State OSHA Plans vs. Federal OSHA for Healthcare WVP

State OSHA plans and federal OSHA enforce the same underlying duty to protect healthcare workers from violence — but they do it differently. State-plan states such as California can adopt a healthcare-specific workplace violence standard; federal-OSHA states such as Texas have no such standard and rely on the General Duty Clause §5(a)(1). Understanding which regime you are in changes how your obligation is framed, but not whether it exists.

#Two enforcement structures, one duty

Under the OSH Act, a state may run its own occupational-safety program if OSHA approves it as "at least as effective" as the federal program. Roughly two dozen states operate such state plans; the rest fall under federal OSHA for private-sector employers (Source: OSHA State Plans). The practical consequence for workplace violence is significant: a state plan can promulgate a violence-specific rule that federal OSHA has not yet finalized, while federal-OSHA states must reach the same hazard through the General Duty Clause.

The duty to protect workers from recognized violence hazards exists in both structures. What differs is whether that duty is expressed as a named standard with prescriptive elements or as the performance-based recognized-hazard test of §5(a)(1).

#The state-plan model: California's standard

California, through its Cal/OSHA state plan, adopted the most developed healthcare workplace violence regulation in the country — 8 CCR §3342, effective for covered healthcare employers since 2017. It is prescriptive where the General Duty Clause is performance-based, requiring covered employers to:

• Maintain a written workplace violence prevention plan specific to each unit and shift.
• Conduct and document assessments of violence hazards.
• Train staff on the plan and on recognizing and responding to violence.
• Keep a violent-incident log with defined data fields, separate from injury recordkeeping.
• Report certain serious incidents to Cal/OSHA.

The point for a multi-state operator is not the California detail; it is the shape. A state standard names the elements and the cadence, removing the interpretive work that the General Duty Clause leaves to the employer. Other state plans have followed with their own healthcare violence rules, and the federal proposal under OSHA's rulemaking draws on this same model.

#The federal-OSHA model: Texas

Texas is a federal-OSHA state for private-sector employers. There is no Texas-specific OSHA workplace violence standard, so for OSHA purposes Texas healthcare facilities are governed by the General Duty Clause §5(a)(1), enforced through CPL 02-01-058 and evaluated against the five components of OSHA Publication 3148.

The absence of a named standard in Texas does not mean a lighter obligation — a recurring misconception. The recognized-hazard duty is the same; only the framing changes from "follow these elements" to "show you abated a recognized hazard." If anything, the performance-based test puts more weight on documentation, because there is no checklist to point to other than the one you built.

#Texas is the unusual case: a state mandate without a state OSHA plan

Texas illustrates why the state-versus-federal OSHA question is only half the picture. While Texas has no state OSHA plan and therefore no state OSHA violence standard, the Texas Legislature enacted its own healthcare-specific mandate independent of OSHA: HSC Chapter 331 (the SB 240 mandate, effective September 1, 2024). It requires covered facilities to maintain a written workplace violence prevention plan, a committee, training, and an annual plan evaluation — prescriptive elements that look a great deal like a state-plan standard, but enforced through the licensure and survey system rather than OSHA.

So a Texas hospital lives under a combination a single-axis "state vs. federal OSHA" framing misses: the federal General Duty Clause for OSHA purposes, plus a prescriptive Texas statute, plus Joint Commission accreditation requirements. The three-regime crosswalk is what reconciles them into one evidence set.

#What this means for multi-state operators

A health system operating across both state-plan and federal-OSHA states should not run two different programs. The convergent core is identical: written program, worksite analysis, hazard controls, training, recordkeeping, evaluation. Build to that core — the Publication 3148 structure — and then add the state-specific deltas (California's incident-log fields, Texas's committee composition and annual evaluation) as modular sections rather than separate programs.

The mistake is the reverse: building a minimal program in federal-OSHA states on the assumption that "no standard" means "less required." A Texas facility that under-builds because it sees no OSHA violence standard ignores both the General Duty Clause and Chapter 331, and a single incident can surface that gap in an inspection or in litigation discovery regardless of which OSHA structure applies.

#One program, every jurisdiction

Whether your facility sits in a state-plan state or a federal-OSHA state, the defensible posture is the same well-documented program of record, organized to the convergent core and annotated with the local deltas. For a Texas hospital that means satisfying the General Duty Clause, Chapter 331, and the Joint Commission from one binder.

If you operate in Texas or across multiple jurisdictions and want to know whether your program meets the strictest applicable framing, a flat-fee survey-readiness audit scores it against the Publication 3148 components and the Chapter 331 elements, and an annual program review keeps the state-specific deltas current as standards evolve.

---

This article provides general compliance information, not legal advice or a guarantee of any safety or survey outcome; consult qualified counsel for your facility. Primary sources: OSH Act §18 (state plans); 8 CCR §3342 (Cal/OSHA); OSH Act §5(a)(1); OSHA Publication 3148; Texas HSC Chapter 331.