If you operate a business in California, the workplace violence conversation is no longer optional. SB 553 took effect on July 1, 2024, and now requires nearly every California employer to maintain a written Workplace Violence Prevention Plan, train employees on it, and keep records that can hold up to a Cal/OSHA inspection. The law is real. The risk is real. And the way most companies are responding (a downloaded template, a five-minute video, and a binder on a shelf) is not protecting anyone. This guide is a working walkthrough of what good actually looks like, what private security can and cannot do, and where to start if you are behind.
The Honest Numbers on Workplace Violence
I spent fifteen years on patrol in Chula Vista and twenty-four years running security since. I have responded to workplace violence calls of every kind, from disgruntled former employee threats to domestic violence following a partner to work, to active assailant incidents in retail and warehouse settings. The data backs up what the field experience says: workplace violence is one of the leading causes of occupational fatalities in the United States, and California consistently ranks among the highest states for workplace homicide.
The pattern that does not get enough coverage: most workplace violence is not stranger-on-employee. It is current employee, former employee, customer, or domestic partner. That changes the entire prevention approach. You are not protecting against a random outside threat. You are protecting against someone who already knows your floor plan, your schedule, and your access codes.
What SB 553 Actually Requires
The law is more practical than most California labor laws. It asks for things any well-run business should already have. Here is the short version.
You need a written Workplace Violence Prevention Plan. The plan has to name the person responsible for implementing it. It has to describe how employees were involved in developing the plan. It has to lay out the procedures for identifying and correcting workplace violence hazards. It has to describe how the company responds to actual or threatened workplace violence. It has to cover training that all employees receive, and the training has to be in a language the employees understand.
You also need a Violent Incident Log. The log records every workplace violence incident, every threat, and every concerning report. Names and personal identifiers stay confidential. The log itself is what Cal/OSHA wants to see during an inspection.
You need to keep records of training, hazard reviews, and incidents for at least five years.
The most underrated requirement in the statute: employees have to be involved in developing the plan and reviewing it annually. A plan written by HR and dropped on the workforce without input is not compliant. It is also not effective, which is the bigger problem.
The Four Types of Workplace Violence
Cal/OSHA and the federal NIOSH framework define four types of workplace violence. Every prevention plan has to account for the ones that apply to your operation.
Type 1: Criminal Intent. The perpetrator has no legitimate relationship with the business. Examples include armed robbery, vehicle break-ins in employee lots, and active assailants who pick the location at random. Retail, late-night service businesses, and properties with cash on hand are highest risk.
Type 2: Customer or Client. The perpetrator is a customer, client, patient, student, or any party the business serves. Healthcare, education, public-facing government, and any business with face-to-face customer conflict. This is by far the most common category in California.
Type 3: Worker on Worker. The perpetrator is a current or former employee. Often the result of escalating workplace tension, recent termination, or unresolved interpersonal conflict.
Type 4: Personal Relationship. The perpetrator does not have a relationship with the business, but does have a personal relationship with an employee. Most often this is a domestic partner following a victim to work. California has the highest population of any state, and domestic violence at work follows that scale.
An honest plan looks at each of these four types and asks: how exposed are we, what controls do we have, and what would we do if it happened today.
Hazard Identification: What to Actually Look For
The hazard identification piece of SB 553 is where most plans go thin. The point is not to write that you considered hazards. It is to walk the operation and find the specific weak points. The list I use on every commercial site:
- Public entry points and the line of sight from them
- Employee parking lot lighting and proximity to building access
- After-hours lone worker situations (closing shifts, single-person operations)
- Cash handling procedures and visibility from public spaces
- Reception and front-desk staffing with no barrier or alarm
- Public restroom and back-of-house access that bypasses staff
- Loading dock access during open hours
- Recent terminations and the controls around those individuals returning
- Domestic violence disclosures from current employees
- Prior incidents, near-misses, and complaints in the past 24 months
For each item, you write down the hazard, the current control, and the planned correction. That is the document Cal/OSHA wants to see. More importantly, it is the document that prevents the next incident.
The Reporting System That Actually Gets Used
Plans fail when employees do not report what they see. Reporting fails when employees do not trust the system. There are three things that make a reporting system actually work in the field.
The first is anonymous reporting. A simple option that does not require an employee to put their name down. Phone, web, or a physical drop box. Anonymous reports do not have to be the only channel, but they have to be one of them.
The second is no retaliation, enforced in writing. SB 553 prohibits retaliation against employees who report. The statute is one thing. The company culture is another. The CEO has to say it, in writing, more than once.
The third is feedback. When an employee reports, they need to know something happened. Not the details, but a confirmation that the report was received and reviewed. Silence after a report kills the system faster than anything else.
Training That Sticks
The required training under SB 553 covers the plan, the reporting procedures, the recognition of warning signs, and the post-incident response. A five-minute compliance video does not get employees to the place where they can spot a domestic violence escalation or recognize the warning signs of an employee in crisis.
Good training looks like this. A one-hour live session at hire, taught by someone with field experience. Annual refreshers tied to actual scenarios the company has seen or could see. Manager training that goes deeper, including how to handle the first 60 minutes of a credible threat. Tabletop exercises once a year for the leadership team, where you walk through a scenario without warning and identify the gaps.
The training cost on the front end is small. The cost of an untrained workforce on a bad day is incalculable.
