Regulation (EU) 2018/1139 of the European Parliament and of the CouncilShow full title

1.3. Systems and equipment (other than non-installed equipment): U.K.

1.3.1. The aircraft must not have design features or details that experience has shown to be hazardous. U.K.

1.3.2. The aircraft, including those systems, and equipment required for the assessment of the type design, or by operating rules, must function as intended under any foreseeable operating conditions, throughout and sufficiently beyond, the operational envelope of the aircraft, taking due account of the system or equipment operating environment. Other systems or equipment not required for type-certification, or by operating rules, whether functioning properly or improperly, must not reduce safety and must not adversely affect the proper functioning of any other system or equipment. Systems and equipment must be operable without needing exceptional skill or strength. U.K.

1.3.3. The aircraft systems and equipment, considered separately and in relation to each other, must be designed such that any catastrophic failure condition does not result from a single failure not shown to be extremely improbable and an inverse relationship must exist between the probability of a failure condition and the severity of its effect on the aircraft and its occupants. With respect to the single failure criterion above, it is accepted that due allowance must be made for the size and broad configuration of the aircraft and that this may prevent this single failure criterion from being met for some parts and some systems on helicopters and small aeroplanes. U.K.

1.3.4. Information needed for the safe conduct of the flight and information concerning unsafe conditions must be provided to the crew or maintenance personnel, as appropriate, in a clear, consistent and unambiguous manner. Systems, equipment and controls, including signs and announcements must be designed and located to minimise errors which could contribute to the creation of hazards. U.K.

1.3.5. Design precautions must be taken to minimise the hazards to the aircraft and occupants from reasonably probable threats, including information security threats, both inside and external to the aircraft, including protecting against the possibility of a significant failure in, or disruption of, any non-installed equipment. U.K.