A Quiet Hurricane Forecast Is Exactly When Workplace Emergency Action Plans Fail

A Quiet Hurricane Forecast Is Exactly When Workplace Emergency Action Plans Fail

OSHA's 29 CFR 1910.38 emergency action plan rules are the floor, not the plan. What Gulf and Atlantic employers should verify before the 2026 season peaks.

A Quiet Hurricane Forecast Is Exactly When Workplace Emergency Action Plans Fail

The 2026 Atlantic hurricane season opened June 1, and NOAA is calling it below-normal: 8 to 14 named storms, 3 to 6 hurricanes, 1 to 3 of them major, with a 55% probability the season comes in under average as El Niño develops (NOAA 2026 Atlantic Hurricane Season Outlook, May 2026). Last season reinforced the calm: 2025 produced zero U.S. hurricane landfalls — the first season since 2015 to manage that — and the only U.S. landfall of any kind was Tropical Storm Chantal in South Carolina (NOAA, 2025 season summary).

If you manage EHS or operations across multiple sites in Texas, Louisiana, Florida, or up the Atlantic coast, you already know what those two facts do inside a budget meeting. The drill gets deferred. The generator service contract slides a quarter. The emergency action plan stays whatever it was in 2023.

That is the trap, and it has two jaws. First, a below-normal season is not a no-storm season — 2025’s “quiet” Atlantic still produced four major hurricanes, including Melissa, which hit Jamaica as a Category 5 with 185-mph winds on October 28 and became one of the strongest landfalling hurricanes on record (NOAA). The outlook is a basin-wide activity estimate, not a landfall forecast; one storm in the wrong place is a 100% season for the facility under it. Second, the warning system behind the forecast is thinner than it has been in decades: NOAA lost more than 1,000 staff in 2025, roughly 600 of them from the National Weather Service, and forecast offices along the Gulf and Atlantic are carrying meteorologist vacancies into the season. Less margin upstream means your facility-level plan carries more of the load.

So this is the right month to look hard at the document your sites will actually reach for when a watch goes up — and to be honest about the difference between what OSHA requires and what a real activation demands.

What Does OSHA Actually Require in an Emergency Action Plan?

There is no OSHA hurricane standard. The federal requirement that does the work is the emergency action plan standard, 29 CFR 1910.38, in Subpart E alongside the exit route standards. An employer must have an EAP whenever another OSHA standard requires one (29 CFR 1910.38(a)) — and in practice the portable fire extinguisher standard’s evacuation options pull most general industry facilities in. If your sites direct employees to evacuate rather than fight fires, assume the obligation applies. (For the full taxonomy of which plans different standards require, see which emergency response plans you’re required to develop.)

The plan must contain six minimum elements (29 CFR 1910.38(c)):

  1. Procedures for reporting a fire or other emergency
  2. Procedures for emergency evacuation, including type of evacuation and exit route assignments
  3. Procedures for employees who remain to operate critical plant operations before they evacuate
  4. Procedures to account for all employees after evacuation
  5. Procedures for employees performing rescue or medical duties
  6. The name or job title of every employee who can be contacted about the plan or an employee’s duties under it

Three more obligations ride along: an employee alarm system with a distinctive signal for each purpose, compliant with 29 CFR 1910.165 (1910.38(d)); designated and trained employees to assist in an orderly evacuation (1910.38(e)); and a required review of the plan with each covered employee when the plan is created, when the employee’s responsibilities change, and whenever the plan changes (1910.38(f)). A companion fire prevention plan is required under 29 CFR 1910.39 where applicable.

Note item 3 in that list. “Procedures for employees who remain to operate critical plant operations before they evacuate” is the element written for exactly the hurricane scenario — the shutdown crew that secures the process, isolates the chemicals, and leaves last. It is also, in our experience reviewing plans across client facilities, the element most likely to consist of a single sentence naming a job title that turned over two years ago.

When Is a Written Emergency Action Plan Required?

The plan must be in writing, kept in the workplace, and available to employees for review. The only exception: an employer with 10 or fewer employees may communicate the plan orally (29 CFR 1910.38(b)). For any operation big enough to be reading this, every site needs a written, site-specific document on the premises — not a PDF on a corporate SharePoint that the night shift cannot reach when the network is down, which during a hurricane it will be.

“Site-specific” is doing real work in that sentence. Exit route assignments, alarm signals, muster points, shutdown sequences, and contact names are facts about a building, not a company. A corporate master plan cloned across twelve facilities with a find-and-replace on the address fails 1910.38(c) at inspection — and it fails worse at 2 a.m. with water in the parking lot. This is the multi-site replication trap: one template defect becomes twelve identical citations, and for employers with a prior final order, repeat violations run up to $165,514 per violation at the current posted maximums (29 CFR 1903.15; osha.gov/penalties). Serious and other-than-serious violations top out at $16,550 each, with failure-to-abate at $16,550 per day (osha.gov/penalties, reflecting the January 15, 2025 inflation adjustment — the figures posted as current as of this writing).

The Honest Enforcement Picture — and Why It Should Not Comfort You

Here is the part most compliance content skips: 1910.38 is not a heavily cited standard. It does not appear on OSHA’s top-ten list, and we found no headline OSHA enforcement actions built on it in 2025 or 2026. When citations do come, they cluster on the basics — no written plan at all, missing accounting procedures, untrained evacuation wardens, alarm systems that fail the 1910.165 requirements.

