Workplace Safety

Healthcare Workplace Violence in 2026: A Landmark Court Ruling and New State Laws Are Reshaping Employer Obligations

The Tenth Circuit's February 2026 ruling in Cedar Springs Hospital v. OSHRC affirmed OSHA's authority to cite healthcare employers for workplace violence under the General Duty Clause. Combined with New York's new prevention law and California's existing standards, employers face a rapidly evolving compliance landscape.

Sarah Mitchell··13 min read

Violence against healthcare workers has reached crisis levels in the United States — and in 2026, the legal and regulatory landscape around employer responsibility is shifting faster than many organizations realize.

In February 2026, the U.S. Court of Appeals for the Tenth Circuit issued a landmark ruling affirming OSHA's authority to cite healthcare employers for workplace violence under the General Duty Clause — even in the absence of a specific federal workplace violence standard. The decision in Cedar Springs Hospital v. Occupational Safety and Health Review Commission sends a clear signal: healthcare facilities that fail to protect their workers from known violence risks can and will face federal enforcement action.

At the same time, New York has enacted one of the most comprehensive state-level healthcare workplace violence prevention laws in the country, with compliance deadlines beginning in 2027. California's existing healthcare violence prevention standard continues to serve as a national model. And OSHA's own effort to develop a federal workplace violence standard for healthcare, while still designated as a long-term regulatory action, continues in the background.

For occupational health professionals and healthcare employers, the message is unmistakable: the era of treating workplace violence as an unavoidable part of healthcare work is over. The question is no longer whether employers will be held accountable, but how quickly they can build the systems and culture to prevent it.

The Scale of the Crisis

The statistics on workplace violence in healthcare are staggering — and they have been getting worse.

Healthcare workers account for roughly 10% of the U.S. workforce, yet they suffer approximately 48% of all nonfatal workplace violence injuries. The workplace violence injury rate for healthcare workers stands at 14.2 incidents per 10,000 full-time equivalent (FTE) workers — nearly five times the average across all private industries. For psychiatric aides, the rate reaches a staggering 543.6 violence-related injuries per 10,000 FTE — the highest for any occupation in the country.

The human toll is enormous. A 2024 survey found that over 81% of nurses reported experiencing at least one form of workplace violence in the past year. An estimated two nurses are assaulted every hour in acute care settings. Among emergency physicians, 91% have been victims of workplace violence or know a colleague who has.

The trend line is moving in the wrong direction. A 2024 study published in Health Affairs Scholar documented a 30% increase in workplace violence across healthcare facility types between 2011 and 2022, with the COVID-19 pandemic accelerating the crisis. The American Hospital Association estimates that violence costs U.S. hospitals over $18 billion annually, including approximately $4.7 billion in security measures and $847 million specifically for violence prevention programs.

Perhaps most alarming for workforce sustainability: a 2024 Crisis Prevention Institute report found that 37% of healthcare professionals considered leaving the field due to the strain of workplace violence, further fueling the national staffing crisis.

The Tenth Circuit Ruling: Cedar Springs Hospital v. OSHRC

Against this backdrop, the Tenth Circuit's February 2026 decision carries enormous practical significance for healthcare employers nationwide.

The Facts

OSHA investigated Cedar Springs Hospital, a psychiatric facility in Colorado Springs, after reports of escalating patient-on-staff violence. The investigation revealed a pattern of assaults on clinical and support staff by patients, with the hospital failing to implement widely recognized safety measures.

OSHA cited the hospital for multiple deficiencies under the General Duty Clause — Section 5(a)(1) of the OSH Act — which requires employers to furnish workplaces "free from recognized hazards that are causing or are likely to cause death or serious physical harm." Among the specific findings:

  • Unsecured nurses' stations that allowed patients access to potential weapons
  • Lack of adequate communication devices for staff to call for help during violent incidents
  • Inadequate staffing during high-risk situations
  • Failure to implement the hospital's own existing workplace violence prevention program
  • No dedicated security personnel trained in managing violent incidents
  • Insufficient post-incident investigations after assaults occurred

An administrative law judge upheld the citations and assessed penalties totaling approximately $13,494. After the Occupational Safety and Health Review Commission declined further review, Cedar Springs petitioned the Tenth Circuit.

The Court's Decision

The Tenth Circuit unanimously rejected every argument the hospital advanced:

CMS compliance does not shield employers from OSHA. Cedar Springs argued that because the Centers for Medicare and Medicaid Services (CMS) already regulates safety in hospitals, OSHA's authority was displaced. The court found that CMS's role is directed at patient safety, not employee safety, and therefore did "nothing" to preempt OSHA's broad authority over worker protection.

The General Duty Clause is enforceable without a specific standard. The hospital claimed that OSHA could not enforce workplace violence requirements through the General Duty Clause in the absence of a promulgated standard. The court disagreed, holding that OSHA's citation explained its expectations clearly, and the hospital's own written policies provided additional notice of what was required.

