Most California employers built a Workplace Violence Prevention Plan sometime before the July 1, 2024 deadline, filed it, and moved on. What they rarely stopped to ask is what happens when Cal/OSHA shows up to look at it.
The answer matters more than most HR teams realize. A willful violation carries a penalty of up to $162,851. A serious violation is up to $25,000. And a citation for an inadequate WVPP does not require an incident to have occurred — a gap in the plan itself is sufficient grounds.
Here is what a Cal/OSHA compliance officer actually evaluates when reviewing a workplace violence prevention program.
What Triggers a Cal/OSHA WVPP Inspection?
Cal/OSHA WVPP inspections can be triggered in several ways:
- A reported incident.Any serious workplace injury or death — including those resulting from violence — must be reported to Cal/OSHA within 24 hours. That report triggers an inspection.
- An employee complaint. Any employee can file a complaint with Cal/OSHA alleging a WVPP violation. Anonymous complaints are accepted. The threshold for triggering an inspection is low.
- A programmed inspection. Cal/OSHA conducts planned inspections of high-hazard industries. Retail, healthcare-adjacent, and certain manufacturing categories are prioritized.
- Referral from another agency. Law enforcement incidents involving a workplace can trigger a Cal/OSHA referral.
The permanent Cal/OSHA standard expected by end of 2026 will likely clarify and expand inspection authority. Organizations that are compliant with the current law will be better positioned to adapt to the final standard than those who are not.
What Does the Inspector Review First?
A Cal/OSHA WVPP inspection typically begins with a records request before the inspector ever walks the facility. Expect to produce:
- The written WVPP itself
- The Violent Incident Log for the prior five years (or since July 1, 2024, if earlier)
- Training records — dates, topics covered, attendee lists — for initial and any annual training
- Records of workplace violence hazard identification, evaluation, and correction
- Records of any workplace violence incident investigations
The most common immediate finding:The Violent Incident Log is either nonexistent or records only incidents that resulted in injury. California Labor Code 6401.9 requires logging every incident — threats, near-misses, and post-incident responses — regardless of whether anyone was hurt.
What Are the Seven Elements an Inspector Evaluates?
1. Is the WVPP actually site-specific?
The Cal/OSHA model plan is a template. A template that has been downloaded, minimally edited, and submitted is the single most common compliance failure. The law requires the plan to be “specific to the hazards and corrective measures for each work area and operation.”
An inspector will look for evidence that someone who has actually been to this location wrote this plan. Generic language like “employees should be aware of potential threats” fails this test. Specific language like “the south parking lot has inadequate lighting and limited sightlines from the building entrance” passes it.
2. Does the plan identify the responsible person by name and title?
The plan must name — not describe generically — the individual responsible for implementing and maintaining it. “The HR Department” or “management” does not satisfy this requirement. A specific name and title is required.
3. Are there effective procedures for employee involvement?
This is frequently treated as a checkbox and almost never implemented meaningfully. The law requires procedures for employees to participate in developing, implementing, and reviewing the plan — including identifying hazards and reporting incidents without fear of retaliation.
An inspector will ask: How were employees involved in creating this plan? How can they report hazards? How is the anti-retaliation policy communicated?
4. Does the hazard assessment cover all work areas?
The WVPP must identify and document workplace violence hazards for each work area where employees work. A single generic assessment covering “the facility” does not satisfy this requirement for organizations with multiple distinct environments — a warehouse, a front office, a customer service area, and a parking lot are all separate work areas with different hazard profiles.
Type 1 through Type 4 violence must be addressed. Many plans cover Type 2 (client/customer violence) adequately and fail entirely on Type 3 (worker-on-worker) and Type 4 (personal relationship spillover).
5. Is the Training Actually Documented?
California requires initial training when the plan is first established and annual retraining thereafter. Training must cover:
- The plan itself and how employees can get a copy
- How to report workplace violence without fear of retaliation
- Job-specific violence hazards and preventive measures
- The purpose of the Violent Incident Log and how to access it
- Opportunities for interactive discussion
“Interactive discussion” is a specific requirement. A 20-minute video with no Q&A component does not satisfy it. An inspector will review training records for evidence of interactive elements — facilitated discussions, Q&A sessions, scenario-based exercises.
6. Is the Violent Incident Log complete and current?
The log must record every incident — threats, physical attacks, post-incident responses — regardless of injury. It must be maintained for five years and made available to employees and their representatives on request.
The most common failure here is a log that records only incidents where someone was physically injured, missing the near-misses, verbal threats, and threatening communications that are equally required. The second most common failure is a log that doesn't exist at all.
7. Has the plan been reviewed and updated?
The WVPP must be reviewed annually, after any workplace violence incident, and whenever a deficiency is identified. An inspector will ask for evidence of at least one annual review — a documented review date, a summary of what was evaluated, and any changes made.
A plan with a creation date of June 2024 and no evidence of any subsequent review is, as of July 2025, already out of compliance.
What Triggers a Citation vs. a Notice?
Not every deficiency results in a citation. A Cal/OSHA compliance officer has discretion in how they characterize findings. A minor documentation gap in an otherwise robust program is different from a complete absence of a Violent Incident Log or a plan that was clearly never implemented.
What elevates a finding to a serious or willful citation:
- Knowledge of the requirement and failure to act. If an employer was aware of the SB-553 requirements and made no meaningful effort to comply, that is the definition of willful.
- A history of prior violations. A repeat violation carries higher penalties than an initial finding.
- Evidence of retaliation. If an employee can demonstrate they were discouraged from reporting a workplace violence incident, the retaliation finding adds separately to the penalty exposure.
What Should You Do Before an Inspector Arrives?
If you receive notice of an inspection — or if you simply want to assess your program before one becomes relevant — the right questions to ask are:
- Is our WVPP site-specific, or does it read like a template?
- Can we produce the Violent Incident Log for the last five years on demand?
- Are our training records complete — including documentation of interactive discussion elements?
- Has the plan been reviewed and updated since it was created?
- Does our hazard assessment cover all work areas and all four types of violence?
For a quick read on the financial scale at stake, our California exposure calculator produces a defensible 3-year estimate of penalty + civil + operational impact based on your operational profile and current program state. It takes about 90 seconds.
If the answer to any of these is uncertain, the time to address it is before Cal/OSHA asks. Our SB-553 compliance program is designed to close exactly these gaps.
Kestralis Group conducts SB-553 Readiness Assessments for California employers — a structured review of your program against all Cal/OSHA requirements, delivered as a written compliance scorecard and remediation roadmap. Schedule a consultation to discuss your organization's current posture.
