-crashes/yeti-airlines-691-2023) [World chronicle · 2022

China Eastern Flight 5735 accident

Avoid replacing an ongoing investigation with theories; distinguish the confirmed flight profile from explanations of its cause.](https://onlyplanes.ru/en/plane-crashes/china-eastern-5735-2022) ```json {"@context":"https://schema.org","@graph":[{"@id":"https://onlyplanes.ru/en#website","@type":"WebSite","description":"News, stories and rare images from the world of aviation","inLanguage":"en-GB","name":"OnlyPlanes","url":"https://onlyplanes.ru/en","publisher":{"@id":"https://onlyplanes.ru/en#identity"},"translationOfWork":{"@id":"https://onlyplanes.ru/en#website"}},{"@id":"https://onlyplanes.ru/en/plane-crashes/tenerife-1977#webpage","@type":"WebPage","datePublished":"1977-03-27","description":"The disaster in Tenerife is not a short line in the chronology, but a related system of decisions and failures. In this dossier, the confirmed sequence, technical, human, organizational and environmental factors, the limits of available data and the practical changes that followed the incident are separately analyzed.","name":"Tenerife airport disaster: causes, timeline and findings","url":"https://onlyplanes.ru/en/plane-crashes/tenerife-1977","isPartOf":{"@id":"https://onlyplanes.ru/en#website"},"potentialAction":[{"@type":"ReadAction","target":["https://onlyplanes.ru/plane-crashes/tenerife-1977"]}],"primaryImageOfPage":{"@id":"https://onlyplanes.ru/en#logo"}},{"@id":"https://onlyplanes.ru/en#identity","@type":"Organization","name":"OnlyPlanes","url":"https://onlyplanes.ru/en","logo":{"@id":"https://onlyplanes.ru/en#logo"},"sameAs":["https://t.me/legkoenebo"]},{"@id":"https://onlyplanes.ru/en/plane-crashes/tenerife-1977#article","@type":"Article","datePublished":"1977-03-27","description":"The disaster in Tenerife is not a short line in the chronology, but a related system of decisions and failures. In this dossier, the confirmed sequence, technical, human, organizational and environmental factors, the limits of available data and the practical changes that followed the incident are separately analyzed.","headline":"Tenerife airport disaster: causes, timeline and findings","inLanguage":"en-GB","thumbnailUrl":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp","author":{"@id":"https://onlyplanes.ru/en#identity"},"image":{"@id":"https://onlyplanes.ru/en#/schema/image/1"},"isPartOf":{"@id":"https://onlyplanes.ru/en/plane-crashes/tenerife-1977#webpage"},"mainEntityOfPage":{"@id":"https://onlyplanes.ru/en/plane-crashes/tenerife-1977#webpage"},"publisher":{"@id":"https://onlyplanes.ru/en#identity"}},{"@id":"https://onlyplanes.ru/en#logo","@type":"ImageObject","caption":"OnlyPlanes","contentUrl":"https://onlyplanes.ru/search-logo.png","inLanguage":"en-GB","url":"https://onlyplanes.ru/search-logo.png"},{"@id":"https://onlyplanes.ru/en#/schema/image/1","@type":"ImageObject","contentUrl":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp","inLanguage":"en-GB","url":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp"}]} ``` ## Sitemap See the full [sitemap](https://onlyplanes.ru/sitemap.md) for all pages.