I get this question more than any other. Business owners call, email, and message asking the same thing: "Does SB 553 apply to me?"
And then they follow up with a reason they think it does not. "We are too small." "We are an office." "We do not deal with the public." "Everyone works from home." "We have never had a violent incident."
None of those are exemptions. Not one.
SB 553 — the California Workplace Violence Prevention Act — took effect on July 1, 2024, and it applies to nearly every employer in the state. The exemptions are narrow, specific, and probably do not include you. But rather than tell you what you want to hear, let me walk you through the actual screening process so you can determine — with certainty — whether you are covered.
The Decision Tree
This is the sequence. Answer each question honestly. Do not skip ahead to the exemptions hoping you qualify.
Question 1: Do You Have Employees in California?
If yes, continue to Question 2.
If no — meaning zero employees physically located in or working in California — SB 553 does not apply to you. You are done.
Note: "employees in California" includes remote employees who reside in California, even if your company is headquartered elsewhere. If you have a Delaware LLC with three employees who live and work from home in Los Angeles, you have employees in California.
Question 2: Do You Have At Least One Employee?
SB 553 applies to employers. Under California law, an employer is any person or entity that employs one or more employees. There is no minimum employee threshold.
Not five employees. Not ten. Not fifty. One.
If you employ one person in California, you are an employer under the Labor Code, and SB 553 applies unless you qualify for a specific exemption.
If you are a sole proprietor with zero employees — genuinely zero, not one employee you classify as a contractor because it is more convenient — SB 553 does not apply to you. Independent contractors are not employees for this purpose, but misclassification does not change the headcount. If that "contractor" would be classified as an employee under AB 5, they are an employee.
Question 3: Are You Specifically Exempt?
SB 553 carved out four specific exemptions. These are the only categories excluded from the general workplace violence prevention plan requirement:
Exemption A: Healthcare Facilities Under 8 CCR 3342
Healthcare facilities that are already covered by the existing Cal/OSHA workplace violence prevention standard for healthcare (8 CCR 3342) are exempt from SB 553. This is not an exemption from workplace violence prevention — it is a recognition that healthcare already has its own, more stringent, workplace violence prevention standard.
**Who qualifies:** Hospitals, home health agencies, skilled nursing facilities, intermediate care facilities, and other healthcare operations covered under 8 CCR 3342.
**Who does not qualify:** A dental office that thinks "healthcare" means them. A chiropractic clinic. A wellness center. A med spa. Unless you are covered by 8 CCR 3342 specifically, you are covered by SB 553. Check the scope of 8 CCR 3342 before assuming you are exempt.
**Important:** Even healthcare facilities exempt from SB 553's general provisions must still comply with 8 CCR 3342, which has its own workplace violence prevention plan requirement. You are not exempt from workplace violence prevention — you are just covered by a different standard.
Exemption B: Law Enforcement Agencies
Law enforcement agencies as defined in Penal Code Section 830 are exempt. This covers police departments, sheriff's offices, the California Highway Patrol, and similar agencies.
**Who qualifies:** Sworn law enforcement agencies.
**Who does not qualify:** Private security companies. Security guard services. Campus safety departments that do not have sworn officers under Penal Code 830. Bail bond agencies. Private investigation firms. "Law enforcement" has a specific legal definition, and most private-sector security operations do not meet it.
Exemption C: Department of Corrections and Rehabilitation
CDCR facilities are exempt. This is a narrow exemption for the state corrections system.
**Who qualifies:** CDCR-operated facilities.
**Who does not qualify:** Private prisons. County jails. Juvenile detention facilities not operated by CDCR. Halfway houses. Residential reentry centers operated by contractors.
Exemption D: Employees Covered by a Collective Bargaining Agreement With Equivalent Provisions
If employees are covered by a valid collective bargaining agreement (CBA) that provides equivalent workplace violence prevention protections, those employees may be exempt from SB 553.
**The catch:** "Equivalent protections" is the operative phrase. The CBA must include a workplace violence prevention plan, training requirements, incident logging, and hazard assessment provisions that meet or exceed SB 553's requirements. A CBA that mentions violence prevention in passing does not qualify. The equivalency must be substantive.
**Who qualifies:** Union employees covered by a CBA that specifically addresses workplace violence prevention with provisions equivalent to SB 553.
**Who does not qualify:** Non-union employees at the same employer (they are still covered). Employees covered by a CBA that does not address workplace violence prevention. Employees whose CBA mentions safety generally but does not include specific violence prevention provisions.
Question 4: Determination
If you answered:
- **Yes** to Questions 1 and 2, and
- **No** to all parts of Question 3 (meaning none of the exemptions apply)
**SB 553 applies to your business. You must have a written Workplace Violence Prevention Plan, you must train employees, and you must maintain a violent incident log.**
The Common Misconceptions
Every week, I talk to business owners who have convinced themselves they are exempt based on reasoning that sounds logical but is legally wrong. Let me address the most common ones.
Misconception 1: "We Are Too Small"
There is no size exemption. SB 553 does not say "employers with 25 or more employees." It says "employers." One employee in California triggers the requirement.
I understand why people believe this. Many California employment laws do have size thresholds — CFRA kicks in at 5 employees, FEHA at 5 employees, Cal-COBRA at 2-19 employees. SB 553 has no threshold. The legislature made a deliberate choice to cover all employers because workplace violence does not check your headcount before it happens.
A two-person business is subject to SB 553. A sole proprietor with one employee is subject to SB 553. If this seems disproportionate for a tiny business, I will not argue with the sentiment — but I will point out that the law does not care about your sentiment. It cares about your compliance.
