Healthcare Compliance
Healthcare Workplace Violence Prevention — The National Mandate Landscape
Twenty-two states require healthcare employers to maintain workplace violence prevention programs. A multi-state health system almost certainly operates under multiple active mandates simultaneously. This is the complete picture.
— Why Healthcare
Healthcare workers face the highest workplace violence rates of any industry.
Bureau of Labor Statistics data consistently shows that healthcare workers experience workplace violence at rates nearly double those of any other industry. Emergency departments, psychiatric units, and long-term care settings are the highest-risk environments. The combination of vulnerable patient populations, access to controlled substances, emotionally charged situations, and often inadequate physical security creates conditions that make violence not an occasional event but a recurring operational reality.
Legislators have responded. Twenty-two states have enacted laws specifically requiring healthcare employers to maintain workplace violence prevention programs. California leads with the most comprehensive general industry mandate in the country under SB-553. Ohio, Texas, Virginia, Connecticut, Illinois, Minnesota, New Jersey, New York, Washington, Vermont, Maryland, Maine, Louisiana, Oregon, and others have enacted healthcare-specific mandates that apply to hospitals, nursing facilities, and in many cases a broad range of healthcare settings.
The federal response has been limited. OSHA's General Duty Clause applies in all states — an employer that has identified a workplace violence risk and taken no action is exposed regardless of state law. A federal healthcare-specific standard (HR 2531) has been introduced in multiple Congresses without passage. In its absence, state law is the compliance landscape healthcare employers must navigate.
22 States
Active healthcare workplace violence prevention mandates as of May 2026
Source: Statute reference table below
14.2 per 10,000
Healthcare incident rate — nearly double the next highest industry (BLS 2021–2022 SOII)
No Federal Standard
OSHA General Duty Clause applies — state law governs specific requirements
— Full Compliance Guides
Five states with the most prescriptive mandates.
The following states have the most detailed and demanding healthcare workplace violence prevention requirements. Each has a full Kestralis Group compliance guide covering the specific law, what it requires, deadlines, and what a compliant program must include.
— Active Mandates
Six more states with existing healthcare requirements.
The following states have active workplace violence prevention requirements for healthcare employers. These laws are generally older — most were enacted between 2011 and 2019 — and are less prescriptive than the more recent mandates. All are in effect. Healthcare employers in these states should be maintaining written prevention plans, conducting risk assessments, and training employees regardless of when the law was originally enacted.
| State | Law | Key Requirements | Covered Employers |
|---|---|---|---|
| Connecticut | Public Act 11-175 (2011), updated PA 24-19 (2024) | Written WVP plan developed annually with safety committee. Quarterly safety committee meetings. Annual risk assessment. Incident log maintained and reported to CT Dept of Public Health annually by February 1. Report assaults to law enforcement within 24 hours. PA 24-19 (2024) requires alignment with Joint Commission WVP standards for CMAP-reimbursed facilities. | Healthcare institutions with 50+ employees (hospitals, nursing homes, behavioral health, substance abuse treatment, community health centers) |
| Maryland | Health-General Article §19-319 et seq. | Hospitals and related institutions must adopt and implement workplace violence prevention programs. Written plan, risk assessment, and training required. Incident reporting to the Maryland Department of Health. | Hospitals, related institutions |
| Minnesota | Minn. Stat. §182.6725 | Mandatory workplace violence prevention program for healthcare employers. Written prevention plan, annual risk assessment, employee training, and incident reporting system. Program must be developed with employee input. | Healthcare employers as defined by statute |
| New Jersey | N.J. Stat. Ann. §34:5A-1 et seq. | Healthcare facilities must develop, implement, and maintain a workplace violence prevention program. Written plan, hazard assessment, training, and incident recordkeeping required. Annual program review. | Healthcare facilities |
| Maine | 26 M.R.S.A. §570-A et seq. | Healthcare employers must establish and maintain workplace violence prevention programs. Risk assessment, written prevention plan, training, and incident reporting. Covers hospitals and healthcare settings with elevated violence risk. | Healthcare employers and facilities |
| Louisiana | La. R.S. 40:2199.4 et seq. | Healthcare facilities must implement workplace violence prevention programs meeting applicable requirements. Written plan, training, and incident documentation required. | Healthcare facilities |
The laws summarized above are accurate as of May 2026. Healthcare workplace violence legislation is actively developing — many states have amended their laws in 2024 and 2025, and the trend toward expanded requirements is continuing. Kestralis Group monitors these developments and advises clients on program requirements across all active mandates. Contact us if you believe a law or amendment is missing.
