Does Your Business Have an SB 553 Workplace Violence Prevention Plan?
SB 553 already requires nearly every California employer to have a written Workplace Violence Prevention Plan, train employees on it, and log every incident — this has been enforceable law since July 1, 2024, not a future requirement. Cal/OSHA is still finalizing a formal regulatory standard, due by the end of 2026, but the statute is already active and citable today. Plaid Safety builds SB 553-compliant plans for California employers across every industry, not just healthcare or high-risk sectors.
Get Your WVPP BuiltSB 553 has been enforceable law under Labor Code §6401.9 since July 1, 2024.
maximum penalty for a willful violation; serious violations can reach $25,000.
employees at a public-facing location is generally enough to trigger coverage — exemptions are narrow.
Why Compliance Cannot Wait for the Formal Standard
SB 553 is already law. The formal Cal/OSHA regulatory standard still being finalized will add detail — it will not create the underlying obligation, which already exists.
The law is already in effect
SB 553 has been enforceable since July 1, 2024. Cal/OSHA finalizing its general industry standard by the end of 2026 will refine the requirements — it will not be the moment this becomes mandatory. That already happened.
Coverage is broader than most employers think
SB 553 applies to nearly every California employer, across every industry, not just retail, healthcare, or high-risk settings. If your worksite is open to the public or has 10 or more employees, you're very likely covered.
A distinct plan, not an addendum
A WVPP can be incorporated into your IIPP, but it must exist as its own defined component with its own procedures. A general safety program that never mentions workplace violence does not satisfy the requirement.
Two logs are required, not one
The Violent Incident Log captures every workplace violence incident. The Cal/OSHA Form 300 Log captures only those that meet separate recordability criteria. Employers who maintain only one, or conflate the two, are non-compliant on the other.
What a Compliant WVPP Has to Include
Under Labor Code §6401.9, a written Workplace Violence Prevention Plan must address each of the following, specific to your workplace.
| Required Element | What It Covers |
|---|---|
| Named responsible party | Who administers the plan and has authority to implement it. |
| Employee involvement | How employees and their representatives participate in developing and reviewing the plan. |
| Hazard identification | Procedures for identifying and evaluating workplace violence hazards, including scheduled inspections. |
| Hazard correction | Methods for correcting identified hazards in a timely manner. |
| Reporting procedures | How employees report violent incidents or threats without fear of reprisal, including anonymous options. |
| Emergency response | Procedures for responding to actual or potential workplace violence emergencies. |
| Post-incident procedures | Steps taken after an incident, including investigation and follow-up corrective action. |
| Training | Initial training and annual refreshers covering the plan, hazard recognition, and reporting. |
| Recordkeeping | A violent incident log, plus records of hazard identification, evaluation, and correction. |
Who Is Covered — and Who Is Exempt
Coverage is broad by design. The exemptions are narrow and specific.
Generally Covered
- Any California employer with a worksite accessible to the public
- Employers with 10 or more employees at a given location
- Any industry: retail, manufacturing, warehousing, professional services, education, government, and more
- Applies regardless of union status
Narrow Exemptions
- Worksites with fewer than 10 employees that are not accessible to the public
- Employees who telework from a location of their own choosing, outside the employer's control
- Healthcare facilities already covered by Cal/OSHA's separate healthcare workplace violence standard (8 CCR §3342) — this is an either/or distinction, not dual coverage
- Certain law enforcement and correctional facility operations
The Risk Assessment Is the Foundation, Not a Formality
Cal/OSHA inspectors increasingly cite generic, copy-paste plans as non-compliant because they don't reflect a real, site-specific hazard evaluation. The risk assessment is what makes a plan defensible.
A workplace violence risk assessment examines your actual conditions: layout and access points, cash handling or valuables on site, history of prior incidents, staffing levels during vulnerable hours, interactions with the public, lighting and security infrastructure, and job duties that carry elevated exposure. This is where a generic template consistently fails — it cannot reflect what's actually true of your facility. Plaid Safety conducts the on-site risk assessment, documents findings against Cal/OSHA's framework, and builds the corrective action plan the regulation requires.
Two Separate Logs — Not One
Confusing these two records is one of the most common compliance gaps Plaid Safety finds during an audit.
| Record | What It Captures | Retention |
|---|---|---|
| Violent Incident Log | Every workplace violence incident, regardless of injury severity — including verbal threats and incidents with no physical harm. | 5 years |
| Cal/OSHA Form 300 Log | Only incidents meeting separate recordability criteria: death, loss of consciousness, restricted work or job transfer, days away from work, or medical treatment beyond first aid. | 5 years |
A qualifying incident may require an entry on both logs. A threat with no injury typically requires an entry only on the Violent Incident Log. Plaid Safety sets up both logs correctly from the start and can manage ongoing entries as part of a Compliance-as-a-Service plan.
