HCSSA PL 2024-10 WVP Program: The Step-by-Step Guide

Texas home health and hospice agencies that employ two or more registered nurses must operate a written workplace violence prevention program under HHSC Provider Letter PL 2024-10, which applies Health & Safety Code Chapter 331 to HCSSAs. The program requires a committee, an agency-specific plan, at-least-annual training, a confidential anti-retaliation reporting policy, post-incident response, and an annual plan evaluation reported to the governing body — all in place since September 1, 2024.

This guide walks a Home & Community Support Services Agency (HCSSA) administrator through the complete program build, in the order an HHSC licensing surveyor reviews it. The distributed, in-home nature of home care makes this build different from a hospital's — your "worksite" is hundreds of private residences, and your highest-risk staff work alone. We address those realities directly.

#Step 1: Confirm coverage with the two-RN test

Before building anything, confirm Chapter 331 actually applies to your agency. Under PL 2024-10 (Revised), the trigger for HCSSAs is employing two or more registered nurses. The Provider Letter clarifies that an "employed RN" means a person holding a current Texas RN license in a W-2 employment relationship with the agency, regardless of that person's job duties. A nurse working in administration, quality, or intake still counts.

This is a frequent point of confusion, because home health staffing models lean heavily on contracted and PRN clinicians. The distinction between an employed RN and a contracted one decides coverage. We work through the edge cases — including how contractors, branch-level counting, and dual-licensed staff factor in — in our companion guide on the two-employed-RNs coverage test.

If your agency employs two or more RNs, proceed. If you fall below the threshold today but expect to grow, build the program now rather than scrambling at a survey window.

Primary source: HHSC Provider Letter PL 2024-10 (Revised); Texas Health & Safety Code Chapter 331 (added by SB 240, 88th Legislature, 2023); covered HCSSAs are licensed under Ch. 142.

#Step 2: Authorize the workplace violence prevention committee

Chapter 331 requires a standing workplace violence prevention committee. For an HCSSA, the required member categories are:

Most HCSSAs do not employ a physician or a security-services employee, so in practice the mandatory seat is the direct-care RN. Chapter 331 permits you to re-authorize an existing committee (for example, a quality or safety committee) rather than stand up a brand-new body — but you must document that re-authorization and ensure the required member categories are seated.

What a surveyor checks here is concrete: a committee charter or authorization document, appointment letters, and a membership roster showing the direct-care RN by name and role. A committee that exists on paper but has no roster or minutes is a common deficiency. The WVP Foundation Package builds this charter, drafts the appointment letters, and facilitates and minutes the first meeting so the governance leg is provable from day one.

#Step 3: Write an agency-specific plan (not a template)

The single most-cited deficiency under Chapter 331 is a generic template plan that is not specific to the facility. For an HCSSA, "agency-specific" has a particular meaning, because your risk environment is not a building — it is the field.

A defensible HCSSA plan names your own realities:

• The service area and visit environments your clinicians work in (urban, rural, assisted-living, private residences).
• Your lone-worker reality — most home health and hospice visits are solo, in uncontrolled environments you do not own or control.
• Your pre-visit risk screening and check-in/check-out procedures for field staff.
• Your specific reporting pathway for an event that happens in a patient's home, miles from any office.
• The branch structure if you operate multiple locations.

The plan must also cover the statutory elements: committee, prevention measures, the confidential anti-retaliation reporting policy, the training cadence, post-incident response, and the annual evaluation. The deeper field-safety methodology — pre-visit screening, partnered visits, and check-in protocols — is detailed in our guide to protecting home health staff in uncontrolled environments.

#Step 4: Build the confidential reporting and anti-retaliation policy

Chapter 331 requires a confidential reporting policy with anti-retaliation protection. The facility cannot discipline, discriminate, or retaliate against anyone who in good faith reports an incident, and cannot discourage employees from contacting law enforcement.

For home care, this policy carries an added weight: a field clinician who feels unsafe in a home, or who was assaulted on a visit, needs a reporting channel that works from the field and a clear assurance that reporting will not cost them their assignment or their standing. Your policy language should explicitly:

1. Guarantee confidentiality for good-faith reporters.
2. Prohibit retaliation, discipline, or discrimination for reporting.
3. State plainly that the agency will not discourage an employee from contacting law enforcement.
4. Give a field-accessible reporting method (a number or app that works from a patient's home).

