A workplace violence prevention plan is a written document that names who is responsible for violence hazards at a site, how employees report an incident, how the employer responds, and, in three states, what device an employee uses to call for help. Until 2024 it was a healthcare document in most states. It is now a general employment document in California, a hospitality, retail, security and janitorial document in Washington, and a retail document in New York.

Three deadlines fall inside a fourteen-month window:

  • Washington HB 1524: in force since January 1, 2026.
  • California general industry standard under SB 553: the Occupational Safety and Health Standards Board must adopt it no later than December 31, 2026.
  • New York Retail Worker Safety Act silent response buttons: effective January 1, 2027.

If your workplace sits outside those three states, the concept still decides something: it is the template your own legislature is most likely to copy, and it is the gap an emergency action plan review will find this month.

How the mandates are built

Each law follows the same four-part structure. The variation is in the thresholds, not the mechanism.

1. A coverage test. Washington uses an occupational test. The law applies to hotel, motel, retail, security guard and property services contractor employers that have at least one isolated employee, defined by Washington L&I as a worker who spends 50 percent or more of work hours alone, without a co-worker or supervisor nearby. New York uses headcount. Employers with 10 or more retail employees in New York State owe a policy and training; employers with 500 or more retail employees statewide owe silent response buttons. California applies to general industry, and excludes workplaces already covered by the healthcare standard at Title 8, Section 3342.

2. A written plan with named elements. California's draft general industry standard requires twelve core elements in the written plan, including designated responsibility, employee involvement, emergency response, hazard identification and correction, post-incident investigation and periodic review, according to Ogletree Deakins.

3. A device specification. Washington requires a panic button designed to be carried by the isolated employee, simple to activate without password entry, reliable across all work locations and shifts, and able to let responders identify the worker's location accurately. New York accepts a fixed button, a wearable, or an application on an employer-provided mobile device.

4. Training, records and a complaint route. Washington requires documented training on harassment prevention, discrimination, assault awareness and panic button use. New York requires interactive training during paid work hours: annually for employers with 50 or more retail employees, every two years below that.

Three states, three coverage tests

Washington. HB 1524 extended the 2020 hotel and motel housekeeper panic button law to retail establishments, security guard entities and property services contractors. L&I began accepting complaints on January 1, 2026. Civil penalties reach $1,000 for a willful violation and up to $10,000 for a repeat violation. Property services contractors carry an extra obligation: an annual report to L&I due January 31, first in 2027, listing policy adoption dates, training numbers, work locations, worker counts and total hours worked.

California. The written plan, violent incident log and training requirements created by SB 553 have been enforceable against virtually all California employers since July 1, 2024. The fuller regulation is still in rulemaking. Cal/OSHA posted a further-revised discussion draft on July 22, 2026, with written comments due August 17, 2026 to [email protected], per the DIR rulemaking page. That draft narrowed employer-provided transportation to transportation under the employer's control, removed the earlier exception releasing employers from responsibility for texts and personal social media they were unaware of, and confirmed that an employee assistance program can satisfy the individual trauma counseling requirement. A Standards Board vote is expected in fall or winter 2026, with an anticipated effective date of January 1, 2027. The statutory adoption deadline is December 31, 2026.

New York. Policy, training and notice requirements took effect June 2, 2025. In the first year, the New York State Department of Labor made 430 proactive visits to retail locations and reached roughly 13,000 retail employees. Complaints go to the Safety, Health and Essential Rights portal, or by phone to 518-457-3863. The silent response button mandate for employers with 500 or more retail employees statewide follows on January 1, 2027.

Washington also amended its healthcare law on the same date. HB 1162, signed May 19, 2025 and effective January 1, 2026, moved the healthcare workplace violence prevention plan review cycle from every three years to every year, which is one of several risks specific to healthcare settings that plan reviews tend to under-record.

Where the term gets confused

A panic button and a silent response button are not the same instrument. New York's February 2025 amendments changed the term deliberately: a silent response button alerts internal staff, not emergency services.

Feature Washington panic button (HB 1524) New York silent response button
In force January 1, 2026 January 1, 2027
Who is covered Hotel, motel, retail, security guard and property services employers with at least one isolated employee Retail employers with 500 or more retail employees in New York State
Who receives the alert Responders able to identify the worker's location accurately A security officer, manager or supervisor
Form of device Designed to be carried by the isolated employee Fixed button, wearable, or app on an employer-provided device
Location data Must identify the worker's location accurately Tracking permitted only when triggered in an emergency

The second confusion is between having a device and having a response. Issuing hardware satisfies the statute. It does not establish that anyone answers.

Compliance answers whether the retailer met the requirement. Safety asks whether the system works when an employee actually needs it.

Josh Dempsey
Loss Prevention Media

Checks to run this month

September plan reviews already cover evacuation, shelter and medical response. The four checks below test whether violence response is present at the same level of detail, using the state thresholds as the measure.

  • Apply the isolated employee test to your own roster

    Count any worker who spends 50 percent or more of scheduled hours alone, without a co-worker or supervisor nearby. Washington names janitors, security guards, housekeepers and room service attendants. The test is about isolation, not job title.

  • Count retail employees by state, not by company

    New York's threshold is 500 or more retail employees within New York State. A national chain with a small New York footprint falls outside the button mandate and inside the 10-employee policy and training mandate.

  • Name the alert recipient for every shift

    Loss Prevention Media frames the operative question as whether the recipient is on shift, reachable and capable of responding. Document the answer for overnight and single-cover shifts specifically.

  • Check the plan against California's twelve elements

    Designated responsibility, employee involvement, emergency response, hazard identification and correction, post-incident investigation and periodic review are the elements most often absent from plans written before 2024.

Two limits on what the facts here support. There is no federal general industry workplace violence standard in place; VestigeView notes that inadequate protections may instead create exposure under OSHA's General Duty Clause. And California's final regulatory text is not settled: the July 22, 2026 draft is a discussion draft, and the Standards Board vote had not been taken as of the sources cited. Employers outside these three states are working from a template, not a rule.

The same discipline that produces a usable heat illness response protocol, a named trigger, a named responder and a documented outcome, is what a violence response annex needs before any state requires one.