Employment Law

California's Workplace Violence Prevention Plan: What Employers Must Have on File

By Ingrid Rainey · July 28, 2026 · 6 min read

Editorial photo illustrating California's Workplace Violence Prevention Plan: What Employers Must Have on File

California Labor Code section 6401.9 requires nearly every employer in the state to establish, implement, and maintain a written Workplace Violence Prevention Plan. It is not limited to hospitals, retail, or high-risk settings. Professional offices, warehouses, restaurants, and remote-first companies with California employees all fall within it, subject to narrow exemptions. Cal/OSHA can cite an employer that has no plan even where no incident has occurred.

Key takeaways

  • Names or job titles of the people responsible for implementing the plan.
  • Separate from the plan, employers must keep a violent incident log recording every incident, regardless of whether an injury resulted.
  • Initial training when the plan is established and annually thereafter, in a manner employees can readily understand.
  • California also allows employers to seek workplace violence restraining orders on behalf of employees who have suffered unlawful violence or a credible threat, and now permits those petitions to cover harassment as well.

What the plan has to contain

  • Names or job titles of the people responsible for implementing the plan.
  • Procedures for obtaining employee input on the plan's development and review.
  • Procedures for accepting and responding to reports of workplace violence, with a prohibition on retaliation against reporters.
  • Procedures for emergency response, including alerting employees and evacuation or shelter plans.
  • Procedures for identifying and evaluating hazards — periodic inspections, post-incident reviews, and review when a new hazard appears.
  • Procedures for correcting identified hazards in a timely way, and for coordinating with other employers on multi-employer sites.
  • Annual review of the plan, plus review after every incident and whenever a deficiency is found.

The violent incident log

Separate from the plan, employers must keep a violent incident log recording every incident, regardless of whether an injury resulted. Each entry captures the date, time, and location; the type of violence under the statute's four categories; a detailed description; the classification of the person committing the violence; the circumstances; consequences; and who completed the log. Personal identifying information of victims and witnesses must be excluded.

The log is the first thing an investigator asks for after a complaint. An empty log at a workplace where employees have reported threats is worse than a complete one.

Have a question about your situation?

Rainey Law P.C. advises San Diego businesses and employees on matters like this one.

Request a consultation

Training and recordkeeping

  • Initial training when the plan is established and annually thereafter, in a manner employees can readily understand.
  • Training must cover the plan itself, how to report, hazards specific to the employee's job, and the corrective measures in place.
  • Additional training when a new hazard is identified or the plan changes materially.
  • Retain hazard identification and correction records and training records for five years; retain the violent incident log for five years.
  • Make the plan and the log available to employees and their representatives on request, generally within 15 calendar days.

Where this connects to other obligations

California also allows employers to seek workplace violence restraining orders on behalf of employees who have suffered unlawful violence or a credible threat, and now permits those petitions to cover harassment as well. A documented plan and log make that petition substantially easier to support.

The plan also intersects with the Injury and Illness Prevention Program, harassment prevention training, and termination-security planning. Treat it as one part of a coordinated safety and employment-practices file rather than a standalone form.

Rainey Law P.C. drafts workplace violence prevention plans and trains California management teams on incident response.

Frequently asked questions

Does a small office really need a workplace violence prevention plan?

Yes. The requirement applies to nearly all California employers with limited exemptions — including certain small worksites with fewer than 10 employees that are not open to the public and where all employees can be alerted, plus teleworking locations of the employee's choice. Most offices do not qualify for an exemption.

Can the plan be part of our IIPP?

It can be incorporated as a distinct section of the Injury and Illness Prevention Program, or maintained as a standalone document. Either way it must contain every required element.

What are the penalties for not having one?

Cal/OSHA enforces the requirement through its standard citation and penalty structure, with amounts escalating for serious, repeat, and willful violations. The larger exposure is usually the negligence and harassment claim that follows an incident at a workplace with no plan.

This article is general information, not legal advice, and does not create an attorney-client relationship. Outcomes depend on the facts of each matter.

More insights

We fight for you.

Schedule a confidential consultation to discuss your business or employment matter.

Call NowBook Consult