ECDIS is a navigation information system that displays electronic chart data, integrated with position fixing (GPS/GNSS), and other navigational data. A compliant ECDIS can be used in lieu of paper charts if it meets IMO performance standards and uses the correct chart type.
| Vessel type / size | Requirement |
|---|---|
| New passenger ships ≥500 GT (from 2012) | ECDIS mandatory |
| New tankers ≥3000 GT (from 2012) | ECDIS mandatory |
| New cargo ships ≥10,000 GT (from 2013) | ECDIS mandatory |
| New cargo ships 3000–10,000 GT (from 2014) | ECDIS mandatory |
| Existing vessels (phased schedule to 2018) | ECDIS mandatory per GT/type |
| Vessels below carriage threshold | ECDIS not mandatory — paper charts or type-approved ECDIS acceptable |
| Limitation | Risk |
|---|---|
| Chart data quality (CATZOC) | Many ENCs are based on old survey data. A Zone of Confidence (CATZOC) rating tells you how reliable the depth data is. Low-rated areas may have significant depth errors — never assume the chart is accurate |
| GPS / GNSS dependency | Position accuracy depends entirely on the GNSS input. Signal loss, jamming, or spoofing will give a false position. Always cross-check with visual bearings and radar |
| Incorrect alarm settings | Safety contour, safety depth, and XTE alarms must be set correctly for the vessel's draught and the passage. Wrong settings = no alarm when needed |
| Operator over-reliance | The most dangerous limitation. ECDIS gives a false sense of security — it shows the chart on screen but it does not think. The OOW must apply judgement |
| ENC update status | Charts must be kept up to date with weekly updates. Out-of-date ENCs show hazards that may no longer exist — or miss new ones |
| RCDS mode limitations | No vector data — many ECDIS alarms and functions do not work. Must carry paper charts alongside |
| Equipment failure | Single ECDIS failure with no backup = potentially no chart. Backup arrangement is mandatory for vessels on paperless navigation |
| Scale distortion | Zooming in too far on a small-scale chart gives false precision — the chart data does not become more accurate because you zoom in |
| Alarm | What it is | Set based on |
|---|---|---|
| Safety Contour | Vessel will alarm if it approaches a depth contour you have defined as unsafe | Vessel's maximum draught + UKC allowance + safety margin |
| Safety Depth | Soundings shallower than this depth are highlighted on the chart display | Vessel's draught + UKC margin |
| Cross Track Error (XTE) | Alarm when vessel deviates beyond a set distance from the planned track | Sea room available and proximity of hazards on each side of the track |
| Anti-grounding cone | Forward-looking alarm — projects vessel's track ahead and alarms if hazard lies within the cone | Vessel speed and required warning time |
| Look-ahead | Time or distance based — warns when an upcoming waypoint or hazard is within a set time/distance | Speed and manoeuvring characteristics |
| Scenario | Required backup |
|---|---|
| Single ECDIS on ENCs (paperless navigation) | Second independent ECDIS — or paper charts for the area |
| ECDIS in RCDS mode | Paper charts mandatory — RCDS cannot be used alone |
| ECDIS failure at sea | Revert to backup — if no second ECDIS, plot on paper charts immediately. Call Master. |
| Setting | What it does | The trap |
|---|---|---|
| Safety depth | Bolds every sounding shallower than the value (draught + squat + UKC margin) | Display aid only — it drives no alarm |
| Safety contour | THE machine's no-go line: drives the anti-grounding alarm, look-ahead warnings and shallow-water shading | ENCs carry only certain contours, so the system snaps your request to the next DEEPER one — ask for 4 m, get 5 or 10. Plan against the contour you actually got |
| Look-ahead | The sector ahead scanned for the safety contour and dangers | Sized for your speed: a 6-minute sector at 20 knots is 2 miles of warning; at the default it may be seconds |
| Cross-track corridor (XTD) | The width the route check scans and the off-track alarm watches | Set to the margins the plan drew — a 5-mile XTD makes the route check meaningless |
After the route is laid, the automated route check interrogates every leg's corridor against the safety contour and charted danger objects. The discipline is in the handling: every warning individually examined and resolved — most are seconds each, but the isolated wreck inside your XTD looks identical to the trivia until it is read. Clicking through warnings wholesale is the signature behaviour in ECDIS-assisted groundings. Two display disciplines to pair with it: review the route at compilation scale (over-zoomed-out, SCAMIN suppresses symbols and isolated dangers can simply not display), and check the update status of every cell on the route — ENCs are corrected by weekly digital updates, applied and logged, and the ECDIS can show each cell's currency, which is exactly what a Port State inspector asks it to do.
| ZOC | Position accuracy | Working response |
|---|---|---|
| A1 / A2 | ±5 m / ±20 m, full seafloor search | Trust to close margins |
| B | ±50 m, uncharted hazards unlikely but possible | Standard coastal margins |
| C | ±500 m, depth anomalies expected | Widen UKC and passing distances; favour daylight; sounder is a primary sensor |
| D / U | Worse / unassessed | Old survey or none — navigate as if the chart is a sketch |
The displayed ship position is the GNSS feed: every jamming, spoofing and datum problem arrives on the ECDIS screen wearing the chart's authority, with the AIS and autopilot agreeing because they drink from the same source. The defence is the same independence doctrine as the chartwork module: radar overlay or ranges compared against the charted land, visual bearings, the echo sounder against expected depths — and the instinct that when the radar picture and the ECDIS disagree, you slow down and believe neither until resolved. The MAIB's ECDIS grounding pattern is stable across reports: safety values wrong or defaulted, route check warnings dismissed, over-zoom hiding the danger, alarms silenced as noise, and a bridge team watching the screen instead of the water. Every element is procedural — which means every element is preventable by the OOW who treats ECDIS as a powerful instrument to be configured, not an authority to be obeyed.
You join a vessel and the ECDIS shows no alarms on a route you know passes close to a drying patch. First actions?
What is the difference between an ENC and RCDS?
What are the limitations of ECDIS?
What alarms must be set on ECDIS before a passage?
Your ECDIS fails at sea. What do you do?