Workplace Violence Prevention: OSHA Requirements and HR's Role [2025]

Workplace violence is one of the most serious occupational safety risks in the United States. According to the Bureau of Labor Statistics, intentional injury by another person is a leading cause of fatal occupational injuries. For HR professionals, violence prevention sits at the intersection of safety, legal compliance, employee wellbeing, and organizational culture.

OSHA has increasingly treated workplace violence as a General Duty Clause requirement -- meaning employers have a legal obligation to maintain a workplace free from recognized hazards that cause or are likely to cause serious harm. In 2024–2025, OSHA has expanded enforcement in healthcare, retail, and social services, and issued specific guidance on prevention program requirements.

This guide covers the regulatory framework, risk assessment methodology, prevention program design, and the role of anonymous reporting in early warning.

---

OSHA's Framework for Workplace Violence Prevention

OSHA does not have a specific workplace violence standard for general industry. Instead, enforcement proceeds under:

The General Duty Clause (Section 5(a)(1)): Employers must provide a workplace free from recognized hazards likely to cause death or serious physical harm. OSHA has repeatedly cited employers under this clause for failure to address workplace violence risks that were known or should have been known.

Industry-Specific Standards: OSHA has issued specific violence prevention guidance and enforcement priorities for:

• Healthcare and social assistance (enforcement directive CPL 02-01-058)
• Late-night retail
• Taxi and rideshare services
• Correctional facilities

State-Level Requirements: California's SB 553 (effective 2024) mandates workplace violence prevention plans for nearly all employers. New York, Washington, and other states have similar requirements.

---

What Constitutes Workplace Violence?

OSHA defines workplace violence as any act or threat of physical violence, harassment, intimidation, or other threatening disruptive behavior that occurs at the work site. This includes:

• Type 1: Criminal intent -- robbery, trespassing, terrorism
• Type 2: Customer/client -- assault by patients, customers, students
• Type 3: Worker-on-worker -- bullying, assault, threats by colleagues
• Type 4: Personal relationship -- domestic violence that enters the workplace

HR's prevention responsibilities span all four types, though the interventions differ significantly.

---

Risk Assessment: The Foundation of Prevention

OSHA-compliant violence prevention starts with risk assessment. The assessment must be documented, reviewed regularly, and specific to the organization's actual operations.

Environmental Factors

• Is the workplace accessible to the public?
• Are employees working alone, at night, or in isolated areas?
• Is there a cash-handling or high-value inventory exposure?
• Are there physical security gaps -- inadequate lighting, unlocked entrances, no panic buttons?

Operational Factors

• Does the organization serve populations with elevated violence risk (healthcare, corrections, social services)?
• Are there high-stress situations -- terminations, disciplinary actions, performance reviews?
• Is there a history of threats, incidents, or near-misses?

Behavioral Indicators

• Have employees reported escalating behavior -- raised voices, threats, property damage?
• Are there reports of bullying, intimidation, or hostile behavior?
• Have domestic violence concerns been raised about any employee's personal situation?

Reporting Infrastructure

• Do employees have a confidential or anonymous channel to report concerns?
• Have employees used the channel -- and if not, why not?

---

Building a Violence Prevention Program

Management Commitment and Employee Participation

Effective programs require visible leadership commitment, adequate resources, and meaningful employee involvement. HR should facilitate cross-functional teams that include operations, security, facilities, legal, and employee representatives.

Worksite Analysis and Hazard Identification

Conduct annual risk assessments and incident investigations. Document findings, assign corrective actions, and track completion. After any violent incident, conduct a root-cause analysis.

Hazard Prevention and Control

Physical controls: lighting, locks, panic buttons, access control, video monitoring. Administrative controls: staffing protocols for high-risk situations, check-in procedures for lone workers, escort policies. Behavioral controls: de-escalation training, threat assessment teams, EAP referrals.

Safety and Health Training

All employees should understand how to recognize escalating behavior, de-escalation basics, and emergency response. Managers need additional training on handling terminations, disciplinary conversations, and threat assessment. Security personnel need scenario-based training.

Recordkeeping and Program Evaluation

Document all incidents, near-misses, and reports. Track metrics: incident rate, severity, response time, training completion. Review the program annually and update based on incidents, operational changes, and regulatory updates.

---

The Role of Anonymous Reporting

Workplace violence prevention depends critically on early warning. In the majority of violent incidents reviewed by OSHA, there were behavioral warning signs that were known to coworkers but never reported to management.

The reasons employees don't report are consistent: fear of being wrong, fear of retaliation, uncertainty about whether the behavior is reportable, and belief that nothing will be done. These are not cultural problems -- they are infrastructure problems.

Anonymous reporting addresses each barrier directly:

• Fear of being wrong: Anonymity removes personal exposure if the concern turns out to be unsubstantiated
• Fear of retaliation: Zero-knowledge anonymous channels mathematically cannot identify the reporter
• Uncertainty: Structured reporting forms with guidance on what constitutes reportable behavior
• Belief nothing will be done: Acknowledgment and feedback loops that demonstrate response

Organizations with anonymous reporting channels detect behavioral warning signs an average of 18 months earlier than those without, based on workplace safety research. That gap -- 18 months -- is the difference between prevention and tragedy.

---

Incident Response: When Prevention Fails

Despite best efforts, violent incidents may still occur. HR must have a response protocol that includes:

1. Immediate safety: Secure the scene, assist injured persons, contact emergency services
2. Investigation: Document the incident with witness statements, timeline, and evidence
3. Support: Provide medical care, counseling, and time off for affected employees
4. Communication: Inform employees of what happened (to the extent appropriate), reassure about safety measures
5. Review: Conduct root-cause analysis and update prevention program based on findings
6. Legal compliance: Report to OSHA if required (fatality within 8 hours, hospitalization within 24 hours)

---

Key Takeaways for HR Directors

Workplace violence prevention is not a security-only function. It requires coordinated effort across HR, operations, security, and leadership. The HR contribution is particularly critical in three areas: ensuring employees have trusted reporting channels, training managers to recognize behavioral warning signs, and building the organizational culture where safety concerns are raised rather than suppressed.

The organizations that prevent violence are not those with the most security cameras. They are the ones where employees feel safe raising concerns before they become crises.

---

VoxWel provides anonymous reporting infrastructure that helps organizations detect behavioral warning signs early. Learn more at voxwel.com.