Exercise #041 · Dam Emergency · Mass Evacuation · EAP Activation · February 7–14, 2017

Oroville Dam Spillway Crisis

Five days of ambiguous notifications. Then 188,000 people told to run. The dispatch center was in the inundation zone. They kept answering 911 anyway.

Dam: Oroville — Feather River, Butte County · 770 ft tall (tallest in U.S.)Reservoir: Lake Oroville · 3.54 million acre-feet capacitySpillways: Main concrete flood control + emergency unlined weir (never used pre-2017)Evacuated: ~188,000 across three countiesEvacuation issued: February 12, 4:21 PMErosion rate: ~20 ft/hour — 20 ft from undermining the weir at moment of evacuationRepair cost: $1.1 billionFatalities: ZeroOutcome: Cal OES Dam Safety Planning Division created
Dam EmergencyMass EvacuationMulti-JurisdictionEAP ActivationInformation ManagementInfrastructure Training Series

1Opening

For five days before 188,000 people were told to run, dispatchers at Butte County's communications center were receiving information from a dam operator, a sheriff's command staff, a public watching on social media, and a news cycle — and the signals didn't agree. This exercise is about those five days. The mass evacuation phase gets most of the attention. The dispatch challenge that made it harder was everything that happened before the order was given.

Oroville Dam sits on the Feather River in Butte County, California. At 770 feet, it is the tallest dam in the United States. The reservoir holds up to 3.54 million acre-feet of water. The dam has two spillways: a main concrete flood control spillway and an emergency spillway — an unlined concrete weir designed to allow water to flow over a bare hillside into the Feather River below. The emergency spillway had never been used in the dam's nearly 50-year history.

The Butte County Sheriff's Office and CAL FIRE Butte County share a joint Emergency Command Center handling law enforcement and fire/EMS dispatch for Butte County. Their dispatch center itself sits within the potential inundation zone. Downstream communities in Yuba and Sutter counties have their own PSAPs — any evacuation order for Oroville immediately becomes a multi-county, multi-PSAP event.

2Dispatch Timeline

What the comm center saw, and when. Color coding indicates the operational dimension.

Feb 6–7
WARNINGEarly storm period. January and February 2017 were among the wettest months on record for the Feather River basin. The watershed received an entire year's average runoff in 50 days. Dam operators were releasing water through the main spillway at high rates — known and expected, normal winter operations. No notification to the PSAP at this stage.
Feb 7, ~10:00 AM
GAPFirst notification to PSAP. Dam operators noticed an unusual flow pattern in the main spillway and closed the gates to investigate. They found a 250-foot-wide, 50-foot-deep crater where the concrete lining had failed. DWR notified Butte County via automated/recorded message using language that did not convey the severity. The Sheriff himself learned about the spillway damage from a text message from a local media contact — not through the formal EAP notification chain.
Feb 8–10
DISPATCHManaged releases, continued monitoring. Operators resumed releases through the damaged spillway at reduced rates. Dam safety engineers from DWR, FERC, and consulting firms were on site evaluating the damage. Public messaging: "No danger to public safety." The PSAP was not in an active EAP notification posture. The public was beginning to watch via social media and news coverage.
Feb 11
WARNINGEmergency spillway activated for first time in history. Lake Oroville reached 901 feet — the elevation at which water flows over the emergency spillway weir. It began flowing for the first time since the dam was built in 1968. Officials stated publicly there was no danger and evacuation was not being considered. Almost immediately, the hillside below the emergency spillway was eroding far faster than expected. The erosion began eating uphill toward the concrete weir.
Feb 12, AM
CRITICALErosion reaches critical rate. Engineers calculated the rate (~20 feet per hour) and the distance remaining to the concrete weir (~20 feet). If the weir collapsed, an estimated 30-foot wall of water would enter the Feather River immediately downstream. Sheriff Honea met with engineers and state officials, recapped his understanding, asked if he was missing anything, and when the room was silent, gave the evacuation order.
Feb 12, 4:21 PM
ESCALATIONMandatory evacuation order issued. Butte County Sheriff orders mandatory evacuation for low-lying Oroville and downstream Feather River communities. Yuba and Sutter counties follow. Within hours, ~188,000 people are under mandatory evacuation or warning across three counties. Butte County dispatch begins simultaneous handling of evacuation 911 calls, downstream notifications, hospital coordination, and mutual aid — while preparing to potentially relocate their own facility out of the inundation zone.
Feb 12, evening
COMMSSituation stabilizes. By 9:00 PM, increased main spillway releases successfully lower the lake level below the emergency spillway lip, stopping the flow over the hillside. The immediate threat of weir collapse is reduced.
Feb 14
COMMSEvacuees allowed to return. Aftermath: $1.1 billion in repairs, zero fatalities, and the creation of the Cal OES Dam Safety Planning Division — a direct result of this incident.

