Workplace Violence Prevention Training: A Guide
What US employers must do for workplace violence prevention training: federal OSHA rules, California SB 553, and a step-by-step program for small business.
Workplace Violence Prevention Training
A compliance-first guide for small business employers
If you run a business in California, there is a good chance you were supposed to have a workplace violence prevention plan and annual training in place by July 1, 2024, and many small business owners still do not realize it applies to them. The law that created this requirement, SB 553, arrived with no grace period and covers nearly every employer in the state, not just hospitals and big companies. If that is news to you, you are not alone, and you are not too late to fix it.
Workplace violence prevention training sits at an awkward intersection. It sounds like something only high-risk industries need, yet the legal requirements now reach ordinary small businesses. It sounds expensive and complex, yet the core obligation, a written plan, some training, and a few records, is manageable without a legal department or a costly learning system. The hard part is mostly knowing what is actually required.
This guide explains what workplace violence prevention training is, whether you are legally required to provide it, exactly what California's SB 553 demands, and how a small business can build a compliant program step by step. I built FirstHR for owners handling this themselves. None of this is legal advice, the rules are evolving, so confirm current requirements with Cal/OSHA, OSHA, or an attorney before you finalize your program.
What Is Workplace Violence Prevention Training?
Workplace violence prevention training is instruction that teaches employees to recognize, avoid, report, and respond to violence and threats of violence in the workplace. It covers the types of violence a workforce might face, the warning signs, the employer's prevention plan, how to report incidents safely, and how to respond in an emergency. The goal is both to protect people and to satisfy the legal duty employers have to provide a safe workplace.
The reason this training has moved from optional to mandatory in places is that workplace violence is a serious and measurable hazard. Federal data attributes hundreds of workplace deaths each year to violent acts, and OSHA estimates that around two million American workers experience some form of workplace violence annually. That scale is why regulators increasingly treat violence like any other recognized workplace hazard that employers must actively address. This connects to the broader family of compliance training obligations small businesses now carry.
The Four Types of Workplace Violence
Workplace violence is commonly classified into four types based on the perpetrator's relationship to the business, and understanding them is the foundation of any prevention program and required content in California's training. Each type carries different risks and calls for different prevention measures, so identifying which apply to your workplace is the first analytical step.
Most small businesses face a mix, but usually one or two dominate. A retail shop worries most about Type 1 (criminal intent during robbery) and Type 2 (an aggressive customer). An office may be more exposed to Type 3 (a conflict between coworkers or a terminated employee) or Type 4 (a personal-relationship dispute spilling into work). Knowing your dominant types tells you where to focus your plan, your hazard assessment, and your training, rather than treating every risk as equal.
Is Workplace Violence Prevention Training Legally Required?
The answer depends on your location, but it is required more often than most employers assume. There is no single federal law mandating workplace violence prevention training, yet the obligation exists through a combination of the OSHA General Duty Clause at the federal level and specific state mandates, most notably California's SB 553. Together, these mean the training is effectively required in California and strongly advisable everywhere violence is a foreseeable risk.
At the federal level, OSHA has no dedicated workplace violence standard. Instead, the obligation flows from the General Duty Clause, Section 5(a)(1) of the Occupational Safety and Health Act of 1970, which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. OSHA has used this clause to cite employers, particularly in healthcare and social services, who failed to address foreseeable violence (OSHA). So even without a specific standard, a federal duty exists wherever violence is a recognized hazard.
At the state level, California is the clear leader with the first industry-wide mandate, and other states are following with narrower laws. The next sections break down California's requirements in detail and then cover the federal and multi-state picture. If you have employees in more than one state, remember that each employee is generally covered by the law of the state where they work.
California SB 553: What Employers Must Do
California's SB 553, codified as Labor Code Section 6401.9, requires most California employers to establish, implement, and maintain a written Workplace Violence Prevention Plan and to train employees on it. Signed on September 30, 2023, the law became enforceable on July 1, 2024, with no grace period, making California the first state with an industry-agnostic workplace violence mandate (California Legislature). If you have a covered California workplace, compliance is not optional.