Proposed safety measures were feasible. The court found that expert testimony, industry standards, and the hospital's own corrective actions — taken after receiving the citation — demonstrated that the proposed abatement measures were both technologically and economically feasible.

In a companion case, the Tenth Circuit also held that the hospital's management company could be cited as a co-employer because it exercised operational control over workplace violence prevention — requiring staff training, providing incident reporting forms, compiling injury-trend data, and reviewing the hospital's violence prevention plan.

What the Ruling Means for Healthcare Employers

The Cedar Springs decision establishes several principles that every healthcare employer should understand:

1. Your Own Policies Can Be Used Against You

One of the most consequential aspects of the ruling is the court's finding that a hospital's own written workplace violence prevention policies can serve as evidence of what the employer recognized as necessary — and feasible — to protect workers. If you have a prevention plan on paper but fail to enforce it consistently, OSHA can use that gap as the basis for a citation.

2. CMS Compliance Is Not an OSHA Shield

Healthcare organizations that have relied on Joint Commission accreditation or CMS Conditions of Participation as evidence of a safe workplace now face a clear legal precedent: those frameworks address patient safety, not worker safety. Employers need independent programs that specifically address employee protection from violence.

3. Management Companies Face Direct Liability

The companion ruling means that parent companies, management entities, and corporate affiliates that influence safety operations at healthcare facilities may be held directly liable for OSHA violations — even if they do not directly employ frontline staff.

4. OSHA Does Not Need a Specific Standard to Act

While OSHA's effort to develop a dedicated workplace violence prevention standard for healthcare remains a long-term regulatory action, the Cedar Springs ruling makes clear that the absence of such a standard is no barrier to enforcement. The General Duty Clause provides the legal authority OSHA needs.

New York's Landmark Healthcare Violence Prevention Law

While federal rulemaking proceeds slowly, states are acting. On December 12, 2025, New York Governor Kathy Hochul signed into law one of the nation's most comprehensive healthcare workplace violence prevention statutes, with compliance requirements beginning in 2027.

The law applies to general hospitals and nursing homes — both public and private — and requires:

  • Written workplace violence prevention programs with detailed policies defining workplace violence, incident reporting mechanisms, and consequences
  • Annual safety and security assessments beginning January 2027, reviewing past incidents, staff concerns, layout vulnerabilities, visitor management, and access controls
  • Employee training on recognizing and mitigating violence risks, including de-escalation techniques and emergency response
  • Dedicated security personnel in emergency departments — at least one trained security officer or off-duty law enforcement officer at all times in hospitals located in cities with populations of one million or more
  • Active employee and union involvement in developing annual security plans
  • Compliance with CMS Conditions of Participation for emergency preparedness, while specifically addressing worker safety

Facilities that fail to establish compliant programs by September 2027 face regulatory penalties.

State-Level Action Beyond New York

New York joins a growing list of states that have moved ahead of the federal government on healthcare workplace violence prevention:

  • California has maintained a healthcare-specific workplace violence prevention standard (Title 8, Section 3342) since 2017, requiring written prevention plans, hazard assessments, employee training, incident logging, and annual program reviews. California's broader SB 553, which took effect in July 2024, mandates workplace violence prevention plans for nearly all employers — though healthcare facilities already covered by Section 3342 are exempt from the general-industry law.
  • Oregon, Washington, Connecticut, and Illinois have enacted various healthcare workplace violence protections, ranging from mandatory reporting requirements to specific prevention program mandates.
  • Cal/OSHA is also required to adopt a permanent general-industry workplace violence prevention standard by December 31, 2026, which could further influence the national regulatory landscape.

The direction of travel is clear: states are increasingly unwilling to wait for a federal standard, and healthcare employers operating in multiple jurisdictions face a patchwork of requirements that demands proactive compliance planning.

OSHA's Evolving Enforcement Posture

Even without a finalized federal standard, OSHA's approach to workplace violence in healthcare has been steadily intensifying. The agency's Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers (Publication 3148), while advisory rather than regulatory, outline a five-component framework that has become the de facto benchmark:

  1. Management commitment and employee participation
  2. Worksite hazard analysis
  3. Hazard prevention and control — including engineering controls, administrative procedures, and security measures
  4. Safety and health training
  5. Recordkeeping and program evaluation

The Cedar Springs ruling has effectively converted this guidance from aspirational to actionable. When OSHA can cite employers under the General Duty Clause and courts will uphold those citations, the "voluntary" guidelines become the roadmap for what OSHA expects — and what employers will be measured against.

OSHA's Healthcare Workplace Violence page remains the agency's primary clearinghouse for resources, and employers should treat it as a living compliance reference.

