FlightDesk Aero / Articles / Air law and airworthiness
PILOT · AIR LAW AND AIRWORTHINESS
When an aircraft type is stopped from flying: airworthiness directives explained
In October 2026 every Elixir in the world stopped flying, and in Europe it took EASA one sentence and less than a day's notice to make that the law. Here is how that works, and what it means for you the next time you book an aircraft.
Two days in October
On 1 October 2026 an Elixir, a two-seat composite trainer built in France, crashed near the runway at Rochefort Charente-Maritime airport during a production flight. Both company pilots on board were killed. Our thoughts are with their families and colleagues.
The next day the manufacturer, Elixir Aircraft, issued an alert service bulletin telling owners to stop flying every Elixir. EASA published an emergency airworthiness directive the same day, with a single requirement: from 3 October, do not operate the aeroplane. Every serial number was covered. More than 60 aircraft, many of them in flight schools, stopped flying from one day to the next. In the United States the FAA followed with its own directive.
This article does not discuss the cause. The French investigation bureau, the BEA, is investigating, and its findings are the only ones worth reading. What we look at here is the mechanism that stopped a whole fleet in a day: what an airworthiness directive is, how it differs from a manufacturer's bulletin, who has to act on it, and what you should check before you rent an aircraft.
1. What an airworthiness directive is
Part-21, the EU rules for the design and production of aircraft, defines an airworthiness directive (AD) as a document issued or adopted by EASA that mandates actions to be performed on an aircraft to restore an acceptable level of safety. The key word is mandates. An AD is not advice. It is the law for every aircraft it applies to.
EASA must issue one when two things are true at the same time:
- it has found an unsafe condition in an aircraft, and
- that condition is likely to exist or develop in other aircraft of the same type.
A crack found in one aircraft after a hard landing is a maintenance job for that aircraft. A crack that can grow in any aircraft of the type is an AD.
Who issues it
That depends on where the type was designed. For a type designed in the EU, such as the Elixir, a Robin or a Tecnam, EASA is the authority for the design and issues the AD itself. For a type designed elsewhere, such as a Cessna or a Piper, the authority of the State of design (here the FAA) issues it, and EASA adopts it, so it applies to EU-registered aircraft as well. Both kinds are listed in EASA's free Safety Publications Tool at ad.easa.europa.eu, searchable by type and with e-mail alerts.
The reverse is also true. A national authority acts for the aircraft on its own register. That is why the FAA published its own Elixir AD for US-registered aircraft, a few days after EASA's.
How to read one
Part-21 says what every AD must contain: the unsafe condition, the aircraft affected, the action required, the time allowed to do it and the date it takes effect. Here is the EASA Elixir AD, field by field.
AD No.2026-0191-E
1Year, then a sequential number. The E marks an emergency AD. A revision keeps the number and adds R1, R2 and so on. A new AD that replaces it gets a new number, and the old one is marked superseded.
Issued / Effective02 October 2026 / 03 October 2026
2The AD applies from the effective date, whether or not anyone has told you about it.
Design approval holder · TCDSElixir Aircraft · EASA.A.633
3The company that holds the type certificate, and the type certificate data sheet the AD belongs to.
ApplicabilityElixir aeroplanes, all manufacturer serial numbers
4Read this first. Many ADs cover only some serial numbers, or only aircraft with a certain part or modification fitted.
ReasonA fatal accident; cause under investigation; the manufacturer has grounded the fleet; interim action
5Why the AD exists. Interim means EASA expects to follow up with another AD.
Required actionFrom the effective date, do not operate the aeroplane
6Most ADs ask for an inspection, a part change or a new limitation. Stopping all flight is the strictest action an AD can require.
Alternative methodsEASA can consider them if properly substantiated
7Only the authority can approve a different way to comply. An owner, a club or an engineer cannot decide it alone.
Compliance times you will meet
- Before next flight: the strictest. The aircraft does not fly until the action is done.
- Within a limit, for example 50 flight hours or 3 months after the effective date, whichever comes first.
- Repetitive: an inspection every so many hours or months, until a permanent fix is fitted.
- Terminating action: the permanent fix. Once it is done, the repetitive inspections stop.
Three questions decide whether an AD affects you today: Does it apply to this serial number? Is it in force yet? Has the action been done, or is it still within its time limit?
2. Emergency AD or ordinary AD
Most EASA ADs start as a proposed AD (PAD), published so owners, operators and manufacturers can comment. The final AD then follows, with an effective date some time after publication, so owners can plan the work.
When the risk cannot wait, EASA skips the consultation and publishes an emergency AD, which takes effect within days or at once. The Elixir AD was issued on 2 October and was in force on 3 October. The FAA's version took the same shortcut: it was a final rule, with comments invited after it was already in force.
3. AD, service bulletin, safety information bulletin
Three documents look alike in a hangar folder, but they do not carry the same weight.
| Document | Issued by | Mandatory? | In the Elixir case |
|---|---|---|---|
| Service bulletin (SB, alert SB) | The manufacturer (design approval holder) | Not by itself. It becomes mandatory when an AD requires it. | ASB-633-005-R01: stop flying all Elixirs |
| Airworthiness directive (AD) | EASA, or the State of design with EASA adopting it | Yes. It is the law for every aircraft it applies to. | EASA AD 2026-0191-E, FAA AD 2026-21-01 |
| Safety information bulletin (SIB) | EASA | No. Information and recommendations only. | None |
A word like "mandatory" or "alert" printed on a manufacturer's bulletin shows how urgent the manufacturer thinks it is, but it does not make the bulletin law. For a privately operated light aircraft, the owner decides about bulletins that no AD requires, normally with the maintenance programme and the organisation that manages the aircraft. Ignoring an alert bulletin is legal; it is rarely wise.
