California Compliance

The Complete California Employer Compliance Guide

SB-553, the IIPP requirement, Cal/OSHA enforcement, and what the permanent standard means for your existing program.

— SB-553

Workplace Violence Prevention Plan

California SB-553 took effect July 1, 2024 and applies to virtually every California employer with 10 or more employees. Covered employers must maintain a written, site-specific Workplace Violence Prevention Plan, a Violent Incident Log retained for five years, and an annual training program — with appropriate records preserved for at least one year. Training must be interactive — employees must be able to ask questions and receive real-time responses — and tailored to the specific job assignments of the people being trained.

— Documentation Standard

Training without documentation is not compliance.

A Cal/OSHA compliance officer who asks for training records expects to see more than a sign-in sheet. For every SB-553 training session, documentation must capture: the date and duration of the session; the names and job titles of all attendees; the content covered, linked to the specific requirements of the law; the name and qualifications of the trainer or facilitator; evidence of a comprehension check — a quiz, scenario exercise, or documented Q&A exchange that demonstrates the interactive discussion requirement was met; and the method of delivery.

Records must be maintained for a minimum of one year for training records and five years for Violent Incident Log entries. In practice, retaining all program documentation for the life of the program is the defensible posture — especially given that the permanent Cal/OSHA standard adoption and any subsequent litigation may require documentation of what was in place and when.

The employer who did the training but cannot produce documentation of it is, in the eyes of an enforcement action, the employer who did not do the training.

Cal/OSHA can cite up to $25,000 for a serious violation and up to $158,727 for a willful violation, and a citable deficiency becomes available evidence in any downstream civil action alleging negligent safety practices. Most plans created at the July 2024 deadline were template-based and have not been reviewed since adoption.

Full SB-553 compliance guide →

— 8 CCR § 3203

The IIPP Requirement — Older and Broader Than SB-553

California's Injury and Illness Prevention Program (IIPP) requirement is older and broader than SB-553. Under 8 CCR § 3203, every California employer — regardless of size or industry — must maintain a written IIPP that addresses eight specific program elements:

— 01

Responsibility

Who is accountable for safety program implementation

— 02

Compliance

How the employer ensures employees follow safe practices

— 03

Communication

How the employer communicates safety information to employees, including a system for employees to report hazards without fear of retaliation

— 04

Hazard assessment

Procedures for identifying and evaluating workplace hazards

— 05

Accident investigation

Procedures for investigating workplace injuries and illnesses

— 06

Hazard correction

Procedures for correcting unsafe conditions in a timely manner

— 07

Training

Safety and health training appropriate to each employee's job assignment

— 08

Recordkeeping

Documentation of the above elements

The IIPP is not the same as the WVPP. An employer that addressed SB-553 in 2024 without reviewing its IIPP has addressed one of two significant Cal/OSHA written program obligations. A Cal/OSHA compliance officer reviewing a workplace following an incident or complaint will examine both.

For most mid-market California employers, the IIPP and WVPP are best developed and maintained as a coordinated system — reviewed on the same annual cycle, owned by the same responsible party, and documented in a format that can be produced together in response to an inspection request.

— The Full Picture

Two obligations. One coherent system.

Most California employers who addressed SB-553 in 2024 have never had their IIPP reviewed. The two documents are not interchangeable — a WVPP addresses workplace violence specifically, while an IIPP addresses the full safety program obligation. A Cal/OSHA compliance officer reviewing your workplace will examine both.

Kestralis Group develops and maintains both as a coordinated system — reviewed on the same annual cycle, owned by the same responsible party, and documented in a format ready to produce together in response to an inspection request.

— Beyond SB-553

California's full workplace safety obligation is broader than the WVPP.

California's workplace safety framework does not begin and end with SB-553 or even with the IIPP. Many California employers face additional hazard-specific compliance obligations and mandatory training programs that fall outside the workplace violence statute entirely — and a defensible compliance posture has to account for all of them.

Beyond the IIPP, many California employers face hazard-specific compliance obligations that apply based on industry and workplace conditions rather than headcount. Heat Illness Prevention is required for any employer with outdoor workers exposed to heat. Hazard Communication (SDS, labeling, employee training) applies wherever employees may be exposed to hazardous chemicals. Lockout/Tagout, Bloodborne Pathogens, Respiratory Protection, and Powered Industrial Trucks are triggered by the specific conditions present. Each has its own written program, training, documentation, and recordkeeping requirements.

California also requires mandatory harassment prevention training — separate from OSHA obligations — for all employers with five or more employees. Supervisors must complete two hours of training every two years under AB 1825. Non-supervisory employees must complete one hour every two years under SB 1343. This is not a Cal/OSHA requirement, but it is a mandatory, recurring, and documented training obligation that most California employers manage alongside their safety program.

— Kestralis Group Delivers

Workplace Violence Prevention (WVPP)
IIPP Assessment & Development
SB-553 Readiness Assessment
Annual Compliance Retainer
Threat Assessment & Investigations

— Adjacent Obligations

Harassment Prevention Training
Heat Illness Prevention Plan
Hazard Communication Program
Hazard-Specific Cal/OSHA Standards
Lockout/Tagout, Bloodborne Pathogens

— Our Approach

Kestralis Group focuses on workplace violence prevention, behavioral threat assessment, and security advisory — the areas where our principals' operational and enterprise credentials produce the most defensible outcomes. For adjacent compliance obligations outside our scope, we advise on what's needed and refer to qualified specialist partners. You get one point of contact for the full picture.

Questions about your complete California compliance posture? Schedule a consultation →

— What's Coming

The Permanent Cal/OSHA Standard — End of 2026

Cal/OSHA is required to adopt a permanent workplace violence prevention standard for general industry by December 31, 2026. Every existing WVPP will need to be reviewed against the final standard when it is adopted. Organizations that built substantive, site-specific programs now will manage that update as a routine review. Organizations that relied on a template will face a full rebuild — often under time pressure and without the internal expertise to do it correctly.

Kestralis Group monitors the rulemaking in real time. Clients on our annual compliance retainer will have the permanent standard transition managed as part of their ongoing program.

— Related state guides

New York Retail Worker Safety Act guide →Virginia compliance guide →Ohio compliance guide →Texas compliance guide →

— Next step

Not sure where your program stands?

Our SB-553 Readiness Assessment evaluates your WVPP and flags adjacent IIPP gaps — delivered as a written compliance scorecard within five business days.

Schedule a Consultation Download the Compliance Checklist