Policy language that omits the anti-retaliation or law-enforcement provisions is a frequent citation. Policy development drafts this language aligned to the statute and to the realities of a distributed workforce.

#Step 5: Deliver at-least-annual training to a distributed workforce

Chapter 331 requires employee training at least annually. The Joint Commission, where it applies to accredited home care (OME) organizations effective January 1, 2025, adds orientation and on-change triggers. The surveyor's test across both is consistent: the right people, the right content, on the right cadence, with a record that proves it — including contracted and per-diem staff.

For an HCSSA, the logistical challenge is that your workforce is rarely in one building. Training that assumes a classroom will leave gaps. A defensible approach:

• Maps content to your field risks — de-escalation, recognizing warning behaviors in a home, pre-visit screening, the reporting pathway, and post-incident steps.
• Reconciles the roster against the full census, including PRN, per-diem, and any contracted clinicians who deliver care.
• Captures competency, not just attendance, so "they understood it" is provable.

VIGILO's healthcare staff and de-escalation training is built for distributed teams, with Spanish-language delivery available, and hands over completion records ready for your binder. The full cadence question is covered in how often home care staff must be trained.

#Step 6: Stand up post-incident response

Chapter 331 requires the agency to offer immediate post-incident services, including any necessary acute medical treatment, to staff directly involved, and to adjust the employee's work assignment as appropriate. The Joint Commission requires post-incident strategies and support.

For home care, post-incident response means having a process that reaches a clinician who was assaulted on a visit and is alone in the field. A documented checklist that runs every time — treatment offered, assignment adjusted (for example, removing the clinician from a hostile home), debrief, and EAP referral logged — converts the statutory requirement into provable evidence. The documentation is also your defense: after a serious event, litigation discovery asks whether the agency had a plan, followed it, and supported the employee.

#Step 7: Run the annual plan evaluation to the governing body

This is the requirement that makes Chapter 331 a recurring obligation by law. The committee must meet at least annually to evaluate the plan and report the results to the agency's governing body.

A surveyor checks two distinct artifacts here:

1. The annual plan-evaluation record (committee minutes documenting the review), and
2. Proof it was reported to the governing body (board minutes or a signed report).

Doing the evaluation but never delivering it to the governing body is a distinct, frequently-cited gap — the board-reporting step is its own statutory obligation. Because this renews every year, most agencies carry it through an annual program review that puts the evaluation and the governing-body report on a fixed calendar.

#The HCSSA survey-readiness binder

Everything above lives in one place: a survey-readiness binder a licensing surveyor can navigate in minutes. For an HCSSA, the tabs are:

You can self-audit your agency against the full requirement set with our Chapter 331 compliance checklist, and read the regulatory text in our PL 2024-10 reference.

#Multi-branch HCSSAs: build once, deploy per branch

If you operate multiple branches, the program of record is built once and deployed per branch, with branch-specific risk inputs feeding a shared plan structure. Each branch needs its own committee linkage, its own training reconciliation, and its own field-safety inputs reflecting its service area. The governing-body report rolls the branches up. This is the model that keeps a growing agency survey-ready as it adds locations.

#Why survey-readiness, not fines, drives the timeline

Chapter 331 has no dedicated fine schedule. For an HCSSA, that does not lower the stakes — it changes where they surface. Non-compliance appears as a deficiency at the HHSC licensure survey, requiring a plan of correction, and as exposure in post-incident litigation discovery after a serious assault. The licensing agency may also take disciplinary action against the license. A clean, current binder is the asset that protects the agency in both forums.

To see exactly where your agency stands against the full PL 2024-10 requirement set, a flat-fee survey-readiness audit scores your gaps in a single focused engagement. VIGILO serves home health, hospice, and HCSSAs and long-term care across Texas with flat-fee, subscription-based compliance support — never per-incident or per-patient pricing.

---

VIGILO is a healthcare compliance, training, and consulting firm. It builds and maintains survey-defensible workplace violence prevention programs and documentation; it is not a security-guard, patrol, or investigations company, and it does not guarantee safety outcomes. Every compliance claim above traces to a named primary source.