The law applies to nearly all California employers. The exemptions are narrow: workplaces with fewer than 10 employees at a location not open to the public that already comply with the injury prevention program rule; employees who telework from a location of their own choosing outside the employer's control; healthcare facilities already covered by California's separate healthcare violence standard; and certain corrections and law enforcement facilities. Because most small businesses have some public-facing element, these exemptions rarely apply, so assume you are covered unless you clearly fit an exemption.
The plan can stand alone or be built into your existing Injury and Illness Prevention Program, which is often the simpler route since the two share notice, training, and review requirements. Cal/OSHA publishes a model plan you can adapt, though it is dense and generic, so tailoring it to your actual worksite matters (Cal/OSHA). The written plan, the training, and the records work together as one system, which is exactly what the setup section later walks through.
What the Training Must Cover
Under SB 553, the training is not a generic video; it must cover specific content and include a genuine interactive element. The required topics tie directly to your own plan and worksite, which is why off-the-shelf training alone often falls short unless it is tailored to your business. Here is what the training has to address.
That last point, interactivity, is where many well-meaning employers slip. Cal/OSHA expects employees to be able to ask about their specific workplace and get a real answer, so the format has to allow a live or genuine Q&A component, whether in person, over video, or through an interactive module paired with access to a knowledgeable person. Documenting that the interactive element happened is part of proving compliance. Importantly, this is separate from harassment prevention training: completing one does not satisfy the other, and California employers generally need both.
Federal OSHA and Other States
Outside California, workplace violence obligations come from the federal General Duty Clause and a growing patchwork of state laws, and the trend is clearly toward more regulation. No other state yet matches California's industry-wide mandate, but the direction of travel means employers everywhere should treat violence as a recognized hazard rather than assume they are exempt.
The most notable recent state development is New York's Retail Worker Safety Act, which took effect in 2025 and requires retail employers to adopt workplace violence prevention policies and provide training. Other states are considering similar legislation, often targeting specific high-risk industries like retail and healthcare first. The practical takeaway for a multi-state small business is to check each state where you have employees, since a program that satisfies one state may not meet another's rules, and the federal General Duty Clause applies everywhere as a baseline. This fits within the wider set of employment laws small employers must track.
How to Set Up a Workplace Violence Prevention Training Program
Setting up a compliant program comes down to five repeatable steps that a small business can run without an enterprise learning system or a legal team. The key is to treat the plan, the training, the logs, and the records as one connected workflow rather than four separate chores. Here is the sequence.
The connective tissue across all five steps is documentation and repetition. You write the plan once, then train, log, review, and re-train on a recurring annual cycle, keeping records at every stage. For a small business without dedicated HR, the difference between compliant and exposed is usually not effort but organization: whether the plan, the signed acknowledgments, the training completion dates, and the incident log all live somewhere you can produce them on request. This is exactly the kind of recurring, document-heavy workflow that benefits from a single system rather than scattered files, tying into your broader compliance onboarding process.
Recordkeeping and Documentation
Recordkeeping is where compliance is proven or lost, because in an audit your records are the evidence that the training and plan actually happened. California SB 553 sets specific retention periods and access rights, and meeting them is as much a part of compliance as the training itself. Here is what to keep and for how long.
| Record | Retention period | What it should contain |
|---|---|---|
| Training records | At least 1 year | Dates, contents or summary, trainer names and qualifications, attendee names and job titles |
| Violent Incident Log | At least 5 years | Date, time, location, type (1-4), description, consequences, and who was involved |
| Hazard identification and correction | At least 5 years | Records of assessments, evaluations, and corrective actions taken |
| Incident investigation records | At least 5 years | Findings and follow-up from investigating workplace violence incidents |
Two access rules matter alongside retention. Employees and their representatives generally have the right to obtain these records within a set timeframe on request, at no cost, so the records must be organized and retrievable, not buried. And the records must be available to Cal/OSHA on request during an inspection. Practically, this means storing training completion, plan acknowledgments, and the incident log where you can pull any of them quickly. Centralized, retrievable document management turns recordkeeping from a liability into a routine, and an employee self-service portal can give employees the access to plan documents the law contemplates.
