Employer guide · Onboarding, training and retention

Crisis and De-Escalation Training: What Behavioral Health Employers Must Provide

Which rules actually mandate crisis, de-escalation and restraint training, what the training must cover when they do, and how refreshers and records work.

Updated October 7, 2026

Crisis, de-escalation and restraint training is required where a specific rule reaches your setting — the duties come from particular settings and states, not from one general federal rule for behavioral health.

Federal CMS rules bind Medicare- and Medicaid-participating hospitals and psychiatric residential treatment facilities serving people under 21.

California requires workplace violence training from most employers in the state.

Federal OSHA guidance is advisory.

Outpatient clinics, group practices and ABA clinics elsewhere look to state licensing rules and accreditor standards instead.

Rules vary by state and change

This guide explains federal rules and the state rules it names, as of the date above.

Licensure, supervision, payer and employment rules differ by state and are revised often, so confirm current requirements with your state board, Medicaid agency, labor department or employment counsel before you act on them.

It is general information, not legal advice.

Where crisis and de-escalation training is mandatory

Sort the question by who imposes the rule.

Crisis, de-escalation and restraint training requirements come from particular settings and regulators, and each rule names exactly who it binds:

  • CMS hospital conditions of participation. Medicare- and Medicaid-participating hospitals — including psychiatric hospitals — must train staff and demonstrate competency in restraint and seclusion before staff perform either (42 CFR 482.13(f)).
  • CMS PRTF rules. 42 CFR 483 subpart G binds psychiatric residential treatment facilities (PRTFs) that are not hospitals and provide inpatient psychiatric services to individuals under age 21.
  • California law. Most California employers fall under the state's workplace violence prevention law (SB 553), while the operations 8 CCR 3342 names — 24-hour health facilities, home health care and home-based hospice, emergency medical services, drug treatment programs and outpatient medical services to the incarcerated — follow Cal/OSHA's health care workplace violence standard instead.
  • CCBHC certification. Certified Community Behavioral Health Clinics must train staff at orientation and annually on risk assessment and on suicide and overdose prevention and response — a certification requirement, not general law.

Just as important is where the federal rules stop.

The CMS restraint and seclusion training rules bind participating hospitals and PRTFs serving people under 21 — they do not reach outpatient clinics, group practices or adult residential programs.

Two other sources can still fill the gap: state licensing rules for residential and substance use programs sometimes add restraint-training requirements (they vary by state and are not summarized here), and an accreditor's standards may add more.

Check both before you conclude nothing applies to you.

De-escalation training is also one item on a longer list.

Our guide to required trainings sorts every training behavioral health staff need by whether the law, a payer or an accreditor requires it.

CMS rules for hospitals and PRTFs

Hospitals: 42 CFR 482.13(f).

Under the CMS hospital Conditions of Participation, staff must be trained and able to demonstrate competency in the application of restraints, the implementation of seclusion, and the monitoring, assessment and care of a patient in restraint or seclusion — before they perform these interventions.

The training happens as part of orientation and periodically after that, on the cadence hospital policy sets.

The rule lists what the training must cover, and it reads like the specification for a de-escalation program:

  • recognizing triggers and the use of nonphysical intervention skills — the de-escalation core;
  • selecting the least restrictive intervention;
  • the safe application of each type of restraint the hospital uses, including signs of physical distress such as positional asphyxia;
  • recognizing when restraint is no longer needed;
  • monitoring the restrained patient; and
  • first aid techniques and certification in cardiopulmonary resuscitation, including required periodic recertification.

Trainers must be qualified by education, training and experience, and the hospital must document completed training and demonstrated competency in staff personnel records.

PRTFs: 42 CFR 483.376.

Psychiatric residential treatment facilities — not hospitals, serving individuals under 21 — carry their own detailed training rules.

Staff need ongoing education, training and demonstrated knowledge of trigger identification, nonphysical intervention skills such as de-escalation, mediation, conflict resolution and active listening, and the safe use of restraint and seclusion.

Staff must be trained and demonstrate competency before participating in an emergency safety intervention, and must hold CPR certification with periodic recertification.

The PRTF rules are unusually explicit about practice and proof.

Training must include exercises in which staff successfully demonstrate the techniques in practice, and personnel records must show the date training was completed and who certified it.

Training materials must be available to CMS, the state Medicaid agency and the state survey agency — so whatever program you buy or build needs documentation that survives a surveyor's request.

State workplace violence laws

For employers outside hospitals, state workplace violence laws are the other place a binding training duty can come from — and California's is the one this page's research verified in detail.

The general law, Labor Code 6401.9 (SB 553), became operative on July 1, 2024 and applies to all California employers except listed exemptions.

