The violence-prevention page: written before it is needed

Yes — even without a dedicated OSHA standard

OSHA has never issued a single promulgated standard for workplace violence the way it has for bloodborne pathogens or hazard communication. It enforces prevention duties in health care instead through the General Duty Clause, which requires employers to keep the workplace free of recognized hazards likely to cause serious harm, and it has published guidance for health-care and social-service settings naming patient and visitor violence as exactly that kind of hazard 1Ref 1Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA treats healthcare workplace violence under the General Duty Clause with published health-care-specific prevention guidance, and the risk profile that guidance describes for one-on-one, unaccompanied clinical work..

The absence of a dedicated standard is not the absence of a duty. A citation under the General Duty Clause requires OSHA to show the hazard was recognized and feasibly preventable — and published health-care-specific guidance is precisely what makes patient-violence risk in a clinical setting easy to recognize after the fact if nothing was ever written down.

Why solo clinical practice fits the risk profile

OSHA's health-care violence guidance describes elevated risk where a worker interacts one-on-one with patients or clients, often in a private room, sometimes with a history of behavioral escalation, and frequently without a coworker present to intervene or call for help 1Ref 1Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA treats healthcare workplace violence under the General Duty Clause with published health-care-specific prevention guidance, and the risk profile that guidance describes for one-on-one, unaccompanied clinical work.. A solo behavioral-health or medical practice seeing patients alone in a private office matches that description closely.

That isn't a reason to treat every patient as a risk — it's the reason the guidance exists at all, and the reason a plan drafted calmly, before any incident, outperforms a policy improvised mid-crisis. osha and the solo office covers the broader question of which OSHA duties reach a one-person practice; workplace violence prevention is one of the categories that reaches you regardless of headcount.

What the written plan actually needs to contain

A workable plan for a practice of one names the specific risks your setting presents — an isolated office layout, no receptionist within earshot, cash or valuables on-premises, session content that sometimes involves anger or crisis — and pairs each with a concrete response: an unobstructed exit path, a check-in protocol with someone outside the room, a way to signal for help without leaving your chair 1Ref 1Occupational Safety and Health Administration (2026).Workplace Violence.That OSHA treats healthcare workplace violence under the General Duty Clause with published health-care-specific prevention guidance, and the risk profile that guidance describes for one-on-one, unaccompanied clinical work..

It should also name who gets told about an escalating patient before the next session, not just after an incident, and what happens immediately afterward: whether you end the session, how you document it, and when law enforcement or a protective order becomes the next step rather than a documentation exercise.

A plan that exists only in your head isn't a plan a substitute clinician, a landlord, or a regulator can evaluate. Writing it down also forces the concrete decisions a mental version tends to skip — the exact phrase you'll use to end a session early, and who, specifically, you call first.

The check-in habit that costs nothing to set up

The single cheapest control in a solo practice's plan is a scheduled check-in with someone outside the room — a text at a set time, a call if a session runs long without one — because it converts "no one would know if something happened" into a bounded window before someone does. It requires no equipment and no budget, only a habit and a second person willing to notice its absence.

Pair the check-in with a physical layout review: can you reach the door without crossing the patient's position, is there a way to signal a coworker or neighbor without speaking, and does anyone besides you know your schedule for the day. None of this replaces clinical judgment about a specific patient — it just means the room itself isn't working against you.

Documenting incidents even when routine recordkeeping doesn't apply to you

Employers with ten or fewer employees are generally exempt from OSHA's routine injury-and-illness recordkeeping logs, which covers most solo and small practices — but that exemption doesn't reach severe-incident reporting, which still applies regardless of size 2Ref 2Occupational Safety and Health Administration (2026).Recordkeeping.That the ten-or-fewer-employee recordkeeping exemption covers routine injury logs but not severe-incident reporting, which still applies to a workplace-violence incident regardless of practice size.. A workplace-violence incident resulting in a worker's hospitalization, amputation, or loss of an eye triggers that reporting duty on its own.

Separate from what OSHA requires, keeping your own incident log — date, what happened, what you did, whether you escalated it — is what turns a single scary encounter into a pattern you can act on, and what shows a regulator or an attorney that the incident wasn't the first unaddressed warning sign.

Naming the specific patient scenarios your plan should anticipate

A generic "we don't tolerate violence" policy misses the scenarios a solo practice actually faces: a patient whose behavior escalates gradually across sessions rather than erupting once, or a patient whose fixation on the clinician crosses from clinical material into something that reads as personal. Both deserve their own line in the plan rather than being lumped under one vague heading.

stalking and fixation walks through the gradual-escalation pattern in more depth, and the threatening patient covers the acute version — what to do the moment a specific threat is made. Write both scenarios into your plan by name; a policy that only anticipates the dramatic version misses the slower one that's actually more common.

When the plan's next step is a protective order

Your written plan should state, in advance, what threshold moves a situation from "document and monitor" to "seek a protective order," because that decision is far harder to make clearly in the moment a threat actually happens than it is to define on a calm afternoon. Waiting until you're frightened to figure out the process costs you time you don't have.

when you need the order lays out the practical sequence — what evidence to gather, which court handles the filing, and what changes once an order is in place. Naming that resource inside your own plan means you're not searching for it for the first time under pressure.

One safety binder, reviewed on one schedule

OIG's compliance-program guidance, written for fraud and billing risk, still offers a structure worth borrowing wholesale for a workplace-violence plan: a written policy, a way to report a concern, training on what the policy says, and a defined response when something happens 3Ref 3HHS Office of Inspector General (2023).General Compliance Program Guidance.OIG's compliance-program structure (policy, training, reporting, response) scaled to a practice of one, borrowed here as the shape for a written workplace-violence plan.. That policy-training-reporting-response shape works for a safety plan as well as it does for a billing compliance program.

Pair your violence-prevention plan with your other office-safety documents — local codes for egress and alarm requirements, and your protocol for a medical emergency in the office — and review all of them on the same annual date rather than letting any one lapse quietly while you're focused on the others.