New York's Workplace Violence Prevention Law for Hospitals and Nursing Homes: What Section 2832 Requires
Last reviewed Sep 6, 2026
New York is the latest state to require healthcare employers to run a formal workplace violence prevention program, and the first deadline is days away rather than months.
The short answer
New York Public Health Law §2832 takes effect September 18, 2026. It applies to general hospitals and nursing homes, and requires a written workplace violence prevention program. A second set of obligations, the annual safety and security assessment and the plan that follows from it, begins January 1, 2027 for general hospitals.
Who is covered
General hospitals and nursing homes licensed in New York. This is a healthcare-specific law, distinct from New York's existing general workplace safety obligations, and it sits alongside rather than replacing them.
Operating under more than one set of rules?
carefoundryESC records the incident once and generates each jurisdiction's obligations from it: the violent incident log, the reporting clocks, the sharps log and the OSHA case underneath. State layers are included in the price and switched on for the organizations that carry the duty.
The two deadlines, which are not the same deadline
This is the part worth getting straight, because plenty of coverage collapses them into one date.
- September 18, 2026: the law takes effect. Covered facilities establish a written workplace violence prevention program.
- January 1, 2027: for general hospitals, the obligations around the annual workplace safety and security assessment, and the development of a plan addressing the threats and hazards that assessment identifies, begin.
So the program comes first and the assessment cycle follows. Planning as though everything lands in September will produce a rushed assessment; planning as though everything lands in January means missing the first deadline entirely.
The emergency department security requirement
The provision that has drawn the most attention, and it is geographically limited.
In cities and counties with a population of one million or more, a general hospital must have at least one off-duty law enforcement officer or trained security staff member present in the emergency department at all times, subject to emergent circumstances.
In practice that covers New York City, Long Island and Westchester County. If you operate a general hospital in one of those, this is a staffing and budget question rather than a policy question, and it is the item with the longest lead time.
Employees and unions are not optional participants
The law explicitly instructs hospitals to actively involve employees and any recognized collective bargaining representatives in developing the safety and security assessment and the plan, and to give employees and applicable unions a written, detailed summary of the plan.
Two consequences that are easy to miss:
- An assessment produced by a consultant and signed off internally does not meet this. The involvement has to be real and it should be documented, because the documentation is what you will be asked for.
- The written summary is a deliverable with its own audience. It is not the plan itself, and it is not an internal document.
What to do in the next two weeks
- Confirm which of your facilities are covered. General hospitals and nursing homes, licensed in New York, and separately identify which sit in a county of one million or more.
- Get the written program in place for September 18. It does not have to be the finished assessment cycle; it has to exist.
- Start the assessment now if you are a general hospital, because January 1 is a real date and the employee and union involvement takes calendar time you cannot compress.
- Scope the ED security requirement if you are in NYC, Long Island or Westchester. Off-duty law enforcement or trained security, at all times, is a rota problem.
- Decide now how incidents will be recorded, because a prevention program with no incident data is a document rather than a program.
What the incident record should hold
New York's obligations are shaped differently from California's reporting clocks or Washington's investigate-everything duty, but the underlying record is the same document in every state that has legislated. If you are building it now, capture:
- When, where, and in which department or unit.
- A description of what happened.
- Who committed it, by category rather than by name: patient, visitor or family, stranger, coworker, supervisor.
- The circumstances and contributing factors, including staffing levels and physical environment.
- Consequences: treatment given, security or law enforcement involvement, lost work time.
- Who recorded it.
Build it so that no name can reach the log, including through a free-text description. States that have legislated on this consistently require the log to exclude personal identifying information, and free text is where names actually leak.
How New York compares
Roughly twenty states now impose healthcare-specific workplace violence duties, and they diverge on what follows the log. California reports to the Division on a 24-hour or 72-hour clock keyed to severity. Washington investigates every incident and summarises to a safety committee. New York's model is program-and-assessment: a written program, an annual assessment, a plan, and employee involvement in producing both.
If you operate across state lines, keep one incident record and generate each state's obligations from it. See our state-by-state comparison, or how carefoundryESC handles jurisdiction differences.
Verify against the statute
This is an overview for planning, not legal advice, and implementing regulations and guidance may follow. Read the current text of New York Public Health Law §2832 and any Department of Health guidance, or take counsel, before finalizing a program.