This bill directs the Secretary of Labor to promulgate an occupational safety and health standard that requires employers in the health care and social service industries to develop and implement comprehensive workplace violence prevention plans and related measures. The measure covers a wide range of settings—hospitals, long‑term care, residential and non‑residential treatment, community care, home‑based services, emergency responders, and similar activities—and creates new reporting and recordkeeping obligations.
The bill matters because it converts longstanding OSHA guidance into a binding federal standard, creates concrete compliance steps (plans, training, incident investigations, logs, and anti‑retaliation protections), and uses amendments to the Social Security Act to make Medicare participation contingent on complying for certain hospitals and skilled nursing facilities. That combination standardizes employer obligations across many care settings while creating new operational and documentation duties for providers and contractors.
At a Glance
What It Does
The bill requires covered employers to adopt a written workplace violence prevention plan tailored to each facility or service, conduct risk assessments, investigate violent incidents, provide annual and tailored training, maintain a violent‑incident log and related records for five years, and implement engineering and work‑practice controls. It directs Labor to issue an interim final standard and later a proposed and final OSHA standard, and it grants enforcement parity with other OSHA standards.
Who It Affects
Hospitals (including specialty and freestanding emergency centers), nursing homes/skilled‑nursing facilities, hospice and residential treatment centers, community mental‑health and group homes, home health and home‑based hospice/social work, clinics inside correctional facilities, emergency responders, contractors, temporary staffing and employee‑leasing entities who place workers in covered settings. The text excludes private residences employing a caregiver, physician/dentist offices not located in covered facilities, and child day care services.
Why It Matters
By elevating OSHA’s 2015 guidelines into a mandatory standard the bill creates uniform minimums across federal jurisdictions, forces routine data collection and submission to Labor (and an annual summary to Congress), and gives CMS a lever—via the Social Security Act—to require compliance for certain Medicare providers. For compliance officers, the bill replaces discretionary guidance with enforceable deadlines, documentation formats, and anti‑retaliation obligations.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill sets a three‑stage regulatory process. First, the Secretary of Labor must issue an interim final workplace violence prevention standard within one year of enactment; the interim standard takes effect no later than 30 days after issuance (with a reasonable phase‑in for engineering controls), and the Secretary must accept public comment for 30 days before issuance.
Second, Labor must publish a proposed standard within two years and a final standard within 42 months, with the final rule providing no less protection than State‑approved standards where feasible. The interim final can omit some normal procedural requirements listed in the Act and certain executive orders, but it is enforceable like any OSHA standard once issued.
For employers, the central compliance obligation is a written workplace violence prevention plan for each covered facility or covered service. Employers must develop and maintain the plan with ‘‘meaningful participation’’ from direct‑care employees and representatives, tailor it by unit and patient‑specific risks, identify the person responsible for implementation, and use the hierarchy of controls to prioritize engineering and work‑practice changes.
The bill lists examples of engineering controls (access controls, weapon detectors, CCTV, shatter‑resistant barriers) and work‑practice controls (staffing patterns, safety personnel, de‑escalation training) but leaves the Secretary discretion to refine required elements in the standard.The bill creates incident and record obligations: employers must investigate violent incidents promptly, document findings and corrective actions, and maintain a violent incident log based on a Secretary‑provided template. Logs must be updated within seven days of employer knowledge and kept for five years.
Employers must compile an annual summary from those logs and post it publicly beginning February 1 for three months and submit a form to Labor by February 15; the Secretary must provide an electronic submission platform within a year. Training obligations include initial in‑person training by a qualified trainer, annual refreshers (which may be delivered by live video after the first year if in‑person is impracticable), supervisor‑specific hazard recognition, and training for changed job duties and employees working with victims of trafficking or domestic violence.
Records and plan documents must be accessible to employees and representatives consistent with privacy laws.Finally, the bill adds an anti‑retaliation requirement and amends the Social Security Act so hospitals and skilled‑nursing facilities that otherwise escape OSHA coverage will have to comply with the workplace violence standard as a Medicare condition; that obligation becomes effective one year after issuance of the interim final standard. Throughout, the bill balances prescriptive elements (required content, timelines, documentation retention) with Secretary discretion on scope, templates, and enforcement mechanisms.
