← back to the reports
MY-001 Boeing 747 · KLM/Pan Am 1977

Tenerife airport disaster — Two 747s, One Foggy Runway, and a Takeoff Without Clearance

Killed
583
Aircraft
Two Boeing 747s
Operator
KLM / Pan Am
Status
Pilot

Summary

On 27 March 1977, at 17:06 local time, two Boeing 747s collided on the single runway of Los Rodeos Airport on the Spanish island of Tenerife, killing 583 people. It remains the deadliest accident in aviation history. A KLM 747, registration PH-BUF, began its takeoff roll in dense, drifting cloud while a Pan American 747, registration N736PA, was still taxiing on the same runway toward an exit it had not yet reached. The KLM aircraft, already accelerating, lifted its nose and tore through the Pan Am's upper fuselage. All 248 people aboard the KLM died; 335 of the 396 aboard the Pan Am died. The 61 survivors, all from the Pan Am's forward section, escaped before fire consumed both aircraft.

Neither aircraft was scheduled to be at Los Rodeos. Both had been diverted there earlier that Sunday after a bomb planted by a Canary Islands separatist group exploded in the passenger terminal at their intended destination, Gran Canaria, and a second device was reported. The diversions packed Los Rodeos — a small airport with one runway, one parallel taxiway, and no ground radar — beyond its comfortable capacity. Parked airliners blocked part of the taxiway, so departing aircraft had to taxi down the active runway itself and turn around at the far end, a procedure called backtaxiing. When Gran Canaria reopened, the controllers worked to launch the backlog into deteriorating weather, with low cloud rolling across the field and visibility collapsing from a kilometre to a few hundred metres and back within minutes.

The investigation was conducted by the Spanish Subsecretaría de Aviación Civil, with formal participation by Dutch authorities (the Netherlands Aviation Safety Board), the United States, and the operators, in accordance with the international convention governing aircraft-accident inquiry. The Spanish report, released in October 1978, placed the fundamental cause squarely on the KLM captain: he began his takeoff roll without an air traffic control clearance, did not heed the tower's instruction to stand by, and did not stop when the Pan Am crew transmitted that they were still on the runway. The Dutch authorities, while accepting that the KLM captain had taken off prematurely, emphasised a mutual misunderstanding in the radio communications and the inherent limitations of voice radio rather than assigning blame to one man alone. KLM ultimately admitted that its crew was responsible and compensated the victims' families.

No crime was prosecuted; both captains died in the collision and the inquiry was administrative, not criminal. What the disaster produced instead was a wholesale change in how flight crews communicate and how they work together. The accident is the founding case for two enduring reforms: standardised, unambiguous radio phraseology — the word "takeoff" reserved for an actual clearance — and Crew Resource Management, the training discipline that empowers junior crew members to challenge a captain's error before it kills everyone aboard.

Timeline

27 March 1977, ~13:15
A bomb closes Gran Canaria
A device planted by a Canary Islands separatist group detonates in the terminal at Gran Canaria Airport; with a second device feared, the airport closes and inbound traffic is diverted to Los Rodeos on Tenerife.
Early afternoon
Both 747s divert to Los Rodeos
KLM Flight 4805 (PH-BUF, from Amsterdam) and Pan Am Flight 1736 (N736PA, from Los Angeles via New York) land at the small, single-runway airport along with several other diverted aircraft, crowding the apron and taxiway.
~15:00
A congested airport
Parked airliners block part of the parallel taxiway, forcing departing aircraft to taxi down the active runway and turn around at the end. Low cloud begins drifting across the field, with visibility shifting rapidly.
~16:00
Gran Canaria reopens
As the destination airport reopens, controllers begin launching the backlog. The KLM captain elects to take on a full load of fuel at Los Rodeos, a decision that will later delay the Pan Am behind him.
~16:56
KLM backtaxis
The KLM 747 is cleared to taxi the full length of the runway and make a 180-degree turn to line up for departure into thickening cloud.
~17:02
Pan Am follows
The Pan Am 747 is cleared onto the runway behind KLM, instructed to backtaxi and exit at the third taxiway intersection to clear the runway for the KLM departure.
~17:05
The fatal clearance exchange
KLM receives its ATC route clearance and reads it back, ending "we are now at take-off." The controller replies "OK… stand by for take-off, I will call you." Simultaneously, Pan Am transmits "we are still taxiing down the runway." The overlapping transmissions produce a squeal; neither key message is heard clearly in the KLM cockpit.
17:06:50 (approx)
KLM rolls without clearance
The KLM captain advances the throttles and begins the takeoff roll. The flight engineer questions whether the Pan Am is clear; the captain answers emphatically that it is.
~17:06:56
Collision
The KLM, near rotation speed, sees the Pan Am emerging from the murk and pitches up hard. Its main gear and lower fuselage strike the Pan Am's upper deck and starboard side; both aircraft are destroyed by impact and fire.
October 1978
The Spanish report
The Subsecretaría de Aviación Civil publishes its conclusions: the fundamental cause was the KLM captain taking off without clearance. The Netherlands Aviation Safety Board issues comments stressing mutual radio misunderstanding.
Late 1970s onward
Phraseology and CRM
International aviation tightens radiotelephony phraseology — reserving "takeoff" for clearances — and the industry develops Crew Resource Management, both traced directly to this accident.

