Workplace violence prevention: what regulators now require
Joint Commission requirements
The Joint Commission made workplace violence prevention a National Patient Safety Goal — specifically, National Performance Goal 2a — and issued enforceable standards that took effect in January 2022 for hospitals and critical access hospitals, July 2024 for behavioral health organizations, and January 2025 for home care settings. The standards require leadership oversight of a WPV prevention program, written policies and procedures, a reporting system that enables staff to report incidents without fear of retaliation, systematic data collection and analysis, post-incident support for affected staff, and training appropriate to role and risk exposure.
The TJC requirements are not merely aspirational. They are surveyed, and organizations found deficient risk citations that affect accreditation status. The practical implication is that a WPV prevention program must be documentable: organizations need records of incidents reported, evidence of data analysis, documentation of post-incident support provided, and training completion records. Organizations that have managed WPV informally — through supervisory awareness rather than structured systems — will need to formalize their approach to meet the standard.
- Joint Commission R3 Report Issue 42 and 45
- TJC National Performance Goal #2a
State legislation wave
State legislatures have moved aggressively on workplace violence prevention in healthcare since 2023. Texas Senate Bill 240, effective September 2024, requires healthcare facilities to establish workplace violence prevention committees and develop comprehensive written prevention plans. Ohio House Bill 452, effective April 2025, requires security plans developed with multidisciplinary input. Washington HB 1162 requires joint safety committees with staff representation. Massachusetts HD.1856 requires annual risk assessments. Wyoming HB0155 requires monthly incident reporting beginning August 2025.
The New York Retail Worker Safety Act, amended to include healthcare workers in certain settings, adds additional training and prevention plan requirements. The pace of state legislation has accelerated: organizations operating in multiple states now face a patchwork of differing requirements that generally share common elements — written prevention plans, incident reporting systems, staff training, and committee oversight — but differ in specifics, timelines, and covered entity definitions.
- Ogletree, 'States Ramp Up WPV Prevention Efforts,' 2025
- CENTEGIX State Law Review
Federal legislation
The Workplace Violence Prevention for Health Care and Social Service Workers Act (S.1176/H.R.2663) would require healthcare and social service employers to develop and implement comprehensive workplace violence prevention plans based on OSHA's 2015 enforcement guidelines. As of early 2025, the legislation has not been enacted, but its sustained bipartisan support and OSHA's active enforcement posture under existing General Duty Clause authority indicate the direction of federal policy.
OSHA's existing authority under the General Duty Clause has been used to cite employers for failure to protect workers from recognized hazards — including workplace violence — even in the absence of a specific WPV standard. Healthcare organizations should treat federal enforcement risk as real regardless of whether the specific legislation passes.
- OSHA General Duty Clause enforcement guidance
- Workplace Violence Prevention for Health Care and Social Service Workers Act (S.1176/H.R.2663)
What this means for your organization
Taken together, TJC requirements, state legislation, and federal enforcement posture create a clear obligation: healthcare organizations need a formal WPV prevention program, a reporting system that captures incidents consistently, data analysis capability to identify patterns, post-incident support protocols, and documented training. Organizations that have managed WPV informally cannot demonstrate compliance with these requirements.
The reporting and analysis infrastructure is where most organizations face the largest gap. Incident reporting through email, paper forms, or informal supervisor notification does not generate the structured data that regulators expect to see analyzed. ImprovementFlow provides the reporting and analysis infrastructure that a compliant WPV prevention program requires — event capture, severity classification, automatic routing, trend analysis, and connection to improvement projects for systemic interventions.
Build a workplace violence reporting program your staff will trust
Most customers begin with safety reporting or huddle boards and expand from there. No enterprise commitment required.