3The Dispatch Picture

On February 7, the EAP required DWR (the dam operator) to notify the PSAP using clear, classification-based language. The notification DWR sent used language that did not convey the severity of a 250-foot crater in the main spillway. The Sheriff learned about the damage informally — from a text message from a local media contact, not through the formal EAP notification chain. There was no protocol for the PSAP to escalate an ambiguous dam operator notification to command-level review. The system worked as designed. The design had a gap.

When the evacuation order arrived at 4:21 PM on February 12, the Butte County dispatch center had ~23 minutes before the potential arrival of flood water if the weir collapsed. They were still taking 911 calls. They were in the inundation zone. There was no pre-established protocol for dispatch center relocation. Approximately 400 calls came in during the first 30 minutes of the evacuation — many from callers who were angry because they had been told for five days there was "no danger to public safety."

The lesson the 2017 incident produced was structural: distributing an EAP to a PSAP is not the same as the PSAP being trained and prepared to execute it. The Cal OES Dam Safety Planning Division exists because that gap was real, costly, and national in scope.

"He recapped his understanding of the situation, asked if he was missing anything, and when the room was silent, gave the evacuation order."— Account of Sheriff Kory Honea, February 12, 2017

4Where Judgment Mattered

Dam operator notifications must use plain-language classification terms. The 2017 Oroville notification used language that didn't convey severity. The Sheriff learned through informal channels. There was no protocol for the PSAP to escalate an ambiguous notification to command-level review. Whatever your jurisdiction's dam EAP says, verify the notification language is classification-based and the PSAP has authority to escalate ambiguous notifications.

The PSAP that doesn't question an ambiguous notification is the PSAP that gets caught. If the dam operator's message doesn't fit the EAP severity classes, the PSAP's job is to escalate it to command — not to log it as routine. Build that escalation authority into the protocol so a dispatcher doesn't have to invent it at 0300.

If your dispatch center is in an inundation zone, that's a COOP problem, not a footnote. Butte County's dispatch center sat in the potential inundation zone with no pre-established relocation protocol. The dam EAP needs a continuity of operations component: alternate facility, transition authority, timing triggers, what stays operational during the move. Find your center's answer before you need it.

Multi-county dam corridors need pre-established information-sharing protocols. Feather River corridor events are three-county events by definition. During 2017, coordination between the three county PSAPs during the escalation phase was inconsistent. Pre-established protocols and joint exercises so all three centers are working from the same playbook before the event are the structural fix.

Caller frustration during a mass evacuation is partly informational, not emotional. Callers told for five days "no danger to public safety" who then receive a mandatory evacuation order have legitimate confusion about who to trust. Acknowledge the frustration briefly, provide the specific safety information they need, and move to the next call. Don't explain the five-day history; you don't have time and they don't need it.

The first call is not always to 911. The Sheriff learned via text from a media contact. Social media saw the spillway damage before the formal EAP chain delivered it. Dispatch can be the last node in the formal chain to receive what the public already knows. That's a real gap; treating informal reports as worth verifying — not dismissing — is the corrective.

Distributing an EAP is not the same as being prepared to execute one. Most PSAPs near high-hazard dams have the EAP somewhere. Far fewer have practiced it, can locate it under pressure, or know whether their facility is in the inundation zone. The 2017 incident exists in part because that gap is national. Closing it for your own jurisdiction is your work, not someone else's.

Sheriff Honea's evacuation decision is a model worth studying. He recapped his understanding, asked the room of engineers and state officials if he was missing anything, and when the silence answered him, he gave the order. That decision-making structure — explicit recap, named question, time-bounded silence — is replicable in any complex multi-stakeholder decision dispatch supports.

