New York Compliance
New York Workplace Violence Prevention — What Employers Must Do Now
The Retail Worker Safety Act took effect June 2, 2025. If you have 10 or more retail employees in New York and have not acted, you are already out of compliance.
— The Retail Worker Safety Act
In effect now. No grace period remaining.
New York's Retail Worker Safety Act (NYS Labor Law, Section 27-e) was signed into law on September 5, 2024 and took effect June 2, 2025. The law applies to any employer with 10 or more retail employees working anywhere in New York State — not 10 at a single location, but 10 across all New York locations combined.
A retail employee is an employee who works at a retail store — defined as a store that sells consumer commodities at retail and is not primarily engaged in the sale of food for on-premise consumption. The law covers clothing stores, electronics retailers, home goods, pharmacies, and similar establishments. It does not cover restaurants.
The New York State Department of Labor published a model policy and model training materials on May 29, 2025 — three days before the law's effective date. Covered employers may use the model policy and training directly, provided they add site-specific information. They may also develop their own policy and training that meets or exceeds the model.
— Compliance Requirements
Three obligations. Two deadlines.
The Retail Worker Safety Act imposes three distinct compliance obligations, on a two-phase timeline.
Phase 1 — In effect June 2, 2025:
A written retail workplace violence prevention policy, adopted and distributed to all retail employees. The policy must identify factors and situations that place retail employees at risk of workplace violence — including working late or early hours, handling cash, working alone or in small groups, and uncontrolled public access. It must describe prevention methods, reference applicable federal and state laws, and include an explicit anti-retaliation statement. The policy must be provided to employees at hire and at each training thereafter.
Interactive workplace violence prevention training, provided to all retail employees upon hire. For employers with 50 or more retail employees, training must be conducted annually. For employers with fewer than 50 retail employees, training is required every two years after initial hire. Training must be interactive — meaning employees must provide input and receive responses — and must include de-escalation tactics, active shooter protocols, emergency procedures, and site-specific information such as emergency exits and meeting locations. A digital training qualifies as interactive if it requires employee input and provides responses to that input.
Written notice of the policy, provided to employees in English and in each employee's primary language where the NY DOL has published a translation. Translations are currently available in English and Spanish, with additional languages anticipated.
Phase 2 — Effective January 1, 2027:
Employers with 500 or more retail employees statewide must provide every retail employee with access to a silent response button — a device that allows an employee to request immediate assistance from a security officer, manager, or supervisor without verbal communication. The button may be a physical device installed in an accessible workplace location, a wearable device, or a mobile application on employer-provided equipment. Mobile and wearable devices may only track employee location when the button is triggered.
June 2, 2025
Policy, training, and notice requirements in effect
10 Employees
Threshold — applies statewide, not per location
January 1, 2027
Silent response button required for 500+ employee retailers
— Coverage Analysis
The threshold is statewide, not per location.
The coverage analysis requires careful attention for multi-location retailers and employers with non-retail employees.
The 10-employee threshold counts all retail employees working anywhere in New York State across all locations. A retailer with five employees at one location and five at another is a covered employer. An employer with 10 employees in New York and 10 in New Jersey is a covered employer for its New York operations.
Non-retail employees of a retail employer — marketing staff, administrative support, corporate employees who do not work at a retail store location — are not covered retail employees under the Act. However, third-party employees who work on-site at a retail store — cleaning contractors, maintenance workers, vendor representatives — are covered if they primarily perform work at the retail location.
The law does not apply to restaurants or businesses primarily engaged in selling food for on-premise consumption. A grocery store, pharmacy, or retail food market is covered. A restaurant is not.
For employers headquartered outside New York with New York retail locations, the Act applies to the New York retail operations regardless of where the employer is incorporated or headquartered. The obligations attach to the New York workplace, not the employer's home state.
— Beyond Retail
Healthcare employers are not exempt from New York's attention.
The Retail Worker Safety Act is specifically a retail law — it does not cover hospitals or healthcare employers. But New York's legislative attention to workplace violence is not limited to retail workers.
