"Maryland Workplace Violence Prevention: What Employers Must Know"

I want to start with something that drives me absolutely crazy about how most people approach state compliance: they wait until someone gets hurt.

Maryland has workplace violence prevention requirements. They're real. They carry teeth. And if you're operating in the state without understanding what they demand of you, you're not just rolling the dice with employee safety — you're rolling the dice with your business.

Let me walk you through everything you need to know. No fluff. No legal hedging. Just the requirements, the consequences, and the action plan.

Maryland's Regulatory Framework

Maryland's workplace violence prevention requirements operate through a multi-layered regulatory framework that pulls from both state statute and the federal enforcement backstop.

**Maryland Occupational Safety and Health (MOSH)** — This is the state-level agency responsible for workplace safety enforcement. MOSH operates under the Maryland Department of Labor and functions as a State Plan for both public and private sector employers. That means Maryland has its own inspectors, its own enforcement priorities, and its own ability to adopt standards that go beyond federal OSHA.

**The Maryland Healthy Working Families Act** and related employment statutes create additional obligations around employer responsibility for working conditions that are relevant to workplace violence — particularly in industries where working conditions themselves contribute to violence risk.

**Maryland's State Plan Status** — Unlike some states that only cover public-sector employees under their state plan, Maryland covers both public and private sector workers. This gives MOSH direct enforcement authority over workplace violence prevention for all employers in the state.

Here's what that means practically: when a workplace violence incident happens in Maryland, it's MOSH that investigates. It's MOSH that issues citations. And it's MOSH that sets the enforcement priorities that determine which industries and workplaces get proactive inspection attention.

Covered Employers

Maryland's workplace violence prevention requirements apply broadly, but with emphasis on specific sectors:

Explicitly Targeted Industries

• **Healthcare facilities** — Hospitals, clinics, nursing homes, psychiatric facilities, home health agencies, and emergency medical services. Maryland has recognized that healthcare workers face workplace violence rates several times higher than the general workforce.
• **Social services** — State and private social service agencies, child protective services, behavioral health programs, and community-based service organizations.
• **Education** — Public schools, higher education institutions, and educational support organizations. Maryland has addressed school-based workplace violence through both MOSH enforcement and education-specific regulations.
• **Corrections and law enforcement** — While these sectors have inherent violence exposure, Maryland requires specific protocols beyond the general expectation of job-related risk.
• **Retail and hospitality** — Particularly late-night operations, cash-intensive businesses, and establishments serving alcohol.

General Duty Coverage

Every employer in Maryland — regardless of industry — is subject to the general duty clause, which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm.

If workplace violence is a recognized hazard in your industry (and the Bureau of Labor Statistics data makes it increasingly difficult to argue that it isn't for most industries), the general duty clause creates an affirmative obligation to take preventive measures.

This is not theoretical. MOSH has cited employers under the general duty clause for failure to address workplace violence hazards that were identified through prior incidents, employee complaints, or industry data showing elevated risk.

Size and Type Considerations

Maryland does not provide a blanket small-employer exemption from workplace violence prevention. While the practical intensity of your obligations may scale with your size and risk profile, the fundamental duty to address known workplace violence hazards applies regardless of employee count.

Multi-site employers must address workplace violence prevention at each location based on that location's specific risk factors — a corporate plan that doesn't account for site-specific hazards is insufficient.

Plan Elements

A compliant Maryland workplace violence prevention plan should include the following elements:

1. Management Commitment and Policy

A written policy statement — signed by senior leadership — that declares the organization's commitment to preventing workplace violence, defines what constitutes workplace violence, and establishes that violence, threats, and intimidation will not be tolerated.

This is not decorative. The policy statement establishes the organizational foundation for everything else in the plan. Without it, the rest of the plan lacks authority.

2. Risk Assessment and Hazard Identification

A systematic evaluation of workplace violence risk factors, including:

• **Environmental factors** — Physical layout, lighting, access control, security systems, isolated work areas, cash handling procedures
• **Operational factors** — Working alone, working with the public, serving volatile populations, handling complaints or disputes, late-night hours
• **Historical analysis** — Review of past incidents, near-misses, threats, employee concerns, and workers' compensation claims related to violence
• **Community factors** — Crime rates in the area surrounding the workplace, proximity to high-crime zones, local law enforcement response times

The risk assessment must be documented and updated regularly — at minimum annually, and immediately after any significant incident or operational change.

