Chapter 10 of 11 · Deck OOW

Marine Law & Certificates

Every certificate on the bridge traces back to one convention and one survey cycle: get either wrong and a port state inspector will find it before you do.

Worked examples2, fully stepped
Read time≈ 13 min
PrerequisiteNone

1. Name the instrument before you quote the rule

In an oral exam, and in a port state control interview, half the mark is decided before you say a word about the actual requirement – purely on whether you named the right convention. Examiners and inspectors both use the same shorthand, so learn to reach for it automatically: safety of the ship and the people on it is SOLAS territory; what leaves the ship is MARPOL; whether the people are competent to be there is STCW; how much of the ship is allowed to sit below the waterline is Load Line; how big the ship officially is, for every purpose that depends on a size threshold, is Tonnage; how she behaves in relation to other ships at sea is COLREG, which touches conduct rather than certificates; and the terms under which her crew are employed is MLC, the one major instrument on this list that comes from the International Labour Organization rather than the IMO.

  • SOLAS — construction, fire protection, life-saving appliances and navigational equipment, and, through codes made mandatory under it, the ship's safety management system (ISM) and her security arrangements (ISPS).
  • MARPOL — six annexes, each a different thing leaving the ship: oil, noxious liquid chemicals, packaged harmful substances, sewage, garbage, and air emissions.
  • STCW — the minimum training, certification and watchkeeping standard for the people, independent of the ship's own condition.
  • Load Line — reserve buoyancy expressed as freeboard, and the marks cut into the hull that show it.
  • Tonnage — a measured figure for the ship's enclosed volume that in turn decides manning scales, dues and which other rules even apply to her.
  • COLREG — the watchkeeper's conduct at sea; it produces no certificate of its own.
  • MLC — employment, accommodation, health and welfare of seafarers, enforced alongside the IMO instruments in the same inspection.
The key idea

If you cannot name the right convention, you cannot be right about the requirement – identify the instrument before you attempt the detail.

2. The statutory certificate set — what's aboard and who signed it

Every certificate in the ship's file exists because one of those conventions requires it, and each one is issued in the name of the flag State, even when a classification society's surveyor actually signed it. A cargo ship carries either three separate SOLAS certificates — Safety Construction (SC), Safety Equipment (SE) and Safety Radio (SR) — or, more commonly today, a single harmonised Cargo Ship Safety Certificate that folds all three into one document with one survey pattern. Alongside it sit the MARPOL certificates: the International Oil Pollution Prevention (IOPP) Certificate for the oil-related requirements of Annex I, and the International Air Pollution Prevention (IAPP) Certificate for Annex VI. Security brings the International Ship Security Certificate (ISSC) under the ISPS Code, and employment brings the Maritime Labour Certificate under MLC.

Safety management produces two separate documents that are easy to confuse: the Document of Compliance (DOC) is issued to the company, covering its whole managed fleet, while the Safety Management Certificate (SMC) is issued to the individual ship and depends on a valid DOC being in place for the company that operates her. Losing one does not automatically void the other, but a port state control officer will ask to see evidence of both, and a ship cannot hold a valid SMC under a company whose DOC has lapsed.

The key idea

A certificate names the ship it covers, with one deliberate exception – the DOC, which names the company and follows every ship that company manages.

3. Surveys and the five-year cycle

Almost every statutory certificate runs on the same underlying rhythm: an initial survey before it is first issued, annual surveys to confirm nothing material has changed, an intermediate survey partway through the term for the more equipment-heavy certificates, and a renewal survey before the certificate expires that restarts the cycle. The certificate's nominal life is capped at five years, and the flag State – directly, or through a recognised organisation it has authorised to act on its behalf – decides when each of those surveys has been satisfactorily completed.

Initial → Annual → Annual → Intermediate → Annual → Renewal (≤ 5 yr) the cycle restarts from the renewal survey

The word to hold onto is anniversary date: the day and month that match the certificate's expiry date, repeated each year of its life. Annual surveys have to fall within a window either side of that anniversary date, and the intermediate survey – required on certificates such as the IOPP, the ISSC and, as verification rather than survey, the SMC – has its own window, typically between the second and third anniversary. Falling outside either window does not just create a paperwork gap; on several of these certificates it ends the certificate's validity there and then, well before the five-year date printed on it, exactly as in the first worked example below. Where a ship genuinely cannot reach a port where a renewal survey can be carried out, the flag State can grant a short extension to let her get there – but that extension is tightly limited, and it does not reset the underlying cycle.