— Expanding Coverage
The list is growing. 22 states have mandates. More are coming.
Beyond the states covered in detail above, healthcare workplace violence prevention requirements exist across a growing list of states. Reviewed as of May 8, 2026, the following 22 states have active mandates requiring healthcare employers to adopt workplace violence prevention plans: Arizona, California, Colorado, Connecticut, Illinois, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Minnesota, Nevada, New Jersey, New York, North Carolina, Ohio, Oregon, Rhode Island, Texas, Vermont, Virginia, and Washington. Oregon and Washington both took effect January 1, 2026 (Oregon HB 2552 / SB 537; Washington HB 1162, signed May 19, 2025). New York’s A203, signed December 12, 2025, takes effect approximately September 2026. Massachusetts’s healthcare workplace violence bill remains pending in the Senate.
The requirements across these states share a common architecture — written prevention plan, risk assessment, training, incident reporting, anti-retaliation — but differ significantly in specifics. Illinois requires wearable panic buttons for hospital staff. Ohio requires at least one de-escalation-trained employee on-site at all times in emergency and psychiatric departments. Texas requires patient care reassignment protections. Connecticut requires law enforcement reporting within 24 hours of an assault. Virginia’s HB 1489 (2026) is expanding hospital incident reporting requirements.
A multi-state health system operating across several of these states is almost certainly operating under multiple active and inconsistent mandates simultaneously. Building a program to the most demanding standard in each state, using a configurable framework, is the only operationally sustainable approach.
- Arizona
- California
- Colorado
- Connecticut
- Illinois
- Kentucky
- Louisiana
- Maine
- Maryland
- Massachusetts
- Minnesota
- Nevada
- New Jersey
- New York
- North Carolina
- Ohio
- Oregon
- Rhode Island
- Texas
- Vermont
- Virginia
- Washington
Statute reference for each state
| State | Primary statute / citation |
|---|---|
| Arizona | A.R.S. § 36-420.03 (eff. 2023) |
| California | Cal. Lab. Code § 6401.9 / SB-553 (2024) |
| Colorado | HB24-1066; SB25-166 (eff. July 2026) |
| Connecticut | P.A. 11-175 / § 19a-490q, amended by P.A. 24-19 |
| Illinois | 405 ILCS 90/ (Healthcare WV Prevention Act, 2018); SB 1435 (panic-button rule, eff. July 2025) |
| Kentucky | KRS 216.703–.707 (HB 176, 2023) |
| Louisiana | La. R.S. § 40:2199.4 et seq. |
| Maine | 26 M.R.S.A. § 570-A et seq. |
| Maryland | Md. Code, Health-General § 19-319 |
| Massachusetts | 101 CMR 19.00 (2015); H.4767 / S.1718 expansion pending |
| Minnesota | Minn. Stat. § 144.566 |
| Nevada | NRS 618.7311–.7316 (A.B. 348, 2019; eff. July 2020) |
| New Jersey | N.J.S.A. § 34:5A-1 et seq. |
| New York | Retail Worker Safety Act (2024); A203 (signed Dec 2025; eff. ~Sept 2026) |
| North Carolina | N.C.G.S. § 131E-88 / Hospital Violence Protection Act (HB 125, 2023; LEO requirement eff. Oct 2024) |
| Ohio | ORC § 3727.18 (HB 452, eff. April–July 2025) |
| Oregon | HB 2552 / SB 537 (2025; eff. Jan 2026) |
| Rhode Island | R.I. Gen. Laws ch. 23-17.28 / Hospital WV Protection Act (2021; eff. Jan 2022) |
| Texas | Tex. Health & Safety Code ch. 331 (SB 240, 2023; SB 463, 2025) |
| Vermont | H.259 / Act 9 (signed April 2025; eff. July 2025) |
| Virginia | Va. Code § 32.1-127 (HB 2269 / SB 1162, 2025; HB 1489, 2026) |
| Washington | RCW 49.19; HB 1162 / Ch. 303 of 2025 Laws (eff. Jan 2026) |
Citations sourced from the official state code or the highest-authority secondary source available (state agency, hospital association, or published legal analysis). Reviewed May 8, 2026. Confirm against the current statute and any agency rulemaking before relying on this reference for compliance work.