The Five Things You Need to Know
A covered employer must develop, implement, and maintain a written workplace violence prevention plan within six months after promulgation of the interim final standard.
Employers must keep a violent incident log using a Secretary‑provided template, update each log entry within seven days of learning of the incident, and retain logs for at least five years.
Each covered employer must submit an annual summary of violent incidents to the Secretary (using a form from Labor) and post that summary beginning February 1 for three months in usual employee‑notice locations.
Training must be provided in‑person by someone with workplace‑violence prevention knowledge; after the first year, annual refreshers may be delivered by live video only if in‑person training is impracticable, and all training must be language‑ and literacy‑appropriate.
The bill amends the Social Security Act so hospitals and skilled nursing facilities not otherwise covered by OSHA will have to comply with the new standard; that Medicare‑linked obligation begins one year after issuance of the interim final standard.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Interim final and expedited issuance requirements
This provision requires Labor to issue an interim final workplace violence prevention standard within one year of enactment, bypassing several standard procedural requirements (certain rulemaking mandates, parts of the Paperwork Reduction Act, and specified executive order reviews) but still requiring a 30‑day public comment notice. The interim final standard becomes enforceable no later than 30 days after issuance (with reasonable phase‑in for engineering controls) and is enforced the same as other OSHA standards. The statute also creates a fallback: if Labor fails to issue the interim standard within a year, the statutory provisions take effect and are enforced as though promulgated under section 6(b) until Labor issues an interim final that meets the statutory requirements.
Timing for proposed and final OSHA standard
Labor must publish a proposed standard within two years of enactment and a final standard no later than 42 months after enactment. The final rule must provide no less protection than any State plan standard approved under section 18, provided the Secretary finds it feasible on the best available evidence. This two‑step schedule accelerates an eventual permanent rule while relying on the interim standard to provide immediate protection.
Scope: covered facilities, services, employers, and exclusions
The bill defines a broad universe of covered facilities and services—hospitals, specialty inpatient and outpatient settings, residential treatment, nursing homes, hospices, psychiatric facilities, community care settings, freestanding emergency centers, correctional facility clinics, home‑based care and emergency transport, and similar activities—and allows the Secretary to add other facilities. It also defines covered employers (including contractors, temporary service firms, and employee‑leasing entities) and expressly excludes private household employers, physician/dentist offices not located in covered facilities, and child day‑care services. That framing pulls many previously uncovered or variably covered providers under a single federal standard.
Workplace violence prevention plan, risk assessment, and training
Employers must create a written Plan tailored to each facility or service, developed with meaningful participation from direct‑care staff and representatives, and commensurate with the size and complexity of operations. Each Plan must identify an implementation lead, contain unit‑level and patient‑specific risk assessments informed by past incidents, use the hierarchy of controls to prioritize engineering and work‑practice changes, and include procedures for incident reporting, post‑incident investigation, emergency response, communication, and coordination among multiple employers on site. Training rules require in‑person, trainer‑led instruction at hire and annually, supervisor‑targeted hazard recognition, refresher training when duties change, and content appropriate to employees’ language and literacy; annual training may be virtual after the first year only if in‑person is impracticable.
Incident documentation, logs, reporting, annual evaluation
Employers must investigate violent incidents promptly, document findings and corrective measures, and maintain a violent incident log on a Secretary template that captures date/time/location, injured employees’ job titles, perpetrator classification, incident type, abatement measures, and environmental risk factors. Employers must update entries within seven days and keep logs five years. An annual summary drawn from logs must be submitted to Labor (on a Secretary form) and posted for employees beginning February 1 for three months; Labor must provide an electronic submission platform within a year. Employers must conduct an annual written evaluation of Plan effectiveness with employee participation and update the Plan as needed.
Plan updates, anti‑retaliation, and construction clauses
Plans must be revised based on annual evaluations. The bill requires employers to adopt anti‑retaliation policies prohibiting discrimination or retaliation against employees who report incidents or seek intervention; enforcement is to follow the same procedures used for OSHA standards. Section 104 clarifies that nothing limits other authority of the Secretary or worker rights under other federal, state, or collective bargaining law, and it preserves reporting to law enforcement and protections related to domestic violence, stalking, dating violence, and sexual assault.
