California Compliance
SB-553, the IIPP requirement, Cal/OSHA enforcement, and what the permanent standard means for your existing program.
— SB-553
California SB-553 took effect July 1, 2024 and applies to virtually every California employer with 10 or more employees. Covered employers must maintain a written, site-specific Workplace Violence Prevention Plan, a Violent Incident Log retained for five years, and an annual training program — with appropriate records preserved for at least one year. Training must be interactive — employees must be able to ask questions and receive real-time responses — and tailored to the specific job assignments of the people being trained.
Cal/OSHA can cite up to $25,000 for a serious violation and up to $162,851 for a willful violation, and a citable deficiency becomes available evidence in any downstream civil action alleging negligent safety practices. Most plans created at the July 2024 deadline were template-based and have not been reviewed since adoption.
— 8 CCR § 3203
California's Injury and Illness Prevention Program (IIPP) requirement is older and broader than SB-553. Under 8 CCR § 3203, every California employer — regardless of size or industry — must maintain a written IIPP that addresses eight specific program elements:
Who is accountable for safety program implementation
How the employer ensures employees follow safe practices
How the employer communicates safety information to employees, including a system for employees to report hazards without fear of retaliation
Procedures for identifying and evaluating workplace hazards
Procedures for investigating workplace injuries and illnesses
Procedures for correcting unsafe conditions in a timely manner
Safety and health training appropriate to each employee's job assignment
Documentation of the above elements
The IIPP is not the same as the WVPP. An employer that addressed SB-553 in 2024 without reviewing its IIPP has addressed one of two significant Cal/OSHA written program obligations. A Cal/OSHA compliance officer reviewing a workplace following an incident or complaint will examine both.
For most mid-market California employers, the IIPP and WVPP are best developed and maintained as a coordinated system — reviewed on the same annual cycle, owned by the same responsible party, and documented in a format that can be produced together in response to an inspection request.
— The Full Picture
Most California employers who addressed SB-553 in 2024 have never had their IIPP reviewed. The two documents are not interchangeable — a WVPP addresses workplace violence specifically, while an IIPP addresses the full safety program obligation. A Cal/OSHA compliance officer reviewing your workplace will examine both.
Kestralis Group develops and maintains both as a coordinated system — reviewed on the same annual cycle, owned by the same responsible party, and documented in a format ready to produce together in response to an inspection request.
— Beyond SB-553
California's workplace safety framework does not begin and end with SB-553 or even with the IIPP. Many California employers face additional hazard-specific compliance obligations and mandatory training programs that fall outside the workplace violence statute entirely — and a defensible compliance posture has to account for all of them.
Beyond the IIPP, many California employers face hazard-specific compliance obligations that apply based on industry and workplace conditions rather than headcount. Heat Illness Prevention is required for any employer with outdoor workers exposed to heat. Hazard Communication (SDS, labeling, employee training) applies wherever employees may be exposed to hazardous chemicals. Lockout/Tagout, Bloodborne Pathogens, Respiratory Protection, and Powered Industrial Trucks are triggered by the specific conditions present. Each has its own written program, training, documentation, and recordkeeping requirements.
California also requires mandatory harassment prevention training — separate from OSHA obligations — for all employers with five or more employees. Supervisors must complete two hours of training every two years under AB 1825. Non-supervisory employees must complete one hour every two years under SB 1343. This is not a Cal/OSHA requirement, but it is a mandatory, recurring, and documented training obligation that most California employers manage alongside their safety program.
— Kestralis Group Delivers
— Adjacent Obligations
— Our Approach
Kestralis Group focuses on workplace violence prevention, behavioral threat assessment, and security advisory — the areas where our principals' operational and enterprise credentials produce the most defensible outcomes. For adjacent compliance obligations outside our scope, we advise on what's needed and refer to qualified specialist partners. You get one point of contact for the full picture.
Questions about your complete California compliance posture? Schedule a consultation →
— Free tool · ~90 seconds
Find your 3-year California workplace violence exposure across Cal/OSHA penalties, civil liability, workers’ comp, productivity, and insurance — from federal and state data, with a personalized PDF.
Three ways to engage
Pricing reflects single-location mid-market engagements. Multi-site, regulated, or complex programs are scoped individually after a thirty-minute consultation.
Tier 01
$3,500 – $6,500
Five-business-day engagement
Practitioner review of your current state — plan, log, training, and hazard assessment — against all SB-553 requirements.
Best for: Existing 2024 plans needing an independent review, or employers facing imminent Cal/OSHA inspection.
Schedule a ConsultationTier 02
$8,500 – $18,000
Four to six weeks · single location
End-to-end build of your written plan, log system, training program, and Threat Assessment Team — site-specific, not templated.
Best for: From-scratch programs, or 2024 plans that need a full rebuild before the permanent Cal/OSHA standard.
Schedule a ConsultationTier 03
$2,000 – $4,000 / month
Annual retainer
We own the plan's annual cadence — review, retraining, regulatory monitoring, and on-call consultation when threats arise.
Best for: Organizations that want SB-553 compliance handled without standing up an internal owner.
Schedule a Consultation— What's Coming
Cal/OSHA is required to adopt a permanent workplace violence prevention standard for general industry by December 31, 2026. Every existing WVPP will need to be reviewed against the final standard when it is adopted. Organizations that built substantive, site-specific programs now will manage that update as a routine review. Organizations that relied on a template will face a full rebuild — often under time pressure and without the internal expertise to do it correctly.
Kestralis Group monitors the rulemaking in real time. Clients on our annual compliance retainer will have the permanent standard transition managed as part of their ongoing program.
— Next step
Our SB-553 Readiness Assessment evaluates your WVPP and flags adjacent IIPP gaps — delivered as a written compliance scorecard within five business days.