Response Planning: What to Do in the First 15 Minutes
Every workplace violence plan needs a concrete, practiced answer to the question: what do we do in the first 15 minutes of an incident. The framework that works, drawn from law enforcement and adapted for civilian workplaces, is the same one used in active assailant training: run, hide, fight. The version of that for general workplace violence (not just active shooter) is: get away if you can, secure your space if you cannot, and only engage as a last resort.
Beyond the immediate threat response, you also need a designated incident commander, an evacuation and accountability procedure, a method of notifying law enforcement that does not depend on the front-desk phone, a media-and-communications protocol, and a post-incident response procedure that includes employee support and incident investigation.
The plan that nobody has practiced is not a plan. Run a tabletop exercise twice a year. Walk it through. Find the gaps. Fix them.
Where Private Security Fits
SB 553 does not require a security guard. The hazard assessment may determine you need one. Here are the situations where the field experience says a guard is the right control.
Cash-handling and high-conflict customer environments. Retail, automotive, healthcare admissions, certain government counters. A uniformed officer at the right place changes the conflict dynamic and prevents most Type 1 and Type 2 incidents.
Termination and high-risk separation. When a difficult termination is coming, having an officer present (uniformed or plainclothes depending on the situation) prevents the small percentage of separations that escalate. We do this work regularly for businesses across San Diego, Los Angeles, and Orange County. The presence is the deterrent.
Post-threat coverage. When a credible threat has been made (a former employee, a stalker, a public figure threat), a temporary security presence buys time for the threat to be investigated and law enforcement to engage. This usually runs days to a couple of weeks.
Domestic violence support. When an employee discloses an active domestic violence situation and a partner has shown up or threatened to show up at work, a workplace safety plan that includes private security is one of the most underused tools we have. The employee gets a safer workplace. The business reduces the risk of a violent intrusion.
Executive protection. For named executives in high-profile industries (tech, biotech, finance, media), a written executive protection plan with on-call private security is increasingly standard. The cost is modest. The downside of skipping it is not.
Where a Licensed PI Fits
The investigations side of workplace violence prevention is the most overlooked piece. A licensed private investigator can do legitimate, court-admissible work that internal HR teams cannot.
That includes background investigations on a named threat, civil and criminal records review, public records analysis, social media review (using lawful methods), and physical surveillance in public spaces. A PI can document a pattern of behavior in a way that lets the business pursue a Workplace Violence Restraining Order under California Code of Civil Procedure 527.8. That restraining order is one of the strongest legal tools California gives employers, and it depends on documented evidence that a PI is qualified to produce.
How MT Security & Investigations Can Help
We have built workplace violence prevention plans and provided post-incident security for California businesses since 2002. Our founder is a retired Chula Vista Police Department officer with field experience on the response side of these incidents. We hold both a CA BSIS PPO license for security operations and a CA PI license for investigations, which is a rare combination and the one most useful for workplace violence work.
For California businesses, we provide:
- Written workplace violence threat assessments aligned with SB 553 requirements
- SB 553 plan review and gap analysis for existing plans
- Live employee and manager training, on site or remote
- Tabletop exercises for leadership and security teams
- Armed and unarmed officers for termination coverage, post-threat windows, and ongoing protection
- Executive protection planning and on-call coverage
- Background investigations, threat-subject research, and pre-restraining-order documentation
- Workers compensation fraud investigations where workplace violence and fraud cases intersect
Every officer we deploy is BSIS-licensed and screened to law enforcement standards. Every investigator is supervised by our founder. We respond 24 hours a day and our written reports are built to support both insurance and law enforcement follow-up.
Need a real SB 553 review, not a template?
We will walk your site, audit the plan, and deliver a written gap analysis inside two weeks. Compliant, defensible, and tied to actual controls.
Request a Threat Assessment →Frequently Asked Questions
Does SB 553 apply to my California business?
SB 553 applies to almost every California employer with employees who work in the state. There are limited exclusions for telework-only situations, certain healthcare facilities already covered by Cal/OSHA workplace violence rules, and workplaces with fewer than ten employees that are not accessible to the public. If you have a public-facing location in California with employees on site, you almost certainly need a written Workplace Violence Prevention Plan.
What does a Workplace Violence Prevention Plan have to include?
At minimum, the plan must include named responsibility for implementation, employee involvement in plan development, hazard identification and correction procedures, training requirements, post-incident response and investigation procedures, a violent incident log, and recordkeeping that covers training, incidents, and hazard reviews for at least five years.
Do I need a security guard to comply with SB 553?
SB 553 itself does not require a guard. It requires hazard identification, training, response procedures, and recordkeeping. That said, many businesses determine through the hazard analysis that a guard is part of the right control. Industries with cash handling, public conflict, after-hours operations, or recent threat history commonly land there.
How much does a workplace violence threat assessment cost?
A standalone third-party threat assessment for a small or medium California business typically runs $1,500 to $7,500 depending on the size of the property, the number of locations, and the depth of background work on a named individual. The cost is far smaller than a single incident, and the assessment is often the most useful page in your plan.
Can a private investigator legally check on a current or former employee in California?
Yes, within the limits of California law. A licensed PI can conduct background research, civil and criminal records checks, public records review, and physical surveillance in public places. PIs cannot trespass, pretext, hack into accounts, or pose as law enforcement. A reputable PI works inside the lines and produces records that hold up in court.
What is the most common mistake businesses make on workplace violence?
Treating the SB 553 plan as a paperwork exercise. The plan only works when employees know it exists, recognize warning signs, and have a clear way to report concerns without fear of retaliation. The second most common mistake is missing the warning signs from a current or former employee that ends up being responsible for the incident.