Policy & Documentation
Patient & Visitor Code of Conduct: A WVP Policy Guide
A patient and visitor code of conduct is a documented workplace violence control. Here is what it must contain, how to enforce it defensibly, and how surveyors read it.
A patient and visitor code of conduct is not a courtesy poster — it is a documented administrative control inside your workplace violence prevention program. When it is written clearly, communicated consistently, and enforced through a process you can show a surveyor, it is one of the cleanest pieces of evidence that your facility set behavioral expectations and acted on them. When it sits on a wall and nothing else, it becomes a liability.
#Why the code of conduct belongs in your WVP plan
Texas HSC Chapter 331 requires a written plan built on prevention and administrative controls. A code of conduct is an administrative control: it defines acceptable behavior, sets a standard, and creates the trigger for escalation. The Joint Commission's workplace violence requirements (effective Jan. 1, 2022 for hospitals) similarly expect leadership-defined expectations and a culture of safety. The code is where both regimes' "set the expectation" obligation becomes a concrete, named document.
It also does practical work. Most healthcare workplace violence is Type II — committed by patients, visitors, or family members. A code of conduct addresses that population directly, in writing, before an encounter escalates.
#What a defensible code must contain
A surveyor-fluent code of conduct is specific about behavior, scope, and consequence. At minimum:
| Element | What it must state |
|---|---|
| Scope | Who it covers (patients, visitors, family, vendors) and where (whole campus vs. specific units) |
| Expected behavior | Plain-language norms — respectful communication, no threats, no weapons, no recording without consent |
| Prohibited conduct | Specific, observable behaviors: verbal threats, physical aggression, harassment, property damage |
| Consequences | The graduated response, from a verbal reminder to a behavioral agreement to restricted visitation |
| Process | Who acts, how it is documented, and how it routes to the incident log |
| Care protections | A clear statement that emergency care is never withheld and patient-care decisions follow clinical policy |
That last row matters for the rails: a code of conduct manages behavior and visitor presence, not access to emergency treatment. Keep clinical and conduct decisions on separate, documented tracks.
#Communicate it — or it is not a control
A control you never communicated is not a control. Build the communication into the patient journey: admission packets, registration materials, posted signage in high-traffic and high-risk areas, and the patient portal. Document that you communicate it — keep the signage inventory and the admission-materials version in your binder. This is also where a code intersects with front-of-house visitor management: the code sets the expectation, and the visitor-management workflow operationalizes it without turning your lobby into a checkpoint.
#Enforce it through a documented, even-handed process
Enforcement is where codes of conduct succeed or fail in litigation. Three rules keep it defensible:
- Graduated response. Move from reminder, to documented warning, to a written behavioral agreement, to restricted visitation — each step recorded. Skipping straight to removal without documentation reads as arbitrary.
- Even application. Apply the code consistently across patients and visitors regardless of protected characteristics. Inconsistent enforcement is a discrimination exposure as much as a safety one.
- Tie violations to the incident log. When a conduct violation occurs, it should generate an incident record that feeds your trending and worksite analysis. A behavioral agreement that exists only in a patient's chart, invisible to the WVP committee, is a missed signal — closely related to the discipline of a defensible behavioral alert and flagging process.
#The survey and deposition test
A surveyor will not just confirm the code exists. They will ask to see it communicated, ask staff how they apply it, and look for the incident records that show it was used. A plaintiff's counsel will ask the same questions in reverse — looking for a code the facility wrote but never followed. The gap between a written code and actual practice is the precise failure pattern surveyors cite, covered in the policy-to-practice gap. Close it by keeping the code, the signage record, the staff-education roster, and the enforcement log together.
#Where to keep it
File the code of conduct in your survey-readiness binder alongside your visitor-management procedure and your behavioral-alert policy, with the communication evidence attached. Reference it by name in your written WVP plan so the plan and the control point to each other.
VIGILO drafts patient and visitor code-of-conduct language, ties it to your behavioral-alert and visitor-management workflows, and integrates it into your facility-specific plan through the WVP Foundation Package and policy and plan development service. We keep it consistent and current through the Annual Compliance Subscription.
VIGILO provides compliance, training, and consulting assistance and supports survey-readiness; it does not guarantee safety outcomes. Sources: Texas HSC Chapter 331 (SB 240, 88th Leg., 2023); 26 TAC §133.55; HHSC PL 2024-10; The Joint Commission workplace violence prevention requirements (effective Jan. 1, 2022 for hospitals); OSHA General Duty Clause §5(a)(1) and Publication 3148.