A Crowded Diversion Field

Los Rodeos, on the northern coast of Tenerife at roughly 2,000 feet of elevation, was not an airport built to absorb wide-body diversions. It had a single runway, one parallel taxiway connected to the runway by short link taxiways, and no surface-movement radar. On a clear day its limitations were manageable. On 27 March 1977 the weather was anything but clear: the airport sits where moist air rising against the island's terrain forms low stratus that the wind drives across the field in patches. Visibility did not behave like fog, whose density can be measured and reported; it surged and collapsed, opening to a kilometre and then closing to a few hundred metres within moments. Crews and controllers alike were working partly blind.

Into this the bomb at Gran Canaria delivered a sudden glut of traffic. Several airliners that should have been at Las Palmas were instead parked at Los Rodeos, and their parked bulk obstructed the taxiway. The standard procedure of taxiing along the parallel taxiway to the runway threshold was no longer fully available. Aircraft therefore had to backtaxi — taxi down the runway itself, in the opposite direction to takeoff, and execute a turn at the end to line up. With two 747s doing this on the same runway, in shifting cloud, separated only by voice radio and a tower that could not see them, the geometry of the accident was already laid out. The system depended entirely on each party hearing and correctly understanding every transmission.

The KLM captain, Jacob Veldhuyzen van Zanten, was one of the airline's most senior pilots, a training captain whose face appeared in KLM's own advertising. He carried a particular pressure that afternoon: Dutch duty-time regulations had recently been tightened, and exceeding the limit could force him to abort the flight, strand his passengers, and create a costly disruption for the airline. The Spanish report would cite this accumulating tension — the weather worsening, the duty clock running, the desire to get airborne before conditions closed the airport — as a factor that "possibly contributed" to a basic error by a pilot of his experience.

Six Seconds of Overlapping Radio

The KLM finished its backtaxi, turned at the runway end, and lined up for departure. The Pan Am, behind it, was instructed to backtaxi the same runway and turn off at "the third" taxiway to clear the path. The intersections were poorly suited to a 747's turning radius, and the Pan Am crew were uncertain which exit was meant; they continued down the runway, looking for their turnoff, still very much on the active surface.

In the KLM cockpit, the first officer read back the air traffic control route clearance and appended the words "we are now at take-off." That phrase — neither a request for nor a grant of takeoff clearance — sat at the centre of the disaster. The controller, who had not issued and was not asked for takeoff clearance, did not register that KLM was actually beginning to roll. He replied "OK," then immediately "stand by for take-off, I will call you." At the same instant the Pan Am crew keyed their microphone to say "we are still taxiing down the runway, Clipper 1736." The two transmissions overlapped on the same frequency, producing a several-second squeal of heterodyne interference. The critical instruction and the critical warning cancelled each other out; the KLM crew heard neither clearly.

Captain Veldhuyzen van Zanten had already advanced the throttles. The flight engineer, hearing something, asked whether the Pan Am had cleared the runway. The captain answered, in the Spanish report's words, "emphatically in the affirmative," and continued. Roughly thirteen seconds later, as the KLM reached rotation speed, the Pan Am loomed out of the cloud ahead, still on the runway and trying desperately to turn off onto the grass. Veldhuyzen van Zanten hauled back on the control column hard enough to scrape the KLM's tail along the runway, but the aircraft could not clear the obstacle. Its undercarriage and lower fuselage smashed through the Pan Am's upper deck. The KLM came down some 150 metres beyond, slid, and was consumed by fire fed by its full fuel load. Everyone aboard it died. On the Pan Am, the 61 who survived had been seated forward of the impact and got out before the fire spread.

The Verdict and Its Two Voices

The Spanish Subsecretaría de Aviación Civil led the investigation, with the Netherlands, the United States, the manufacturer, and the operators participating as provided by international convention. The Spanish report, released in October 1978, was unambiguous about where responsibility lay. It found that, as soon as he heard the route clearance, the KLM captain decided to take off, and it set out his errors plainly. In the report's own words, "The fundamental cause of this accident was the fact that the KLM captain: 1. Took off without clearance. 2. Did not obey the 'stand by for take-off' from the tower. 3. Did not interrupt take-off when Pan Am reported that they were still on the runway. 4. In reply to the flight engineer's query as to whether the Pan Am airplane had already left the runway, replied emphatically in the affirmative."

