The End of the Affirmative Defense: Why the October 2024 EPA NESHAP Amendment Changes Your Oil & Gas Compliance Strategy

The Defense That Was — And Is No More

Until October 2024, oil and natural gas operators had a safety net. If equipment malfunctioned, if a startup went sideways, if a shutdown created an uncontrolled release of benzene or hexane into the air — you could argue an affirmative defense. Startup, shutdown, and malfunction (SSM) exceptions meant you weren’t automatically liable for civil penalties for every emission event that fell outside normal operating parameters.

That safety net is gone.

The EPA finalized critical amendments in October 2024 that removed affirmative defense provisions from the National Emission Standards for Hazardous Air Pollutants (NESHAP) for oil and natural gas production facilities. This decision aligns federal enforcement with a 2014 U.S. Court of Appeals ruling and shifts compliance enforcement from a “reasonable defense” model to strict liability. Every violation now carries daily civil penalty exposure. No exceptions for circumstances beyond your control.

For operators across the 40 states where oil and gas production happens at scale, this is not a regulatory tweak. It is a structural shift in how the EPA enforces air toxics compliance.

What This Means in Plain English

40 CFR 63 Subpart HH establishes air toxics emission limits for oil and gas production facilities — major and area sources that emit hazardous air pollutants including benzene, toluene, ethylbenzene, xylenes, and n-hexane. The standards apply to:

Oil and natural gas well sites
Satellite and central tank batteries
Compressor stations
Natural gas processing plants
Transmission and storage facilities

Your facility likely falls into one of these categories. The question is not whether NESHAP applies — it is whether you have documented compliance systems preventing violations, and what you do when violations occur.

Before October 2024, if you could demonstrate that a violation occurred during startup, shutdown, or due to equipment malfunction — and you had taken reasonable steps to prevent it — the EPA had limited grounds to assess penalties. This defense required documentation, good faith effort, and proof of remediation. It wasn’t a get-out-of-jail card, but it provided legal protection for violations that resulted from circumstances beyond reasonable operational control.

That defense has been removed. The EPA now enforces Subpart HH under strict liability. Every detected violation carries penalty exposure, regardless of the cause. If your monitoring equipment detects benzene emissions exceeding the standard — whether it happened during normal operation, a startup event, or equipment failure — it is a violation. And violations carry daily civil penalties.

The Penalty Math Is Stark

To understand the financial exposure, look at what the EPA has already collected:

Lima Refining Company paid $19 million in civil penalties in 2024 for benzene and volatile organic compound (VOC) air toxics violations under Subpart HH-related standards. That single enforcement action involved multiple violations across multiple time periods, but it illustrates the scale of exposure the EPA is pursuing.

Under the current penalty structure, willful violations can reach $165,514 per instance (adjusted annually for inflation). For a facility with multiple emission points — storage tanks, glycol dehydrators, compressor equipment leaks, vent gas streams — a single compliance failure across multiple days at multiple locations can compound into six-figure exposure very quickly.

The removal of the affirmative defense eliminates the opportunity to argue that a violation was an anomaly, reasonably prevented, or corrected immediately. The EPA’s position is now: if you detect an exceedance, it happened. You are liable.

What “Strict Liability” Means for Your Facility

Strict liability enforcement creates three cascading problems:

1. Documentation Becomes Litigation Evidence

Every log, every monitoring record, every maintenance note is now potential evidence in an enforcement case. If the EPA conducts an inspection and finds that your glycol dehydrator monitoring logs show emissions exceeding the standard on three separate dates, those three dates become three violations — each capable of generating daily penalty exposure.

The affirmative defense used to allow you to argue context: “We detected this, we investigated, we corrected the root cause, and we implemented controls to prevent recurrence.” That narrative no longer exists as a legal defense. Your documentation is evidence of the violation itself, not context for a defense.

2. Preventive Maintenance Must Eliminate Risk, Not Just Manage It

Under affirmative defense, reasonable preventive maintenance was part of the defense argument. Under strict liability, preventive maintenance is the only barrier between normal operation and a violation.

