Healthcare facility directors operate in one of the most heavily regulated sectors of the built environment. The regulatory landscape—Joint Commission, CMS, OSHA, NFPA, EPA, state health departments, fire marshals, and building code authorities—never stands still. Standards update on overlapping cycles, enforcement priorities shift, and new requirements emerge from legislation, rulemaking, and accreditation standard revisions.
2025 represents a particularly active year for regulatory change affecting healthcare facility operations. Several major rulemakings have reached implementation milestones, NFPA standards have entered new adoption cycles, and healthcare-specific regulatory priorities reflect post-pandemic lessons, climate adaptation urgency, and the federal government’s continued push on workplace safety in healthcare.
OSHA Workplace Violence Prevention Rule: Implementation Milestones
OSHA’s workplace violence prevention final rule for healthcare and social assistance settings has reached key implementation milestones in 2025. After years of development and a final rule published in 2024, compliance deadlines are now active for most healthcare facility types.
Current Implementation Status Healthcare facilities with 10 or more employees are in active compliance implementation. Required elements as of 2025 include:
- A written Workplace Violence Prevention Plan (WVPP) reviewed by a multidisciplinary team including facilities management
- A completed annual workplace violence hazard assessment documenting physical environment risk factors
- Engineering controls implemented in response to identified physical environment hazards (lighting upgrades, duress systems, secured access points)
- Training for all employees on the WVPP
Enforcement Activity OSHA has initiated enforcement activity under the rule, with citations issued to healthcare organizations that lack compliant WVPPs or have not implemented required controls. Healthcare facility directors should ensure their organizations have current, documented WVPPs with facility management participation and that physical environment improvements are documented as engineering control implementations.
Physical Environment Compliance Focus The most common physical environment deficiencies found in OSHA workplace violence compliance inspections include: parking area lighting that doesn’t meet IES standards for safe working conditions, emergency call station density below recommended standards, isolated work areas without duress button coverage, and ED waiting area designs that don’t provide clear staff sightlines.
CMS Conditions of Participation: 2025 Effective Provisions
Several CMS CoP provisions finalized in 2023-2024 rulemaking cycles have 2025 effective dates:
Behavioral Health Unit Standards Updated CMS standards for inpatient psychiatric and behavioral health units include physical environment requirements covering ligature risk mitigation, patient room privacy standards, and outdoor access provisions. Healthcare facility directors with behavioral health units should review physical environment compliance against the updated standards.
Critical Access Hospital Emergency Preparedness Enhanced emergency preparedness requirements for Critical Access Hospitals—including climate-related hazard planning and cybersecurity preparedness provisions—are fully effective in 2025. CAH facility directors should complete HVA updates to include these new required elements.
Infection Control Physical Environment CMS has enhanced documentation expectations for infection control-related physical environment management, including construction and renovation ICRA programs and water management program documentation. Survey activity has increased in this area following healthcare-associated infection events linked to construction and water system deficiencies.
NFPA Code Adoption Cycles: 2024 Editions Taking Effect
NFPA standards are adopted by states through their own regulatory processes on independent schedules, meaning a single NFPA edition effective date doesn’t uniformly affect all healthcare facilities. However, 2024-2025 represents an active period of state adoption for several key NFPA editions:
NFPA 99 (2024 Edition) Several states have adopted or are in the process of adopting the 2024 edition of NFPA 99, which includes updates to emergency power requirements (fuel storage duration, generator testing requirements), water management provisions, and medical gas system standards. Facility directors should verify which NFPA 99 edition governs their facility under current state licensing requirements.
NFPA 101 (2021 Edition) State adoption of the 2021 Life Safety Code continues. Key changes in the 2021 edition that may affect healthcare facilities include updates to corridor door requirements, modifications to existing building sprinkler provisions, and revised emergency lighting testing requirements. Organizations in states adopting the 2021 edition should conduct gap assessments against current compliance.
NFPA 72 (2022 Edition) Updated fire alarm system provisions in the 2022 NFPA 72 affect healthcare facilities as states adopt this edition. Changes affecting healthcare include updated initiating device requirements, modifications to notification appliance placement standards, and revised requirements for fire alarm system monitoring.