Medicare tie‑in: hospitals and skilled nursing facilities
The legislation amends section 1866 of the Social Security Act to require hospitals and skilled nursing facilities that otherwise are not subject to OSHA (or an approved State plan) to comply with the workplace violence prevention standard as a condition of Medicare participation. The Medicare‑linked compliance obligation begins one year after Labor issues the interim final standard, giving CMS a statutory mechanism to enforce the standard for certain providers.
This bill is one of many.
Codify tracks hundreds of bills on Employment across all five countries.
Explore Employment in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Direct‑care clinicians and social‑service workers — they gain enforceable, facility‑specific plans, required training, quicker incident investigation, access to trauma counseling, and anti‑retaliation protections intended to improve safety and reporting.
- Patient safety and facility risk management — standardized risk assessments, engineering controls, and post‑incident corrective measures can reduce repeat incidents and clarify operational responses across units.
- Unions and employee representatives — the statute requires meaningful participation in plan development, annual evaluations, and access to records, strengthening collective oversight and bargaining leverage on safety issues.
- Federal occupational safety agencies and researchers — mandatory logs, standardized reporting forms, and annual summaries create consistent national data that can inform policy, enforcement priorities, and prevention strategies.
Who Bears the Cost
- Hospitals and long‑term care facilities — large up‑front costs for engineering controls (access systems, barriers, CCTV) and potential ongoing staffing or security expenses to meet plan requirements and corrective measures.
- Small and community‑based providers, home health agencies, and freestanding clinics — compliance burdens for writing tailored plans, training all staff in‑person, maintaining records, and completing electronic reporting may strain limited administrative capacity and budgets.
- Temporary staffing agencies, contractors, and employee‑leasing firms — the bill treats them as covered employers when they place workers in covered settings, creating obligations to coordinate plans, training, and recordkeeping across client sites.
- State and federal agencies (OSHA/Labor and CMS) — implementation and enforcement will require resources for templates, training guidance, inspection capacity, IT platforms for submissions, and oversight tied to Medicare conditions of participation.
Key Issues
The Core Tension
The core tension is between speed and uniformity of worker protections versus practicality and cost: the measure accelerates a uniform, enforceable federal standard to protect high‑risk health and social service workers now, but doing so imposes immediate operational, capital, and administrative burdens—especially on smaller and community providers—and raises privacy and feasibility questions that require fine‑grained agency guidance and enforcement capacity to resolve.
The bill replaces guidance with a binding standard and a detailed set of documentation, training, and reporting obligations. That design provides clarity, but it also creates friction points.
First, the requirement to log and report incident details collides with patient privacy laws (HIPAA and 42 CFR Part 2). The bill attempts to address that by requiring redaction of identifiable patient information when records are copied or transmitted, but operationalizing consistent redaction while preserving incident‑level utility will be tricky and may require further guidance or agency rulemaking.
Second, the law lists many engineering controls as examples but leaves feasibility determinations partly to the Secretary and to employers’ assessments. Engineering solutions (barriers, weapon detectors, CCTV) are capital‑intensive and may be impractical for small providers or community settings; the statutory timelines (six months to adopt plans after the interim standard, swift phase‑ins) could force expensive short‑term fixes or result in legal challenges from providers arguing infeasibility.
Third, the interim final mechanism accelerates protections but trims procedural safeguards that typically reduce legal vulnerability; expect constitutional and administrative‑law challenges arguing the bypassed requirements were essential, which could delay enforcement or force revisions.
Finally, the bill spreads responsibility across multiple employers at shared sites but leaves coordination and allocation of control somewhat open: plans must address coordination and assign responsibility where employers’ duties overlap, yet disputes about who must implement a given control (security personnel, engineering changes, staffing levels) could generate liability fights. OSHA and CMS resource constraints matter—enforcement depends on sufficient inspection capacity and clear guidance on how Medicare conditions will be assessed in practice.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.