5Discussion Questions

No right answers. Tap a question to expand the analysis. Use one or all — whatever fits your time.

1Ambiguous dam operator notificationsIt is 1000 hours. Your shift starts. The previous shift logs include a routine notification from DWR about "spillway operations." An hour later, a 911 caller reports seeing "a massive hole and water spraying sideways" near the dam. What do you do with the discrepancy, and who do you call?

This is exactly the gap the 2017 incident revealed. The formal notification chain delivered ambiguous information. Informal reports — from media, social media, public observers — delivered specifics. Dispatch sat between the two streams with no protocol for reconciling them.

Does your center have a protocol for escalating ambiguous dam operator notifications? If the dam operator's language doesn't match an EAP severity class — "spillway operations" vs. "spillway emergency" — what's the next step? In 2017 there was no defined next step.

Who has the authority to treat an informal public report as a trigger for EAP-level action? A 911 caller reporting a "massive hole" near a dam is not a verified incident report. But it's not nothing either. Whose decision is it to escalate based on that, and how fast can that decision be made?

The reconciliation move is to call back the operator. Verify what the formal notification meant. Get an updated classification on the line. Document the inconsistency. The protocol you want is one where the dispatcher has authority to make that call without first finding a supervisor — because at 0300 with a skeleton crew, the supervisor may not be available fast enough.

Dispatch centers that don't question ambiguous notifications are the ones that get caught. The lesson Oroville produced was that verifying a notification — politely, professionally, on the record — is part of the dispatcher's job, not above their pay grade.

2Multi-source simultaneous notification managementYou are managing four incoming calls simultaneously — the dam operator calling with an update, a downstream county PSAP calling to ask what's happening, a field unit asking for routing guidance, and a 911 caller whose elderly mother is in a care home in the evacuation zone. How do you prioritize, and what risks does your prioritization create?

Multi-source notification management is the operational reality of an active dam EAP. Each call has different time urgency, different information value, and different consequences if delayed.

Your center's current protocol for multi-source simultaneous notification. Is there a dedicated position for dam event coordination, or does this fall on the primary dispatcher? In 2017, the answer for most jurisdictions was "primary dispatcher" — and the cognitive load was real.

The dam operator update is the highest-information call. Whatever they're calling about — flow rate change, classification update, structural status — is the input that drives every other decision. Take it first if at all possible.

The downstream county PSAP request becomes information-sharing. Once you have the operator update, you can give downstream PSAPs the same picture. That call is a multiplier — answering it once propagates information to multiple jurisdictions.

The field unit and the 911 caller compete for the same cognitive resource. The field unit needs operational guidance; the 911 caller needs reassurance and accurate evacuation information. Both are legitimate. The risk in deprioritizing either is real.

The structural answer is staffing-up before you're underwater. Spinning up additional dispatchers when EAP activation occurs — not after the calls begin overwhelming the primary — is the supervisor function. Waiting until the primary is visibly drowning is the failure mode.

3COOP when your center is in the inundation zoneThe evacuation order is issued. Your center is in the inundation zone. You have 23 minutes before the potential arrival of flood water if the weir collapses. You are still taking 911 calls. What's your COOP plan, and does it actually exist in writing?

The Butte County dispatch center sat in the potential inundation zone in 2017. There was no pre-established protocol for dispatch center relocation. They worked through it because they had to. That's not a plan; that's improvisation under pressure.

Pull out your center's dam EAP right now. Does it reference your facility's location relative to the inundation zone? Does it include a continuity of operations component? In 2017, most facility EAPs did not.

The COOP component should answer: Where is the alternate facility? Who has authority to order the transition? What triggers the move (a specific water elevation, a classification level, an evacuation order)? What happens to active calls during the transition? Who stays at the primary facility, and for how long?

The 23-minute window is not the time to figure this out. If your center has 23 minutes before water arrives, the time to plan was last year. The dispatchers who get caught are the ones for whom the COOP question is theoretical.

The Cal OES Dam Safety Planning Division exists because this gap was national. Most PSAPs near high-hazard dams in 2017 did not have a COOP component in their dam EAP. Many still don't. Closing that gap for your jurisdiction is the actionable lesson Oroville produced.

