Emergency Eyewash: 5 Failures That Turn a Minor Chemical Splash Into a Major Injury

An emergency eyewash station is not a compliance trophy. It is the last response layer after a chemical splash has escaped the controls that should have prevented it. If a worker cannot reach the station fast, cannot activate it without hesitation, or finds it out of service when the splash happens, the site has a decoration, not a barrier.

Across 25+ years leading EHS in multinational operations, Andreza Araujo has seen a pattern that repeats in plants, warehouses and maintenance areas. Leaders celebrate the presence of emergency equipment while the route, the ownership, the verification and the upstream chemical controls remain weak. In Make The Difference: Be a Leader in Health & Safety, Andreza Araujo argues that leaders own the conditions that make safe action possible, not just the form that records it.

This article is for supervisors, maintenance leaders and EHS managers in sites that handle corrosives, solvents, battery acids, caustic cleaners or similar splash hazards. OSHA 1910.151(c) requires suitable facilities for quick drenching or flushing, and ANSI/ISEA Z358.1 turns that requirement into practical readiness. The problem is not the absence of rules. The problem is that many sites can point to a station and still fail to prove that a worker can use it in time.

Why an eyewash station is a response layer, not a control fix

Eyewash belongs after elimination, substitution, engineering controls, administrative controls and PPE. It does not replace closed transfer, splash guards, local containment or chemical segregation. A worker who needs the station because the area design still sprays the eyes has already paid for an upstream failure.

As Andreza Araujo argues in Safety Culture: From Theory to Practice, repeated decisions define culture, which means the real question is not whether the station exists. The real question is whether leaders have built a work design that makes the station a rare backup instead of a normal survival tool.

The same logic appears in hazard communication, because a clear label does not make an unsafe transfer safe. It only tells the worker what the hazard is. The station is about recovery after failure, not prevention before failure.

Failure 1: the route reaches paper, not the station

The first failure appears when the route to the eyewash looks acceptable on a drawing but breaks down in the field. A cart blocks the aisle, a hose reel narrows the passage, a locked door changes the path, or a storage rack sits where the worker should be moving at speed. None of that looks dramatic on a checklist. It matters the moment a splash hits the face.

The route starts at the task, not at the wall. If a worker has to think about where to go, the design is already too complex. In emergency response, hesitation is not a minor delay. It is the difference between washing immediately and carrying contamination longer than the tissue can tolerate.

Across 25+ years leading EHS, Andreza Araujo has seen that many incidents begin as small layout decisions. A maintenance cart parked in the wrong place, a temporary hose left across a walkway, or a new production line added without rechecking emergency access can turn a response layer into a dead end.

Failure 2: the unit is installed, but no one has tested the flow under field conditions

A tag on the station does not prove usable water. The team may inspect the label, sign the sheet and still never verify whether the flow starts cleanly, whether the spray is usable, or whether the activation can be done without hesitation. Paper compliance is cheap. Field proof is not.

Maintenance has to check more than presence. The station has to work as a worker would use it, which means the site needs a real test routine, not a ceremonial one. If the water is weak, intermittent, contaminated, too hot, too cold or hard to activate, the station will fail when the worker needs it most.

In more than 250 cultural-transformation projects supported by Andreza Araujo's team, leaders learned that verification has to be observable. If the control cannot be proven in the field, it remains an assumption. A station that exists only on paper is not a control. It is an assumption that nobody can cash during an emergency.

Failure 3: the station is too far from the task or too hidden to matter

Some stations are technically present, although they are placed for convenience rather than exposure. The chemical handling point moved last month, the nearby storage changed, or the job now happens in a temporary setup that was never mapped back to the original emergency route. The station stayed where it was. The risk moved on.

This failure matters because the eyewash belongs to the job map, not to the building wall. A worker exposed at the mixing point should not have to cross another hazard, a traffic lane or a stair landing to reach help. If the route is longer than the incident allows, the station may still satisfy the inventory but not the emergency.