3. Prevention Strategies

Based on the risk assessment, specific strategies to reduce workplace violence exposure:

**Engineering controls:**
- Physical barriers (reception windows, locked doors, security vestibules)
- Surveillance systems (cameras, monitoring)
- Alarm systems (panic buttons, duress alarms, two-way radios)
- Lighting improvements
- Access control systems (key cards, visitor management)

**Administrative controls:**
- Staffing policies that minimize solo work in high-risk situations
- Cash-handling procedures that limit on-site cash
- Client screening and flagging systems for known violent individuals
- Visitor management and sign-in procedures
- Buddy systems for home visits and field work
- Scheduling practices that consider violence risk by time of day

**Work practice controls:**
- De-escalation protocols
- Safe positioning and escape routes
- Communication protocols during high-risk situations
- Check-in procedures for isolated workers

4. Reporting and Response Procedures

Clear, written procedures for:

• **How to report** — Multiple channels for reporting workplace violence incidents, threats, and concerns. Must include options for confidential or anonymous reporting.
• **Who to report to** — Designated individuals or positions responsible for receiving and acting on reports.
• **Anti-retaliation protections** — Explicit assurance that employees who report will not face retaliation, with a description of how retaliation claims will be handled.
• **Immediate response procedures** — Step-by-step actions for active violence events, threats of imminent violence, and verbal threats or harassment.
• **Law enforcement coordination** — When and how to involve law enforcement, including pre-established relationships with local agencies and clear protocols for 911 calls.

5. Post-Incident Procedures

After any workplace violence incident:

• **Medical response** — Immediate first aid and emergency medical services
• **Scene preservation** — For law enforcement investigation if applicable
• **Employee support** — Crisis counseling, employee assistance program referrals, and follow-up care
• **Incident investigation** — Documented investigation of what happened, why it happened, what could have prevented it, and what changes are needed
• **Plan review** — Immediate review of the WVPP in light of the incident, with documented updates as needed
• **Communication** — Appropriate communication to affected employees, the broader workforce, and external parties as needed

6. Training Program

Training that covers all required elements (see Training section below) and is documented, tracked, and updated.

7. Record Keeping

Documented records of:
- The WVPP itself, including all revisions
- Risk assessments and updates
- Incident reports and investigation findings
- Training records (attendance, content, date, trainers)
- Plan review records

Training Requirements

Maryland's training requirements for workplace violence prevention include:

Required Content

All employees in covered industries — and all employees facing recognized workplace violence hazards — must receive training that covers:

1. **Workplace violence definitions and types** — Physical violence, threats, verbal abuse, intimidation, harassment, and the four categories of workplace violence (Type I through Type IV)
2. **Risk factors specific to the workplace** — What creates violence exposure in the employee's specific work environment, based on the risk assessment
3. **Warning signs and behavioral indicators** — How to recognize escalating behavior, pre-incident indicators, and behavioral red flags
4. **Prevention strategies** — Environmental controls, administrative procedures, and personal safety practices available in the workplace
5. **De-escalation techniques** — Verbal and non-verbal communication strategies for defusing hostile situations
6. **Response procedures** — What to do during different types of workplace violence events, including escape routes, shelter-in-place, law enforcement notification, and helping others
7. **Reporting procedures** — How, when, and to whom to report incidents, threats, and concerns, including anti-retaliation protections
8. **Post-incident support** — Available resources including employee assistance programs, counseling, workers' compensation, and follow-up procedures

Training Frequency

• **New hire training** — During initial orientation, before the employee begins work in areas with workplace violence risk
• **Annual refresher training** — At least once per year for all covered employees
• **Update training** — When the WVPP is significantly revised, when new hazards are identified, or after a serious incident
• **Role-specific training** — Supervisors and managers receive additional training on their responsibilities for prevention, recognition, response, and post-incident management
• **Scenario-based drills** — Regular exercises (recommended at least annually) that test emergency response procedures through realistic scenarios

Documentation

Training must be documented with records showing who was trained, when, what topics were covered, who provided the training, and the training materials used. Records should be retained for at least three years.

Reporting Requirements

Internal Reporting

Maryland employers must establish internal reporting systems that:

• Allow employees to report workplace violence incidents, threats, and concerns through multiple channels
• Include provisions for confidential reporting
• Designate responsible individuals or positions for receiving and acting on reports
• Guarantee anti-retaliation protections for reporters
• Require timely investigation and response to all reports

External Reporting

**MOSH Reporting** — Employers must report to MOSH any workplace fatality within 8 hours and any inpatient hospitalization, amputation, or loss of an eye within 24 hours. These reporting timelines mirror federal OSHA and apply regardless of the cause — including workplace violence.

**Law Enforcement** — Workplace violence incidents involving physical assault, weapons, credible threats of violence, or stalking should be reported to local law enforcement. Maryland law requires reporting of certain criminal acts, and failure to report can create both regulatory and legal liability.

**Workers' Compensation** — Workplace violence injuries must be reported to the employer's workers' compensation carrier in accordance with Maryland's reporting requirements, including the First Report of Injury.