The report did not stop at blame; it asked how so capable a pilot could commit so basic an error, and identified contributing factors: the captain's accumulating tension over duty time and worsening weather; the special Tenerife visibility that changed radically within moments; the simultaneous radio transmissions that masked both the tower's "stand by" and Pan Am's "still taxiing down the runway"; inadequate, non-standard language — the KLM's "we are now at take-off" and the tower's loose "OK"; and the unusual congestion that forced aircraft to taxi on the active runway. It expressly held that the bomb at Las Palmas, the KLM's refuelling, and its reduced-power takeoff, while part of the chain, were not direct causes.

The Netherlands Aviation Safety Board, in its formal comments, agreed that the KLM captain had begun the takeoff prematurely but argued against laying the catastrophe at one man's door. The Dutch emphasised the mutual misunderstanding between tower and cockpit and the limitations of relying on voice radio, where a single blocked transmission can erase a life-or-death message. The two positions were not as far apart as they appeared: both accepted that the takeoff was begun without clearance. Where they differed was in how much of the failure to assign to an individual and how much to a flawed system of communication. KLM, for its part, accepted that its crew was responsible and paid compensation to the families of the dead.

The Five Factors

01
Takeoff begun without a clearance
The proximate cause was that the KLM captain advanced the throttles before air traffic control had cleared him for takeoff, treating an ambiguous exchange as authorisation. A takeoff clearance is a discrete, explicit instruction; nothing short of it — not a route clearance, not an "OK" — may be read as permission to roll. The discipline of waiting for the actual word is non-negotiable precisely because the consequences of guessing are irreversible.
02
Ambiguous, non-standard phraseology
"We are now at take-off," "OK," and the loose use of "takeoff" in routine exchanges created fatal ambiguity about who intended what. The accident drove the global standardisation of radiotelephony so that the word "takeoff" is spoken only when a clearance is being issued or read back, with "departure" used otherwise. Standard phraseology exists to remove the interpretive gap in which this disaster lived.
03
Simultaneous transmissions on a single channel
The tower's "stand by for take-off" and Pan Am's "we are still taxiing down the runway" were sent at the same moment, overlapped, and produced a squeal that erased both. Voice radio is a shared, half-duplex channel: when two parties key up together, critical information vanishes silently and no one knows it was lost. Protocols for read-back, confirmation, and disciplined channel use exist because the medium itself can swallow the most important words spoken.
04
Steep cockpit gradient and unchallenged authority
The flight engineer questioned whether the Pan Am was clear and was firmly overruled by a revered senior captain; he did not press. The accident became the founding case for Crew Resource Management, which trains crews so that any member can and must escalate a safety concern regardless of rank. An organisation in which juniors cannot effectively challenge a senior's error has built a single point of human failure into its cockpit.
05
A system with no margin for a single mistake
A congested single-runway airport, no ground radar, backtaxiing 747s on the active runway, and rapidly shifting visibility combined so that one misunderstanding had no backstop. Robust systems are designed so that a single error is caught by an independent check — radar, a second confirmation, a physical separation. Where every safeguard depends on flawless voice communication, the system is one blocked transmission away from catastrophe.

Aftermath

No one was prosecuted; both captains had died, the Pan Am crew were exonerated of the proximate cause, and the inquiry was administrative. KLM accepted responsibility for the actions of its crew and reached financial settlements with the families of the dead. The disaster's lasting consequence was not a courtroom but a rewriting of how pilots talk and how cockpits are run. Internationally, radiotelephony phraseology was tightened so that "takeoff" is used only in the context of a clearance, with crews required to read back and controllers to confirm; loose acknowledgements like "OK" were driven out of clearance exchanges.

The deeper reform was cultural. Tenerife, together with other 1970s accidents in which a junior crew member failed to override a captain's error, prompted the development of Crew Resource Management — training that treats the cockpit as a team in which authority does not insulate a decision from challenge. CRM, first adopted by United States carriers around 1980 and later mandated worldwide, reshaped airline training and has since spread to medicine, maritime operations, and other high-consequence fields. The technical lessons mattered too: the value of ground-movement radar at busy airports, the hazards of backtaxiing on active runways, and the danger of saturating a small field with diverted traffic. But the enduring legacy of the 583 dead at Los Rodeos is the recognition that the most dangerous component in a modern aircraft is a breakdown in communication between the people flying it.

Lessons

  1. Never treat anything short of an explicit takeoff clearance as permission to roll; a route clearance, an acknowledgement, or an assumption is not authorisation, and the cost of guessing is total.
  2. Standardise safety-critical language so that key words mean one thing only; ambiguity in phraseology is not a stylistic flaw but a latent accident.
  3. Design for the shared-channel failure mode: require read-backs and confirmations, because a single overlapping transmission can erase a life-or-death message without anyone knowing.
  4. Flatten the cockpit gradient so any crew member can halt an operation; an organisation where juniors cannot effectively challenge a senior has built a human single point of failure.
  5. Do not let production pressure — duty-time limits, schedules, weather windows — push a crew to act before the situation is confirmed safe; the pressure to go is exactly when the discipline to wait matters most.

References