SB 553: Common Questions
What California employers most often ask when they first learn about this requirement.
What is SB 553?
SB 553 is a California law, codified in Labor Code §6401.9, that requires nearly every employer in the state to establish, implement, and maintain a written Workplace Violence Prevention Plan, train employees on it, and record every incident of workplace violence. It has been enforceable since July 1, 2024.
What are the four types of workplace violence under Cal/OSHA's framework?
Cal/OSHA classifies workplace violence into four types, and a compliant plan needs to address all of them where relevant to your operation. Type 1 involves a perpetrator with no legitimate business at the worksite, typically committing a crime such as robbery. Type 2 involves violence from a customer, client, patient, or visitor. Type 3 involves a current or former employee, supervisor, or manager. Type 4 involves a perpetrator with a personal relationship to an employee, such as a domestic partner, that carries over into the workplace.
Are healthcare facilities required to comply with SB 553?
No. Healthcare facilities already regulated under Cal/OSHA's Violence Prevention in Health Care standard (8 CCR §3342) comply with that standard instead of SB 553 — the two are mutually exclusive, not layered. If any part of your operation falls outside that healthcare-specific coverage, that portion may still fall under SB 553.
What's the difference between the Violent Incident Log and the Cal/OSHA Form 300 Log?
The Violent Incident Log records every workplace violence incident, including threats with no physical injury. The Cal/OSHA Form 300 Log records only incidents meeting separate recordability criteria under a different regulation, such as days away from work or medical treatment beyond first aid. A serious incident may require entries on both; a verbal threat typically requires an entry only on the Violent Incident Log.
Can we get cited even if no incident has ever occurred at our workplace?
Yes. The obligation to have a written plan, conduct a risk assessment, provide training, and maintain both logs exists independent of whether an incident has occurred. Not having a compliant plan is itself a citable violation.
Is Your Workplace Violence Prevention Plan Actually Compliant?
Plaid Safety builds SB 553-compliant Workplace Violence Prevention Plans for California employers across every industry — as a standalone project, integrated with your IIPP, or as part of our monthly Compliance-as-a-Service plans.
Does Your Business Have an SB 553 Workplace Violence Prevention Plan?
SB 553 already requires nearly every California employer to have a written Workplace Violence Prevention Plan, train employees on it, and log every incident — this has been enforceable law since July 1, 2024, not a future requirement. Cal/OSHA is still finalizing a formal regulatory standard, due by the end of 2026, but the statute is already active and citable today. Plaid Safety builds SB 553-compliant plans for California employers across every industry, not just healthcare or high-risk sectors.
Get Your WVPP BuiltSB 553 has been enforceable law under Labor Code §6401.9 since July 1, 2024.
maximum penalty for a willful violation; serious violations can reach $25,000.
employees at a public-facing location is generally enough to trigger coverage — exemptions are narrow.
Why Compliance Cannot Wait for the Formal Standard
SB 553 is already law. The formal Cal/OSHA regulatory standard still being finalized will add detail — it will not create the underlying obligation, which already exists.
The law is already in effect
SB 553 has been enforceable since July 1, 2024. Cal/OSHA finalizing its general industry standard by the end of 2026 will refine the requirements — it will not be the moment this becomes mandatory. That already happened.
Coverage is broader than most employers think
SB 553 applies to nearly every California employer, across every industry, not just retail, healthcare, or high-risk settings. If your worksite is open to the public or has 10 or more employees, you're very likely covered.
A distinct plan, not an addendum
A WVPP can be incorporated into your IIPP, but it must exist as its own defined component with its own procedures. A general safety program that never mentions workplace violence does not satisfy the requirement.
Two logs are required, not one
The Violent Incident Log captures every workplace violence incident. The Cal/OSHA Form 300 Log captures only those that meet separate recordability criteria. Employers who maintain only one, or conflate the two, are non-compliant on the other.
What a Compliant WVPP Has to Include
Under Labor Code §6401.9, a written Workplace Violence Prevention Plan must address each of the following, specific to your workplace.
| Required Element | What It Covers |
|---|---|
| Named responsible party | Who administers the plan and has authority to implement it. |
| Employee involvement | How employees and their representatives participate in developing and reviewing the plan. |
| Hazard identification | Procedures for identifying and evaluating workplace violence hazards, including scheduled inspections. |
| Hazard correction | Methods for correcting identified hazards in a timely manner. |
| Reporting procedures | How employees report violent incidents or threats without fear of reprisal, including anonymous options. |
| Emergency response | Procedures for responding to actual or potential workplace violence emergencies. |
| Post-incident procedures | Steps taken after an incident, including investigation and follow-up corrective action. |
| Training | Initial training and annual refreshers covering the plan, hazard recognition, and reporting. |
| Recordkeeping | A violent incident log, plus records of hazard identification, evaluation, and correction. |
Who Is Covered — and Who Is Exempt
Coverage is broad by design. The exemptions are narrow and specific.
