OSHA emergency action plan

Key takeaways

An OSHA emergency action plan is a written safety document required by 29 CFR 1910.38, and it must be in writing above 10 employees.

The regulation lists six mandatory elements. The employee alarm system sits in a separate provision, 1910.38(d), which is why many templates count seven.

OSHA does not mandate an annual review. It requires a review with each employee at initial assignment, when their duties change, and when the plan changes.

Healthcare settings add patient evacuation, infection control, and record security, because patients in treatment cannot always leave on their own.

Practice management software like Pabau stores the plan, assigns the training, and logs who completed it, so an inspection request takes minutes.

An OSHA emergency action plan (EAP) is the written document that tells your staff what to do when an emergency hits the building. Under 29 CFR 1910.38, that plan has to be in writing once you employ more than 10 people. Below that headcount, you can deliver it verbally.

The regulation is shorter than most guides suggest. It names six required elements and three moments when you review the plan with an employee. It says nothing about how far your assembly point should sit from the building.

This guide covers each element, then walks you through building the plan for a practice with patients on site. The template above gives you the document to fill in.

What is an OSHA emergency action plan? (29 CFR 1910.38)

It is a written procedure for getting people out of your building safely and accounting for them afterward. Under 29 CFR 1910.38, it covers reporting emergencies, evacuation, employees who stay behind, headcounts, and rescue or medical duties.

The standard applies across general industry, which includes medical offices, therapy practices, med spas, and laser clinics. Employers with more than 10 employees keep the plan in writing and available for staff to read. Smaller employers may communicate it orally, though writing it down is still the safer choice.

• Written or oral: More than 10 employees means a written plan, and 10 or fewer allows an oral one
• Core purpose: Get staff and patients out safely, then confirm that everyone is accounted for
• Scope: Nearly every general industry workplace, unless a specific exemption applies
• Review triggers: Initial assignment, a change to an employee’s duties, and any change to the plan itself
• Best practice: An annual review is recommended rather than required, and it keeps the document usable

Which practices are covered?

Employ more than 10 people and you need a written plan, whatever your specialty. Nurses, physicians, therapists, estheticians, and front desk staff all count.

The requirement follows the workplace, not the treatment menu. A laser clinic with 12 staff and a day spa with 12 staff carry the same obligation.

The 10-employee threshold is the federal standard. Another 22 state plans run their own OSHA-approved programs covering private employers, and those can set stricter rules than the federal floor. Washington, Oregon, Michigan, and California are among them, so check your state agency before you finalize anything.

The six elements your plan must contain

Section 1910.38(c) lists six mandatory elements. Every one belongs in the written document and in what you tell staff.

• Reporting a fire or other emergency: How staff raise the alarm, alert a manager, and call 911
• Evacuation procedures and exit route assignments: The type of evacuation, marked routes, assembly points, and floor plans posted in each area
• Employees who stay to operate critical operations: Who shuts equipment down or finishes urgent patient care, and when they leave
• Accounting for employees after evacuation: Who takes the headcount, where people report, and how you identify anyone missing
• Rescue and medical duties: Names or job titles of the employees assigned to first aid, CPR, or rescue
• Who to contact about the plan: The name or job title of anyone staff can ask about their duties under it

Alarm systems are often listed as a seventh element. They sit in a separate provision instead. Section 1910.38(d) requires an employee alarm system, and 1910.165 sets how that system has to work. Your plan still has to say how staff raise the alarm, which is the first element above.

In a practice with patients on site, each element needs a healthcare version. Evacuation has to account for people mid-treatment, and your HIPAA compliance duties do not pause while the building empties.

How to build your plan in five steps

Work through the five steps in order. Each one produces a section of the finished document.