Those exemptions include operations covered by Cal/OSHA's health care workplace violence standard, employees teleworking from a location of their choice, and non-public worksites with fewer than 10 employees on site that comply with 8 CCR 3203.

Under SB 553, you must provide effective workplace violence training when the plan is first established and annually after that.

The training must cover the plan, how to report incidents without fear of reprisal, job-specific hazards and the corrective measures, and the violent incident log, and it must include a chance for interactive questions and answers.

Additional training is required when a new hazard is identified or the plan changes.

Which California track covers you.

Cal/OSHA's health care workplace violence standard, 8 CCR 3342 — not SB 553 — covers 24-hour health facilities (including psychiatric hospitals), home health care and home-based hospice, emergency medical services, drug treatment programs, and outpatient medical services provided to the incarcerated.

In practice: a California substance use treatment program follows 3342, while an outpatient therapy group or ABA clinic that is neither a 24-hour facility nor a drug treatment program will most likely fall under SB 553.

Our research found no definition of "drug treatment program" in the 3342 text we reviewed, so if your program sits near that line, confirm the split with employment counsel.

Under 8 CCR 3342, covered employers train employees when newly hired or newly assigned, give employees performing patient contact activities and their supervisors refresher training at least annually, and give staff assigned to respond to violent incidents additional training before assignment and at least annually.

The standard requires that training be provided at no cost to the employee and during paid time.

Outside California, workplace violence training is a state-by-state question, and this page does not summarize other states' laws.

Ask your state labor agency or employment counsel whether your state has its own requirement.

OSHA guidance: advisory, not a mandate

There is no federal OSHA standard that requires de-escalation training.

What federal OSHA publishes for your settings is guidance: the Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers (OSHA 3148, 2016), which state that they are not a standard or regulation and create no new legal obligations.

The guidance is written for your world — it explicitly covers community mental health clinics, drug abuse treatment centers and psychiatric facilities.

Treat it as the checklist for a voluntary program.

OSHA's guidelines recommend that new and reassigned workers receive an initial orientation before they start duties, that all workers receive annual training, and that high-risk settings consider more frequent refreshers.

The document also explains why the topic draws regulatory attention: it cites Bureau of Labor Statistics figures showing 23,540 to 25,630 workplace assaults a year from 2011 to 2013, with 70 to 74 percent occurring in healthcare and social service settings.

The data are dated — they cover 2011 to 2013 — but they are the figures the guidance is built on.

Aligning an in-house program with the recommended elements — orientation before first duties, annual training for all workers, more frequent refreshers in high-risk settings — gives you a documented baseline even where no rule compels one.

Choosing a training program

Work backwards from what binds you.

If the CMS hospital rules apply, the program has to produce what 482.13(f) requires: competency demonstrated before staff perform interventions, trainers qualified by education, training and experience, and personnel-record documentation of completed training and competency.

If the PRTF rules apply, add what 483.376 requires: practice exercises in which staff successfully demonstrate the techniques, and records showing the training date and who certified completion.

If California's SB 553 or 8 CCR 3342 applies, the program must cover the required content and fit the annual cadence.

If CCBHC criteria apply, fold in the orientation and annual topics.

What is left is shaped by your clients, your setting and your incident history.

Then match the training to the people who will use it.

Plan for direct-care staff — behavioral health technicians, RBTs and similar roles — to be first on the scene in a crisis, with clinicians and supervisors behind them.

A program written around adult inpatient units may not fit an ABA clinic serving young children, so population fit matters more than brand.

If you are still building that bench, our guide to hiring BHTs covers the role, and the behavioral health hiring hub collects the role-by-role guides.

Searches for crisis prevention intervention training, CPI training or Safety Care training will surface vendor programs — CPI (Crisis Prevention Institute) and Safety-Care are two names you will come across.

This page does not rank or endorse vendors, and no rule in this guide names a required curriculum: the CMS rules specify content areas, the California rules specify topics, and OSHA's guidelines recommend elements.

Evaluate any program — branded or built in-house — against the content your regulator lists, whether it includes live practice and competency demonstration, the records it generates (completion dates, trainer qualifications, attendee names and job titles), and how it supports the refresher cadence you owe.

