What Happens During an ATC Outage?
An air traffic control system failure is one of the rarest but most catastrophic events in aviation. When ATC goes down, the entire system that keeps aircraft safely separated stops working. Here is what causes these events and what happens on the ground.
Quick Answer
An ATC outage means that the computer systems, radar, or communications that air traffic controllers depend on to safely manage aircraft have partially or fully failed. Without these tools, controllers cannot see aircraft positions, issue clearances, or maintain safe separation. A ground stop is almost always issued immediately to prevent more aircraft entering a system that cannot manage them.
What Air Traffic Control Systems Actually Are
ATC is not a single system but a collection of interconnected tools. A failure in any one of them can cascade into a full outage.
Flight plan processing systems
Every commercial flight files a flight plan before departure. These plans are processed, stored, and distributed to controllers across the route. If the processing system fails, controllers lose visibility of what aircraft are coming and where they intend to go.
Radar and surveillance
Primary radar detects aircraft as physical objects. Secondary radar communicates with transponders in each plane to get identity, altitude, and speed. If radar goes down, controllers are effectively blind to aircraft position.
Voice communications
Radio contact between controllers and pilots is the fallback for almost everything. If radio systems fail at a centre or approach facility, controllers cannot issue instructions or receive pilot readbacks.
Data link and ACARS
Modern aircraft communicate digitally with ground systems for clearances, weather, and routing updates. Failures here are less critical than radar or voice, but still degrade the controller's situational awareness significantly.
Notable Real-World Outages
NATS Outage - UK, August 2023
SevereA single flight plan submitted with an unusual character sequence triggered a bug in NATS flight plan processing software. The system, unable to handle the input, suspended automated processing and forced controllers to switch to manual operations. The entire UK airspace was effectively capped at a fraction of its normal throughput for approximately 12 hours.
1,500+
Flights cancelled
700k+
Passengers affected
12 hrs
Duration
£100m+
Industry cost
FAA NOTAM System Failure - US, January 2023
NationwideA corrupted file in the FAA Notice to Air Missions (NOTAM) database prevented pilots from receiving safety-critical information before departure. Without a functioning NOTAM system, the FAA could not legally clear flights to take off. A nationwide ground stop was issued - the first of its kind since the September 11 attacks in 2001. All US domestic departures halted for approximately 90 minutes.
~11,000
Flights delayed
90 min
Ground stop duration
1st since 9/11
Scale of event
What Happens Step by Step
Failure is detected - either by automated monitoring or by controllers noticing abnormal system behaviour.
A ground stop is immediately issued for the affected airspace. No new departures are permitted into the affected area.
Aircraft already airborne continue under more manual procedures. Controllers use paper strips, direct radio, and reduced traffic levels.
Engineers attempt to restore the system, restore from backups, or switch to backup hardware.
Once systems are restored and verified, the ground stop is lifted and traffic is gradually reintroduced to avoid overwhelming the system.
A backlog of delayed flights works through the system over the following hours or rest of the day.
Key Facts
Very rare
Frequency
Major outages happen a few times per decade
Hours - days
Recovery time
Depends on scale of the failure
RED
AirStatus Level
Always classified as severe disruption
Why Redundancy Does Not Always Prevent Outages
Modern ATC facilities are designed with multiple layers of redundancy. Critical systems run on dedicated hardware, backed by secondary systems, with tertiary manual fallbacks. In theory, a single component failure should be invisible to the operation. In practice, outages still occur for several reasons.
Software bugs triggered by edge cases
The NATS 2023 outage is the clearest example. A valid but unusual flight plan input triggered a software bug that had never been encountered in testing. The system responded by suspending automated processing entirely — a designed safety mechanism — but the result was a nationwide capacity collapse. Legacy aviation software often contains millions of lines of code written over decades, making comprehensive testing impossible.
Simultaneous primary and backup failure
Redundant systems sometimes share a common dependency — a power feed, a network switch, or a cooling system. If that shared component fails, both primary and backup go down together. This is known as a common-cause failure, and it is one of the hardest failure modes to design against.
Human error during maintenance
Many ATC outages have been traced to mistakes made during routine maintenance or software updates — a corrupted configuration file, an incorrect network setting, or a maintenance window that went wrong. The FAA NOTAM outage in January 2023 was caused by a contractor accidentally deleting a live file during a maintenance procedure.
Manual fallback capacity limits
When automated systems fail, controllers revert to manual procedures — voice communications, paper flight strips, and procedural separation. These methods work but are far slower. An en-route control centre that normally handles 300 aircraft per hour may only be able to safely manage 60 under manual procedures, forcing a ground stop even after the primary failure is contained.
What Airlines Do During an ATC Outage
Airlines have operations centres that monitor ATC status in real time. When a significant outage is declared, their response follows a well-rehearsed sequence.
Travel waivers issued during ATC outages are one of the most passenger-friendly responses airlines make. They typically allow you to rebook onto any available flight to the same destination within a set window — often 3 to 7 days — at no additional cost. Check your airline's app during any major disruption.
Your Rights During an ATC Outage
Important nuance on compensation
ATC failures are often treated as extraordinary circumstances under UK261 and EU261. This means airlines can sometimes avoid paying fixed compensation (the £220-£520 or €250-€600 amounts) if they can show the disruption was caused by ATC and was outside their control.
However, the right to care always applies regardless of cause. If your delay is 2 hours or more at departure, your airline must provide meals and drinks. If you are stranded overnight, they must cover your hotel and transport.
- ›Always keep your boarding pass and any messages from the airline.
- ›Request meals and refreshments in writing - an email or message creates a paper trail.
- ›If your flight is cancelled, you are entitled to a full refund or re-routing regardless of the cause.
- ›Submit a claim anyway - airlines sometimes reject claims incorrectly and services like AirHelp can challenge them.