This means:

Glycol dehydrators must achieve ≥95% VOC capture through vapor recovery units or combustion controls — not “as much as reasonably achievable” but the actual standard stated in 40 CFR 63 Subpart HH.
Storage vessels ≥6 tons/year VOC must reduce emissions by ≥95% through capture or control — not exceed, not approach, but achieve.
Equipment leaks must follow leak detection and repair (LDAR) protocols with no grace period for minor discoveries.
Vent gas streams from flares and enclosed combustion devices must maintain continuous monitoring of net heating value.

The standard shifts from “reasonable effort” to “actual performance.” Facilities operating with aging equipment, deferred maintenance, or marginal control effectiveness are now immediately out of compliance.

3. Monitoring Data Becomes Your Liability Trigger

Optical gas imaging (OGI) is transforming EPA enforcement. The EPA approved ChampionX’s Aerial OGI platform in March 2025, capable of surveying 150+ sites per day. Autonomous methane detection drones are EPA-approved. Third-party contractors are authorized to identify Super Emitters using satellite data and remote sensing.

For air toxics like benzene, the implication is clear: if emissions are detectable from the air, they are violations. The EPA now has automated, rapid tools to identify facilities with high emission profiles, and each detection event constitutes evidence of a violation.

The Timing Pressure: Two Concurrent Compliance Deadlines

The October 2024 NESHAP amendment is not happening in isolation. It overlaps with the EPA’s finalized methane standards (NSPS OOOOb for new sources and Emissions Guidelines OOOOc for existing sources), which were published March 8, 2024.

These complementary standards target methane emissions from oil and natural gas sources. The deadlines are staggered but converging:

June 1, 2026: Net Heating Value monitoring requirements (OOOOb/c) — final extended date
November 30, 2026: Annual reporting deadline for OOOOb/c (first reports due)
End of 2026: 98% waste gas capture requirement from new oil wells
January 22, 2027: Primary OOOOb/c compliance deadline for control devices, equipment leaks, storage vessels, process controllers
March 2029: Compliance deadline for existing sources under EG OOOOc

What this means: your facility must now achieve compliance with both Subpart HH air toxics standards (under strict liability) and OOOOb/c methane standards by January 2027. These are not sequential deadlines. They are overlapping requirements that demand simultaneous engineering investment, monitoring system upgrades, and reporting infrastructure.

The 98% waste gas capture requirement for new oil wells by end of 2026 means new production must have capture, flaring, or oxidation systems in place within months — not after January 2027. Existing wells have a longer phase-in, but the engineering and vendor procurement for control equipment must begin now.

State-Level Requirements: The Stacking Problem

Federal requirements are not the ceiling. In high-ozone states, operators face additional layering from state regulations.

Colorado Regulation 7 establishes VOC and NOx emission limits on oil and gas operations statewide. This is independent of Subpart HH. Operators in Colorado must comply with both the federal air toxics standard and the state ozone precursor rule.

New Mexico’s 20.2.50 NMAC applies to counties with high ozone levels: Chaves, Doña Ana, Eddy, Lea, Rio Arriba, Sandoval, San Juan, and Valencia. There is no grandfathering or exemption. If your facility operates in one of these counties, you must reduce VOCs and NOx alongside federal methane standards.

Texas, Oklahoma, and Kansas generally follow federal Subpart HH standards without state air toxics overrides, though Oklahoma and Texas are subject to EPA Regional Haze rules that may influence methane and VOC strategy.

For operators in Colorado and New Mexico high-ozone areas, this creates a compliance stacking problem: Subpart HH standards + state ozone rules + OOOOb/c methane standards, all converging at the same deadline.

What Your Facility Must Do Now

The removal of affirmative defense eliminates the last line of legal defense for violations. Your only protection is compliance itself.

1. Conduct a Subpart HH Compliance Audit

You need a comprehensive assessment of your facility’s current performance against the actual standards — not against what you believe you are doing. This includes:

Inventory of all HAP emission sources: glycol dehydrators, storage tanks, compressor equipment, vent gas streams
Verification of control system effectiveness: vapor recovery, combustion, capture rates
Review of continuous monitoring data: net heating value, temperature, flow rates
Equipment maintenance history: is maintenance reactive or preventive?
Documentation: are records complete, accessible, and defensible?

A third-party audit surfaces gaps that internal reviews often miss — not because internal staff are negligent, but because they operate inside the facility’s assumptions. An external consultant brings the regulatory standard as the baseline, not the facility’s current practice.