Generally Covered
- Any California employer with a worksite accessible to the public
- Employers with 10 or more employees at a given location
- Any industry: retail, manufacturing, warehousing, professional services, education, government, and more
- Applies regardless of union status
Narrow Exemptions
- Worksites with fewer than 10 employees that are not accessible to the public
- Employees who telework from a location of their own choosing, outside the employer's control
- Healthcare facilities already covered by Cal/OSHA's separate healthcare workplace violence standard (8 CCR §3342) — this is an either/or distinction, not dual coverage
- Certain law enforcement and correctional facility operations
The Risk Assessment Is the Foundation, Not a Formality
Cal/OSHA inspectors increasingly cite generic, copy-paste plans as non-compliant because they don't reflect a real, site-specific hazard evaluation. The risk assessment is what makes a plan defensible.
A workplace violence risk assessment examines your actual conditions: layout and access points, cash handling or valuables on site, history of prior incidents, staffing levels during vulnerable hours, interactions with the public, lighting and security infrastructure, and job duties that carry elevated exposure. This is where a generic template consistently fails — it cannot reflect what's actually true of your facility. Plaid Safety conducts the on-site risk assessment, documents findings against Cal/OSHA's framework, and builds the corrective action plan the regulation requires.
Two Separate Logs — Not One
Confusing these two records is one of the most common compliance gaps Plaid Safety finds during an audit.
| Record | What It Captures | Retention |
|---|---|---|
| Violent Incident Log | Every workplace violence incident, regardless of injury severity — including verbal threats and incidents with no physical harm. | 5 years |
| Cal/OSHA Form 300 Log | Only incidents meeting separate recordability criteria: death, loss of consciousness, restricted work or job transfer, days away from work, or medical treatment beyond first aid. | 5 years |
A qualifying incident may require an entry on both logs. A threat with no injury typically requires an entry only on the Violent Incident Log. Plaid Safety sets up both logs correctly from the start and can manage ongoing entries as part of a Compliance-as-a-Service plan.
SB 553: Common Questions
What California employers most often ask when they first learn about this requirement.
What is SB 553?
SB 553 is a California law, codified in Labor Code §6401.9, that requires nearly every employer in the state to establish, implement, and maintain a written Workplace Violence Prevention Plan, train employees on it, and record every incident of workplace violence. It has been enforceable since July 1, 2024.
What are the four types of workplace violence under Cal/OSHA's framework?
Cal/OSHA classifies workplace violence into four types, and a compliant plan needs to address all of them where relevant to your operation. Type 1 involves a perpetrator with no legitimate business at the worksite, typically committing a crime such as robbery. Type 2 involves violence from a customer, client, patient, or visitor. Type 3 involves a current or former employee, supervisor, or manager. Type 4 involves a perpetrator with a personal relationship to an employee, such as a domestic partner, that carries over into the workplace.
Are healthcare facilities required to comply with SB 553?
No. Healthcare facilities already regulated under Cal/OSHA's Violence Prevention in Health Care standard (8 CCR §3342) comply with that standard instead of SB 553 — the two are mutually exclusive, not layered. If any part of your operation falls outside that healthcare-specific coverage, that portion may still fall under SB 553.
What's the difference between the Violent Incident Log and the Cal/OSHA Form 300 Log?
The Violent Incident Log records every workplace violence incident, including threats with no physical injury. The Cal/OSHA Form 300 Log records only incidents meeting separate recordability criteria under a different regulation, such as days away from work or medical treatment beyond first aid. A serious incident may require entries on both; a verbal threat typically requires an entry only on the Violent Incident Log.
Can we get cited even if no incident has ever occurred at our workplace?
Yes. The obligation to have a written plan, conduct a risk assessment, provide training, and maintain both logs exists independent of whether an incident has occurred. Not having a compliant plan is itself a citable violation.
Is Your Workplace Violence Prevention Plan Actually Compliant?
Plaid Safety builds SB 553-compliant Workplace Violence Prevention Plans for California employers across every industry — as a standalone project, integrated with your IIPP, or as part of our monthly Compliance-as-a-Service plans.