Emergency Preparedness Plan Requirements for Home Health Agencies
How HHAs Can Stay Compliant, Protect Patients, and Prepare for the Unexpected
Natural disasters, pandemics, cyberattacks, utility failures, active shooter incidents, and public health emergencies can occur without warning. For Home Health Agencies (HHAs), emergencies present unique challenges because care is delivered directly in patients’ homes rather than in centralized facilities. Many home health patients are elderly, medically fragile, mobility-impaired, or dependent on medical equipment, making continuity of care during emergencies critically important.
Because of these risks, the Centers for Medicare & Medicaid Services (CMS) requires all Medicare- and Medicaid-certified Home Health Agencies to maintain a comprehensive Emergency Preparedness Program (EPP). Compliance is not optional. Emergency preparedness is a Condition of Participation (CoP) under federal regulations and is closely evaluated during surveys and accreditation reviews.
An effective Emergency Preparedness Plan (EPP) protects patients, supports staff safety, minimizes operational disruption, and helps agencies continue providing essential services during disasters and crises.
This article explains the CMS Emergency Preparedness Rule for HHAs, outlines the required components of a compliant plan, identifies common survey deficiencies, and highlights best practices agencies can implement to strengthen preparedness and maintain compliance.
Why Emergency Preparedness Matters in Home Health Care
Unlike hospitals or nursing facilities, HHAs operate in decentralized environments. Patients live in private residences spread across multiple communities, cities, or counties. During emergencies, these dispersed settings create significant challenges related to communication, transportation, staffing, and continuity of care.
Many home health patients face increased vulnerability during disasters because they may:
Depend on oxygen, ventilators, or infusion therapy
Require refrigerated medications
Have mobility limitations
Suffer from cognitive impairments
Lack transportation or caregiver support
Be isolated in rural or difficult-to-access areas
When emergencies occur, interruptions in care can rapidly become life-threatening. Power outages, evacuation orders, severe weather, or communication failures may prevent patients from accessing medications, medical equipment, or skilled care.
Emergency preparedness in home health care is therefore not simply about regulatory compliance — it is about protecting human life and ensuring continuity of care for vulnerable populations.
CMS Emergency Preparedness Rule Overview
(42 CFR § 484.102)
In 2016, CMS finalized the Emergency Preparedness Requirements for Medicare and Medicaid Participating Providers and Suppliers Rule. The regulation became effective in November 2017 and applies to all certified HHAs.
Under this rule, agencies must develop and maintain an Emergency Preparedness Program that includes four core elements:
Risk Assessment and Emergency Planning
Policies and Procedures
Communication Plan
Training and Testing
These components must be reviewed and updated annually.
The goal of the CMS rule is to ensure providers can continue operating safely while protecting patients and staff during emergencies.
1. Risk Assessment and Emergency Planning
The foundation of every Emergency Preparedness Program is the agency’s risk assessment process.
CMS requires HHAs to conduct an “all-hazards” risk assessment, meaning agencies must evaluate all potential threats that could impact operations, staff, or patients.
Hazard Vulnerability Assessment (HVA)
Most agencies complete this requirement using a Hazard Vulnerability Assessment (HVA), which identifies risks based on:
Geographic location
Patient population
Agency services
Community infrastructure
Historical disasters and emergency trends
Potential hazards may include:
Natural Disasters
Wildfires
Hurricanes
Tornadoes
Flooding
Earthquakes
Extreme heat or winter storms
Public Health Emergencies
Pandemics
Influenza outbreaks
Emerging infectious diseases
Man-Made Emergencies
Cyberattacks
Active shooter incidents
Terrorism
Civil unrest
Utility failures
Hazardous material spills
The results of the HVA guide development of the Emergency Operations Plan (EOP).
Emergency Operations Plan (EOP)
The Emergency Operations Plan outlines how the agency will respond before, during, and after an emergency.
A compliant EOP should address:
Continuity of operations
Delegation of authority
Emergency staffing plans
Patient triage and prioritization
Evacuation procedures
Shelter-in-place protocols
Coordination with local emergency responders
Supply chain disruptions
Access to medications and medical supplies
The plan should also identify patients who are at highest risk during emergencies, including those dependent on electricity-powered medical equipment or those living alone.
2. Policies and Procedures
CMS requires HHAs to develop written policies and procedures supporting the Emergency Preparedness Plan.
