When an OSHA inspector walks through your door, your emergency action plan is one of the first things they typically ask about. Not just whether you have one, but whether your team has actually practiced it, and whether you can prove it.
For most compliance leads, that second part is where the anxiety lives. The drills happened. But are the records complete enough to hold up under scrutiny?
Understanding what 1910.38 and 1910.39 actually require, and how that translates into defensible documentation, is the difference between a confident audit and a costly citation.
OSHA's 1910.38 covers Emergency Action Plans (EAPs). 1910.39 covers Fire Prevention Plans (FPPs). Together, they form the regulatory backbone for how most general industry employers are expected to prepare for and respond to emergencies.
Under 1910.38, employers must:
Under 1910.39, employers must:
What neither standard does is specify a required drill frequency. OSHA leaves that determination to the employer, with the expectation that drills are conducted often enough to ensure employees are genuinely familiar with their roles.
That flexibility is useful, but it also creates a documentation burden. If you don't define your own standard and show you're meeting it, an inspector will define it for you.
The most common documentation gaps in OSHA emergency action plan drills aren't the result of drills not happening. They're the result of drills not being recorded with enough specificity to demonstrate compliance.
Participation records are incomplete. A sign-in sheet is a start, but it isn't enough on its own. Records should identify who participated, what role they played, and whether they were covered employees under the EAP or visitors, contractors, or others.
Drill outcomes aren't captured. OSHA's intent is not just that drills occur, but that they serve an educational function. If your records show only that a drill ran, with no notation of how it performed, what issues were observed, or what corrective actions followed, you're leaving an evidentiary gap that an inspector can step into.
Plan review documentation is missing. 1910.38 requires that the EAP be reviewed with employees under four specific conditions. Many organizations conduct these reviews informally and never document them. That's a compliance exposure that's easy to close and often overlooked.
Records aren't tied to plan revisions. When your EAP changes, the clock resets on employee review requirements. If your drill records aren't versioned against your current plan, it becomes difficult to demonstrate that employees were trained on the most recent procedures.
Corrective actions aren't closed out. Finding a gap during a drill is not a compliance problem. Failing to address it is. If your records show a recurring deficiency with no documented resolution, that pattern is difficult to defend.
A complete record for an OSHA emergency action plan drill should capture, at minimum:
This level of detail does two things. First, it gives you a genuine improvement record, so each drill builds on the last. Second, it gives you audit-ready documentation that demonstrates your program is functioning as OSHA intends, not just technically present on paper.
One of the most frequently overlooked elements of 1910.38 compliance is the individual employee review requirement. The standard is explicit: the EAP must be reviewed with each employee when it is first developed, when the employee joins the organization, when their responsibilities change, and when the plan is updated.
This is distinct from a group drill. It requires documented, individual-level confirmation that the employee has been informed of the plan's contents and their specific role within it.
For organizations with high turnover, multiple shifts, or frequent plan updates, this can be logistically challenging. But it's also one of the first things an auditor will verify, because it's one of the few documentation requirements in these standards that is explicit rather than implied.
A simple acknowledgment record, tied to each employee's onboarding and updated when the plan changes, is all it takes to close this gap.
Drill documentation doesn't exist in isolation. For compliance leads managing multiple regulatory obligations, the value of drill records multiplies when they're integrated with the rest of your compliance program.
Corrective actions from drills should feed into the same tracking system as corrective actions from inspections, incident investigations, and audits. Trends that show up across those sources, (the same evacuation bottleneck appearing in drill observations, near-miss reports, and inspection findings), are exactly the kind of systemic issue that regulators expect organizations to identify and address proactively.
EHS Insight's Compliance Management Module is built to support exactly this kind of integration, giving compliance leads a single system of record for drill documentation, corrective action tracking, employee review acknowledgments, and audit preparation. When everything lives in one place and is traceable back to specific regulatory requirements, the audit conversation becomes much more straightforward.
OSHA doesn't prescribe a perfect drill program. What it expects is a functional one: plans that employees actually know, drills that test those plans against reality, records that demonstrate both, and corrective action processes that show the organization learns and improves over time.
For compliance leads, that means treating drill documentation not as a burden but as evidence. Evidence that your program is real, that your team is prepared, and that when something goes wrong, your organization was doing everything it should have been.
That's a standard worth holding yourself to regardless of when the next inspector is scheduled to arrive.
Q: What do OSHA standards 1910.38 and 1910.39 require from employers? A: OSHA 1910.38 covers Emergency Action Plans (EAPs) and requires employers with more than 10 employees to maintain a written plan that includes evacuation procedures, employee accounting after evacuation, and defined roles for rescue or medical duties. It also requires the plan be reviewed with each employee when it's developed, when they're hired, when their responsibilities change, and when the plan is updated. OSHA 1910.39 covers Fire Prevention Plans and requires employers to identify fire hazards, establish procedures for controlling flammable materials, and communicate the plan to relevant employees.
Q: How often does OSHA require emergency action plan drills? A: OSHA doesn't specify a required drill frequency for most general industry employers. The expectation is that drills occur often enough to ensure employees are genuinely familiar with their roles. However, that flexibility comes with a documentation burden — if you don't define your own standard and demonstrate you're meeting it, an inspector can effectively set that standard for you during an audit.
Q: What are the most common documentation gaps that put companies at risk during OSHA audits? A: The most common issues aren't that drills didn't happen — it's that they weren't recorded with enough specificity to demonstrate compliance. Typical gaps include incomplete participation records, no documentation of drill outcomes or deficiencies, missing employee review acknowledgments, drill records that aren't tied to the current plan version, and corrective actions that were identified but never formally closed out.
Q: What should a complete OSHA emergency action plan drill record include? A: A defensible drill record should capture the date, time, and location; drill type (evacuation, shelter-in-place, lockdown, etc.); participant names, roles, and departments; the scenario and any intentional complications; performance observations; response times for key benchmarks; specific deficiencies identified; corrective actions with assigned owners and due dates; the plan version in effect at the time; and the reviewer's name and signature.
Q: What is the individual employee review requirement under 1910.38, and why do so many organizations miss it? A: OSHA 1910.38 explicitly requires that the EAP be reviewed individually with each employee — not just during group drills — at four specific points: when the plan is first developed, when the employee is hired, when their responsibilities change, and when the plan is updated. This is one of the first things auditors verify because it's one of the few explicitly stated documentation requirements in these standards. Organizations with high turnover, multiple shifts, or frequent plan updates often struggle to keep up, but a simple acknowledgment record tied to onboarding and plan revisions is all it takes to close the gap.