← Back to Blog
OSHA Compliance

Emergency Action Plans: What OSHA Actually Requires Small Businesses to Have (2026 Guide)

July 7, 2026 · Aaron Leff, CSP

Under OSHA's 29 CFR 1910.38, any employer whose workplace is covered by a standard requiring an emergency action plan (EAP) must have one — and if you have more than 10 employees, it must be written, not just talked about. Most small business owners assume a verbal "here's where the exit is" conversation counts. It doesn't, and the gap between what owners assume and what OSHA requires is where citations happen.

Emergency planning isn't just a fire-drill formality. According to the U.S. Chamber of Commerce Foundation and Verizon's 2026 national survey of small and mid-sized businesses, 69% have no disaster plan in place at all, even though the U.S. Small Business Administration reports that 25% of businesses that close after a disaster never reopen. For a small business owner, an emergency action plan isn't paperwork — it's the difference between a bad afternoon and a business that doesn't survive the year.

What Is an OSHA Emergency Action Plan, and Does My Business Need One?

An emergency action plan is a written document required whenever an OSHA standard in Part 1910 calls for one — this includes standards covering fire safety, hazardous materials, and several industry-specific rules [29 CFR 1910.38(a)]. If any OSHA standard that applies to your operations requires an EAP, this section's requirements kick in automatically.

In plain terms: if you store flammable materials, work with hazardous chemicals, operate in a facility with a fire suppression or alarm system, or fall under several other general industry standards, you almost certainly need one. Many small business owners in manufacturing, construction, and hospitality don't realize how many "unrelated" OSHA standards quietly trigger this requirement.

Do I Need a Written Plan, or Can I Just Tell My Employees?

This is the most common point of confusion, and it has a hard numeric line. OSHA requires the plan to be in writing, kept in the workplace, and available for employee review — with one exception: employers with 10 or fewer employees may communicate the plan orally [29 CFR 1910.38(b)].

If you're a nine-person machine shop, an oral plan technically satisfies the letter of the rule — but "technically compliant" and "actually protects your people" aren't the same thing. If you have 11 employees and no written plan, that's a straightforward citation waiting to happen, and it's one of the easiest violations for an inspector to identify in the first five minutes of a walkthrough.

What Are the Minimum Elements OSHA Requires in an EAP?

At minimum, your plan must address [29 CFR 1910.38(c)]:

1. Procedures for reporting a fire or other emergency 2. Evacuation procedures and emergency escape route assignments 3. Procedures for employees who perform or shut down critical operations before evacuating 4. Procedures to account for all employees after an evacuation 5. Rescue and medical duties for employees who perform them 6. Names or job titles of people who can be contacted for more information about the plan

Beyond the written plan itself, OSHA also requires you to maintain a working employee alarm system with a distinctive signal for each purpose [29 CFR 1910.38(d)], and to designate and train employees to assist with a safe, orderly evacuation [29 CFR 1910.38(e)]. A plan that lists an evacuation route but was never actually practiced with your team is a plan that exists on paper only — and inspectors know the difference.

What Happens If I Don't Have One and OSHA Shows Up?

This is where the cost conversation gets real. As of the 2026 penalty schedule, OSHA can issue fines up to $16,550 per serious or other-than-serious violation, and up to $165,514 per willful or repeat violation. A missing or incomplete EAP is typically cited as a serious violation on its own — and if it's discovered during the investigation of an actual incident, it compounds the penalties tied to that incident significantly.

Small employers can qualify for penalty reductions of up to 60% based on size, plus additional reductions for a clean compliance history and good-faith safety efforts — but those reductions only apply if you can show documentation. An oral plan with 11+ employees, or a written plan that was never reviewed with staff, doesn't give an inspector anything to credit you for.

How Often Do I Need to Review or Update the Plan?

OSHA requires you to review the emergency action plan with each covered employee in three specific situations [29 CFR 1910.38(f)]: when the plan is first developed or the employee is newly assigned to a job, when that employee's responsibilities under the plan change, and whenever the plan itself is changed. In practice, this means a plan you wrote three years ago and never touched again is not compliant the moment your staff, layout, or operations change — which for most small businesses is more often than owners expect.

Traditional Approach vs. EHS Simplified

| | Traditional Consultant-Built Plan | EHS Simplified | |---|---|---| | Initial setup | Weeks of back-and-forth, often a flat consulting fee | Guided template built for your industry, ready same day | | Updates when staff/layout changes | Requires scheduling a new consulting engagement | Update directly in the app as your business changes | | Employee review documentation | Manual sign-off sheets, easy to lose | Tracked digitally, timestamped, audit-ready | | Ongoing cost | Recurring consulting fees per revision | Flat, predictable subscription | | Access during an actual emergency | Wherever the paper copy happens to be | On your phone, any time |

EHS Simplified is a mobile compliance app built specifically for small manufacturers — and small business owners in hospitality and beyond — who need OSHA-required documentation — like emergency action plans — without hiring a full-time safety department or paying for a new consulting engagement every time something changes.

Ready to see how it works? Try a free demo and see your first plan built in minutes, or schedule a call with a Certified Safety Professional if you want a human to walk through your specific risks first.

Frequently Asked Questions

Does every small business need a written emergency action plan? Only if an OSHA standard that applies to your operations requires one, and only if you have more than 10 employees. Businesses with 10 or fewer employees may communicate the plan orally, though a written plan is still best practice. What's the minimum number of employees before OSHA requires a written plan instead of an oral one? 11 employees. At 10 or fewer, oral communication of the plan satisfies 29 CFR 1910.38(b). Can I get fined just for not having an emergency action plan, even if nothing has happened yet? Yes. OSHA doesn't require an actual emergency to occur before citing a missing or deficient EAP. It can be identified during any general inspection. How much can a missing emergency action plan cost my business? As of the 2026 penalty schedule, a serious violation can carry a fine of up to $16,550. If the violation is classified as willful or repeat, that maximum rises to $165,514. Do I need to run fire drills, or is the written plan enough? The written plan alone is not sufficient. OSHA requires you to designate and train employees to assist in a safe, orderly evacuation, which in practice means your team needs to actually know and practice the plan, not just have it on file. How often should I update my emergency action plan? Review it whenever the plan is changed, whenever an employee's responsibilities under it change, and whenever a new employee is assigned to a role covered by the plan. For most growing businesses, that means more frequently than the "set it and forget it" approach many owners currently use.

See EHS Simplified in Action

Mobile safety app for small manufacturers — starting at $129/month.

Launch Free Demo →