Your Incident Report Isn't an Investigation — And That Gap Could Cost You

Something happens at your business. A customer gets aggressive with a staff member. Two employees get into it in the parking lot. A patient shoves another patient in the waiting room.

You do what most small business owners do: someone writes up what happened. Maybe you talk to the people involved. You note it, you move on.

Here's the problem — California's workplace violence prevention law doesn't just require you to document incidents. It requires you to investigate them. And those are not the same thing.

I spent 30 years on the other side of this. As an investigator building cases for plaintiff attorneys, my job was to look at what a business did after an incident and decide whether it actually held up — or whether it was paperwork dressed up as due diligence. Most of the time, it was the latter. And that gap is exactly what plaintiff's attorneys are trained to find.

What "Documentation" Usually Looks Like

A quick write-up. Who was involved, what happened, maybe a sentence about what was done about it. Filed away. Nobody looks at it again unless something worse happens later.

That's not nothing — but on its own, it's not what the law requires, and it's not what protects you.

What an Actual Investigation Requires

A real investigation, the kind that would hold up if a plaintiff's attorney started asking questions about it, generally needs to happen close to the time of the incident, cover more than just the incidents that resulted in an injury, and be documented in a way that shows you actually looked at why it happened — not just that it happened.

That last part matters most. An investigation that only records what occurred, without asking what allowed it to occur, doesn't tell you anything useful — and it doesn't protect you either.

It also needs to cover incidents involving people who aren't your employees. A confrontation between a customer and staff. An altercation between two clients in your waiting room. A vendor who got aggressive during a delivery. Small business owners tend to think of "investigation" as an HR process for employee conduct. Under California's law, it isn't limited to that — and this is often the part DIY compliance efforts miss entirely.

Why a Weak Investigation Can Hurt You More Than No Investigation

This is the part that surprises people. You'd think something is always better than nothing. Not always.

A thin, performative investigation can end up working against you in a few specific ways:

• It can look like you knew and didn't act. If your write-up identifies a hazard — a broken door lock, an employee who'd had prior conflicts with a client — and nothing changes afterward, that record becomes evidence that you were on notice and chose not to fix it.
• It can undercut your credibility on everything else. If your investigation process is thin here, a plaintiff's attorney will ask what else in your compliance plan is thin. One weak link invites scrutiny of the whole chain.
• It can trigger regulatory attention on its own. Cal/OSHA doesn't just look at whether an incident happened — it looks at what you did afterward. A record that shows minimal follow-through can be its own finding.

In other words: the investigation you already have on file might not be protecting you. It might be sitting there, waiting to be read by someone whose job is to build a case against your business.

The Real Question to Ask Yourself

Not "did we write something down after the last incident" — but "if a plaintiff's attorney pulled that file today, would it hold up?"

If you're not sure, that uncertainty is worth resolving before an incident forces the question, not after.

I offer a free 15-minute California Compliance & Safety Snapshot call where we look at where your current process stands — including how your business handles investigations — and what, if anything, is putting you at risk. [Book your free Snapshot call →]