Definition
(a) States launching space objects with nuclear power sources on board shall endeavour to protect individuals, populations and the biosphere against radiological hazards. The design and use of space objects with nuclear power sources on board shall ensure, with a high degree of confidence, that the hazards, in foreseeable operational or accidental circumstances, are kept below acceptable levels as defined in paragraphs 1 (b) and (c).
Such design and use shall also ensure with high reliability that radioactive material does not cause a significant contamination of outer space;
(b) During the normal operation of space objects with nuclear power sources on board, including re-entry from the sufficiently high orbit as defined in paragraph 2 (b), the appropriate radiation protection objective for the public recommended by the International Commission on Radiological Protection shall be observed. During such normal operation there shall be no significant radiation exposure;
(c) To limit exposure in accidents, the design and construction of the nuclear power source systems shall take into account relevant and generally accepted international radiological protection guidelines.
Except in cases of low-probability accidents with potentially serious radiological
consequences, the design for the nuclear power source systems shall, with a high degree of confidence, restrict radiation exposure to a limited geographical region and to individuals to the principal limit of 1 mSv in a year. It is permissible to use a subsidiary dose limit of 5 mSv in a year for some years, provided that the average annual effective dose equivalent over a lifetime does not exceed the principal limit of 1 mSv in a year.
The probability of accidents with potentially serious radiological consequences referred to above shall be kept extremely small by virtue of the design of the system.
Future modifications of the guidelines referred to in this paragraph shall be applied as soon as practicable;
(d) Systems important for safety shall be designed, constructed and operated in accordance with the general concept of defence-in-depth. Pursuant to this concept, foreseeable safety-related failures or malfunctions must be capable of being corrected or counteracted by an action or a procedure, possibly automatic.
The reliability of systems important for safety shall be ensured, inter alia, by redundancy, physical separation, functional isolation and adequate independence of their components.
Other measures shall also be taken to raise the level of safety.