Workplace Violence Prevention Training: A Guide

If you run a business in California, there is a good chance you were supposed to have a workplace violence prevention plan and annual training in place by July 1, 2024, and many small business owners still do not realize it applies to them. The law that created this requirement, SB 553, arrived with no grace period and covers nearly every employer in the state, not just big companies or high-risk industries. If that is news to you, you are not alone, and you are not too late to fix it.

Workplace violence prevention training sits at an awkward intersection. It sounds like something only high-risk industries need, yet the legal requirements now reach ordinary small businesses. It sounds expensive and complex, yet the core obligation, a written plan, some training, and a few records, is manageable without a legal department or a costly learning system. The hard part is mostly knowing what is actually required.

This guide explains what workplace violence prevention training is, whether you are legally required to provide it, exactly what California's SB 553 demands, and how a small business can build a compliant program step by step. I built FirstHR for owners handling this themselves. None of this is legal advice, and the rules are evolving, so confirm current requirements with Cal/OSHA, OSHA, or an attorney before you finalize your program.

What Is Workplace Violence Prevention Training?

Workplace violence prevention training is instruction that teaches employees to recognize, avoid, report, and respond to violence and threats of violence in the workplace. It covers the types of violence a workforce might face, the warning signs, the employer's prevention plan, how to report incidents safely, and how to respond in an emergency. The goal is both to protect people and to satisfy the legal duty employers have to provide a safe workplace.

The reason this training has moved from optional to mandatory in places is that workplace violence is a serious and measurable hazard. OSHA reports that many workers are victims of workplace violence each year and that many more cases go unreported, with the risk rising for anyone who exchanges money with the public, works alone or in an isolated area, or works late at night.

The federal fatality count gives the hazard its scale. According to the Bureau of Labor Statistics Census of Fatal Occupational Injuries (2024), 733 of the 5,070 fatal work injuries recorded that year were due to violent acts, and homicides accounted for 470 of them. Regulators treat violence like any other recognized hazard because of numbers like these.

The Four Types of Workplace Violence

Workplace violence is commonly classified into four types based on the perpetrator's relationship to the business, and understanding them is the foundation of any prevention program and required content in California's training. Each type carries different risks and calls for different prevention measures, so identifying which apply to your workplace is the first analytical step.

Most small businesses face a mix, but usually one or two dominate. A retail shop worries most about Type 1 (criminal intent during robbery) and Type 2 (an aggressive customer). An office may be more exposed to Type 3 (a conflict between coworkers or a terminated employee) or Type 4 (a personal-relationship dispute spilling into work). Knowing your dominant types tells you where to focus your plan, your hazard assessment, and your training, rather than treating every risk as equal.

Examples of Workplace Violence

The range here is wider than most owners expect. Labor Code 6401.9 counts any act of violence or threat of violence at a place of employment, including a threat sent by text or social media and an incident where a common object is used as a weapon, whether or not anyone is injured.

Two boundaries are worth teaching alongside the list. Lawful self-defense or defense of others is excluded by statute. Ordinary rudeness sits outside the definition too, unless the conduct conveys, or is reasonably perceived to convey, an intent to cause physical harm or to place someone in fear of physical harm, and serves no legitimate purpose.

Sorting live situations into types is harder than reading the definitions, so the examples in your training should come from your own sites rather than a generic course. Give people two or three things that have actually happened at your locations, then walk through what gets logged, who gets told, and when it becomes a workplace investigation.

Is Workplace Violence Prevention Training Legally Required?

The answer depends on your location, but it is required more often than most employers assume. There is no single federal law mandating workplace violence prevention training, yet the obligation exists through a combination of the OSHA General Duty Clause at the federal level and specific state mandates, most notably California's SB 553. Together, these mean the training is effectively required in California and strongly advisable everywhere violence is a foreseeable risk.

At the federal level, OSHA has no dedicated workplace violence standard. Instead, the obligation flows from the General Duty Clause, Section 5(a)(1) of the Occupational Safety and Health Act of 1970, which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. OSHA has used this clause to cite employers, particularly in healthcare and social services, who failed to address foreseeable violence (OSHA enforcement directive).

So even without a specific standard, a federal duty exists wherever violence is a recognized hazard.

At the state level, California carries the broadest mandate, and other states are following with narrower, industry-specific laws. The next sections break down California's requirements in detail and then cover the federal and multi-state picture. If you have employees in more than one state, remember that each employee is generally covered by the law of the state where they work.

California SB 553: What Employers Must Do

California's SB 553, codified as Labor Code Section 6401.9, requires most California employers to establish, implement, and maintain a written Workplace Violence Prevention Plan and to train employees on it. Signed on September 30, 2023, the law reaches employers in every industry rather than healthcare alone (California Legislature). If you have a covered California workplace, compliance is not optional.

There was no phase-in. Asked directly whether the initial training had to be finished by July 1, 2024 or whether a grace period applied, Cal/OSHA answered that subdivisions (b) through (g) of Labor Code 6401.9 are in effect and enforceable on that date, and that this includes the training requirements.