What Employers Should Do Now

The convergence of the Tenth Circuit ruling, new state legislation, and OSHA's enforcement trajectory creates an urgent call to action for healthcare employers. Here is what occupational health professionals should prioritize:

1. Conduct a Gap Analysis of Your Current Program

Measure your existing workplace violence prevention program against OSHA's five-component framework. Pay particular attention to whether your program is being implemented consistently — not just whether it exists on paper. The Cedar Springs ruling makes clear that having a plan you don't follow is worse than having no plan at all.

2. Ensure Written Policies Are Current and Enforced

Review and update your workplace violence prevention plan to reflect current risk factors, staffing levels, facility layouts, and patient populations. Make sure the plan is communicated to all workers — including temporary, per diem, and contracted staff — and that compliance is monitored and documented.

3. Invest in Training

All healthcare workers should receive regular training on:

  • Recognizing warning signs of escalating violence
  • De-escalation techniques appropriate to the clinical setting
  • Emergency response and communication procedures
  • Incident reporting processes and protections against retaliation

4. Address Staffing and Security

Inadequate staffing was a central finding in the Cedar Springs case. Ensure that high-risk units — emergency departments, behavioral health units, and areas with frequent patient agitation — have sufficient staff-to-patient ratios and access to trained security personnel.

5. Install and Maintain Communication Systems

Ensure workers have reliable mechanisms to summon help quickly. This includes panic buttons, two-way radios, duress alarms, and mobile communication devices — all tested and maintained regularly.

6. Investigate Every Incident

Establish a systematic process for investigating all workplace violence incidents, including near-misses and verbal threats. Document findings, identify contributing factors, and implement corrective actions. Failure to investigate was one of the cited deficiencies at Cedar Springs.

7. Monitor State Legislation

If your organization operates in New York, begin preparing now for the September 2027 compliance deadline. If you operate in California, ensure ongoing compliance with Title 8, Section 3342. For multi-state employers, conduct a state-by-state review of emerging requirements.

8. Engage Employees in Prevention

Both OSHA's guidelines and New York's new law emphasize employee participation in developing and maintaining prevention programs. Workers on the front lines often have the most accurate understanding of where risks exist. Formal mechanisms for worker input — safety committees, anonymous reporting systems, and regular feedback sessions — strengthen both the program and staff buy-in.

The Road Ahead

The healthcare workplace violence crisis will not be solved by any single court ruling, state law, or federal standard. It requires a sustained commitment from healthcare leadership to treat worker safety with the same urgency and rigor that the industry brings to patient safety.

What has changed in 2026 is the legal and regulatory environment. The Tenth Circuit has confirmed that OSHA has the tools to hold employers accountable. New York has demonstrated that states will act where the federal government has not. And the data — 48% of all workplace violence injuries concentrated in a single industry — makes the case for action impossible to ignore.

For occupational health professionals, this is a moment to lead. The organizations that invest in comprehensive, consistently enforced violence prevention programs now will not only protect their workers and reduce liability — they will be better positioned to retain the healthcare workforce at a time when the industry can least afford to lose it.

Sources

Tags

workplace violencehealthcareOSHAoccupational healthGeneral Duty Clausehealthcare safetyviolence preventionemployee safetynursing

Frequently Asked Questions

Yes. The Tenth Circuit's February 2026 ruling in Cedar Springs Hospital v. OSHRC confirmed that OSHA can cite healthcare employers for workplace violence hazards under the General Duty Clause of the OSH Act, even without a specific workplace violence standard. The court held that employers must provide workplaces free from recognized hazards — including violence — that are likely to cause death or serious physical harm.

In Cedar Springs Hospital v. Occupational Safety and Health Review Commission (No. 24-9519, decided February 13, 2026), the Tenth Circuit upheld OSHA's citations against a Colorado psychiatric hospital for failing to protect staff from patient-on-staff violence. The court rejected the hospital's arguments that CMS oversight preempted OSHA's authority and that the General Duty Clause was too vague to enforce without a specific standard.

Healthcare workers make up about 10% of the U.S. workforce but suffer approximately 48% of all nonfatal workplace violence injuries. The workplace violence injury rate for healthcare workers is 14.2 incidents per 10,000 full-time equivalent workers — nearly five times the average across all private industries. Over 81% of nurses reported experiencing at least one form of workplace violence in the past year.

Signed in December 2025, New York's law requires hospitals and nursing homes to establish comprehensive workplace violence prevention programs by September 2027. Requirements include written prevention policies, annual safety and security assessments, employee training on de-escalation and emergency response, incident reporting systems, and dedicated security personnel in emergency departments.

Healthcare employers should conduct a gap analysis of their current workplace violence prevention program against OSHA guidelines, ensure they have a written prevention plan that is consistently enforced, train all staff on de-escalation and incident reporting, maintain adequate staffing during high-risk situations, secure work areas, install communication devices, investigate every incident, and monitor state-level legislation for new compliance requirements.

Related Articles

Never Miss an Update

Join industry professionals who rely on our weekly compliance digest.