You're Not a Compliance Officer. CAL/OSHA Doesn't Care.

You're Not a Compliance Officer. Cal/OSHA Doesn't Care.

You're running the front counter, handling scheduling, doing payroll, and putting out whatever fire came up this morning. Nobody handed you a compliance department. 

So when you put together a Workplace Violence Prevention Plan back in 2024 to meet the SB 553 deadline, it probably got done, filed, and left alone — because it had to be, and because there was no one whose actual job it was to keep circling back to it.

That's not a knock on you. It's how almost every small business handles a requirement like this. But it's also exactly how a plan that was solid in 2024 quietly stops matching reality by 2026 — and this is the year that starts to matter.

Cal/OSHA released the latest draft of the permanent general industry workplace violence prevention standard this spring, and the public comment period on it closed June 1. A final version is expected in the coming months — and by law, it has to be adopted no later than December 31, 2026. 

Once it's final, the loose, "good faith effort" version of compliance a lot of small businesses have been running on stops being good enough.

Here's what's changing, and why it matters more than it might look like on paper.

What the New Draft Actually Changes

A few of the revisions are technical. A few of them are the kind of thing that decides whether your business is protected or exposed the day something actually happens:

• The exemption for non-public workplaces gets narrower. Every workplace that is accessible to the public must comply with the law regardless of how many employees you have. For non-accessible businesses the exemption is now limited to employers with fewer than 10 employees at a location, at all times over the preceding 365 days — not just a headcount snapshot. Fewer businesses will qualify as exempt than previously thought.
• "Threat of violence" and related terms are being redefined to broaden what counts as reportable and assessable conduct. Things that might have felt like a gray area before may not be gray anymore.
• The standard leans on a "reasonable belief" standard for what an employer should have known about a violence risk. It’s not about what you did know, but what a reasonable employer should have known and acted on under the circumstances. This is especially important for incidents involving third-parties, which can put you at even greater risk financially.
• Recordkeeping just got heavier. Employers will need to keep records of every reported threat, incident, or concern — plus the employer's investigation of and evaluation of an incident, the corrective action taken, and what was communicated to employees — for five years.
• Hazard assessments now need to be revisited not just annually, but after every incident, whenever the workplace or work changes, and whenever the employer becomes aware of a new hazard.
• Anonymous reporting channels and staffing adequacy are both getting more attention as required elements of a compliant plan, not nice-to-haves. And that’s good because inadequate staffing levels is a safety hazard for your employees.

Why This Should Get Your Attention (Not Just Your HR Consultant's)

Most of the compliance guidance out there focuses on getting a written plan in place and checking the training box. That was the bar in 2024. It is not going to be the bar once this standard is adopted.

I've spent 30 years building investigations, including cases for plaintiff's attorneys against businesses after violence occurred against a customer or an employee at their location. In almost every one of those cases, the business had something in writing. 

What they didn't have was a plan that held up once someone asked the harder questions: Did you actually document the complaint? Did you evaluate it or just file it? Could an employee report a concern without fear of it getting back to their supervisor? Would your own records show a five-year trail of taking this seriously — or a folder that only exists because someone built it the week before the lawsuit?

That's the gap this new draft is closing. And it's exactly the gap a plaintiff's attorney — or Cal/OSHA — knows how to find.

→ If you're not sure whether your plan would hold up to that kind of scrutiny, that's exactly what I look at on the free 15-minute Workplace Violence Compliance & Safety Snapshot call. No pitch, just a straight read on where you stand. [Grab a time here.]

What To Do This Week

You don't need to overhaul your whole plan today, but three things are worth doing now while the draft standard is still fresh:

1. Pull your current WVPP and check your recordkeeping. If you had an incident or a reported concern in the last year, could you produce documentation of how you investigated and evaluated it and what you did about it?
2. Look at how employees can report a concern. Is there a real complaint process where complaints are brought to a specific person, or does everything route through a direct supervisor leading to a potential conflict of interest?
3. Check your hazard assessment date. If you haven’t conducted a hazard assessment since your plan was first written, you’re already behind what's coming. Make sure to involve your employees in this assessment since they’re the ones at risk, and California requires you to do so.

What To Do Before December 2026 (If You Don’t Have A Compliance Department)

If you haven’t revisited your hazard assessment since you first wrote your plan, you’re already behind what’s coming for California employers.

And none of this requires waiting for the final standard to be adopted.

The businesses that come out ahead of December 31, 2026 are the ones treating workplace violence prevention as something they actively manage now, not a document they update only when it becomes mandatory.

If you run a business where employees deal with the public at a counter, in a lobby, in the field, or in customers’ homes, that matters even more. When something goes wrong, you don’t get graded on effort. You get graded on records and decisions.

You don’t need to add “compliance officer” to your list of hats.

Book a free 15‑minute Workplace Violence Compliance & Safety Snapshot call [here] and let someone who has built cases against employers over workplace violence walk you through where you actually stand, in plain English:

• Whether your current plan would hold up under Cal/OSHA or in a lawsuit
• Where your documentation and reporting process are exposed
• The 1–3 concrete changes that will matter most for your kind of business before 2026

No legalese, no scare tactics, just a clear picture of your risk and a short punch list to fix it.