From renewed discussions around OSHA's proposed heat standard and the agency's Heat Hazards National Emphasis Program (NEP) to questions about what the agency's "20-minute rule" actually means for employers, heat has become one of the defining workplace safety conversations of 2026.

At the same time, another wave of record-breaking temperatures has brought renewed warnings from the National Weather Service and state agencies across the country.

But amid the headlines, many organizations are asking the wrong question. Instead of asking whether they're compliant with today's requirements, safety leaders should be asking whether their heat safety programs are actually built for today's reality. The heat isn't waiting for OSHA, and employers can't either.

Today's heat risks look different than they did a decade ago 

Many workplace heat programs were designed for a different climate reality: shorter heat waves, predictable summer seasons, and a workforce concentrated in traditionally high-risk outdoor industries like construction, utilities and agriculture.

That is no longer the world most employers operate in. Extreme heat is arriving earlier, lasting longer and affecting regions that historically experienced only a handful of dangerous heat days each year. More importantly, heat-related risk is extending well beyond outdoor job sites.

Warehouses, manufacturing facilities, distribution centers, commercial kitchens and other indoor workplaces can experience dangerous heat stress from process heat, humidity and inadequate ventilation, even when outdoor temperatures don't make the evening news.

Many organizations are still treating heat as a seasonal compliance exercise while the risk itself has become an operational challenge that affects daily business decisions.

The regulatory landscape isn’t getting simpler 

While employers continue waiting for a finalized federal OSHA heat standard, enforcement isn't standing still.

OSHA's Heat Hazards National Emphasis Program has expanded inspections in industries where workers face elevated heat exposure, and the agency continues to rely on the General Duty Clause when employers fail to protect workers from recognized heat hazards.

Meanwhile, states continue moving at different speeds. California maintains comprehensive indoor and outdoor heat regulations, while other states have adopted their own requirements or rely primarily on federal enforcement.

For organizations operating across multiple states, that creates a familiar challenge: maintaining one consistent safety program while navigating a patchwork of regulatory expectations.

Rather than asking, "What's the minimum required here?" leading organizations are shifting toward a different question: "What would a heat safety program look like if we designed it around actual worker risk instead of regulatory minimums while recognizing that risk isn't the same for every employee?" That shift changes everything.

Historically, heat safety has often been reactive. A heat advisory is issued. Supervisors remind employees to drink water. Additional breaks are scheduled. An employee begins showing symptoms. The incident is documented.

That model worked reasonably well when dangerous heat events were relatively infrequent and easier to predict. Today's conditions demand something more dynamic.

Heat-related illness isn't confined to declared heat waves. Workers can exceed safe exposure limits during routine summer days when humidity, workload, radiant heat or indoor production processes combine to increase physiological strain. 

Looking only at the weather forecast misses much of the actual risk, and organizations are increasingly being forced to change how they manage heat exposure.

· First, they're expanding their definition of who is at risk. Heat safety is no longer viewed as an issue only for outdoor workers. Indoor environments with process heat, limited airflow or physically demanding work are receiving the same level of attention. Organizations are also recognizing that risk isn't the same for every employee. New hires, workers returning from time away, temporary employees, and those reassigned to hotter environments often require structured acclimatization before they can safely perform full workloads.

· Second, they're measuring the conditions workers actually experience. Air temperature alone understates the risk a worker is exposed to. Many organizations are moving beyond simple air temperature and incorporating Wet Bulb Globe Temperature (WBGT), which accounts for humidity, radiant heat and air movement to better estimate physiological heat stress. That provides a much more accurate picture of when protective actions should occur.

· Third, they're replacing subjective decisions with objective ones. Rather than relying solely on individual supervisor judgment, they're setting clear, documented criteria for cool drinking water and shaded or cooled recovery areas, increase work-rest cycles, modify tasks, or adjust schedules based on measured conditions.

But perhaps the biggest change is philosophical. Leading organizations are no longer treating heat solely as a compliance obligation. They're now managing it as an operational risk.

That means incorporating heat exposure into daily planning, scheduling physically demanding work around environmental conditions, evaluating engineering controls, training supervisors and workers to recognize the earliest signs of heat illness, establishing clear emergency response procedures when symptoms appear, and analyzing trends across facilities to identify where elevated risk is building.

The sharpest view of risk, though, comes not just from the environment, but from what an organization knows about its workers.

It also means recognizing that protecting workers and maintaining productivity aren't competing priorities. When heat-related illness disrupts operations, delays production or leads to injuries, everyone loses. 

Risk isn't one-size-fits-all

Even rigorous environmental monitoring shares a blind spot: it measures the conditions, not the person. Two workers standing in the same spot, under the same temperature and humidity, can face very different risks. Individual susceptibility to heat varies with age, level of physical exertion, degree of acclimatization, underlying medical conditions, and the specific demands of the job. A worker not yet acclimatized to a role, or one managing a chronic condition, can reach dangerous strain long before a conditions-based threshold ever trips.

That's why a one-size-fits-all program — however well-instrumented — leaves gaps. The organizations getting ahead of heat risk are moving from environment-level rules to person-level understanding, and they can build on an established occupational-health practice: the Similar Exposure Group. Workers are grouped by shared exposure — the tasks, processes and jobs they have in common — giving organizations a practical structure for assessing risk.

The same logic extends naturally to heat: the exposure group sets the baseline, and individual factors sharpen the picture from there. For workers whose age, acclimatization status or underlying medical conditions place them at higher risk, occupational-health teams can layer focused, confidential medical surveillance and targeted controls on top - protection a generic, site-wide approach would never surface.

The payoff runs both ways. Higher-risk workers get protection matched to their actual exposure, and organizations spend where it matters most instead of applying blanket measures everywhere. Protecting people and controlling cost stop being competing priorities.

None of this works when the data lives in disconnected systems. Health, industrial hygiene, safety, and broader EHS+ data have to sit together, within a single system, before an organization can see a worker's full risk picture and act on it.

Five questions every EHS leader should ask 

As another summer of extreme heat unfolds, organizations should evaluate whether their programs reflect today's workplace realities.

• Are we evaluating both indoor and outdoor work environments for heat risk?
• Do we account for how individual factors such as age, health history, acclimatization, and workload change each worker's risk, rather than treating everyone the same?
• Do supervisors have objective, documented criteria for implementing protective actions?
• Are heat illness prevention procedures applied consistently across every location and every shift?
• Is our worker health, exposure, and safety data connected well enough that we can see individual risk and act on it?

If any of those answers are uncertain, it's worth reassessing the program now, before the next inspection, the next heat advisory or, more importantly, the next preventable illness.

The conversation around workplace heat will continue to evolve. Eventually, OSHA may finalize a federal heat standard. States will continue updating their own requirements. Enforcement priorities will shift. But the reality is that heat is becoming a recurring operational reality. It is no longer just a seasonal event. 

Organizations that continue relying on manual observations, static seasonal policies and reactive decision-making will find it increasingly difficult to protect workers in a climate that is changing faster than many safety programs.

The employers best prepared for the future will be connecting what they know about their environments with what they know about their workers, using that combined picture to understand individual risk and protect people long before temperatures reach dangerous levels.