1. Map the emergencies you could face. A fire, a collapsing patient, severe weather, a power cut, and an aggressive visitor each call for a different response. An injectables clinic and a physical therapy practice carry different risks. Write down which ones are likely in your building. Staff also need to spot a deteriorating patient early, which is where escalation criteria such as neurological vital signs earn their place.
2. Name the people, not just the roles. Designate an emergency coordinator, an evacuation warden for each floor or area, a first-aid responder, and someone who takes the headcount. Put names and job titles in the document. Keep a current practice schedule so every shift has all four roles covered.
3. Set the routes and the assembly point. Walk the building and find a primary and secondary exit from every area. Mark the routes on floor plans posted in each work area. Choose an assembly point clear of the building, the fire lanes, and emergency vehicle access. OSHA sets no minimum distance, so your local fire code and site layout decide it. Add instructions for patients with limited mobility.
4. Decide how word travels. Choose how you alert staff, whether that is an alarm, an intercom, or a phone tree. Say who speaks to staff, to patients, to responders, and to owners. Include contact numbers and a backup for each one.
5. Train the plan, then test it. Review the plan with every new employee at assignment, and train the staff who will help others get out. Run a drill, then debrief it while the detail is fresh. A short multidisciplinary review after each drill turns what went wrong into a plan change.

Training, review, and records

OSHA separates three duties here, and only one of them is training in the usual sense.

• Review with every employee: Section 1910.38(f) covers every employee the plan applies to. You review it with them at initial assignment, when their duties change, and when the plan changes.
• Train the helpers: Section 1910.38(e) requires you to designate and train the employees who will assist a safe and orderly evacuation.
• Keep the paperwork: OSHA does not prescribe a training log. An inspector will still ask what you covered and when, and dated records with signatures answer that in one step.
• Annual review, recommended: The rule sets no yearly cycle. Reviewing after every drill or incident, and at least once a year, is what keeps the document current.

What healthcare settings have to add

Generic templates stop at the six elements. A practice with patients in treatment rooms needs four more sections, because those patients cannot always walk out on their own.

• Patient evacuation: Say how staff assist patients with limited mobility or mid-treatment, and assign someone to sweep private treatment rooms and recovery areas.
• Infection control: Cover masks, gloves, and separation during movement, plus who secures biohazard material if there is time to do it safely.
• Records and privacy: The privacy rule does not block disclosure during a medical emergency. Still write down how charts and screens are secured if the building is emptied.
• Critical operations: For life support, dialysis, or laser and IV equipment, name who powers it down and at what point. Include backup power and manual overrides.

Medicare and Medicaid providers may carry a second obligation on top of OSHA. The CMS Emergency Preparedness Rule covers 17 provider types, each under its own part of 42 CFR. Hospitals sit at 482.15, ambulatory surgical centers at 416.54, and dialysis facilities at 494.62. Independent physician practices and med spas are not on that list, so OSHA is the rule that governs them.

How Pabau keeps the plan trained and audit-ready

Most practices keep the plan in a binder at reception and the training record in a spreadsheet. The spreadsheet drifts as people join and leave. An inspector then asks who was trained in March, and nobody can answer without digging.

Practice management software like Pabau keeps the document and the proof of training in one place. Upload the plan, assign it as part of onboarding, and compliance management tracking shows who has signed off. Automated workflows send the reminder before each drill date, so chasing it stops being your job.

Every subscription includes these tools, so none of it sits behind a higher tier. Staff only follow a plan they have been shown, and Juvea Medical describes what happens when training is thin. Run more than one site and each location keeps its own plan, roles, and training record.

Keep emergency training documented and audit-ready

Pabau stores your emergency action plan, assigns it during onboarding, and logs every staff sign-off. You can produce training records and drill dates for an inspector in minutes.

Book a demo

Conclusion

The plan that works is the one your staff have walked, not the one that reads well on paper. Print the routes, name the wardens, and run a drill before you file the document away.

The trade-off is simple. A thorough plan nobody rehearses falls apart in the first 30 seconds of an alarm, while a plain one everybody has practiced holds up.

Download the template, adapt it to your building, and set a date for the first drill. Book a demo to see how Pabau assigns the plan during onboarding and keeps your training records ready for inspection.

Continue your research

Need every emergency role covered on every shift? Practice schedule template builds coverage into the schedule your team already follows.

Worried about liability when something goes wrong? Reducing claims in aesthetics shows how consistent documentation lowers your exposure.

Running more than one location? Multi-location practice software compares the tools that keep policies identical across sites.

Still keeping staff records on paper? Why paper-based practices lose patients sets out what a filing cabinet costs you day to day.

Looking for a format for drill debriefs? Meeting notes template gives you a structure for recording actions and owners after each drill.

Frequently asked questions