2. Assess Your Monitoring Infrastructure

Strict liability enforcement depends entirely on detection. If monitoring detects a violation, it happened. If monitoring does not detect a violation, the facility is compliant (absent EPA field inspection).

The implication is not to avoid monitoring — it is to ensure monitoring is accurate and maintained. Facilities with aging monitoring equipment, calibration lapses, or data gaps create liability exposure through uncertainty. The EPA will interpret ambiguity as non-compliance.

Upgrade or replace monitoring systems that cannot reliably quantify compliance performance.

3. Prioritize Capital Investment in Control Equipment

Compliance with both Subpart HH and OOOOb/c requires functional control systems. Glycol dehydrators need vapor recovery or combustion. Storage tanks need capture or control. Compressors need leak detection protocols. Flares need continuous monitoring.

These systems have lead times. Vendor procurement, equipment fabrication, and installation take 4–6 months for complex systems. If you wait until mid-2026 to order equipment, you will not meet the January 2027 OOOOb/c deadline.

Capital planning must begin now. Budget for:

Control equipment (vapor recovery, combustion, capture systems): $50K–$500K+ depending on scale
Monitoring systems and instrumentation: $20K–$100K+
Installation and commissioning: $10K–$50K+
Annual operation and maintenance: 5–10% of capital cost

4. Document Everything

Your documentation is your defense against ambiguity. It is not a defense against a violation (that defense is gone), but it is evidence that you are operating under a systematic compliance program.

Maintain:

Maintenance logs with dates, specific work performed, and verification of control performance
Monitoring data with all raw records, not summaries
Equipment purchase specifications and control system certifications
Training records for personnel responsible for compliance operations
Incident reports and corrective action records

If the EPA conducts an inspection and finds your documentation is thorough, complete, and shows you are operating under a documented compliance system, the penalty exposure is lower than if your records are sparse or inconsistent.

5. Plan for January 2027 OOOOb/c Compliance

The methane standards are a parallel compliance requirement. The January 22, 2027 deadline applies to control devices, equipment leak standards, storage vessels, and process controllers.

Your facility planning should address:

Waste gas capture system design and installation (98% for new wells by end of 2026)
Reciprocal and centrifugal compressor control requirements
Super Emitter identification program — if your facility is identified as a Super Emitter (>100 kg/hr methane), third-party reporting triggers additional regulatory scrutiny
Continuous monitoring of vent gas net heating value for flares and combustion devices
Annual emissions reporting due November 30, 2026

These are not optional improvements. They are regulatory requirements with specific deadlines.

The True Cost of Delay

The cost of non-compliance has two components: the penalty and the remediation.

If the EPA issues a notice of violation, you must:

Pay the penalty: Up to $165,514 per violation, multiplied by days of violation. A facility with three emission points operating out of compliance for 30 days across a single compliance period could face $14.9 million in penalties.
Remediate to compliance: Implement control systems, upgrade monitoring, and submit corrective action reports. This typically costs 2–5x the penalty amount, depending on the scope of remediation required.
Defense costs: If the violation goes to litigation, legal defense costs add $100K–$500K or more.

The total cost of reactive enforcement is vastly higher than the cost of proactive compliance. A facility investing $200K now in control equipment and monitoring systems avoids $1–5 million in potential enforcement exposure.

For iSi’s clients operating under an environmental compliance cooperative (COOP) program, the burden is distributed differently. Rather than managing compliance internally through a dedicated environmental hire ($130,000–$195,000 annually) or reactive consulting engagement, a COOP retainer provides systematic monitoring, documentation, and compliance strategy as a fixed cost. The COOP model puts compliance certainty in place before violations occur.

Next Steps

The removal of the affirmative defense is not a pending regulatory threat — it is the current enforcement reality. Facilities operating under the old assumption that “startup exceptions will protect us” are already out of sync with EPA enforcement posture.

Your facility needs:

A current Subpart HH compliance assessment
Clear identification of control system gaps
A capital investment plan for equipment upgrades
Documentation of your compliance program
Coordination with your OOOOb/c methane compliance strategy

If your facility operates in Colorado or New Mexico’s high-ozone counties, add state-specific compliance analysis to that list.

The January 2027 deadline is not hypothetical. The EPA’s enforcement tools are sharp. The financial exposure is real. The time to address this is now.