Just Culture

Just Culture as a formal safety concept originates primarily with Professor James Reason's 1997 work on organizational error ("Managing the Risks of Organizational Accidents") and was operationalized for aviation by David Marx's 2001 "Patient Safety and the 'Just Culture'" model (developed under a NASA contract, directly applicable to aviation). The Marx/Reason model defines three behavioral categories that determine the appropriate organizational response: human error (an inadvertent action — the person did not intend the outcome and could not reasonably have predicted it), at-risk behavior (a conscious choice to deviate from a safe practice, where the person underestimated or did not recognize the risk), and reckless behavior (a conscious choice to take a known, unjustifiable risk). Just Culture requires that only reckless behavior and intentional violations result in punitive consequences; human error requires system redesign, and at-risk behavior requires coaching and risk awareness — not punishment. Sidney Dekker's parallel framing, developed in "Just Culture: Balancing Safety and Accountability" (2007), adds the distinction between retributive and restorative justice, arguing that aviation organizations that use punishment as a default response to error actively degrade their safety data by suppressing reporting.

ICAO Annex 19, Second Edition (2016), paragraph 1.4.1, defines Just Culture as "a culture in which front-line operators or others are not punished for actions, omissions or decisions taken by them that are commensurate with their experience and training, but where gross negligence, wilful violations and destructive acts are not tolerated." This definition is incorporated into every State's SMS requirement and flows down to all approved organizations (AOC holders, ATOs, CAMOs) through their mandatory SMS. ICAO Doc 9859, Chapter 3 (Safety Culture and Human Factors) expands on this, noting that just culture is not the same as a "no blame" culture — accountability is retained for violations, but the threshold is deliberately set high to avoid chilling reporting of genuine errors.

In European law, just culture protections for occurrence reporters have binding legal force under Regulation (EU) 376/2014 on the reporting, analysis and follow-up of occurrences in civil aviation. Article 16 ("Just Culture") prohibits Member States and aviation organizations from using occurrence reports submitted under the regulation as evidence in proceedings against the reporter, except in cases of gross negligence or where criminal law explicitly requires disclosure. Article 16(9) requires each Member State to designate a "just culture body" — an independent authority — that can receive and adjudicate complaints from employees who believe they have been sanctioned for reporting. Annex II of the regulation defines the categories of persons protected. The implementing regulation (EU) 2015/1018 specifies the reportable occurrence categories (Annexes I–V) and cross-references the just-culture protections as the mechanism enabling voluntary compliance.

EASA's amendments to Annex 19 implementation also embed just culture in EASA Part-ORO ORO.GEN.200(a)(6), which requires that the operator's SMS include a safety reporting scheme "operating under just culture principles," and in EASA Part-ORA ORA.GEN.200(a)(6), the parallel requirement for ATOs. EASA AMC2 ORO.GEN.200(a)(3) specifies that the safety reporting system must "assure that individuals are not punished for reporting safety information," and AMC1 ORA.GEN.200(a)(6) requires the ATO to document its just-culture policy in the SMS documentation.

The FAA parallel is the Aviation Safety Action Program (ASAP), established under FAA Advisory Circular AC 120-66B (2002, updated through Change 1, 2015). ASAP is a voluntary, carrier-led program under which participating organizations establish a formal agreement (the ASAP Memorandum of Understanding, or MOU) between the carrier, an employee group (typically a union), and the FAA. Events reported under an ASAP MOU receive legal protection from FAA enforcement action except in cases of criminal activity, deliberate falsification, or accidents. ASAP programs operate at approximately 80 aviation entities. For Part 141 flight schools, no mandatory ASAP equivalent exists, but FAA AC 120-92B (2015) strongly encourages adoption of just-culture principles in the school's voluntary SMS and safety reporting scheme.

The most common just-culture failure in flight school environments is what organizational psychologists call "espoused theory versus theory in use" — the SMS Manual states that just culture applies, but the operational reality is that instructors who self-report errors face informal career consequences (fewer scheduling hours, unfavorable reviews) while instructors who do not report face no systemic scrutiny. This gap destroys the voluntary reporting pipeline within 6–18 months of SMS implementation: initial reporting rates after SMS launch are often high, then collapse as reporters observe the gap between the documented policy and actual manager behavior. The result is that the hazard identification system is starved of the proactive data it needs; only reactive data (accidents and externally observable incidents) reaches the safety manager.

A secondary failure mode specific to ATOs and combined ATO/AOC operators is the confusion between just-culture protections and the legal reporting obligations under Regulation (EU) 376/2014 Article 4. An instructor who self-reports an event to the internal safety system is protected under Article 16 — but this does not extinguish the organization's obligation to file a Mandatory Occurrence Report with the competent authority within 72 hours if the event falls within the Annex I–V categories. Organizations that conflate the two sometimes fail to file MORs because they believe the internal just-culture report satisfies the reporting duty, or conversely, avoid encouraging internal reports because management fears MOR-triggering events. Both errors are audit findings and, in the case of missed MOR filings, potentially subject to enforcement.

Aviatize's safety management module implements just culture as a structural property of the reporting system, not just a policy document. When a reporter submits an occurrence or safety concern, the system assigns the report a unique identifier and timestamps the submission before any classification occurs — creating an immutable record that the report existed, regardless of how it is subsequently handled. The reporter receives a system-generated acknowledgment with the report ID; this confirmation is not visible to the reporter's direct supervisor unless the safety manager explicitly escalates, decoupling the reporting act from the management chain that controls the reporter's scheduling and evaluations. The safety manager's classification interface then presents the Marx/Reason behavioral categories explicitly (human error / at-risk behavior / reckless behavior / deliberate violation), requiring a documented rationale for any classification above human error before the accountability pathway is activated.

For organizations subject to Regulation (EU) 376/2014, the platform's compliance and auditing module maintains a parallel MOR obligation check: when an occurrence report is submitted, the system cross-references the event description against the Annex I–V category list and flags events that are potentially MOR-reportable, prompting the safety manager to confirm whether the 72-hour filing obligation applies. This decouples the just-culture internal report from the regulatory filing obligation and ensures neither is neglected. Reporting rate trends — a leading indicator of just-culture health — are surfaced in the KPI reporting and dashboards module as an SPI, enabling the accountable manager to detect a collapsing reporting rate before the data loss becomes irreversible.