The key idea

Learn to ask "which window, and are we inside it" before you ask "how long until the five-year date" – the window is usually the one that actually bites.

4. Three jurisdictions, three roles

Three different authorities can have a legitimate interest in the same ship at the same moment, and knowing which one is acting changes what you should expect from them. The flag State carries the primary responsibility: it issues the ship's certificates, sets the law that applies aboard her wherever she sails, and is expected to exercise real oversight over ships flying its flag rather than simply lending its registry. The port State has no such ongoing responsibility for a foreign ship, but it has the right to verify, while that ship is voluntarily in one of its ports, that she genuinely meets the standards her flag State's certificates say she meets – port state control is a check on the system, not a replacement for it. The coastal State is different again: it exercises rights over the waters off its own coast under the law of the sea, and those rights change with distance from shore — full sovereignty, subject to foreign ships' right of innocent passage, out to 12 nautical miles; limited customs, fiscal, immigration and sanitary enforcement out to 24 nautical miles; and resource and environmental-protection rights, short of full sovereignty, out to 200 nautical miles.

  • Flag State — issues the certificates and is answerable for the ship, wherever she is.
  • Port State — inspects a foreign ship that has come into its port, to confirm her paperwork matches her actual condition.
  • Coastal State — holds rights over its own adjacent waters that scale down the further those waters are from its coast.
The key idea

Before answering "who deals with this", settle whose flag, whose port or whose sea is actually involved – that alone usually points to the right authority.

5. Port state control follows a pattern

A port state control visit is not a free-form search of the ship; it follows a set sequence, and knowing the sequence tells you what an inspector is entitled to do at each stage. It starts as an initial inspection: the certificate file and a general impression of the ship – her condition, her crew, her housekeeping. If that stage raises nothing, the visit can end there. If it raises clear grounds – evidence, documentary or simply observed, that the ship or her equipment does not substantially meet requirements, whether or not the paperwork says otherwise – the inspection is escalated to a more detailed one, which can extend to an operational check of the crew and equipment, not just a further look at documents. That is exactly what happens in the second worked example below, where a clean certificate file did not stop a walkthrough from finding something the paperwork could not show.

Whatever is found is recorded against a deficiency, coded by how serious it is and what has to happen next – a minor item might simply have to be rectified before the ship's next departure, while a serious one is detainable, meaning the ship is not permitted to proceed to sea at all until it is put right and re-inspected. A detention is never about counting deficiencies; it is a judgement about whether, taken together, they mean the ship should not go to sea. As the officer on watch, your part in all this is unglamorous but decisive: keep certificates current and readily producible, keep the Oil Record Book, Garbage Record Book and hours-of-rest records consistent with what actually happens on board, and be able to show that any deficiency raised at a previous port was genuinely closed out – inspectors specifically check for that.

The key idea

The best defence in a port state control inspection is not a clean certificate file on its own – it is a ship and a set of records that match what that file says.

6. Worked examples

Both examples below turn on the same habit: work out the governing date or authority first, and only then decide what it means for the ship – the kind of layered reasoning an examiner or an inspector actually tests, rather than a single fact recited from memory.

Worked example 1

An ISM certificate that lapses before its printed expiry date

You have just taken over as Master's designated safety officer on a bulk carrier and are checking the ship's statutory paperwork ahead of a fixture that will take her deep-sea for several months. The ship's Safety Management Certificate (SMC) was issued on 10 June 2022 for the usual five-year term. Going through the audit file you find that the mandatory intermediate ISM verification, which was scheduled for May 2025, was cancelled because the auditor could not get to the ship during a period of port congestion, and nobody rebooked it. Today is 20 July 2025 and the ship is due to sail on the evening tide.

Given

SMC issued 10 June 2022, nominal validity 5 years (printed expiry 10 June 2027) ISM Code requires one intermediate verification of the SMC, carried out between the 2nd and 3rd anniversary of the issue date Scheduled intermediate audit (May 2025) was cancelled and never rebooked Today's date: 20 June 2025 was already the 3rd anniversary; it is now 20 July 2025

  1. Work out the verification window first.

    2nd anniversary=10 Jun 2022 + 2 years = 10 Jun 2024 3rd anniversary=10 Jun 2022 + 3 years = 10 Jun 2025 Required window for intermediate verification = 10 Jun 2024 – 10 Jun 2025

    Not the printed expiry. The five-year date on the certificate is the outer limit of its life, but the SMC also carries its own internal deadline that has nothing to do with that date.

