Emergency-contact requirements depend on the setting. OSHA planning, HIPAA disclosure, FERPA records, and college missing-student procedures do not create one universal rule requiring every person to name a relative who can receive all information.
Workplace emergency planning
OSHA’s emergency-action-plan standard identifies required plan elements and relevant employee roles. It should not be confused with a general command that every worker give HR a family member’s telephone number. Employer policies and other laws may impose separate requirements. [1]
Medical information
HIPAA governs covered entities and business associates, with rules permitting specified disclosures in emergencies and other circumstances. Being listed as an emergency contact does not automatically create unrestricted access to the patient’s entire medical record or healthcare decision-making authority. [2]
Schools and colleges
FERPA limits disclosure of education records but contains qualifying health-and-safety emergency provisions. For covered colleges with on-campus housing, federal law separately addresses confidential missing-student contact information and related notification duties. These are not identical to ordinary parent access to grades. [3] [4]
For example, naming a friend for missing-student notification does not necessarily authorize the school to share every education record with that friend.
Ask what the designation does
Identify who receives the contact details, when the person will be called, what information may be shared, and whether a separate healthcare proxy or consent form is needed. Keep information current.
A contact name does not replace legal authority
A healthcare proxy, guardian, personal representative, consent to disclose, and emergency-contact listing can confer different powers. Ask the institution which designation is being requested and whether another document is necessary. HIPAA can permit appropriate emergency disclosures without making every named friend the patient’s decision-maker. [2]
For a college student, keep a confidential missing-student contact distinct from a general parent-contact record and a FERPA consent. The Clery-related statute includes special notification rules and protections; an adult student’s choice does not erase every duty concerning a minor or law enforcement. [4] In a workplace, an emergency-action plan should identify responsibilities and communication procedures even when an individual has no suitable relative to list. Record accurate information and update it when relationships or telephone numbers change, rather than assuming the designation remains useful indefinitely.
See FERPA access rights and workplace sanitation duties for distinct school and employer obligations.
Primary sources
- 29 CFR 1910.38 – Emergency Action Plans
- HHS: HIPAA Privacy in Emergency Situations
- 20 U.S.C. 1232g
- 20 U.S.C. 1092
Sources checked: October 31, 2026.