Workplace Violence Prevention: OSHA Requirements and What HR Must Have in Place

Workplace violence affects an estimated 2 million US workers every year. It is the leading cause of workplace death for women and the second leading cause overall. And unlike many workplace hazards, it is frequently preceded by observable warning signs that go unreported — because employees who notice them don't know what to do, or don't have a channel they trust to report through.

OSHA's approach to workplace violence prevention has been evolving. California's Senate Bill 553, effective July 1, 2024, established the most comprehensive state-level requirements to date and is widely expected to be a template for federal action. Organizations in all sectors are facing increasing regulatory pressure to demonstrate not just that they have responded to violent incidents, but that they have active prevention systems in place.

This guide covers what OSHA requires, what California SB 553 mandates, how to build an effective prevention program, and the role anonymous reporting plays in catching warning signs before they become incidents.

---

OSHA's Current Requirements on Workplace Violence

OSHA does not have a specific federal standard for workplace violence in most industries. However, under the General Duty Clause of the Occupational Safety and Health Act, employers are required to provide a workplace free from recognized hazards likely to cause death or serious physical harm.

The EEOC has consistently interpreted workplace violence as a recognized hazard for employers who have been put on notice — through previous incidents, employee complaints, or industry data — that violence is a realistic risk in their workplace. Failure to take appropriate preventive action after such notice exposes employers to OSHA citations.

OSHA has issued specific guidelines and standards for the healthcare and social services sector (OSHA 3148), late-night retail establishments (OSHA 3153), and the taxi and for-hire vehicle industry. These guidelines, while not legally enforceable standards in most cases, establish the expected baseline of preventive action for those sectors.

The practical consequence: An organization in healthcare, social services, education, or any other sector with elevated workplace violence risk that has no workplace violence prevention program — and that subsequently experiences a serious incident — faces significant OSHA enforcement exposure under the General Duty Clause, as well as civil liability.

---

California SB 553: The New Benchmark

California Senate Bill 553 created the most comprehensive workplace violence prevention requirements in the US. It applies to most California employers with 10 or more employees, with limited exemptions for certain healthcare settings already covered by existing Cal/OSHA standards.

What SB 553 requires:

1. A written Workplace Violence Prevention Plan (WVPP)

The plan must be specific to the employer's workplace and operations — not a generic template — and must include:

• Names or job titles of persons responsible for implementing and maintaining the plan
• Effective procedures for the employer to accept and respond to reports of workplace violence, with no retaliation against reporting employees
• Procedures for communicating with employees regarding workplace violence matters
• Procedures for developing and providing training
• Procedures for post-incident response and investigation

2. A workplace violence incident log

Employers must maintain a log documenting every workplace violence incident — including near-misses and threatening conduct. The log must record the date, time, and location; the nature of the incident; who was involved; any corrective actions taken; and whether the incident was reported to law enforcement.

3. Training

Training must be provided at initial hire and at least annually, covering: the employer's WVPP, how to report incidents (including near-misses), and how to seek assistance from the employer or law enforcement.

4. Annual review

The WVPP must be reviewed annually and updated when any workplace violence incident occurs, when policies or procedures change, or when the employer becomes aware of a new or previously unrecognized hazard.

---

The Federal Trajectory

The California SB 553 framework follows a pattern seen across multiple areas of occupational safety: California establishes requirements, OSHA issues federal guidance drawing on the California experience, and federal requirements follow.

OSHA issued an Advanced Notice of Proposed Rulemaking (ANPRM) for a federal healthcare workplace violence standard in 2016 and has been working toward a formal proposed rule since. The Biden administration accelerated this work; under the current administration the pace may vary but the regulatory direction — toward more explicit federal workplace violence prevention requirements — is established.

Organizations outside California that have no workplace violence prevention program are ahead of a federal compliance requirement. The time and resource cost of building the program now, when there is no deadline pressure, is substantially lower than building it reactively.

---

Building an Effective Workplace Violence Prevention Program

1. Risk assessment

Start with a written risk assessment specific to your workplace. Identify: which employees are most exposed to contact with the public, which roles involve cash handling, which work environments are isolated or have poor sight lines, whether prior incidents or near-misses have occurred.

The risk assessment drives the rest of the program. A corporate office environment has different risks from a healthcare setting or a late-night retail store.

2. Written prevention plan

The plan should cover: who is responsible for implementation, how employees report concerns and incidents (the reporting channel), the procedures for immediate response to active threat, post-incident support, and training schedule.

The reporting channel requirement is explicit in SB 553 and implicit in every OSHA guidance document: employees must have a way to report workplace violence concerns without fear of retaliation. An anonymous reporting channel satisfies this requirement more effectively than a named channel precisely because it removes the retaliation concern.

3. Incident and near-miss logging

Establish a system for logging every workplace violence incident and near-miss — not just formal OSHA recordable incidents. Near-miss reporting is where prevention actually happens: the employee who heard a colleague make threatening comments about a manager, the escalating argument that was defused before it became physical, the former employee who showed up unannounced with no apparent purpose.

These events individually might not warrant formal action. In aggregate, they are the early warning system that prevents serious incidents. They only reach the incident log if there is a channel that employees trust to report through.

4. Training

Training must be practical, not just informational. Employees should know: how to recognize warning signs of escalating behavior, how to de-escalate verbal confrontations, when and how to alert security or management, how to report concerns anonymously, and what happens after they report.

Annual training that covers these topics specifically — not a generic "workplace safety" module that mentions violence as one of twenty topics — satisfies both the regulatory requirement and the practical goal.

5. Post-incident response

Every incident must trigger a documented response: investigation, corrective action, support for affected employees, and review of whether the prevention plan was followed and whether it needs updating. Organizations that fail to respond systematically to incidents face both OSHA exposure and civil liability.

---

The Role of Anonymous Reporting in Violence Prevention

The most important prevention mechanism is early detection of warning signs. Research on workplace violence consistently finds that serious incidents are almost always preceded by observable warning behaviors — statements of intent to harm, escalating aggression, threatening social media posts, concerning behavioral changes.

In the majority of serious workplace violence incidents investigated after the fact, colleagues were aware of warning signs and did not report them. The reasons are familiar: not wanting to get a colleague in trouble, uncertainty about whether the behavior was serious enough to report, fear of being seen as an overreactor, no trusted channel to report through.

An anonymous reporting channel changes this calculation. An employee who is uncomfortable about a colleague's threatening comments can report through a channel that cannot identify them — without the social risk of being the person who "turned in" a coworker. The report reaches HR or security for assessment, potentially preventing an escalation that named reporting would have suppressed.

The incident log requirement of SB 553 also benefits from anonymous reporting infrastructure. Near-misses and concerning behaviors that are reported through an anonymous channel are automatically documented in the case management system, creating the incident log that regulatory compliance requires and that retrospective investigation would need.

---

VoxWel for Workplace Violence Prevention

VoxWel provides the anonymous reporting channel that satisfies the reporting requirements of SB 553 and OSHA guidance — giving employees a genuinely anonymous, accessible way to report workplace violence concerns, near-misses, and threatening behavior.

Reports are submitted via QR code or web link with no account required. The case management dashboard creates the documented incident log that regulatory requirements expect. Two-way anonymous messaging allows HR or security to gather more detail about concerning behaviors without breaking the reporter's anonymity.

Start a 14-day free trial at voxwel.com.

---

VoxWel is an anonymous employee reporting platform for HR and compliance teams. Learn more at voxwel.com.