The Elixir case followed the usual order for an urgent problem. The manufacturer acted first with its bulletin, and EASA made the grounding mandatory with an AD the same day.
4. Who has to act
Most light aeroplanes in Europe, up to 2,730 kg maximum take-off mass and not used by an airline, fall under Part-ML, the simplified rules for keeping them airworthy. Under Part-ML the chain looks like this:
- SERVICE BULLETINManufacturer (design approval holder)Finds or is told about a problem and publishes the fix.
- AIRWORTHINESS DIRECTIVEEASA, or the authority of the State of designUnsafe condition, likely in other aircraft? Then it is mandatory.
- AD STATUSOwner, with a CAMO or CAOPlans the work and keeps the AD status in the records.
- RELEASE TO SERVICEMaintenanceDoes the work and signs it off.
- TECH LOG · ARCPilot-in-commandChecks before the flight that the aircraft is airworthy.
- The owner is responsible for the aircraft's continuing airworthiness. Clubs and schools usually contract this to a continuing airworthiness management organisation (CAMO) or a combined airworthiness organisation (CAO).
- Doing every applicable AD is one of the continuing-airworthiness tasks. Each AD must be carried out as it says, unless EASA decides otherwise.
- The records must show the AD status: which ADs apply, when each was done and when the next repetitive one is due.
- Maintenance does the work and signs a certificate of release to service.
- You, the pilot-in-command, must be satisfied before the flight that the aircraft is airworthy (Part-NCO, NCO.GEN.105). When you rent, nobody expects you to research ADs yourself. But you are the last check before the aircraft leaves the ground.
5. What to check before a rental flight
Five minutes with the paperwork is enough:
- Technical log or journey log, and the maintenance status: open defects, deferred items and the hours left to the next maintenance (clubs usually post it next to the log).
- Repetitive AD inspections: if one is due during your flight, the aircraft goes over its limit in the air. Compare the hours left with the flight you plan.
- Airworthiness review certificate (ARC) valid. Part-ML is blunt about it: an aircraft without a valid ARC shall not fly (ML.A.902).
- Notices from the club: an aircraft blocked in the booking system, a note on the board, an e-mail. If you have heard news about your type, ask before you fly.
- If you own the aircraft: set up the e-mail alerts in EASA's Safety Publications Tool for your type, engine and propeller, and subscribe to the manufacturer's service information.
The booking system is not the AD. If an AD has stopped a type from flying, the aircraft does not fly, even if the calendar still shows it as free.
Can I fly it?
Six situations, from the evening news to the technical log. For each, decide: fly, fix or ask first, or do not fly.
Common myths
"An AD means the type is dangerous"
An AD means an unsafe condition was found and a fix is required. Popular, safe types collect ADs over the years precisely because problems get found and fixed. A type with no ADs is not automatically safer.
"The manufacturer's bulletin says mandatory, so it is the law"
Only an AD, or the authority, can make it legally mandatory. The bulletin tells you how seriously the manufacturer takes it.
"ADs are the engineer's problem, not mine"
The work is the engineer's. Making sure the aircraft is airworthy before you take off is yours.
"An emergency AD means the cause is already known"
An emergency AD can come before anyone knows the cause. The Elixir AD said so plainly: the cause was under investigation and the AD was interim.
Check yourself
1. What two conditions make EASA issue an AD?
An unsafe condition exists in an aircraft, and it is likely to exist or develop in other aircraft of the same type.
2. What does the E in "2026-0191-E" mean?
It is an emergency AD, published without the usual consultation and in force within days or at once.
3. A manufacturer's alert service bulletin applies to your privately operated aircraft, but no AD requires it. Is it legally mandatory?
No, not by itself. It becomes mandatory if an AD requires it. The owner still decides how to deal with it, and ignoring it is rarely wise.
4. Your club's Cessna 172 is registered in an EU Member State. Whose ADs apply to it?
The FAA's, as the authority of the State of design, adopted by EASA, plus any AD that EASA issues itself. All of them are in EASA's Safety Publications Tool.
5. An AD comes into force tomorrow and requires an inspection before next flight. You are booked tomorrow. What do you check?
That the inspection has been done and signed off in the technical log before you fly. If it has not, you do not fly.
Practise for the PPL exams
Free exam-style questions with worked answers, chapter by chapter.
FlightDesk Aero articles are for training and reference. Always follow your aircraft's flight manual (POH/AFM), the maintenance organisation that manages it and the rules that apply where you fly. Check the current status of any AD at ad.easa.europa.eu. Sources: EASA Emergency AD 2026-0191-E (2 Oct 2026); FAA AD 2026-21-01 (Federal Register, 13 Oct 2026); AOPA, "EASA grounds all Elixir aircraft" (6 Oct 2026, updated with BEA information released 8 Oct 2026); EASA Airworthiness Directive Policy; Part-21 (Reg. (EU) No 748/2012), Part-ML (Annex Vb to Reg. (EU) No 1321/2014), Part-NCO.