A workplace violence prevention plan California employers created last year may not be enough today if the workplace, staffing, procedures, or hazards have changed.
For many employers, the first priority was getting a written WVPP in place. That was an important step. But a WVPP is not a one-time document. It should stay connected to how the workplace actually operates, how employees report concerns, how hazards are identified and corrected, how incidents are investigated, and how training is delivered.
Cal/OSHA guidance for general industry explains that covered employers must establish, implement, and maintain a written Workplace Violence Prevention Plan. It also identifies key plan elements, including employee involvement, communication, hazard identification, incident response, training, and procedures to review the plan for effectiveness and revise it as needed.
That makes the practical question less about whether a plan exists and more about whether the plan still works.
Why WVPP review is an ongoing responsibility
A written WVPP should reflect real workplace conditions. If the document says one thing, but employees and supervisors follow a different process, the plan may create confusion instead of clarity.
This can happen gradually. Reporting lines change. Supervisors move into new roles. Work areas are added. Public-facing duties expand. Staffing levels shift. A new entrance, reception process, parking arrangement, or field work assignment can change how employees experience risk.
A WVPP California employers rely on should also align with the broader safety program. California allows the written WVPP to be maintained as a separate document or incorporated as a stand-alone section of the written Injury and Illness Prevention Program, or IIPP.
That connection matters because the WVPP and IIPP often share practical safety elements, including responsibility, communication, hazard correction, training, and documentation. If the two programs describe different procedures, employees and supervisors may not know which process to follow.
When California employers should review their WVPP
California’s workplace violence prevention framework identifies several clear triggers for review. Employers should not wait for the plan to become outdated before evaluating it.
At least annually
A WVPP should be reviewed at least once a year. Cal/OSHA’s employer fact sheet lists annual review as one of the required plan review procedures.
An annual review gives employers a structured opportunity to ask practical questions:
Does the written plan still match current operations?
Are the listed responsible persons still accurate?
Are employees still being trained on the correct procedures?
Are reporting and response procedures clear?
Are hazard assessments being completed and documented?
Are violent incident logs and investigation records being maintained properly?
The goal is not just to update dates on a document. The goal is to confirm that the plan is still effective, understandable, and usable.
After a workplace violence incident
A workplace violence incident should trigger a review of the plan. The review should look at what happened, how the employer responded, what employees understood, and whether any gaps appeared in the written procedures.
Cal/OSHA guidance states that when an employee is injured due to workplace violence, employers should record required information in the violent incident log, investigate and evaluate the incident, determine and implement changes needed to reduce hazards, and review the effectiveness of the written WVPP.
Even when an incident does not result in injury, it may still reveal problems. For example, employees may not know how to report a threat. Supervisors may be unclear about escalation steps. The emergency response process may not match the layout of the worksite. A hazard may have been known informally but not addressed in the plan.
A post-incident review helps turn what the workplace learned into practical prevention steps.
When a deficiency is observed or becomes apparent
Employers should also review the plan when a deficiency is observed or becomes apparent. This does not require waiting for an incident.
A deficiency may include unclear reporting procedures, missing responsibilities, incomplete training records, outdated emergency response language, weak follow-up documentation, or corrective actions that are not being tracked.
Labor Code section 6401.9 states that procedures must address review of plan effectiveness and revision as needed, including review at least annually, when a deficiency is observed or becomes apparent, and after a workplace violence incident.
In practical terms, employers should treat known gaps as a reason to act. If the team already knows part of the plan is unclear, outdated, or not being followed, the next annual review should not be the first time it is addressed.
When the workplace changes in a meaningful way
Even without a formal incident or known deficiency, workplace changes can create new WVPP review needs.
Examples may include:
New or redesigned work areas
Different public access points
New field work or off-site assignments
Changes in staffing or shift coverage
New job duties that affect employee exposure
New security procedures or technology
Changes in how employees report concerns
New hazards identified by employees or supervisors
Cal/OSHA’s employer fact sheet explains that workplace violence hazard inspections should occur when the plan is first set up, periodically, after violent incidents, and whenever a new hazard becomes known.
This also connects to broader IIPP requirements California employers manage under Title 8, Section 3203. The IIPP regulation requires procedures for identifying and evaluating workplace hazards, including scheduled periodic inspections and inspections when new substances, processes, procedures, or equipment are introduced, or when the employer becomes aware of a new or previously unrecognized hazard.
Signs your current WVPP may need an update
Employers can often spot warning signs before a formal review begins.
One common sign is employee confusion. If employees are unsure how to report a threat, who receives the report, or what happens after they raise a concern, the communication section of the plan may need attention.
Another sign is outdated responsibility. A plan may list a manager, department, or job title that no longer matches the current organization. If the people responsible for implementation are no longer in those roles, the plan should be updated.
Training gaps are also a concern. Cal/OSHA’s employer fact sheet states that employers must provide initial training and annual training thereafter. It also states that additional training is required when new or previously unidentified workplace violence hazards are discovered or when changes are made to the plan.
A plan may also need revision if the violent incident log process is not understood. Employers must maintain a log of all workplace violence incidents, even if the incident does not result in injury, while excluding personal identifying information that would identify a person involved in the incident.