  2. Check today's date against that window.

    Window closed: 10 Jun 2025 Today: 20 Jul 2025 ⇒40 days after the window closed, with no verification carried out

    Not against the 2027 expiry printed on the certificate.

  3. Decide what that means for the certificate.

    The SMC ceased to be valid from 10 Jun 2025, the moment the window closed with no verification done – independent of the 5-year date still printed on it.

    Not just for the audit log. The ISM Code treats the intermediate verification as a condition of the SMC remaining in force, not as a box that can be ticked late without consequence.

  4. Decide what to do before sailing.

    Not after a port state control officer finds it first.

AnswerThe ship does not sail on this SMC. Report the lapse to the company's Designated Person Ashore and to the flag State (or its recognised organisation) immediately, and hold the vessel until the overdue intermediate verification is carried out, or the flag State gives explicit direction – sailing with a lapsed SMC is itself a serious, likely detainable, non-conformity if a port state control officer finds it first.

The trap: reading the five-year date on the certificate and concluding it is still valid – the printed expiry is the outer limit of the SMC's life, not the only date that can end it; missing the mandatory intermediate verification window invalidates the certificate immediately, however far away that outer date still is.

Worked example 2

A clean set of certificates does not end a port state control inspection

A foreign-flagged product tanker berths in a port that is an active member of a regional port state control regime. You are the officer of the watch when the PSC officer boards for an initial inspection. The certificate file is complete and in date, including a current IOPP Certificate endorsed by the ship's recognised organisation, and the ship's general impression – paint, housekeeping, crew's manner – is good, with nothing in the ship's inspection history flagged as a concern. The officer nonetheless asks to walk through the engine room, and there finds a length of flexible hose rigged across the oily water separator, connecting the bilge line directly to the overboard discharge valve and bypassing the separator entirely. The hose is coupled and ready for use, not stowed as a spare.

Given

Foreign-flagged tanker in a Port State Control member port Certificates, including IOPP, all valid and endorsed; general impression satisfactory; no adverse history Engine-room walkthrough finds a rigged bypass hose defeating the oily water separator, connected direct to the overboard discharge valve Deficiency action codes in use at this port: 17 = rectify before departure; 30 = detention

  1. Identify whose authority is being exercised.

    The ship is in a foreign port, so this is the port State acting under its port state control powers to verify compliance with the conventions – a check on the flag State's certification, not a substitute for it, and it applies however clean the certificate file looks.

  2. Recognise why the inspection did not stop at the paperwork.

    A satisfactory document check and general impression are what keep an inspection at the initial stage; they do not prevent the officer from walking the ship, and it is that walkthrough, not the certificate file, that surfaced the problem.

  3. Classify what was found.

    Relevant deficiency action codes
    CodeMeaning
    17Rectify before departure – ship may still sail once logged
    30Detention – ship held until the deficiency is resolved

    A hose rigged to bypass an oil filtering and discharge-monitoring system is a deliberate defeat of pollution-prevention equipment, not an administrative shortfall – exactly the kind of physical finding that gives "clear grounds" for a more detailed inspection and normally meets the threshold for detention rather than a lesser deficiency.

  4. Work out what has to happen before the ship can move again.

    And what it costs the ship beyond the inspection itself.

AnswerThe ship is detained under code 30, not merely logged as a code 17 item. She may not proceed to sea until the bypass hose is removed, the oily water separator and its discharge monitoring are proven working again, the finding is reported to the flag State, and the port state control officer is satisfied on re-inspection – the valid IOPP Certificate in the file does not offset what was found on the pipework.

The trap: treating a complete, in-date certificate file and a good general impression as proof the ship is compliant – the detailed inspection exists precisely because the ship's actual physical condition can contradict paperwork that is, on its face, entirely in order.

Reference sheet
60-second recall
  1. A five-year expiry is not the only clock on a certificate – miss the intermediate verification window and it can lapse long before that date.
  2. The DOC belongs to the company, the SMC belongs to the ship – an inspector will ask about both, not just the one in front of them.
  3. A certificate proves what was true at the last survey, not what is true right now – the ship's actual condition can outweigh it.
  4. Code 17 lets the ship sail and fix it later; code 30 does not – nothing moves until the deficiency is resolved.
  5. 12, 24, 200 nautical miles – territorial sea, contiguous zone, EEZ: a coastal State's authority narrows as the distance grows.