In 2023, workplace violence incidents resulted in over 20,000 injuries and hundreds of fatalities across the United States, according to the Bureau of Labor Statistics. For small business owners and HR managers, the question is no longer whether to implement workplace violence prevention measures, but how to ensure compliance with an increasingly complex patchwork of state-specific requirements. While federal OSHA guidelines provide a foundation, several states have enacted mandatory workplace violence prevention laws with specific policy, training, and reporting requirements that employers must follow or face significant penalties.
This article examines the current landscape of workplace violence prevention requirements across states, identifies which businesses are subject to these mandates, and provides practical guidance for developing compliant policies that protect both your employees and your organization.
Understanding Federal Baseline Requirements
At the federal level, the Occupational Safety and Health Act’s General Duty Clause requires employers to provide a workplace “free from recognized hazards” that could cause death or serious physical harm. While OSHA has not established a comprehensive workplace violence standard applicable to all industries, this clause has been interpreted to include workplace violence prevention in certain contexts.
OSHA has issued specific guidelines for healthcare and social service workers, who face disproportionately high rates of workplace violence. These guidelines, while not legally binding for most employers, recommend that organizations conduct worksite analyses, implement hazard prevention and control measures, provide safety and health training, and maintain detailed recordkeeping systems.
Additionally, employers must comply with OSHA’s recordkeeping requirements under 29 CFR 1904, which mandate reporting workplace violence incidents that result in death, days away from work, restricted work, loss of consciousness, or significant injury or illness diagnosed by a healthcare professional. Understanding these federal baselines is essential before navigating state-specific requirements.
State-Specific Workplace Violence Prevention Laws
California has led the nation in workplace violence prevention legislation. Senate Bill 553, which took effect in July 2024, requires nearly all California employers to establish, implement, and maintain a written workplace violence prevention plan. This plan must include procedures for reporting workplace violence concerns, methods for responding to actual or potential emergencies, and protocols for post-incident response and investigation. Employers must also provide interactive training to all employees and maintain a violent incident log documenting specific details about each incident.
New York enacted the Retail Worker Safety Act in 2023, requiring retail employers to adopt workplace violence prevention policies and provide annual training to retail employees. The law applies to retail employers with ten or more employees or any retail employer that experienced a workplace violence incident in the previous calendar year. Covered employers must either adopt a model policy provided by the state or develop their own policy addressing risk factors, reporting procedures, and response protocols.
Washington has implemented comprehensive requirements for healthcare and social service employers under WAC 296-800-11005. These regulations mandate written workplace violence prevention programs, employee training, incident investigations, and recordkeeping. Washington’s approach emphasizes employee participation in developing and implementing prevention strategies, requiring employers to establish methods for employees to report concerns without fear of retaliation.
Oregon requires healthcare employers to develop and implement workplace violence prevention plans under OAR 437-001-0744. The state’s requirements include conducting risk assessments, implementing engineering and administrative controls, establishing reporting systems, and providing annual training. Oregon also mandates that employers review and update their plans annually or whenever a deficiency is identified.
Several other states, including Connecticut, Illinois, Maine, Maryland, and New Jersey, have enacted industry-specific workplace violence prevention requirements, primarily targeting healthcare facilities, late-night retail establishments, and educational institutions. Small business owners should verify whether their industry and location trigger specific state mandates.
Essential Components of a Compliant Workplace Violence Prevention Policy
Regardless of whether your state mandates a formal workplace violence prevention program, implementing a comprehensive policy represents both sound risk management and a commitment to employee safety. A compliant policy should begin with a clear statement of commitment from leadership, defining workplace violence broadly to include physical acts, threats, harassment, intimidation, and other disruptive behavior.
The policy must establish clear reporting procedures that encourage employees to report all incidents and concerns without fear of retaliation. This includes designating specific individuals or departments responsible for receiving reports, providing multiple reporting channels, and guaranteeing confidentiality to the extent possible. For example, a small retail business might designate the store manager and district manager as primary contacts, with an anonymous hotline as an alternative reporting method.
Risk assessment protocols form another critical component. Employers should conduct regular workplace security surveys, identify jobs or locations with elevated risk, and evaluate the effectiveness of current preventive measures. A medical office, for instance, might identify patient intake areas and medication storage rooms as higher-risk locations requiring enhanced security measures such as panic buttons or security cameras.
The policy should outline specific preventive measures and controls, which may include physical security enhancements, administrative controls like buddy systems or visitor management procedures, and behavioral strategies such as de-escalation training. These measures should be tailored to the specific risks identified in your workplace assessment.
Finally, establish clear incident response and post-incident procedures. This includes immediate response protocols for active threats, procedures for securing the scene and providing medical assistance, investigation requirements, and support resources for affected employees. Many states require employers to document these procedures in writing and communicate them regularly to all employees.
Training Requirements and Best Practices
Training represents a cornerstone of effective workplace violence prevention. States with mandatory programs typically require initial training for all employees and annual refresher training thereafter. California’s SB 553, for example, mandates interactive training that allows employees to ask questions and receive answers from a knowledgeable trainer.
Effective training should cover recognizing warning signs of potential violence, understanding reporting procedures, implementing de-escalation techniques, and knowing emergency response protocols. Training should be role-specific where appropriate—managers and supervisors need additional training on investigating complaints, responding to reports, and supporting affected employees.
Documentation of training is essential for compliance. Maintain records showing the date of training, topics covered, trainer qualifications, and attendee names. Many employers use sign-in sheets, training certificates, or learning management systems to track completion. This documentation proves invaluable during regulatory audits or in defending against potential liability claims.
Compliance Checklist
- ✅ Verify whether your state, industry, or business size triggers mandatory workplace violence prevention requirements
- ✅ Develop or update a written workplace violence prevention policy that includes definitions, reporting procedures, risk assessment protocols, and response procedures
- ✅ Conduct a comprehensive workplace security assessment to identify specific risks and vulnerabilities in your environment
- ✅ Implement appropriate preventive measures, including physical security enhancements, administrative controls, and behavioral training programs
- ✅ Provide initial and annual training to all employees on recognizing, reporting, and responding to workplace violence
- ✅ Establish and maintain required recordkeeping systems, including incident logs, training records, and investigation documentation
- ✅ Review and update your workplace violence prevention program annually or following any incident, near-miss, or regulatory change
Conclusion
Workplace violence prevention has evolved from a recommended best practice to a legal mandate in many jurisdictions. Small business owners and HR managers must stay informed about both federal guidelines and state-specific requirements that apply to their operations. A comprehensive workplace violence prevention program protects employees, reduces liability exposure, and demonstrates organizational commitment to safety. Given the complexity and variation in state requirements, along with the serious consequences of non-compliance, employers should consult with qualified employment counsel to ensure their policies and practices meet all applicable legal obligations while effectively addressing the unique risks present in their workplaces.
The information on WorkplaceLogic.com is for general informational purposes only and does not constitute legal advice. Employment laws vary by jurisdiction and change frequently. Always consult a qualified employment attorney for advice specific to your situation.
This post contains affiliate links. We may earn a commission at no extra cost to you.