Finally, the WVPP may need review if it no longer lines up with the IIPP. Employers can learn more about PCS Safety’s IIPP support on the Injury & Illness Prevention Program page and this related resource on the core elements of an effective IIPP.
What employers should review when updating a WVPP
A useful WVPP review should go deeper than formatting changes. Employers should evaluate whether the plan is accurate, complete, and practical.
Responsibility and employee involvement
Start by reviewing who is responsible for implementation. If multiple people are responsible, their roles should be clear.
The review should also look at how employees and authorized employee representatives are involved. Labor Code section 6401.9 includes active employee involvement in developing and implementing the plan, including participation in identifying, evaluating, and correcting workplace violence hazards, designing and implementing training, and reporting and investigating incidents.
Reporting and communication
Next, review how employees report concerns. The plan should explain how employees can report workplace violence incidents, threats, or concerns without fear of retaliation.
This section should be easy to understand. Employees should know whether to report to a supervisor, manager, safety contact, HR representative, law enforcement, or another designated person depending on the situation.
Hazard identification and correction
Review how workplace violence hazards are identified, evaluated, and corrected. This should include routine inspections, employee concerns, incident findings, and newly recognized hazards.
The plan should also explain how corrective measures are assigned, tracked, and completed. A strong written plan is less useful if identified hazards do not lead to timely follow-up.
Emergency response and post-incident investigation
The WVPP should explain how the employer responds to actual or potential workplace violence emergencies. This may include alerting employees, evacuation or sheltering procedures, contacting assigned responders or security personnel, and contacting law enforcement when needed.
Post-incident response should also be clear. The plan should describe how incidents are investigated, how information is recorded, how corrective actions are identified, and how employees are informed of relevant results or corrective steps.
Training and recordkeeping
Training should match the actual plan and the actual workplace. If the plan changes, training may need to change too.
Cal/OSHA lists several recordkeeping responsibilities, including maintaining records of hazard identification, evaluation, and correction for at least five years, WVPP training records for at least one year, violent incident logs for at least five years, and workplace violence incident investigation records for at least five years.
Employers should confirm that these records are being created, stored, and made available as required.
How SB 553 workplace violence requirements connect to your safety program
SB 553 workplace violence requirements added major WVPP responsibilities for many California employers. But the plan should not sit apart from the rest of the safety system.
A WVPP often depends on the same management practices used in other safety programs: assigning responsibility, involving employees, identifying hazards, correcting unsafe conditions, training employees, and keeping records.
That is why reviewing the WVPP alongside the IIPP can be helpful. If both documents use the same communication process, the same corrective-action tracking system, and consistent responsibility language, the safety program is easier to manage.
Employers that want a broader review can use a safety program audit or gap analysis to compare written programs against current practices. PCS Safety offers Safety Program Audits & Gap Analysis and OSHA Compliance Training & Consulting Services for organizations that need support evaluating safety program documentation, training, and implementation.
A practical WVPP review checklist
Use this checklist as a starting point when reviewing your workplace violence prevention plan California program:
Confirm the plan is current, written, and accessible.
Verify that responsible persons and job titles are accurate.
Check that employee reporting procedures are clear.
Review how reports are accepted, investigated, and documented.
Confirm that the plan prohibits retaliation for reporting concerns.
Evaluate whether hazard assessments reflect current work areas and operations.
Review any incidents, near misses, or employee concerns since the last update.
Check whether corrective actions were completed and documented.
Confirm that emergency response procedures still match the site.
Review training records and training content.
Confirm that the violent incident log process is being followed.
Compare the WVPP with the IIPP for consistency.
Document what was reviewed, what changed, and what follow-up is needed.
FAQ
How often should California employers review a workplace violence prevention plan?
California employers should review the WVPP at least annually. The plan should also be reviewed when a deficiency is observed or becomes apparent and after a workplace violence incident.
What events trigger a WVPP update in California?
Common triggers include an annual review, a workplace violence incident, a newly identified hazard, a known deficiency, major changes in work areas or job duties, and changes to reporting, training, or emergency response procedures.
Can a WVPP be part of an IIPP in California?
Yes. Cal/OSHA’s employer fact sheet explains that the written WVPP may be incorporated as a stand-alone section in the written IIPP required by Title 8, Section 3203, or maintained as a separate document.
What should employers check during a WVPP review?
Employers should review responsibilities, employee involvement, reporting procedures, hazard identification and correction, emergency response, post-incident investigation, training, recordkeeping, violent incident logs, and alignment with the IIPP.
Next steps for California employers
If your WVPP has not been reviewed against current operations, now is a good time to look at it carefully. A practical review can help identify gaps before they create confusion, documentation problems, or preventable safety concerns.
PCS Safety helps California employers develop, review, and update workplace violence prevention programs, including written plans, training, and prevention efforts connected to real workplace conditions. Learn more about PCS Safety’s Workplace Violence Prevention services.
For employers reviewing the broader safety program, PCS Safety also supports Injury & Illness Prevention Programs, Safety Program Audits & Gap Analysis, and OSHA Compliance Training & Consulting Services.