These policies must be individualized to the agency and reviewed annually.
Key policy areas include:
Patient Communication and Tracking
Agencies must have procedures for:
Contacting patients during emergencies
Determining patient safety and location
Coordinating care during evacuations
Tracking relocated patients
Maintaining updated emergency contact information is essential.
Protection of Medical Records and PHI
Emergency plans must include procedures for safeguarding:
Electronic health records
Paper documentation
Protected Health Information (PHI)
Agencies should establish backup systems and secure remote access whenever possible.
Staff Roles and Responsibilities
Policies should clearly define:
Staff emergency responsibilities
Chain of command
Reporting procedures
Backup staffing arrangements
Employees must understand their duties before emergencies occur.
Continuity of Essential Services
HHAs must establish procedures to continue critical operations, including:
Skilled nursing visits
Medication coordination
Medical equipment support
Communication with physicians and caregivers
Agencies should also identify alternative vendors and backup supply resources.
3. Communication Plan
Effective communication is one of the most important components of emergency preparedness.
CMS requires HHAs to develop a comprehensive communication plan that complies with federal, state, and local emergency management requirements.
Communication Requirements
The communication plan must include systems for:
Contacting staff, patients, and caregivers
Coordinating with physicians and hospitals
Communicating with public health agencies
Sharing information with emergency management agencies
Coordinating with suppliers and contractors
The plan should contain:
Staff contact lists
Emergency management contacts
Utility company contacts
Local hospitals and healthcare partner information
Transportation resources
Communication Technology
Many agencies use multiple systems to ensure communication continuity, including:
Automated call trees
Mass text alert systems
Mobile applications
Cloud-based communication platforms
Satellite phones or radios in high-risk regions
Redundant communication systems are highly recommended in case primary systems fail.
HIPAA Compliance During Emergencies
Even during emergencies, agencies must maintain HIPAA compliance when sharing patient information.
Staff should understand:
What information may be disclosed
When disclosures are permitted
How to securely transmit patient information during emergencies
Training on emergency-related HIPAA requirements is essential.
4. Training and Testing
Emergency preparedness plans are only effective if staff understand how to implement them.
CMS requires HHAs to provide:
Initial emergency preparedness training
Annual refresher training
Ongoing testing and exercises
Staff Training Requirements
Training should cover:
Emergency procedures
Evacuation protocols
Communication expectations
Patient prioritization
Documentation requirements
Infection control procedures
Personal safety measures
Training must be documented and retained for survey readiness.
Emergency Drills and Exercises
CMS requires agencies to conduct at least:
One Full-Scale Exercise Annually
This may include:
Community-based drills
Multi-agency exercises
Simulated disaster responses
If community-based exercises are unavailable, agencies may conduct tabletop exercises.
One Additional Exercise
Examples include:
Mock evacuation drills
Communication failure simulations
Cybersecurity response exercises
Workshop-style emergency scenarios
After each exercise, agencies should conduct an after-action review to identify strengths, weaknesses, and improvement opportunities.
Additional HHA-Specific CMS Requirements
CMS also requires HHAs to implement patient-specific emergency planning measures.
Individualized Patient Emergency Plans
Each patient should receive an emergency preparedness assessment based on:
Medical condition
Mobility status
Cognitive function
Equipment dependency
Caregiver availability
Geographic risks
High-risk patients should be prioritized during emergencies.
Patient and Family Education
Agencies must educate patients and caregivers about:
Emergency contact procedures
Backup medication and supply planning
Evacuation preparedness
Utility outage planning
Shelter-in-place guidance
Many HHAs provide emergency preparedness packets containing:
Emergency phone numbers
Medication lists
Flashlight and supply checklists
Local shelter information
Patient education should be documented in the clinical record.
Common Survey Deficiencies in Emergency Preparedness
Emergency preparedness is a frequent focus area during CMS and state surveys.
Common deficiencies include:
Failure to complete annual Hazard Vulnerability Assessments
Outdated emergency policies
Missing communication plans
Incomplete training records
Lack of documented drills or exercises
Missing patient-specific preparedness instructions
Failure to annually review emergency plans
Inadequate documentation of corrective actions after drills
Surveyors often request evidence that the agency actively maintains and tests its Emergency Preparedness Program rather than simply having a written policy binder.
Best Practices for Emergency Preparedness in Home Health
To strengthen compliance and operational readiness, HHAs should implement proactive preparedness strategies.