EPA and Environmental Regulatory Updates
Refrigerant Management: Phasedowns Affecting Healthcare The EPA’s phasedown schedule for hydrofluorocarbon (HFC) refrigerants is affecting healthcare facilities’ HVAC and refrigeration equipment maintenance and replacement decisions. Healthcare organizations with large chiller plants, cooling towers, and medical refrigeration equipment using HFC refrigerants will face increasing refrigerant cost and availability challenges as the phasedown progresses. 2025 represents an important planning milestone for organizations with aging equipment dependent on refrigerants with limited future availability.
Stormwater Regulations EPA’s continuing development of stormwater management requirements under the National Pollutant Discharge Elimination System (NPDES) affects healthcare campuses with significant impervious surface area. Healthcare organizations in municipalities with updated MS4 permits may face new obligations for parking lot stormwater management, including retrofit requirements for runoff reduction.
State-Level Regulatory Activity
Several states have enacted or are implementing healthcare facility-specific regulations that go beyond federal minimums:
California California SB 553 (workplace violence prevention) has imposed requirements on healthcare employers that in some respects exceed OSHA’s federal rule. California healthcare facility directors should ensure compliance with both the state law requirements and OSHA’s federal standard.
New York New York’s Healthcare and Behavioral Health Violence Prevention Act imposes specific training and physical environment assessment requirements for healthcare facilities. The law’s physical environment provisions overlap significantly with OSHA’s federal workplace violence rule but include New York-specific documentation requirements.
Texas Texas has updated its Hospital Licensing Standards in 2025 with revised physical environment requirements, including updated ventilation requirements that reference ASHRAE 170 (2017 edition) and enhanced water management documentation requirements.
Planning for 2026 Regulatory Environment
Regulatory changes planned or in development for 2026 that facility directors should monitor:
OSHA Heat Stress Standard OSHA’s long-anticipated heat illness prevention final rule is expected to include provisions applicable to healthcare workers in outdoor environments (parking, campus maintenance, grounds) and potentially indoor environments where heat is a recognized hazard. Healthcare facility directors should assess outdoor worker heat exposure and consider proactive measures.
Joint Commission Standard Revisions Joint Commission has announced standard revision projects for Environment of Care and Life Safety standards that will result in published changes effective in 2026. Monitoring Joint Commission Perspectives publications and participating in standard revision comment periods allows facility directors to anticipate and influence changes before they take effect.
Frequently Asked Questions
How should healthcare facility directors keep current with the volume of regulatory changes affecting their programs? Most facility directors rely on a combination of: membership in ASHE (American Society for Healthcare Engineering) and receipt of their publications, subscription to Joint Commission Perspectives, direct OSHA standard monitoring, participation in state hospital association compliance education programs, and relationship with legal and compliance counsel who track healthcare regulatory developments. No single source covers all regulatory domains—a deliberate monitoring strategy is necessary.
How should healthcare organizations handle conflicts between different regulatory requirements (e.g., OSHA and CMS requirements that seem to conflict)? When regulatory requirements appear to conflict, the higher standard typically prevails—the requirement that provides greater protection to patients and workers. Document the analysis that led to compliance with the more stringent requirement. Engage regulatory counsel when genuine conflicts exist, particularly when compliance with one requirement would require violation of another.
Are there resources for healthcare facility directors to benchmark their compliance programs against peers? ASHE’s annual survey of healthcare facilities departments provides compliance benchmark data. The Joint Commission publishes annual data on the most frequently cited standards during surveys—valuable input for prioritizing compliance focus. State hospital associations often facilitate peer benchmarking groups among members.
What’s the risk of not staying current with regulatory changes? The primary risks are regulatory findings during surveys (with accreditation and reimbursement consequences), OSHA citations with financial penalties, and liability exposure from incidents that occur in areas where regulatory non-compliance contributed to the hazard. The secondary risk is less visible but equally significant: regulatory non-compliance often correlates with actual safety deficiencies—so the facilities that are most behind on compliance are often the ones with the highest risk of patient and staff harm.