— Multi-State Operations
One program architecture. State-specific configurations.
The core requirements across all active healthcare mandates are structurally consistent: a written, site-specific prevention plan; a functioning incident reporting and recordkeeping system; annual training with documented completion; anti-retaliation protections; and a named responsible party or committee.
Every state adds specific requirements on top of that foundation. Texas requires patient care reassignment protections and annual governing body reporting. Ohio requires an interdisciplinary planning team including a patient, continuous on-site presence of de-escalation-trained staff in ED and psychiatric units, and state attestation. Connecticut requires a formal safety committee with 50% non-management membership and law enforcement reporting within 24 hours. Illinois requires wearable panic buttons. Virginia's 2026 legislation (HB 1489, signed April 2026) expands hospital incident reporting requirements — more granular data fields, broader executive review cohort, and aggregated state-level submissions.
The efficient approach is one program built to satisfy the most demanding standard in each state where a healthcare employer operates — with state-specific configurations layered on a common foundation. The California SB-553 framework is the most demanding general standard currently in force. Ohio's HB 452 adds the strongest healthcare- specific requirements. Building to those two standards simultaneously covers the foundational requirements for every other active mandate.
Kestralis Group builds multi-state healthcare compliance programs for health systems, hospital networks, and healthcare employers with operations across multiple states. We assess current posture, identify gaps across all applicable mandates, and build coordinated programs that maintain compliance as requirements continue to evolve.
— The Outlook
The pace of legislation is accelerating, not slowing.
Healthcare workplace violence legislation is the most active area of state employment law in 2026. Several significant developments are underway.
Virginia enacted HB 2269 / SB 1162 in 2025 and is already expanding those requirements through 2026 legislation. HB 1489 was signed by Governor Spanberger on April 6, 2026 (effective July 1, 2026), expanding incident-reporting data fields, the internal executive reporting cohort, and adding annual aggregated facility-level submissions to VDH. A second wave of bills amending Va. Code § 32.1-127 — HB 1522, SB 535, HB 1318, SB 738, and SB 291 — passed both houses of the General Assembly by early March 2026 (per Epstein Becker Green’s Health Law Advisor). Virginia’s hospital reporting framework is being strengthened in real time.
New York's Assembly Bill A203 would extend mandatory violence prevention programs to all general hospitals and nursing homes, with dedicated emergency department security required in counties with populations over one million. The bill is advancing.
Washington, Massachusetts, Missouri, Utah, and Kentucky all have active 2026 legislation further strengthening existing requirements or expanding coverage.
The federal Workplace Violence Prevention for Health Care and Social Service Workers Act (HR 2531) has been reintroduced in the 119th Congress. A future administration with a more active regulatory posture could move it quickly — when it passes, it establishes a federal floor for all healthcare employers that would supersede less stringent state requirements while leaving more demanding state laws in place.
The operational implication: a program built to comply with today's requirements will need to be updated. Organizations that treat workplace violence prevention as a living program — maintained annually, reviewed after incidents, updated as regulations change — are in a fundamentally better position than those that treat it as a one-time compliance exercise.
— Next step
Multi-state healthcare system? Start with a compliance assessment.
A 30-minute consultation with a Kestralis Group principal will identify which state mandates apply to your specific facilities, where your current program has gaps, and what a coordinated multi-state program looks like for your organization.