1. When Does Your Workplace Violence Prevention Plan Need Legal Review?
Repeated threats, unclear reporting routes, or a Cal/OSHA inquiry warrant review of the plan and its implementation. Labor Code §6401.9 requires covered employers to maintain an effective written WVPP. The general-industry requirements have applied since July 1, 2024.
Coverage, Exceptions, and Healthcare Settings
Coverage review examines staffing, public access, and operations. The small-workplace exception requires fewer than ten employees working there at a time, no public access, and compliance with Title 8 §3203. Employee count alone does not establish an exemption.
Healthcare operations covered by Title 8 §3342 follow a separate standard; serving healthcare clients alone does not establish that exception.
State Requirements and Federal Oversight
Cal/OSHA enforces state safety requirements at most covered workplaces. Federal OSHA retains authority over specified workplaces and certain retaliation matters. Jurisdiction review determines which agency and obligations apply.
The September 2026 §3343 discussion draft does not replace current statutory duties.
2. Responding to Employee, Customer, and Personal Threats
A report requires an assessment of specific conduct, immediacy, and people at risk. The safety response should not wait for an injury or a decision to prosecute.
Current or Former Employees
Messages, witness accounts, and access records help establish what happened and who could enter the workplace. Safety complaints and organizing activity are not themselves violent threats. Before discipline, an attorney can assess the conduct separately from protected activity and applicable collective bargaining procedures.
Customers, Clients, and Outside Visitors
Retail hazard assessments should examine cash handling, lone work, closing shifts, and prior aggression. A customer’s legitimate reason for entering does not remove the need to assess violence risks. Broader risk management can coordinate security, staffing, and escalation responsibilities.
| Threat Source | Records to Review | Response to Evaluate |
|---|---|---|
| Current or former employee | Messages, witness accounts, access history | Access controls and employment-law review |
| Customer or client | Prior reports, shift records, available footage | Staffing, barriers, and emergency procedures |
| Employee’s partner | Reported contacts and relevant court orders | Safety accommodations and limited disclosure |
Current or former employee
- Records to ReviewMessages, witness accounts, access history
- Response to EvaluateAccess controls and employment-law review
Customer or client
- Records to ReviewPrior reports, shift records, available footage
- Response to EvaluateStaffing, barriers, and emergency procedures
Employee’s partner
- Records to ReviewReported contacts and relevant court orders
- Response to EvaluateSafety accommodations and limited disclosure
Domestic Violence Affecting the Workplace
Government Code §12945.8 governs safety-related reasonable accommodations for employees affected by qualifying violence, including qualifying violence against family members. Employers must assess requests through an interactive process, considering immediate danger and applicable hardship limits.
Consider schedule changes, reassignment, or access restrictions. Handle supporting documents confidentially, subject to lawful disclosure exceptions. A restraining order informs planning but does not replace the plan.
3. Turning the Written Plan into Daily Procedures
A usable plan tells managers who receives reports, who evaluates hazards, and who orders corrective action. Employees and authorized representatives must actively participate in development and implementation, including at nonunion workplaces.
Reporting and Training Employees Can Use
Employees need accessible reporting routes and protection against retaliation. Training is required when the plan is established and annually thereafter, with additional instruction for newly identified hazards or plan changes. Materials must suit employees’ language and literacy needs and allow questions to a knowledgeable person.
Hybrid Work and Shared Locations
The remote-work exception covers employee-chosen locations outside employer control. Office attendance, client visits, and shared worksites require separate review and applicable coordination with other employers.
Changes to employee electronic monitoring also require privacy analysis. Safety concerns do not provide blanket permission to record conversations or inspect personal devices.
4. Post-Incident Investigation and Compliance Pitfalls
After immediate safety needs are addressed, the employer must investigate the incident and assess its controls. Police involvement does not replace workplace recordkeeping or plan review.
Incident Logs, Injury Records, and Notifications
The violent incident log must capture qualifying incidents even without injury and exclude information identifying incident participants, while recording required details about the person completing the log. Cal/OSHA Form 300 follows separate injury-recording criteria. Serious work-related injuries and deaths can trigger additional notification duties.
Maintain hazard records, incident logs, and investigation records for at least five years; training records require at least one year. A litigation hold may require longer preservation.
Evidence, Privilege, and Corrective Action
Preserve messages and footage before routine deletion. Record what witnesses observed separately from assumptions. Internal investigations may involve legal advice, but copying an attorney does not automatically make routine safety records privileged.
Review the plan at least annually, when a deficiency becomes apparent, and after workplace violence. Findings should inform corrective measures and any necessary training. Document who completed each corrective measure and when.
5. Frequently Asked Questions
Existing handbooks may leave questions about required documents, policies, and employee responses unanswered.
No. A conduct policy alone does not supply required hazard assessment, employee participation, reporting, training, and incident records.
No. It may be separate or a stand-alone section within the written injury and illness prevention program. Accessibility and site-specific content remain necessary.
Hazard identification, evaluation and correction records, training records, and incident logs must be available without charge within 15 calendar days of a request by employees or authorized representatives. This rule does not automatically grant access to the entire investigation file.
6. Legal Review of Your Prevention Plan and Incident Response
For a California workplace violence prevention plan review, provide the plan, training records, incident reports, messages, and Cal/OSHA correspondence. An attorney can assess coverage, gaps, preservation, reporting duties, and proposed measures before revisions or an investigation response.
08 Oct, 2026
