New York's workplace violence prevention law for hospitals and nursing homes: What Section 2832 requires

New York is the latest state to require healthcare employers to run a formal workplace violence prevention program. The law took effect on September 18, 2026, and its obligations phase in over the following year.

The short answer

New York Public Health Law §2832 took effect September 18, 2026. It applies to general hospitals and nursing homes, and requires each to establish a workplace violence prevention program within twelve months, by September 18, 2027. A second set of obligations, the annual safety and security assessment and the plan that follows from it, begins January 1, 2027, for general hospitals.

Who is covered

General hospitals and nursing homes licensed in New York. This is a healthcare-specific law, distinct from New York's existing general workplace safety obligations, and it sits alongside rather than replacing them.

Three dates, which are not the same deadline

This is the part worth getting straight, because plenty of coverage collapses them into one date.

• September 18, 2026: the law takes effect, along with the emergency department security requirement in the companion Section 2832-a.
• January 1, 2027: for general hospitals, the obligations around the annual workplace safety and security assessment, and the development of a plan addressing the threats and hazards that assessment identifies, begin.
• September 18, 2027: twelve months after the effective date, every covered facility must have established its workplace violence prevention program.

So for a general hospital the assessment cycle starts first, on January 1, 2027, and the program deadline follows on September 18, 2027. Planning as though everything lands in September 2027 means starting the annual assessment late.

The emergency department security requirement

The provision that has drawn the most attention sits in the companion Section 2832-a, which took effect on September 18, 2026. Its strictest form is geographically limited.

In cities and counties with a population of one million or more, a general hospital must have at least one off-duty law enforcement officer or trained security staff member present in the emergency department at all times, subject to emergent circumstances.

In practice that covers New York City, Long Island and Westchester County. If you operate a general hospital in one of those, this is a staffing and budget question rather than a policy question, and it has been in force since September 18, 2026.

Outside those areas, a general hospital must have at least one off-duty law enforcement officer or trained security staff member on premises at all times, positioned near or within close proximity to the emergency department. Critical access, sole community and rural emergency hospitals are exempt unless the commissioner finds elevated rates of violence against their emergency department staff.

Employees and unions are not optional participants

The law explicitly instructs hospitals to actively involve employees and any recognized collective bargaining representatives in developing the safety and security assessment and the plan, and to give employees and applicable unions a written, detailed summary of the plan.

Two consequences that are easy to miss:

• An assessment produced by a consultant and signed off internally does not meet this. The involvement has to be real and it should be documented, because the documentation is what you will be asked for.
• The written summary is a deliverable with its own audience. It is not the plan itself, and it is not an internal document.

What to do now

1. Confirm which of your facilities are covered. General hospitals and nursing homes, licensed in New York, and separately identify which sit in a city or county of one million or more.
2. Get the program in place by September 18, 2027. That is twelve months from the effective date, and for a general hospital the assessment cycle starts well before it.
3. Start the assessment now if you are a general hospital, because January 1, 2027, is a real date and the employee and union involvement takes calendar time you cannot compress.
4. Confirm the ED security requirement is met. It has applied since September 18, 2026: in the emergency department itself in NYC, Long Island or Westchester, and near it elsewhere. Off-duty law enforcement or trained security, at all times, is a shift-scheduling problem.
5. Decide now how incidents will be recorded, because a prevention program with no incident data is a document rather than a program.

What the incident record should hold

New York's obligations are shaped differently from California's reporting clocks or Washington's investigate-everything duty, but the underlying record is the same document in every state that has legislated. If you are building it now, capture:

• When, where, and in which department or unit.
• A description of what happened.
• Who committed it, by category rather than by name: patient, visitor or family, stranger, coworker, supervisor.
• The circumstances and contributing factors, including staffing levels and physical environment.
• Consequences: treatment given, security or law enforcement involvement, lost work time.
• Who recorded it.

Build it so that no name can reach the log, including through a free-text description. States that have legislated on this consistently require the log to exclude personal identifying information, and free text is where names actually leak.

How New York compares

Roughly twenty states now impose healthcare-specific workplace violence duties, and they diverge on what follows the log. California reports to the Division on a 24-hour or 72-hour clock keyed to severity. Washington investigates every incident and summarizes to a safety committee. New York's model is program-and-assessment: a written program, an annual assessment, a plan, and employee involvement in producing both.

If you operate across state lines, keep one incident record and generate each state's obligations from it. See our state-by-state comparison, or how carefoundryESC handles jurisdiction differences.

Verify against the statute

This is an overview for planning, not legal advice, and implementing regulations and guidance may follow. Read the current text of New York Public Health Law §2832 and any Department of Health guidance, or consult counsel, before finalizing a program.