Assign an Emergency Preparedness Coordinator
Designate a dedicated individual responsible for:
Managing compliance
Coordinating drills
Updating policies
Serving as emergency liaison
This role improves accountability and program oversight.
Use Technology for Patient Tracking
Cloud-based systems allow agencies to:
Monitor patient locations
Prioritize high-risk individuals
Coordinate staff assignments
Document emergency communications in real time
Technology significantly improves response efficiency during disasters.
Build Community Partnerships
HHAs should collaborate with:
Local Emergency Management Agencies (LEMA)
Public health departments
Hospitals
Utility providers
Community organizations
Strong partnerships improve coordination during emergencies.
Test Backup Systems Regularly
Agencies should routinely test:
Backup communication systems
Generator access
Data backup systems
Vendor continuity plans
Preparedness failures are often discovered during actual emergencies rather than during surveys.
Maintain Updated Emergency Supply Resources
Agencies should maintain access to:
PPE supplies
Infection control materials
Emergency documentation tools
Backup communication devices
Supply chain planning became especially important following the COVID-19 pandemic.
Consequences of Noncompliance
CMS takes emergency preparedness deficiencies seriously.
Potential consequences include:
Condition-level deficiencies
Plans of Correction (POC)
Increased survey scrutiny
Suspension of Medicare payments
Termination from Medicare participation
Civil liability exposure
More importantly, inadequate preparedness can place patients and staff at serious risk during disasters.
Final Thoughts
Emergency preparedness is one of the most critical operational responsibilities for Home Health Agencies. Because HHAs care for medically vulnerable patients in decentralized home environments, agencies must be prepared to respond quickly and effectively during disasters, public health crises, and unexpected emergencies.
CMS emergency preparedness requirements are designed to ensure agencies can continue delivering safe and coordinated care under challenging conditions.
An effective Emergency Preparedness Program should include:
Comprehensive risk assessments
Strong communication systems
Clear policies and procedures
Ongoing staff training
Patient-specific preparedness planning
Regular testing and continuous improvement
Preparedness is not a one-time project. It is an ongoing process that requires consistent evaluation, training, collaboration, and adaptation.
Ultimately, emergency preparedness protects not only regulatory compliance — but the lives, safety, and well-being of the patients and families HHAs serve every day.
References
Centers for Medicare & Medicaid Services (CMS). “Emergency Preparedness Requirements for Medicare and Medicaid Participating Providers and Suppliers.” Available at: CMS Emergency Preparedness Rule
Centers for Medicare & Medicaid Services (CMS). “42 CFR § 484.102 Emergency Preparedness.” Available at: CMS Home Health Regulations
Federal Emergency Management Agency (FEMA). “Emergency Preparedness Guidance for Healthcare Providers.” Available at: FEMA Official Website
U.S. Department of Health & Human Services (HHS). “HIPAA Privacy in Emergency Situations.” Available at: HHS HIPAA Guidance
National Association for Home Care & Hospice (NAHC). “Emergency Preparedness Resources for Home Health Agencies.” Available at: NAHC Official Website
Centers for Disease Control and Prevention (CDC). “Healthcare System Preparedness and Response.” Available at: CDC Emergency Preparedness
Some or all of the services described herein may not be permissible for HealthBridge US clients and their affiliates or related entities.
The information provided is general in nature and is not intended to address the specific circumstances of any individual or entity. While we strive to offer accurate and timely information, we cannot guarantee that such information remains accurate after it is received or that it will continue to be accurate over time. Anyone seeking to act on such information should first seek professional advice tailored to their specific situation. HealthBridge US does not offer legal services.
HealthBridge US is not affiliated with any department of public health agencies in any state, nor with the Centers for Medicare & Medicaid Services (CMS). We offer healthcare consulting services exclusively and are an independent consulting firm not affiliated with any regulatory organizations, including but not limited to the Accrediting Organizations, the Centers for Medicare & Medicaid Services (CMS), and state departments. HealthBridge is an anti-fraud company in full compliance with all applicable federal and state regulations for CMS, as well as other relevant business and healthcare laws.
© 2026 HealthBridge US, a California corporation. All rights reserved.
For more information about the structure of HealthBridge, visit www.myhbconsulting.com/governance
Legal
Resources
Based in Los Angeles, California, operating in all 50 states.