New York Assembly Bill A203, introduced in 2025, would require all general hospitals to establish violence prevention programs meeting CMS standards. Hospitals in counties with populations of one million or more would be required to maintain trained security personnel in emergency departments at all times. The bill is advancing through the legislature and reflects a broader legislative focus on healthcare worker safety that parallels activity in Ohio, Texas, Virginia, Washington, and other states.
New York healthcare employers should be monitoring this legislation. The regulatory framework for hospital workplace violence prevention is well-established at the federal level through CMS conditions of participation and Joint Commission standards — A203 would codify those expectations in New York state law with enforcement mechanisms.
Additionally, New York has longstanding workplace violence prevention requirements for public sector employers and state agency workers. Private sector healthcare employers have operated under federal OSHA's General Duty Clause and voluntary OSHA guidelines. A203 would formalize that obligation.
— The Gap Between Model and Compliant
The NYSDOL model policy is a starting point, not a finished program.
The New York State Department of Labor's model retail workplace violence prevention policy satisfies the law's minimum requirements — but it is deliberately generic. It is a template that covered employers are required to customize with site-specific information before distributing to employees.
The model policy does not include: the specific risk factors present at the employer's particular locations, the specific reporting procedures and contact information for that employer, the employer's specific emergency response procedures, the location of emergency exits and meeting areas at each worksite, or the specific prevention measures the employer has implemented or plans to implement.
A covered employer that downloads the model policy, adds its business name, and distributes it without further customization is technically compliant with the written policy requirement — but has produced a document that will not withstand scrutiny in an enforcement action following an incident. The law requires a policy specific to the employer's workplace and hazards. A generic document is evidence that the employer did not take that requirement seriously.
The training requirement has the same gap. The model training is fourteen pages long and explicitly states that it does not include store-specific information — employers must add site-specific emergency exits, meeting locations, device instructions, and procedures. An employer that delivers the model training without these additions has not delivered compliant training.
The standard Kestralis Group applies is the one that holds up after an incident, not the one that satisfies a checkbox. Those are not always the same standard.
— New York vs. California
Different scope. Same underlying obligation.
| California SB-553 | New York RWSA | |
|---|---|---|
| Industries covered | All industries | Retail only |
| Employer threshold | Most employers, 10+ at public locations | 10+ retail employees statewide |
| Written plan required | Yes — site-specific WVPP | Yes — site-specific retail WVP policy |
| Training mandate | Annual, interactive | Annual (50+ employees) or biennial |
| Incident documentation | Yes — Violent Incident Log, 5 years | Encouraged, not mandated |
| Anti-retaliation | Yes — explicit | Yes — explicit |
| Language requirements | Training in employee's language | Policy and training in employee's primary language |
| Silent response button | Not required | Required for 500+ employees, January 2027 |
| Model policy available | Cal/OSHA model plan | NYSDOL model policy and training |
| Effective date | July 1, 2024 | June 2, 2025 |
| Penalty | Up to $158,727 willful | Not yet specified — enforcement developing |
— Multi-State Posture
California and New York together cover the two largest retail markets in the country.
Retailers operating in both California and New York face compliance obligations under two distinct statutory frameworks. They are structurally compatible — both require written, site-specific prevention policies, both require interactive training, both prohibit retaliation — but they are not identical, and a program built for one does not automatically satisfy the other.
California's SB-553 covers all industries, not just retail, and its requirements are more prescriptive — including a Violent Incident Log with specific documentation requirements, a four-type violence classification system, and a formal annual review requirement. New York's RWSA is retail-specific and somewhat less prescriptive, but adds the silent response button requirement that California does not have.
Kestralis Group builds multi-state programs as coordinated systems — a core framework that satisfies the most demanding standard in each state, with state-specific overlays for requirements that differ. For a retailer in both states, that means one program architecture, two state configurations, and a single annual review cycle that covers both compliance obligations simultaneously.
— Next step
New York retail employers: the deadline has passed.
If you have 10 or more retail employees in New York and have not yet adopted a compliant workplace violence prevention policy and training program, you are out of compliance today. A 30-minute consultation is the fastest way to understand the gap and what it takes to close it.