4Caller management during a mass evacuation that contradicts five days of public messagingFor five days before the evacuation order, your center has been receiving and logging DWR notifications. The public has been told there is "no danger to public safety." When the evacuation order arrives, you receive 400 calls in the first 30 minutes. Many callers are angry — they were told it was fine. How do you manage caller tone while processing an active mass evacuation?

Caller anger during a mass evacuation that contradicts prior public messaging is a real phenomenon. The callers aren't wrong to be confused. They were told for five days that there was no danger. Now they're being told to leave their homes immediately. The dispatcher fielding those calls did not write the messaging — and the dispatcher cannot fix it on the call.

Acknowledge the frustration briefly, provide the specific safety information they need, and move to the next call. The acknowledgment matters; the explanation does not. "I understand this is frustrating — the situation has changed and you need to leave now" is enough. "Let me explain the five days of public messaging" is too much.

Don't explain the five-day history. You don't have time. They don't need it. The information that matters is the evacuation route, the timing, and what to bring — not the chronology of how the situation got here.

Call handling protocols during high-volume events. Does your center's training include managing callers whose distress is partly driven by perceived official misinformation? It's a specific skill: validate the emotion, deliver the operational information, end the call respectfully, take the next one.

The structural correction lives upstream from dispatch. The five days of "no danger to public safety" messaging came from officials whose risk assessment did not match the speed of the situation. Dispatch can't fix that. What dispatch can do is be the calm, accurate, respectful voice when the messaging finally catches up to reality.

5Pull out your dam EAP — can you answer these questions right now?Pull out your center's Oroville Dam EAP — or whichever high-hazard dam EAP covers your jurisdiction. Find the notification flowchart. Can you answer these questions right now: What is the first call your center receives? What do you do next? Who do you call? What information do you pass? How long does it take your current staffing level to complete the full notification chain?

The point of this question is not to embarrass anyone. The point is that if you had to answer it from memory right now, at 0300, with a skeleton crew, you should be able to. If you can't, that is the training gap this exercise is designed to address.

EAP distribution is not EAP readiness. Most PSAPs near high-hazard dams have the document somewhere. Far fewer have practiced it, can locate it under pressure, or have walked through the notification chain in real time.

The notification chain typically runs: Dam operator → PSAP → County OES / Sheriff command → Downstream PSAPs → State OES warning center → NWS → Law enforcement traffic control → Hospitals → Mass care. Each step has a contact, a phone number, and an expected response window.

The questions worth answering before the next event: Are those phone numbers current? When were they last verified? Is the chain documented in a way the on-shift dispatcher can find without help? What does the chain take in actual elapsed time at your normal staffing level?

The training gap is not the EAP — it's the rehearsal. Tabletop exercises, walked-through notification chains, time-tested scenarios. Centers that have done this work execute the EAP. Centers that haven't are dispatchers reading a binder under pressure.

6Knowledge Check

Five questions. Answer, then submit for inline feedback. Progress saves locally.

Q1.On February 7, the PSAP received a notification from DWR about the spillway. The Sheriff learned about the damage through a different channel. What does this illustrate about EAP notification design?
Q2.The Butte County dispatch center is located in the potential inundation zone. The 2017 incident revealed no pre-established protocol for dispatch center relocation. What should a dam EAP include to address this?
Q3.During the February 12 evacuation, callers were confused and some were angry — they had been told for five days there was 'no danger to public safety.' As a dispatcher, your role in this situation is:
Q4.A Feather River corridor dam emergency affects three counties. During the 2017 incident, coordination between the three county PSAPs during the escalation phase was documented as inconsistent. The most effective fix for this is:
Q5.The most significant long-term result of the 2017 Oroville Dam spillway crisis for the PSAP community was:

7Sources & Further Reading

Official AAR
California Governor's Office of Emergency Services, 2018 — official after-action / corrective-action report
Forensic Analysis
Dispatcher Accounts
Cal OES — interviews with dispatchers Jennifer Honea and Trina Wehle
Sheriff Interview
CapRadio, February 11, 2022 — five-year retrospective interview
Retrospective
Case Study
Association of State Dam Safety Officials
Reference
Wikipedia — comprehensive incident timeline with primary source citations
FERC Framework
Federal Energy Regulatory Commission, July 2015

8Your Notes

📝 Take a note
Saved locally in your browser. Prints with the exercise.