Frequently Asked Questions
Is workplace violence prevention training mandatory?
It depends on where you operate. There is no single federal law requiring workplace violence prevention training, but the OSHA General Duty Clause obligates employers to protect workers from recognized hazards, which includes foreseeable violence. In California, training is explicitly mandatory under SB 553 for most employers, at plan rollout and at least annually. Some other states have industry-specific mandates. So while not universally required by a dedicated federal standard, the training is effectively required in California and strongly advisable everywhere violence is a foreseeable risk.
Who is required to comply with California SB 553?
SB 553 applies to nearly all California employers. There are limited exemptions: workplaces with fewer than 10 employees at a location not open to the public that already comply with the injury prevention program rule; employees who telework from a location of their own choosing outside the employer's control; healthcare facilities already covered by California's separate healthcare violence standard; and certain corrections and law enforcement facilities. Because these exemptions are narrow, most California employers, including small businesses, are covered and must have a written plan and annual training.
How often is workplace violence training required in California?
Under California SB 553, training is required when the Workplace Violence Prevention Plan is first established, at least annually thereafter, and additionally whenever a new or previously unrecognized hazard is identified or the plan changes. The annual cadence means most California employers run refresher training each year, typically around the anniversary of their plan's rollout, and update it whenever their operations, locations, or risks shift. Keeping the training current is part of staying compliant.
What must California SB 553 training cover?
The training must cover the Workplace Violence Prevention Plan and how employees can get a copy and participate; the definition of workplace violence and its four types; how to report incidents without fear of retaliation; the specific violence hazards of the employee's job and work location and the corrective measures for them; the Violent Incident Log and how to obtain records; and an interactive component where employees can ask questions and get answers from someone knowledgeable about the plan. A passive video with no chance to ask questions does not satisfy the interactive requirement.
What is the difference between workplace violence training and harassment training?
They are separate, distinct requirements. Harassment prevention training addresses unlawful discrimination and harassment based on protected characteristics. Workplace violence prevention training addresses the risk of physical violence and threats at work, including from customers, coworkers, or outside parties. California requires both as separate programs; completing harassment training does not satisfy the SB 553 workplace violence requirement, and vice versa. Employers in California generally need to run and document both.
Does workplace violence training apply outside California?
Yes, in effect, even without a dedicated standard. Outside California, the OSHA General Duty Clause requires employers to protect workers from recognized hazards, and OSHA has cited employers for failing to address foreseeable workplace violence, especially in healthcare and social services. Some states have their own rules; for example, New York's Retail Worker Safety Act requires violence prevention policies and training for retail employers. So workplace violence training is advisable nationwide wherever violence is a foreseeable risk, and required by specific laws in a growing number of states.
How long do I have to keep workplace violence training records?
Under California SB 553, training records must be kept for at least one year, and they should include the training dates, contents or a summary, the names and qualifications of trainers, and the names and job titles of attendees. The Violent Incident Log and records of hazard identification, evaluation, and correction must be kept for at least five years. Employees and their representatives have the right to access these records within a set timeframe on request, at no cost. Good recordkeeping is your primary evidence of compliance in an audit.
Do small businesses have to provide workplace violence training?
In California, yes, in most cases. The main small-business exemption under SB 553 is narrow: fewer than 10 employees at a location not open to the public, where the employer already complies with the injury prevention program rule. Most small businesses with any public-facing location or customer interaction are covered and must have a plan and annual training. Outside California, small businesses are covered by the General Duty Clause and any applicable state law, so they should provide training wherever workplace violence is a foreseeable risk.