Refreshers and records

Refresher cadence is where the rules diverge most, so build the calendar source by source:

SourceInitial trainingRefresherRecords
CMS hospital CoP — 42 CFR 482.13(f)Before performing restraint or seclusion; at orientationPeriodically, per hospital policy; CPR with periodic recertificationTraining and competency documented in personnel records
CMS PRTF rules — 42 CFR 483.376Before participating in an emergency safety interventionCompetencies re-demonstrated every six months; CPR annuallyDate completed and who certified; materials available to CMS, the state Medicaid agency and the state survey agency
California SB 553When the plan is first establishedAnnually; additional training when a new hazard is identified or the plan changesTraining records at least one year; hazard, incident-log and investigation records at least five years
California 8 CCR 3342When newly hired or newly assigned — at no cost to the employee, during paid timeAnnual refresher for patient-contact staff and supervisors; responders before assignment and at least annually—
CCBHC criteria (certification)At orientationAnnually — risk assessment; suicide and overdose prevention and response; family and peer staff roles—
OSHA 3148 (advisory)Orientation before duties startAnnual; more frequent in high-risk settings—

Records deserve the same discipline.

The CMS hospital rule puts training and competency documentation in personnel records.

The PRTF rules want the date training was completed and the name of the person certifying completion, with materials available to CMS, the state Medicaid agency and the state survey agency.

California's SB 553 requires training records kept at least one year — with dates, a content summary, trainer names and qualifications, and attendee names and job titles — while hazard records, violent incident logs and investigation records are kept at least five years.

Budget the time as paid time, too.

Under the FLSA regulations, training is not voluntary if you require it, or if the employee is led to believe that not attending would hurt their job — and training designed to help an employee handle their current job more effectively, given by the employer or under its auspices, is hours worked.

For non-exempt staff, the de-escalation course you mandate is generally paid time: schedule it on the clock and run any edge cases past employment counsel.

Before you schedule crisis and de-escalation training

  • Name the rules that reach your setting: CMS hospital conditions of participation, CMS PRTF rules, California SB 553 or 8 CCR 3342, CCBHC certification criteria, your accreditor, your state licensing board
  • In California, confirm which track covers you before you build the plan — 8 CCR 3342 for the health care operations it names, SB 553 for other employers
  • Decide who gets trained: direct-care staff first, plus supervisors and any staff designated to respond to violent incidents
  • Check content against your regulator's list: triggers, de-escalation, least restrictive intervention, monitoring, first aid and CPR where required
  • Set the refresher calendar from the strictest applicable cadence — every six months for PRTF competencies, annually for California, CCBHC and the OSHA recommendation
  • Plan the records: completion dates, who certified, trainer qualifications, attendee names and job titles, stored where a surveyor can reach them
  • Schedule training during paid hours for non-exempt staff

Questions employers ask

Do the CMS restraint training rules apply to my outpatient practice?

No. The CMS restraint and seclusion training rules bind Medicare- and Medicaid-participating hospitals — including psychiatric hospitals — and psychiatric residential treatment facilities serving individuals under 21.

Outpatient clinics, group practices and adult residential programs sit outside those rules.

What may still reach you: state licensing requirements for residential or substance use programs, your accreditor's standards, and — for California employers — the state workplace violence training law.

Is de-escalation training paid time?

Generally, yes for non-exempt staff.

Under the FLSA regulations, training is not voluntary if the employer requires it or if the employee is led to believe that not attending would hurt their job, and training designed to help an employee handle their current job more effectively, given by the employer or under its auspices, is hours worked.

A de-escalation course you mandate is therefore generally paid.

California's 8 CCR 3342 states it outright for covered employers: training must be provided at no cost to the employee and during paid time.

How often should de-escalation training be refreshed?

It depends on the rule that reaches you.

PRTF staff re-demonstrate de-escalation and restraint competencies every six months and CPR competency annually.

California's SB 553 requires annual training, and 8 CCR 3342 requires annual refreshers for patient-contact staff.

Federal OSHA's advisory guidelines recommend annual training for all workers, with more frequent refreshers in high-risk settings.

Where no rule applies, annual training with a review after any serious incident is a reasonable starting point.

Can we build de-escalation training in-house instead of buying a program?

The rules in this guide regulate content, competency and records, not vendors — neither CMS nor OSHA names a required curriculum.

An in-house program can work if your trainers meet the qualifications your rule sets (the CMS hospital rule requires trainers qualified by education, training and experience), your staff demonstrate the techniques in practice, and your records show completion dates and who certified them.

Have employment counsel check anything your state licensing rules add.

What does CCBHC certification require for crisis-adjacent training?

SAMHSA's CCBHC certification criteria require training at orientation and annually on risk assessment and on suicide and overdose prevention and response, plus the roles of family and peer staff — and these trainings may be delivered online.

The criteria also require a training plan for all employed and contract staff with direct client or family contact, which must include the state behavioral health authority's and any accreditation standards' training requirements.

Sources

More hiring resources

Trained teams still start with hires

BehavioralHires is a job board built only for behavioral health.

Post your technician, clinician and supervisor roles and reach licensed clinicians and behavioral health staff.