In Make The Difference: Be a Leader in Health & Safety, Andreza Araujo treats leadership as the duty to make safe action easy. That principle applies here. The site should not ask a shocked worker to solve a routing problem after the splash has already started.

Failure 4: maintenance owns the equipment, but no one owns the emergency

Maintenance can keep the unit alive and still fail the program if supervisors, shift leads and contractors do not know who checks access, who stops work when the station is blocked, and who re-verifies the setup after a layout change. Ownership has to sit with the line, because the line owns the exposure.

If the eyewash is not in the JHA or PTW for the task, the site is assuming the emergency will stay generic while the job stays specific. It will not. Chemicals change, contractors rotate, batch work moves, and the person who gets the splash is usually the person least able to improvise.

As Andreza Araujo argues in Safety Culture: From Theory to Practice, culture is visible in repeated decisions. When no one owns the emergency, the repeated decision is to trust that somebody else will notice the gap. That is not a system. It is an assumption.

Failure 5: leaders treat eyewash as a substitute for prevention

This is the most expensive mistake. A site that keeps the station but refuses to redesign transfer, storage, guarding or PPE is choosing response over prevention. Eyewash is part of the last line. It is not an excuse to leave GHS controls, SDS review and splash control weak.

The upstream question is simple. Why is the splash possible in the first place? If the answer is bad handling, poor containment, weak segregation or a routine that assumes the operator will be fast enough to recover, then the site is using the station to cover design gaps.

In more than 250 projects supported by Andreza Araujo, the turning point came when leaders stopped asking whether the station was installed and started asking whether the work still made the station necessary. That change matters because prevention and response are not interchangeable. One reduces exposure. The other only limits the damage after exposure has already happened.

What a field-ready eyewash program looks like

A field-ready program is visible, testable and tied to the job. It does not rely on a label alone. It proves that the station is reachable from the actual exposure point, that the activation is simple, that the water works as intended, and that the people closest to the hazard know who owns the check.

The difference is not cosmetic. A field-ready program makes the station part of the work design, which is exactly what leaders should want when corrosives, caustics or solvents are present. If the emergency equipment cannot be used with confidence, the site has not finished the control design.

What leaders should do in the next 30 days

Start with one high-risk area, not the entire site. Walk the route from the actual splash point to the nearest station with a supervisor, a worker and maintenance. If that walk crosses a locked door, a traffic lane, a pile of pallets or a hidden turn, the design is already telling you the emergency will be slow.

Then pull the eyewash check into the JHA or PTW for the task. Name the chemical, the likely exposure point, the emergency contact, the shutdown step and the revalidation trigger after each layout change. The site should be able to explain who checks the station, who confirms access and who reopens the area only after the control is verified again.

Finally, pair the eyewash review with hazard communication. The SDS and the GHS label should tell the crew what kind of exposure might happen, and the work design should make that exposure less likely. If the station is carrying the burden that prevention should carry, the program needs redesign, not another sticker.

FAQ

Is an eyewash station a control or a response?

It is a response layer. It helps after a splash has escaped upstream controls, but it does not replace elimination, substitution, engineering controls, administrative controls or PPE.

What is the biggest eyewash mistake?

Trusting the inspection tag more than the field. A station can look ready and still fail if the route is blocked, the flow has not been tested, or the emergency was never integrated into the task plan.

Should PPE make eyewash less important?

No. PPE can reduce exposure, but it cannot replace a working emergency station. If a splash still reaches the eyes, the worker needs immediate flushing and a fast route to treatment.

What should supervisors verify first?

They should verify the route from the exposure point, then the activation, then the ownership. If those three items are weak, the station is not yet field ready.

Which Andreza Araujo book fits this topic best?

Make The Difference: Be a Leader in Health & Safety is the best starting point for supervisors and line leaders, while Safety Culture: From Theory to Practice explains why repeated decisions shape whether the station is real or ceremonial.