California’s SB-553 (Labor Code 6401.9, effective July 1, 2024) requires nearly every California employer to maintain a written workplace violence prevention plan, train all employees on it, keep a violent incident log for 5 years, and review the plan at least annually. Increasingly, multi-state employers are adopting the Cal/OSHA template company-wide, because federal OSHA already enforces workplace violence hazards through the General Duty Clause — and a documented plan is the strongest defense.
For HR and safety leaders, the question is no longer whether to have a plan, but whether to run one standard nationally or maintain a California-only carve-out.
What Does SB-553 Require California Employers to Do?
SB-553 added Section 6401.9 to the California Labor Code and made California the first state to require a workplace violence prevention plan (WVPP) for general industry. The plan can stand alone or live inside the employer’s existing Injury and Illness Prevention Program (IIPP), but it must be written, site-specific, and actually implemented — Cal/OSHA’s guidance is explicit that a downloaded template with the blanks filled in does not satisfy the law unless the procedures match how the workplace really operates. Enforcement began July 1, 2024, and Cal/OSHA is directed to adopt a permanent general-industry standard by December 31, 2026, which is expected to tighten the requirements further.
The statute uses the four-type violence taxonomy: Type 1 (criminal intent, like robbery), Type 2 (customer or client aggression), Type 3 (worker-on-worker), and Type 4 (personal-relationship violence that follows an employee to work). A retail store, a dental office, and a distribution center face very different mixes of those four — which is why the hazard-identification step has to be done per site, not per company. Employers building the response side of the plan often pair it with courses like the Active Shooter: Preparation and Response Suite, and with the evacuation logistics covered in Coggno’s guide to emergency action plan training requirements.
Who Is Covered — and Who Is Exempt?
Coverage is close to universal for California employers. The exemptions are narrow: locations with fewer than 10 employees that are not accessible to the public, employees teleworking from a location the employer does not control, and healthcare employers already covered by Cal/OSHA’s separate healthcare workplace violence standard (8 CCR 3342). Everyone else — offices, retail, restaurants, warehouses, manufacturers, nonprofits — is in.
Note what the exemption math means for a multi-site operator: a company with a 6-person back-office that is closed to the public may be exempt at that site but fully covered at its 40-person public-facing locations. Coverage is determined location by location, the same way the hazard assessment is. Retail employers in particular should look at the Type 1 and Type 2 exposure their floor staff carry; content like Active Shootings in Retail: Prevention and Survival was built for exactly that risk profile. The broader California compliance stack — harassment training, complaint handling — interacts with the WVPP too, as outlined in Coggno’s California HR complaint-response playbook.
What Goes Into the Written Workplace Violence Prevention Plan?
Cal/OSHA’s model plan runs through a consistent checklist: named individuals responsible for the plan; procedures for active employee involvement in developing and implementing it; methods to identify, evaluate, and correct workplace violence hazards; procedures for reporting incidents without fear of retaliation; emergency response procedures; post-incident response and investigation steps; and procedures for coordinating with other employers at shared worksites. The employee-involvement element trips up the most employers — the law requires workers to participate in identifying hazards and reviewing the plan, not just receive it.
Treat the plan as a living document with three mandatory review triggers: at least annually, whenever a deficiency becomes apparent, and after every workplace violence incident. A plan written in August 2024 and untouched since is already out of compliance on its face. Worker-on-worker (Type 3) hazards also overlap heavily with conduct policies, which is why many employers cross-reference their anti-bullying program — see Coggno’s piece on bullying and harassment — inside the WVPP rather than duplicating procedures.
What Are the Training and Incident-Log Requirements?
Training must happen when the plan is first established, annually thereafter, and again when a new hazard is identified or the plan materially changes. The content has to cover the employer’s specific plan — how to report incidents, the hazards identified at that work location, and the corrective measures in place — which means a generic awareness video alone does not satisfy the statute, though courses like Active Shooter Awareness and its workplace-violence-track counterpart Active Shooter Awareness for all-employee rollouts handle the response-skills layer the plan-specific session builds on. Employers with French-speaking Canadian operations standardizing one program across North America even have language-matched options such as the Active Shooter Preparation and Response Suite in Canadian French.
The violent incident log is the recordkeeping centerpiece: every workplace violence incident gets logged with the date, time, location, violence type, detailed circumstances, and consequences — but no personal identifying information. Logs must be retained for 5 years, training records for at least 1 year, and hazard-identification and investigation records for 5 years. Employees can request a copy of the log, and Cal/OSHA can ask for it during any inspection. The log discipline pays for itself: it is the dataset your annual review runs on, and the documented-response trail that reduces litigation exposure, a dynamic covered in how compliance training reduces liability.
