Turn on the tap and you cannot judge whether the water is safe to drink.
It is colourless and tasteless, you cannot taste whether there is lead in it, and you cannot test it. All you can do is look up a water quality report, which comes from an institution you have never seen and rests on a method you have no way of checking.
So something has quietly been swapped. What you wanted to know is whether the water is drinkable; what you can actually judge is whether the institution issuing the report is trustworthy. Once that swap happens there is no going back, and it happens with almost every danger you meet in a day: food, medicine, the structure of your building, the air in your child's school.
In the spring of 1986 the German sociologist Ulrich Beck was close to finishing a book. Chernobyl exploded at the end of April, he added a passage about it to the preface of the German edition, and the book — Risk Society — became the most talked-about work of German-language sociology of the decade.
His opening move is a contrast. Industrial society fights over how good things are shared out: wages, housing, places at school. A new kind of contest is growing up alongside it, he says, over how bad things are shared out: who lives downwind, whose well sits downstream of the chemical plant, who got the batch that was contaminated.
These bads are not the old calamities, and they have three features. They are manufactured — not earthquakes and typhoons but side effects of some technical decision, so in principle someone made that decision. They are below the threshold of the senses — you cannot see radiation or smell an additive, so even the fact of your own exposure has to be established with instruments and experts. And they are unbounded in space and time — they cross borders and generations, and you cannot move away from them.
Together those three yield one consequential line: in the face of risk like this, "have I been harmed" is not a fact you can know by yourself. It is an entitlement that has to be established with knowledge and paperwork.
That line has a very concrete shape. The anthropologist Adriana Petryna spent several years doing fieldwork in 1990s Ukraine and wrote Life Exposed (2002). After Chernobyl, newly independent Ukraine turned a large share of its budget into radiation-related benefits and disability designations. What she saw was ordinary people having to make themselves into half-experts — learning dose units, learning which diagnoses can be attached to "radiation-related" — in order to convert the damage in their bodies into a status somebody recognizes; she calls it biological citizenship. This is a single ethnographic case, strong in detail and weak as a basis for generalization.
Beck also has a line that has been quoted to death: "poverty is hierarchic, smog is democratic." He means that the new risks have a boomerang effect, so that those who produce them cannot finally stay clear of them. The line is heavily contested: decades of work on environmental inequality find fairly consistently that exposure is in fact steeply stratified, with landfills and chemical parks landing more often where poor people and minority communities live. One reading says he overstated the equalization, and that bads are still distributed along the old hierarchy; another says his claim was never about equal exposure but about the novelty of there being no absolutely safe position. And it should be said plainly: Risk Society is a theoretical framework, not an empirical finding.
At the end of April 1986 the Chernobyl plume reached Britain and rained out over the Cumbrian fells in north-west England; caesium settled on the grass. On 20 June the ministry of agriculture banned the movement and slaughter of sheep in Cumbria and Wales, covering some five thousand farms and more than two million animals. The notice said three weeks. After three weeks the ban was extended, and then extended again and again. The last restrictions came off in 2012 — twenty-six years.
How could the estimate be that far out? The scientists' forecast rested on a model in which caesium falling on soil is bound tightly by clay minerals, never reaches the grass, and is locked away within weeks. In the alkaline clay soils of the lowlands that is what happens. The Cumbrian uplands are not that: they are acid peat, where the caesium stayed chemically mobile, was taken up again through the grass roots, and went back into the sheep. The model had the wrong soil.
The sociologist Brian Wynne ran long interviews there in the late 1980s and in 1992 published "Misunderstood misunderstanding". What he found was not that the farmers failed to understand science: they barely disagreed about the magnitude of the hazard from caesium, and they followed the advice. What they refused was two other things. To run an experiment the scientists wanted sheep confined to small fixed plots; the farmers said that is not remotely how a hill flock is grazed, and that penned sheep and hill sheep are not the same animal in the relevant sense — and that was treated as amateur talk. And the scientists issued confident timetables, revised them, issued them again, and never conceded that their model might be wrong.
Wynne's conclusion is unusually hard for this field: what lay people judge when they decide whether to trust science is not the content of the knowledge but the conduct of the institution supplying it — whether it concedes that it might be wrong, whether it grants that your situation holds things it does not know, and what your relation of dependence on it is. Cumbria had a further layer: over the hill sat Sellafield, the big local employer, with someone from many of those households on its payroll. This is a qualitative case study, hugely influential, and also criticized for painting lay rationality too optimistically.
The skeleton of the episode was named by Anthony Giddens in The Consequences of Modernity (1990). Modern societies, he says, lift relations out of their local settings by two kinds of mechanism, which he calls disembedding: one is symbolic tokens like money, where you accept a piece of paper without needing to know who paid; the other is expert systems, technical knowledge organized so that it vouches, on your behalf, for what you cannot check yourself. You fly without knowing aerodynamics. That is not a gap in your education; that is disembedding working as designed.
But disembedding is not free. What you trust is not a person but a system you cannot see — Giddens calls it a faceless commitment. The system shows a face only in a few places, which he calls access points: the counter, the consulting room, the briefing. Your estimate of the whole system comes almost entirely from conduct at those few points, which gives them wildly disproportionate weight. Those meeting rooms in Cumbria were access points, and what happened in them was a confident tone plus repeated revisions.
In January 1986 the space shuttle Challenger broke apart some seventy seconds after launch. The popular account is that someone approved a launch they knew to be dangerous. The sociologist Diane Vaughan spent nine years working through the tens of thousands of pages the investigation left behind, added interviews of her own, and in 1996 published The Challenger Launch Decision with a more uncomfortable answer.
The part that failed was the O-ring seal between segments of the solid rocket booster, and erosion of it had shown up on earlier flights. Each time, engineers wrote the report, held the review, compared this instance of erosion against previous ones, judged it "within the existing experience base", and cleared the flight. Next time the erosion was a little worse — but the baseline it was compared against had already been moved by the time before, so it was within the base again. Vaughan calls this the normalization of deviance: a signal that counted as an anomaly is gradually absorbed into the normal through a sequence of compliant, conscientious, fully documented judgements.
What matters is her negative claim. These were not reckless people, nobody concealed anything, and every step has a reason in the minutes. The danger was not decided by anyone; it accumulated. Beck had a name for a structure like that: organized irresponsibility — institutions producing hazards while the rules of attribution and proof turn those hazards into something nobody can be held to account for. One caution: this is a single-case historical and archival study, and "normalization of deviance" has since been used very loosely, losing explanatory force as it widens.
So what can trust rest on? One line of evidence that holds up points somewhere that does not look much like an answer: not the content, the conduct. The standard worry runs, hedge and you lose trust, so do not give ranges. In 2020 van der Bles, Spiegelhalter and colleagues ran five experiments with roughly 5,800 participants in total, one of them embedded directly in the BBC News website. Giving a numerical range did make people see the number as more uncertain — as it should — but trust in the source fell only slightly; what cost relatively more was expressing the uncertainty in vague words. The effects are all small and the direction is stable.
Back to Cumbria. What the farmers complained about was neither the severity of the ban nor the toxicology of caesium. It was being treated as people who knew nothing, and a tone that would not say "we may have got this wrong". Trust is an estimate of an institution's conduct, and that estimate has an observable consequence: how many people follow the next announcement.