Misconception 2: "We Are an Office. Violence Does Not Happen Here."
SB 553 does not require you to have a history of violence. It requires you to have a prevention plan regardless of your incident history. The word is "prevention," not "response."
Office workplaces experience workplace violence. Disgruntled former employees, domestic situations that follow employees to work, customer disputes, vendor conflicts, and random acts of violence do not confine themselves to high-risk industries. The Department of Labor's data shows that workplace homicides occur across all industry sectors, including professional services, finance, and real estate.
Your history of zero incidents is not an exemption. It is a data point that may change tomorrow.
Misconception 3: "We Are Fully Remote"
This is the most nuanced misconception. SB 553 applies to "places of employment." If your employees work exclusively from their homes and never report to a company-controlled worksite, the applicability becomes murky.
Here is the practical reality:
- **Fully remote, no company-controlled worksite, employees never meet in person:** SB 553's applicability is debatable. Cal/OSHA has not issued definitive guidance on fully remote employers. But the conservative approach — and the one that protects you legally — is to have a plan. The plan for a fully remote employer can be simple, but it should exist.
- **Hybrid (some office, some remote):** You are covered. The office is a place of employment. Full stop.
- **Remote with occasional in-person meetings, retreats, or co-working:** You are covered. Any company-organized gathering at a physical location is a place of employment for the duration of that gathering.
"We are remote" is not a defense if you occasionally rent a conference room for quarterly meetings. That conference room is your place of employment, and SB 553 applies while your employees are there.
Misconception 4: "We Do Not Interact With the Public"
SB 553 is not limited to public-facing businesses. The law covers four types of workplace violence:
| Type | Description | Example |
|------|------------|---------|
| Type 1: Criminal intent | Violence by someone with no legitimate relationship to the business | Armed robbery, random assault |
| Type 2: Customer/client | Violence by someone receiving services | Patient assaults a nurse, customer assaults a cashier |
| Type 3: Worker-on-worker | Violence between coworkers | Employee-on-employee assault, bullying that escalates |
| Type 4: Personal relationship | Violence by someone with a personal relationship to an employee | Domestic partner shows up at the workplace |
Types 3 and 4 apply to every employer regardless of whether you interact with the public. Your workplace violence prevention plan must address all four types. "We do not have customers" eliminates Type 2 from your primary risk profile, but it does not eliminate your obligation to plan for Types 1, 3, and 4.
Misconception 5: "Our Industry Is Not High-Risk"
There is no industry exemption. SB 553 applies to all industries except the four specific exemptions listed above. Technology companies, accounting firms, law offices, design studios, marketing agencies, and every other "low-risk" industry are covered.
The content of your workplace violence prevention plan should be calibrated to your actual risk profile. A nightclub's plan will look different from an accounting firm's plan. But both must have a plan.
Misconception 6: "We Have an IIPP. That Covers Violence."
Your Injury and Illness Prevention Program (IIPP) is a separate requirement under 8 CCR 3203. SB 553 created a standalone workplace violence prevention obligation. Having an IIPP does not satisfy SB 553, even if your IIPP mentions violence.
You need both:
- An IIPP (required under 8 CCR 3203 for all California employers)
- A Workplace Violence Prevention Plan (required under Labor Code 6401.9 / SB 553)
They are different documents with different requirements. Your IIPP covers general workplace hazards. Your WVPP specifically addresses the four types of workplace violence, training requirements, incident logging, and hazard assessment procedures that SB 553 mandates.
What SB 553 Requires (If It Applies to You)
If you made it through the decision tree and SB 553 applies — which, statistically, it does — here is what you need:
1. Written Workplace Violence Prevention Plan
The plan must include:
- Names or job titles of persons responsible for implementation
- Procedures to accept and respond to reports of workplace violence
- Procedures to ensure employee compliance
- Communication procedures for workplace violence matters
- Emergency response procedures
- Training procedures
- Procedures for identifying and evaluating workplace violence hazards
- Procedures to correct identified hazards
- Incident response and post-incident procedures
- Plan review procedures (annual minimum)
2. Employee Training
All employees must be trained on the plan. Training must cover:
- The plan itself and how to access it
- How to report workplace violence concerns
- How to recognize warning signs
- How to respond to workplace violence incidents
- Emergency procedures
Training must be provided at initial assignment, annually thereafter, and whenever a new or previously unrecognized hazard is identified.
3. Violent Incident Log
You must maintain a log of every violent incident. The log must include:
- Date, time, and location of the incident
- Detailed description of the incident
- Classification by workplace violence type (1-4)
- Circumstances of the incident
- Consequences of the incident
- Whether the perpetrator was a current or former employee
- Information about the investigation and corrective actions
The log must be retained for five years.
The Bottom Line
SB 553 applies to you. Unless you are a hospital covered by 8 CCR 3342, a sworn law enforcement agency, CDCR, or covered by a CBA with equivalent provisions, you need a written plan, you need to train your employees, and you need to maintain an incident log.
The plan does not have to be 50 pages. For a low-risk office with 10 employees, it might be 8 to 12 pages. But it must exist, it must be written, and it must be specific to your workplace.
The businesses that are still asking "Does this apply to me?" nine months after the effective date are the businesses that will be cited first when Cal/OSHA begins enforcement sweeps. And those sweeps are coming.
Stop asking whether it applies. Start asking whether your plan is adequate.
That is the question that actually matters.