Incident Documentation

Every workplace violence incident must be documented with:
- Date, time, and location
- Description of the event
- Parties involved (employees, clients, visitors, etc.)
- Type of violence (physical, verbal, threats, etc.)
- Injuries sustained
- Witnesses
- Contributing factors
- Actions taken
- Follow-up measures

Differences from California SB 553

For multi-state employers reconciling Maryland and California requirements, here are the key distinctions:

Coverage Approach

| Dimension | Maryland | California SB 553 |
|---|---|---|
| **Scope** | Targeted industries + general duty clause | Virtually all employers |
| **Primary mechanism** | State Plan enforcement + general duty | Specific standard (Section 3343) |
| **Small employer exemption** | No blanket exemption | <10 employees in non-public workplaces |
| **Healthcare carve-out** | Included in general WVP scope | Separate standard (Section 3342) |

Plan Specificity

| Element | Maryland | California SB 553 |
|---|---|---|
| **Violent incident log** | Required as part of recordkeeping | Specifically mandated with defined fields |
| **Employee involvement** | Expected but less prescriptive | Explicitly required and documented |
| **Multi-employer coordination** | Expected under general duty | Specifically required for shared worksites |
| **Environmental controls** | Emphasized, especially for healthcare | Included but less prescriptive on specifics |
| **De-escalation training** | Specifically emphasized | Required as training component |

Enforcement

| Aspect | Maryland | California |
|---|---|---|
| **Enforcing agency** | MOSH | Cal/OSHA |
| **Penalty structure** | Aligned with federal OSHA | Higher state-specific maximums |
| **Inspection approach** | Complaint-driven + emphasis programs | More aggressive programmed inspections |
| **Citation specificity** | General duty clause or specific standard | Specific standard citation |

Record Retention

| Record Type | Maryland | California SB 553 |
|---|---|---|
| **Training records** | Minimum 3 years (best practice) | 1 year minimum |
| **Incident logs** | Maintain per recordkeeping policy | 5 years minimum |
| **WVPP document** | Duration of effectiveness | Duration of effectiveness |
| **Risk assessments** | Maintain per recordkeeping policy | 5 years minimum |

Practical Implication

California SB 553 is more prescriptive and broader in scope. If you build your program to California standards, you'll meet most Maryland requirements — but you need to add Maryland's emphasis on environmental controls and de-escalation training, which are more specifically required in Maryland's healthcare and social service contexts.

If you only operate in Maryland and not California, you can build a more targeted program focused on your specific industry risks. But don't make the mistake of thinking "targeted" means "less rigorous." For covered industries, Maryland's expectations are comprehensive and enforced.

Enforcement Reality

Let me tell you what actually happens when MOSH gets involved with a workplace violence situation.

**Complaint-Driven Inspections** — When an employee files a complaint about workplace violence hazards, MOSH investigates. This can be triggered by a specific incident, a pattern of threats, or environmental conditions that create foreseeable violence risk. Complaints can be filed online, by phone, or in writing, and employees have anti-retaliation protections under Maryland law.

**Post-Incident Investigations** — After a serious workplace violence event — particularly one resulting in hospitalization or death — MOSH conducts an investigation. They review the employer's WVPP (or note the absence of one), examine training records, interview employees, and evaluate whether the employer took reasonable steps to prevent the incident.

**Targeted Enforcement** — MOSH participates in emphasis programs that focus inspection resources on high-risk industries and hazards. Healthcare workplace violence has been an area of national emphasis, and Maryland participates in these programs.

**Penalties** — MOSH follows the federal OSHA penalty structure:

| Violation Type | Maximum Penalty |
|---|---|
| Serious | $16,131 per violation |
| Other-than-serious | $16,131 per violation |
| Willful or repeat | $161,323 per violation |
| Failure to abate | $16,131 per day |

But penalties are only part of the cost. Workers' compensation claims from workplace violence incidents can be substantial — particularly when they involve physical injuries, psychological trauma, and lost work time. Civil liability for negligent security or failure to protect employees can run into hundreds of thousands or millions of dollars.

Your Action Plan

Here's what you do if you operate in Maryland:

**Step 1: Assess your risk profile.** Don't guess. Use the risk assessment framework above. Document your findings.

**Step 2: Determine your coverage category.** Are you in a specifically covered industry (healthcare, social services, education, corrections)? If yes, you have explicit plan and training obligations. If not, you still have general duty obligations proportional to your risk profile.

**Step 3: Develop or update your WVPP.** Include all required elements. Make it specific to your Maryland operations — site-specific risk factors, local emergency contacts, state-specific reporting requirements.

**Step 4: Train your people.** All employees. Supervisors get extra. Document everything. Repeat annually.

**Step 5: Implement environmental controls.** Based on your risk assessment. Don't skip this step — it's often where the biggest risk reduction comes from and where inspectors look first.

**Step 6: Establish reporting and response protocols.** Multiple channels. Anti-retaliation protections. Clear procedures for during and after incidents.

**Step 7: Document, document, document.** Your plan, your training, your risk assessments, your incidents, your investigations, your corrective actions. All of it. In writing. Maintained and accessible.

**Step 8: Review and update.** Annually at minimum. After every incident. After every significant operational change.

This is not complicated. It's detailed, yes. It requires discipline, absolutely. But there is nothing on this list that any competent business operator can't implement.

The only thing that makes compliance hard is procrastination. And procrastination, in the context of workplace violence prevention, has a cost that's measured in more than dollars.

Get it done.