When it happens in your waiting room: the solo emergency plan

What 'emergency preparation' means for a practice of one

A solo office needs a plan for three distinct kinds of emergency, and they call for different responses: a patient's acute medical crisis, an act or threat of violence, and a records or systems event like a power outage or a stolen device. Treating all three as one generic "emergency plan" usually means none of them get a real, rehearsed response.

The unifying constraint is that there's no second clinician down the hall to hand a crisis to — whatever happens, one person manages the room, the phone, and the record system simultaneously. A short written plan, reviewed once a year, is what turns that constraint into something survivable rather than something improvised in the moment.

A patient medical crisis: the response, not the diagnosis

For an acute medical event — a fall, a fainting spell, chest pain, a severe allergic reaction — the operational sequence matters more than any clinical judgment call: call 911 immediately, stay with the patient, and have the address and closest cross-street written down near the phone rather than relied on from memory under stress.

A basic first-aid kit, a working phone in every room, and a posted address for the dispatcher are the practical minimum. Whether the office keeps an AED is a facility decision worth making in advance rather than during the event — check whether the building already has one before buying a redundant unit, and know exactly where it is either way.

Workplace violence: planning to be alone with a patient

OSHA treats workplace violence in health care under its General Duty Clause, with prevention guidance published specifically for settings where a clinician sees a patient alone in a closed room on a recurring basis — a description that fits most solo practices exactly 1Ref 1Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA enforces workplace violence prevention in health care under the General Duty Clause, with guidance built for a clinician seeing patients alone..

A workable plan is concrete rather than aspirational: a duress or panic-alert method reachable without leaving the chair, a seating arrangement that keeps the clinician nearer the exit than the patient, and a norm for ending a session and calling for help the moment a threat becomes explicit. The office layout itself is worth revisiting through this lens when weighing office options for a solo practice or planning the minimal buildout, since a panic-alert or sightline decision is far cheaper to build in than to retrofit.

A single tense session is different from an ongoing pattern. Stalking and fixation from one specific patient is a separate, escalating problem, and it's the point at which a same-day safety plan gives way to the question of when you need the order — a civil protective order taken out against that patient specifically.

First aid and the bloodborne-pathogens trigger

Administering first aid to a bleeding patient — packing a wound, applying pressure — creates the exact occupational exposure that triggers OSHA's bloodborne pathogens standard, which is why disposable gloves belong in the same kit as bandages, not a separate supply closet 2Ref 2Occupational Safety and Health Administration (2026).Bloodborne Pathogens and Needlestick Prevention.That administering first aid to a bleeding patient triggers the bloodborne pathogens standard's exposure-control and containerization requirements..

A first-aid kit stocked for a solo office should assume exposure is possible on any given day: gloves within reach in every room, not just the one where the kit lives, and a plan for what happens to soiled materials afterward — the same containerization the exposure control plan already requires for anything else contaminated with blood.

Fire, evacuation, and the building itself

Fire and building-level events are the one category where local rules do most of the governing — a two-exit requirement, an occupancy limit, and an inspection cadence differ by municipality, which is why local codes covering the specific building matter more than any general national rule.

What a solo practice can plan regardless of local code specifics: know both exits from every room actually used with patients, keep a phone reachable if the primary line is down, and rehearse a two-minute walk-through once a year rather than trusting an evacuation plan that has never actually been walked.

The other emergency: your records and systems

The fourth kind of emergency isn't physical at all: a power outage, a stolen laptop, or a ransomware event that cuts off access to patient records. HIPAA's Security Rule requires administrative safeguards, scaled to practice size, that include planning for exactly this — a contingency plan isn't optional paperwork, it's part of the same risk analysis every covered practice already has to conduct 3Ref 3HHS Office for Civil Rights (2026).Summary of the HIPAA Security Rule.That the Security Rule's administrative safeguards, anchored in the risk analysis, require a contingency plan for events that cut off access to ePHI..

A solo office folds this in cheaply: back up records somewhere other than the device that holds them, know how to reach that backup without the primary system, and write both steps into the risk analysis rather than treating them as a separate project. The free tool ONC and OCR publish for small practices sizes this work appropriately — it's built for exactly this scale, not a hospital IT department 4Ref 4Office of the National Coordinator / ASTP (2026).Security Risk Assessment Tool.That ONC/OCR's free risk-assessment tool is sized for a small practice to fold contingency planning into its existing risk analysis..

After it happens: documentation

After any incident — a fall, a violent threat, an evacuation — write down what happened while it's fresh: what occurred, what was done in response, and what changed afterward. Severe-incident reporting to OSHA applies even to practices exempt from routine injury and illness recordkeeping at 10 or fewer employees, so knowing which category an event falls into matters before deciding whether a report is required 5Ref 5Occupational Safety and Health Administration (2026).Recordkeeping.That severe-incident reporting still applies to employers otherwise exempt from routine recordkeeping at ten or fewer employees..

The habit is worth keeping regardless of the reporting threshold: a brief written record turns a chaotic afternoon into something the practice can actually learn from, and it's the only reliable answer if the same question — what did we do last time — ever comes up again.

A one-page incident log kept in the same binder as the rest of the emergency plan is enough for a practice this size — date, what happened, who was involved, and what the office did differently afterward, if anything. Reviewing that log once a year alongside the rest of the plan is what turns individual incidents into an improving system rather than a string of unrelated surprises.