60950 (and 62368) rely on physical and behavioral safeguards for safety. They have no provision for relying on code (firmware or software) safeguards for safety.
These standards require the equipment to be safe in the event of a single fault. As I understand the original comment, the RCD would be a third safeguard. A fault of the RCD would still have two safeguards in place, and should be acceptable to a test house or other authority. Rich From: McDiarmid, Ralph [mailto:ralph.mcdiar...@schneider-electric.com] Sent: Friday, April 29, 2016 4:06 PM To: EMC-PSTC@LISTSERV.IEEE.ORG Subject: Re: [PSES] SV: [PSES] Residual-Current Device It's a programmable device, so the code which runs it could serve a safety critical function and some standards would then refer to UL1998 or perhaps IEC 61508-1. I don't think 60950 has yet taken that "leap". - ---------------------------------------------------------------- This message is from the IEEE Product Safety Engineering Society emc-pstc discussion list. To post a message to the list, send your e-mail to <emc-p...@ieee.org> All emc-pstc postings are archived and searchable on the web at: http://www.ieee-pses.org/emc-pstc.html Attachments are not permitted but the IEEE PSES Online Communities site at http://product-compliance.oc.ieee.org/ can be used for graphics (in well-used formats), large files, etc. Website: http://www.ieee-pses.org/ Instructions: http://www.ieee-pses.org/list.html (including how to unsubscribe) List rules: http://www.ieee-pses.org/listrules.html For help, send mail to the list administrators: Scott Douglas <sdoug...@ieee.org> Mike Cantwell <mcantw...@ieee.org> For policy questions, send mail to: Jim Bacher: <j.bac...@ieee.org> David Heald: <dhe...@gmail.com>
