If you run a hospital or health system, workplace violence prevention just moved to the top of your compliance checklist. Healthcare workers face elevated risks from patients, visitors, and external actors and account for roughly 73% of all nonfatal workplace injuries caused by violence. With no comprehensive federal OSHA standard in sight, states are stepping in. At least 20 states now require hospitals to implement violence prevention programs, with new and expanded laws continuing to roll out through 2026.
Recent activity tells the story. Ohio’s HB 452 requires hospitals to develop security plans with frontline worker input and to staff de-escalation-trained employees in emergency and psychiatric departments at all times. New York’s S5294-B mandates violence prevention programs at all general hospitals and nursing homes by September 2027, with annual safety assessments and dedicated emergency department security. Washington and Vermont strengthened existing frameworks in spring 2025, and Virginia enacted new incident‑reporting requirements it is already expanding through 2026 legislation. California, considered the most robust regulatory model, mandates healthcare facilities to develop, implement, and maintain workplace violence prevention plans, including risk assessments, incident tracking, staff training, and annual review and reassessment of the prevention plan. Oregon passed SB 537 in 2025 that expands its requirements to include employee training, identification of potentially dangerous individuals, and enhanced safety protocols. The pipeline continues to grow, with Kentucky, Missouri, and Utah all introducing or advancing new bills in 2026.
While the specifics vary by state, the common threads are clear: a written violence prevention plan grounded in a facility‑specific risk assessment; annual training on de‑escalation and emergency response; internal incident‑reporting systems; anti‑retaliation protections for employees who report incidents; and periodic evaluations of program effectiveness. Some states are going further—Massachusetts has proposed paid leave for victims of workplace violence, and Missouri’s pending legislation would prohibit hospitals from assigning an employee to a patient who previously assaulted that worker.
For healthcare employers, this means navigating a patchwork of overlapping and sometimes inconsistent requirements with no federal standard to fall back on. These are not “write it once and file it away” obligations. Most laws contemplate ongoing risk assessments, regular plan updates, documented training, and incident tracking. Noncompliance carries real consequences, including potential regulatory enforcement and financial penalties. Beyond legal exposure, a well‑designed violence prevention program can reduce turnover and support higher‑quality patient care. Additionally, even in states that do not currently have mandatory compliance obligations, a robust workplace violence prevention program can mitigate liability by demonstrating proactive risk management.
This trend is not slowing down. With federal legislation stalled, healthcare employers should expect continued expansion of state‑level mandates. The takeaway is clear: now is the time to review and benchmark violence prevention policies, invest in training and reporting infrastructure, and position your organization to stay ahead of evolving requirements.