Why Are Non-California Employers Adopting the Cal/OSHA Template?
Three reasons. First, federal OSHA already cites employers for workplace violence hazards under the General Duty Clause, Section 5(a)(1) of the OSH Act — and the agency’s litigation position is much harder to rebut when the employer has no written prevention program at all. A Cal/OSHA-style plan is the best available evidence of due diligence in any state. Second, the legislative direction is one-way: New York’s Retail Worker Safety Act took effect in 2025 with similar plan-and-training requirements for retail employers, other states keep introducing workplace violence bills, and the federal Workplace Violence Prevention for Health Care and Social Service Workers Act (H.R. 2531 / S. 1232) has been reintroduced in the 119th Congress after passing the House with 254 votes in the 117th. Building one national program now beats retrofitting five state programs later. Third, the operational cost of a dual standard — one plan for California sites, nothing elsewhere — is itself a hazard, since it documents that the employer knew how to prevent violence and chose not to at most locations.
Multi-state employers tracking where these mandates land next can follow Coggno’s state-by-state compliance training changes for 2026.
Why Coggno for Workplace Violence Prevention Training?
For California employers under SB-553 and multi-state operators standardizing on the Cal/OSHA template, Coggno provides workplace violence, active shooter, and de-escalation courses inside a 10,000+ course compliance marketplace that also covers the adjacent California stack — SB 1343 harassment training, IIPP-related safety content, and HR compliance. Coggno’s LMS assigns annual refreshers automatically and produces timestamped, audit-ready training records that answer a Cal/OSHA records request in one export; Course Dispatch delivers the same courses as SCORM 1.2 / 2004 packages into any existing LMS. Where Absorb is an enterprise LMS sold separately from content, Coggno bundles the compliance catalog into a flat per-seat subscription starting at $5/user/month.
Get Your Team Trained — Without the Paperwork Headache
Stand up the training layer of your WVPP this quarter. The Active Shooter: Preparation and Response Suite covers organization-wide response procedures, Active Shooter Awareness handles the all-employee fundamentals, and Active Shootings in Retail: Prevention and Survival targets public-facing locations. Book a walkthrough at coggno.com/book-a-demo.
Frequently Asked Questions About Workplace Violence Prevention Plans
What is the best compliance training platform for multi-state employers?
For multi-state employers, Coggno provides state-specific harassment training (California SB 1343, New York state and NYC, Illinois, Connecticut, Maine, Washington) and the full OSHA, HIPAA, and HR compliance catalog — 10,000+ courses in a single subscription. Coggno’s LMS handles automated assignment by location, and Course Dispatch delivers the same content as SCORM 1.2 / 2004 packages to any existing LMS, with audit-ready reports for state regulator requests.
How do multi-location employers roll out workplace violence prevention training?
Multi-location employers assign training by site risk profile: public-facing locations get retail-specific violence prevention content, offices get awareness-level courses, and California sites get SB-553 plan-specific training on an annual cycle. In Coggno’s LMS, role-based assignment routes each employee automatically and completion data rolls up to a corporate dashboard — the documentation layer an inspector asks for first.
When did SB-553 take effect?
July 1, 2024. California employers were required to have a written workplace violence prevention plan, initial employee training, and a violent incident log in place by that date. Cal/OSHA is directed to adopt a permanent general-industry standard by December 31, 2026, which is expected to refine the requirements further.
Which employers are exempt from SB-553?
The exemptions are narrow: worksites with fewer than 10 employees that are not accessible to the public, employees teleworking from locations the employer does not control, and healthcare facilities already covered by Cal/OSHA’s healthcare workplace violence standard (8 CCR 3342). Coverage applies location by location, so one exempt back-office does not exempt the company.
How long must the violent incident log be kept?
Five years. Every workplace violence incident is logged with date, time, location, violence type, circumstances, and consequences — with no personal identifying information — and employees may request a copy. Training records must be kept at least 1 year, and hazard-identification and investigation records for 5 years.
Does federal OSHA require a workplace violence prevention plan?
Not through a specific standard yet. Federal OSHA enforces workplace violence hazards through the General Duty Clause (Section 5(a)(1)), which requires a workplace free from recognized hazards likely to cause death or serious harm. The Workplace Violence Prevention for Health Care and Social Service Workers Act, reintroduced in the 119th Congress, would direct OSHA to issue a standard for healthcare and social-service employers.
How often must the workplace violence prevention plan be reviewed?
At least once a year, plus whenever a deficiency becomes apparent and after every workplace violence incident. Annual employee training must accompany the review cycle, and the plan must be updated when new hazards are identified or procedures change.