The law applies to nearly all California employers. The exemptions are narrow: workplaces with fewer than 10 employees working there at any given time, not accessible to the public, and already in compliance with the injury prevention program rule; employees who telework from a location of their own choosing outside the employer's control; healthcare facilities already covered by California's separate healthcare violence standard; and certain corrections and law enforcement facilities.

Those exemptions rarely fit a small business, because most have some public-facing element. Assume you are covered unless you clearly land inside one of those categories. Cal/OSHA can also issue an order requiring an otherwise exempt employer to comply, so an exemption is not a permanent excusal.

The plan can stand alone or be built into your existing Injury and Illness Prevention Program, which is often the simpler route since the two share hazard identification, correction, and training requirements. Cal/OSHA publishes a model plan you can adapt, though it is dense and generic, so tailoring it to your actual worksite matters (Cal/OSHA).

The written plan, the training, and the records work together as one system, which is exactly what the setup section later walks through.

What the Training Must Cover

Under SB 553, the training is not a generic video; it must cover specific content and include a genuine interactive element. The required topics tie directly to your own plan and worksite, which is why off-the-shelf training alone often falls short unless it is tailored to your business. Here is what the training has to address.

That last point, interactivity, is where many well-meaning employers slip. The statute calls for an opportunity for interactive questions and answers with a person knowledgeable about the employer's plan, so the format has to allow a real exchange, whether in person, over video, or through a module paired with access to that person. Documenting that the exchange happened is part of proving compliance.

The statute sets a standard for the material itself as well. Training material must be appropriate in content and vocabulary to the educational level, literacy, and language of the employees receiving it, which is a second reason a course bought off a shelf often falls short.

Workplace violence training is also separate from harassment prevention training: completing one does not satisfy the other, and California employers with five or more employees generally need both.

Federal OSHA and Other States

Outside California, workplace violence obligations come from the federal General Duty Clause and a growing patchwork of state laws, and the trend is clearly toward more regulation. The state laws written so far target particular industries rather than every employer, but the direction of travel means employers everywhere should treat violence as a recognized hazard rather than assume they are exempt.

The most notable recent state development is New York's Retail Worker Safety Act, now codified at Labor Law 27-e and in force. Per the New York State Department of Labor, it applies to employers with 10 or more retail employees in the state and requires a written retail workplace violence prevention policy plus training.

New York sets its own training schedule. Every covered employer trains at hire, then retrains every year once it has 50 or more retail employees and every two years below that, according to the New York State Department of Labor.

The New York rules also dictate how the material reaches workers. The policy goes out at hire and once a year after that, and a written copy of the training goes out with each training, both in English and, where the state has published a translated model, in the employee's primary language.

New York's silent response button rule carries its own date. From January 1, 2027, employers with 500 or more retail employees in the state must give workers access to one, whether a fixed button, a wearable, or a phone app.

Other states are considering similar legislation, usually targeting high-risk industries like retail and healthcare first. The practical takeaway for a multi-state small business is to check each state where you have employees, since a program that satisfies one state may not meet another's rules, and the federal General Duty Clause applies everywhere as a baseline.

How to Set Up a Workplace Violence Prevention Training Program

Setting up a compliant program comes down to five repeatable steps that a small business can run without an enterprise learning system or a legal team. The key is to treat the plan, the training, the logs, and the records as one connected workflow rather than four separate chores. Here is the sequence.

Step two is the one most employers skip, because a written plan can be downloaded and a hazard assessment cannot. It is also the step that makes the training specific enough to satisfy the requirement, since the job-specific hazards you have to teach are whatever the worksheet below turns up.

The connective tissue across all five steps is documentation and repetition. You write the plan once, then train, log, review, and re-train on a recurring annual cycle, keeping records at every stage. For a small business without dedicated HR, the difference between compliant and exposed is usually not effort but organization: whether the plan, the signed acknowledgments, the training completion dates, and the incident log all live somewhere you can produce them on request. This is exactly the kind of recurring, document-heavy workflow that benefits from a single system rather than scattered files.

Recordkeeping and Documentation

Recordkeeping is where compliance is proven or lost, because in an audit your records are the evidence that the training and plan actually happened. California SB 553 sets specific retention periods and access rights, and meeting them is as much a part of compliance as the training itself. Here is what to keep and for how long.

The log is a running record rather than a form you fill in once, which is why it belongs in a spreadsheet you can sort and produce in one lookup. An empty log is a legitimate answer in an inspection. A log you cannot find is not.

Two access rules matter alongside retention. Under Labor Code 6401.9, hazard records, training records, and the Violent Incident Log must be made available to employees and their representatives on request, without cost, for examination and copying within 15 calendar days. Incident investigation records sit outside that employee-access list, though Cal/OSHA can demand every category during an inspection.

That 15-day clock is not long if the files are scattered. Practically, it means storing training completion, plan acknowledgments, and the incident log where you can pull any of them quickly. Centralized, retrievable document management turns recordkeeping from a liability into a routine.

Frequently Asked Questions