California's first-in-the-nation workplace violence law is no longer new — and that's exactly the problem. Senate Bill 553 took effect on July 1, 2024, which means Cal/OSHA enforcement is now in its second year, and whatever informal grace period employers assumed they had is gone. Meanwhile, the clock is running on the next phase: the Occupational Safety and Health Standards Board must adopt a formal, permanent workplace violence prevention standard by December 31, 2026. The Board released a revised discussion draft this spring, public comment closed in August, and every revision has pointed in the same direction: more specific duties, more documentation, more training.

If your company's response to SB 553 was a binder assembled in 2024 that nobody has opened since, this article is for you.

What SB 553 actually requires from your training

The statute — Labor Code section 6401.9 — applies to nearly every California employer, from casinos and hospitals to warehouses and offices. Narrow exemptions exist for very small, non-public workplaces and remote-only workers, but if your staff interacts with the public or with each other on site, you're covered. On training, the law is more specific than most employers realize:

• Initial training when the plan is first set up, and annual training every year after.
• Additional training whenever a new or previously unrecognized workplace violence hazard is identified, or when the plan itself changes.
• Training must include the opportunity for interactive questions and answers with someone genuinely knowledgeable about the plan. A recorded video with no way to ask questions does not satisfy this.
• Content must cover the plan itself: how to report threats, how to get help, the emergency response procedures, and the strategies employees can use to avoid physical harm.
• Everything must be site-specific. The hazards of a casino floor at 1 a.m. are not the hazards of a dental office at 10 a.m., and the training has to reflect the real workplace.

Training records — dates, content, instructor qualifications, and the names and job titles of attendees — must be kept for one year. Hazard records, violent incident logs, and investigation records: five years.

A trainer's read: where California employers keep failing

Ilya Bezuglov, founder of Blue Diamond Protection Consulting, is a former police lieutenant and detective who once ran a police academy. He has reviewed hundreds of workplace violence plans, and he says most employers fail in the same two places: on paper, and in the room.

“The plan has to survive contact with a real Tuesday night,” Bezuglov says. “I've reviewed binders that describe a workplace that doesn't exist — procedures for equipment the company doesn't own, reporting chains naming people who left two years ago. An inspector reads that in five minutes. And your employees read it even faster, because nobody follows a plan they don't believe in.”

His second observation: most employers train the wrong people in the wrong room. “Executives sit through a slideshow. The frontline staff — the cashiers, the dealers, the nurses, the receptionists who will actually face the threat — get a handout. Those are the people who need the interactive session, the Q&A with someone who has handled real incidents, and the chance to practice what to say and where to stand.”

The two mistakes employment lawyers keep flagging

Employment attorneys advising California companies report the same two compliance failures, over and over:

1. The internet template

A downloaded template with the company name filled in is the single most common audit failure. Cal/OSHA's guidance is explicit: the plan must be written for your site, built on a real hazard assessment of your workplace. The law defines four types of workplace violence — criminal-intent, customer or client aggression, worker-on-worker, and personal-relationship violence that follows an employee to work. A casino, a clinic, and a distribution center face completely different mixes of those four. If your plan doesn't name your actual risks, it isn't a plan.

2. Threats that were never logged

The violent incident log is SB 553's most ignored requirement — and the one lawyers flag as the biggest liability trap. The law requires logging threats and incidents even when nobody is injured: date, time, location, violence type, a detailed description drawn from employee accounts and witness statements, and the investigation findings. No identifying details of the people involved. Five-year retention. Employers that only log injuries have, in an inspector's eyes, no incident data at all — and therefore no way to show their plan is working.

Your action list before December

With the permanent standard landing by year's end, here is the practical sequence our trainers recommend for the next eight weeks:

• Walk your actual site. Map the real hazards: the entrance with no sightline, the late-night shift with one employee alone, the unlit parking lot, the customer-facing roles with the most friction. Write them down. That list is the foundation of a site-specific plan — and it takes an afternoon, not a consultant's retainer.
• Run a real training session, not a replay. Initial or annual, it must give every employee the chance to ask questions of someone who genuinely knows the plan and has handled real incidents. Cover how to report a threat, who responds, and what to do in the first sixty seconds of a confrontation.
• Set up the reporting channel and the log. Employees need a way to report threats without fear of retaliation — anonymous options work best — and every report needs to land in a violent incident log that someone actually reviews for patterns.
• Document everything. Training dates, session content, instructor qualifications, attendee names and titles: keep for a year. Hazard assessments, logs, investigations: five years. If it isn't written down, it didn't happen.
• Schedule next year's session now. Annual training has a way of slipping. Put the 2027 date on the calendar while the 2026 session is fresh — employers that train early in the year consistently get better scheduling and calmer inspections.

A note on this article: it is practical guidance from professional trainers. It is not legal advice, and Blue Diamond is not a law firm — for questions about a specific incident or citation, talk to an employment attorney.

Bring the training on site

Blue Diamond Protection Consulting delivers on-site workplace violence prevention training across California — scenario-based sessions led by law-enforcement veterans, tailored to your venue and your actual hazards, including the legal-aspects briefing your managers need before they face a real confrontation.

Call +1 (530) 650-6306 or visit our contact page to schedule a session before the December deadline.