Workplace Violence Prevention Compliance
Workplace violence prevention compliance governs how employers identify, assess, and mitigate risks of physical assault, threats, harassment, and other violent acts in the work environment. Federal standards administered by the Occupational Safety and Health Administration (OSHA) establish the baseline obligation under the General Duty Clause, while sector-specific guidelines and state-level statutes layer additional requirements on top of that foundation. This page covers the regulatory definition of workplace violence, the operational framework for building a compliant prevention program, common risk scenarios across industry types, and the decision criteria that determine which requirements apply to a given employer.
Definition and scope
Workplace violence, as framed by OSHA, encompasses four distinct categories defined by the relationship between the perpetrator and the worksite:
- Type I (Criminal Intent): The perpetrator has no legitimate relationship with the business. Robberies at late-night retail establishments are the prototypical example.
- Type II (Customer/Client): Violence originates from a person the organization serves — patients in healthcare settings, passengers in transit, or members of the public.
- Type III (Worker-on-Worker): An employee, former employee, or contractor directs violence or threats toward a current employee.
- Type IV (Personal Relationship): The perpetrator has a personal relationship with an employee — domestic violence that enters the workplace.
OSHA estimates that approximately 2 million workers report being victims of workplace violence each year (OSHA Workplace Violence Overview). The agency does not issue a specific standard for most private-sector industries but enforces prevention obligations through Section 5(a)(1) of the Occupational Safety and Health Act of 1970 — the General Duty Clause — which requires employers to furnish a workplace free from recognized serious hazards.
Healthcare and social assistance sectors face additional, more prescriptive requirements. OSHA's guidelines for preventing workplace violence for healthcare and social service workers (OSHA 3148) set expectations for written program development, hazard assessment, and incident documentation. As of 2024, OSHA has published a proposed rulemaking specifically targeting healthcare workplaces (89 Fed. Reg. 39,940), signaling a shift toward sector-specific mandatory standards.
How it works
A compliant workplace violence prevention program follows a structured, iterative process aligned with OSHA's prevention framework and parallel guidance from the National Institute for Occupational Safety and Health (NIOSH).
- Written Program Development. Employers document a formal Workplace Violence Prevention Plan (WVPP) that defines scope, assigns responsibility, and establishes reporting channels. California's AB 2123 and subsequent Labor Code Section 6401.9, effective July 1, 2024, mandate a written WVPP for nearly all California employers — the most expansive state-level requirement in the country.
- Hazard Identification and Risk Assessment. The program must inventory environmental factors (isolated work areas, poor lighting, cash-handling exposure) and behavioral indicators. OSHA's Job Hazard Analysis methodology applies directly to this phase.
- Engineering and Administrative Controls. Physical controls (security cameras, panic buttons, physical barriers) address environmental risk. Administrative controls include staffing policies, visitor management systems, and shift-scheduling reviews.
- Training. Employees and supervisors receive role-specific training on recognizing warning signs, reporting procedures, and de-escalation techniques. Compliance training requirements at the federal level reference this training as part of the broader hazard communication and safety training obligations.
- Incident Reporting and Recordkeeping. Violent incidents that result in injury must be recorded on OSHA 300 Logs under 29 CFR 1904. Threatened assaults may require internal documentation even when no physical injury results. Employers can review workplace injury reporting compliance standards for the intersection of these requirements.
- Program Evaluation and Revision. Programs undergo periodic review — at minimum annually and after each significant incident — with findings driving documented revisions.
Common scenarios
Healthcare settings (Type II risk): Emergency department staff face the highest documented exposure. NIOSH research identifies that healthcare workers account for a disproportionate share of nonfatal workplace violence injuries — approximately 73% of all nonfatal workplace violence injuries in 2018, per Bureau of Labor Statistics data (BLS Occupational Injuries and Illnesses 2018).
Late-night retail and service (Type I risk): Convenience stores, gas stations, and taxi/rideshare operations face robbery-related violence. OSHA's Recommendations for Workplace Violence Prevention Programs in Late-Night Retail Establishments (OSHA 3153) outline specific engineering controls.
Education and social services (Type II and III risk): School employees and social workers encounter threats from students, clients, and members of the public. These settings require tailored threat assessment protocols distinct from industrial environments.
Domestic violence spillover (Type IV risk): Employers in all sectors may encounter situations where an employee's domestic situation creates a threat inside the workplace. A compliant WVPP addresses this explicitly, including protocols for communicating known threat information to security and HR.
Decision boundaries
Determining which requirements apply depends on three primary variables:
| Variable | Lower obligation threshold | Higher obligation threshold |
|---|---|---|
| Industry sector | General industry (OSHA General Duty Clause only) | Healthcare, social services, correctional facilities |
| State jurisdiction | Federal OSHA state | State-plan state with specific WVPP mandate (e.g., California, Washington) |
| Employer size | Fewer than 10 employees (partial OSHA recordkeeping exemption) | 10 or more employees (full 29 CFR 1904 recordkeeping) |
State-plan states — 22 states and 2 territories operate their own OSHA-approved plans as of 2024 (OSHA State Plans) — may impose requirements that exceed federal minimums. Washington State's WAC 296-800-110 and California's Labor Code Section 6401.9 represent the most prescriptive state-level frameworks.
Employers with operations in multiple jurisdictions should consult the intersection of federal and state obligations independently for each location. The federal workplace regulations framework and workplace safety compliance standards together define the baseline from which sector and state adjustments are measured.
References
- OSHA Workplace Violence Overview
- OSHA Publication 3148 – Workplace Violence Prevention for Healthcare and Social Service Workers
- OSHA Publication 3153 – Recommendations for Late-Night Retail Establishments
- NIOSH – Occupational Violence
- OSHA State Plans Directory
- Bureau of Labor Statistics – Occupational Injuries and Illnesses
- Occupational Safety and Health Act of 1970, Section 5(a)(1)
- 29 CFR Part 1904 – Recording and Reporting Occupational Injuries and Illnesses
- California Labor Code Section 6401.9 (AB 2123)