Read that honestly and two things are true at once. The citation risk from 1910.38 itself is modest. And the standard is a floor so low that full compliance tells you almost nothing about whether your sites will function through a hurricane. A three-page plan can satisfy every element of 1910.38(c) and still leave open every question that decides whether you are running payroll the following week: Who decides to shut down, and against what trigger — watch, warning, or mandatory evacuation order? Does the alarm system work on backup power? How do you account for employees who evacuated by personal vehicle across three counties? Who is authorized to spend money when the chain of command is unreachable? What are the re-entry criteria, and who verifies the building is electrically safe before anyone walks back in?

OSHA’s own hurricane guidance gestures at this gap. The agency maintains a dedicated Hurricane Preparedness and Response topic site covering evacuation planning, supply kits, and — critically — post-storm response and recovery hazards, including the Hurricane eMatrix, which maps hazards and precautions activity-by-activity for recovery work (osha.gov/hurricane). Recovery is where post-storm injuries actually concentrate: downed and back-fed electrical lines, chainsaw and struck-by injuries during debris clearing, carbon monoxide from generators run too close to buildings, mold in flooded structures, and heat illness in crews working long hours without power. Your EAP covers getting out. Almost nothing in it covers going back in — and going back in is where your people get hurt.

Nobody Is Coming to Raise the Bar

If you are waiting for the regulatory floor to rise to meet the business-continuity standard, stop waiting. The signal runs the other direction on both fronts that matter.

OSHA’s Emergency Response proposed rule — the long-planned replacement for the 1980 Fire Brigades standard at 29 CFR 1910.156 — was published in February 2024 (89 FR 7774), drew more than 4,000 comments, and went through eleven days of public hearings in late 2024. As of mid-2026, OSHA’s rulemaking page still says the agency is reviewing comments. No final rule, no scheduled date, and under the current deregulatory posture, no realistic prospect of the rule expanding employer emergency-response obligations this season (osha.gov/emergency-response/rulemaking; RIN 1218-AC91).

On the chemical side, the movement is an active rollback. EPA’s 2024 Risk Management Program amendments (89 FR 17622) required covered facilities to evaluate natural hazards — storm surge, flooding, power loss — in their hazard reviews and process hazard analyses. EPA announced reconsideration of that rule in March 2025, and a February 24, 2026 proposed rule would eliminate the reporting requirements for declined recommendations on natural hazards, siting, and power loss (91 FR, Feb. 24, 2026, doc. 2026-03633; comment period closed March 26, 2026). RMP facilities in surge zones should keep doing the engineering — the hazard does not read the Federal Register — but should not expect the documentation mandate to survive in its 2024 form.

The practical conclusion for a multi-site operator: the delta between OSHA-minimum and hurricane-ready is yours to own. No rulemaking is going to close it for you, and the agencies that might have are moving the other way.

What a Pre-Landfall Review Actually Verifies

When we review emergency action plans for clients ahead of hurricane season, the compliance check is the fast part — six elements, written plan on site, training records, alarm test documentation. The findings that matter come from pressure-testing the plan against an activation timeline:

At 72 hours out, the plan needs named decision authority with weather triggers tied to National Hurricane Center products, not vibes. Most plans name a title; activations need a person, a backup, and a tie-breaker rule for when corporate and the site disagree about shutting down.

At 24 hours out, the critical-operations element (1910.38(c)(3)) gets tested. The shutdown crew needs a written sequence, a time budget, and a hard stop — the procedure that protects equipment is worthless if it keeps people in the building past safe evacuation. This is also when the alarm-system assumption surfaces: 1910.38(d) requires the system to work, and a system that dies with utility power fails precisely when needed.

During and immediately after, employee accounting (1910.38(c)(4)) breaks first in distributed evacuations. Muster-point headcounts work for a fire drill; they do not work when 140 people left by car ahead of a mandatory evacuation order. The plans that hold up specify an accounting method that survives dispersal — a call-in protocol with a designated out-of-region number, owners per shift, and a defined escalation when someone cannot be reached.

In recovery, the plan hands off to the piece most facilities have never written: qualified-person electrical verification before re-entry, generator placement and CO rules, debris-work PPE, mold assessment thresholds for flooded areas, and heat-illness controls for crews working without climate control (OSHA Hurricane eMatrix, osha.gov/hurricane/response). If your sites span federal-OSHA states like Texas, Florida, and Louisiana and state-plan states like South Carolina, North Carolina, Virginia, or Tennessee, the standard text is materially identical — state plans must be at least as effective as federal OSHA (osha.gov/stateplans) — but inspection emphasis and scheduling differ, and your plan review should note which regulator shows up at which site.

One more 1910.38(f) point that pays for the whole exercise: updating the plan triggers the requirement to review it with every covered employee. A pre-season revision done in June, walked through with each shift, is simultaneously a compliance obligation discharged and the only realistic chance your people hear the plan before they need it.

The Season Is the Deadline

Hurricane season runs June 1 through November 30, with the historical peak from late August through October. That gives Gulf and Atlantic operators a defined window to move: verify the written plan at every site, pressure-test the six elements against an actual activation timeline, fix the alarm-power and employee-accounting gaps, write the recovery procedures that 1910.38 never asked for, and document the employee reviews. A below-normal forecast buys you nothing if Melissa’s successor picks your county; it does buy you a quieter window to get the work done before the cone shows up on a screen.

iSi Environmental develops and pressure-tests emergency action plans as part of EHS program support for manufacturers and industrial operators — including multi-site portfolios where site-specific plans, training, and drill documentation have to hold up across 40+ states under both federal OSHA and state-plan jurisdictions. For operations that want this maintained continuously rather than rebuilt every June, our COOP retainer model keeps emergency planning, training records, and regulatory tracking current year-round. If your plans have not been activated, audited, or updated since the last time a storm had your region’s name on it, a pre-season review is the logical next step.

Sources