SB 553 is not the end of the story. It is the beginning.
The workplace violence prevention requirements that went into effect July 1, 2024 are statutory requirements — they exist because the California Legislature passed a law directing employers to create and maintain Workplace Violence Prevention Plans.
But the operational details — the specific regulatory standards that Cal/OSHA enforces during inspections — are still being developed through the formal rulemaking process. The Cal/OSHA Standards Board is working on a permanent standard that will expand, clarify, and in some cases significantly change what employers are required to do.
If you built your compliance program around the current SB 553 requirements and assumed you were done, you are about to discover that you built the foundation for a bigger building that is still under construction.
Let me tell you what is coming, when it is likely to arrive, and what you should be doing now to prepare.
How California Rulemaking Works
Before I get into the specifics, you need to understand how permanent standards are created in California, because the process explains the timeline and your opportunities to influence the outcome.
Cal/OSHA does not just publish rules. They go through a formal regulatory process managed by the Standards Board. The process has defined stages:
**Advisory committee stage.** Cal/OSHA convenes a panel of stakeholders — employer representatives, employee representatives, safety professionals, industry experts — to discuss the proposed standard. The advisory committee makes recommendations but does not make binding decisions.
**Proposed rulemaking.** Based on advisory committee input and internal development, Cal/OSHA drafts a proposed standard and publishes it in the California Regulatory Notice Register. This triggers a public comment period — typically 45 days — during which anyone can submit written comments.
**Public hearing.** The Standards Board holds a public hearing where stakeholders can provide oral testimony on the proposed standard.
**Revisions and re-notice.** If the Board makes substantive changes based on public comment, the revised standard must be re-noticed for an additional comment period (typically 15 days).
**Final adoption.** The Standards Board votes to adopt the standard. After adoption, the standard is submitted to the Office of Administrative Law for review and approval.
**Effective date.** Once approved by OAL, the standard has a defined effective date — typically 30-90 days after approval, though the Board can set a longer implementation timeline for complex standards.
The entire process from advisory committee to effective date typically takes 18-36 months. For a standard as significant as workplace violence prevention, expect the longer end of that range.
Where We Are in the Process
As of early 2026, the permanent standard rulemaking is in the advisory committee and early drafting stage. Cal/OSHA has been gathering input from stakeholders, reviewing enforcement experience from the first 18 months of SB 553 implementation, and analyzing the data from inspections and citations.
The proposed rulemaking notice — the formal draft standard published for public comment — is expected in mid-to-late 2026. This is when you will see the specific language that Cal/OSHA proposes to codify as the permanent standard.
The final standard could be adopted and effective as early as late 2027, though 2028 is more realistic given the typical pace of California rulemaking and the likelihood of multiple comment periods.
This timeline matters because it tells you two things: first, you have time to prepare, and second, the requirements you are building your program around today will change.
What Is Expected to Change
Based on advisory committee discussions, Cal/OSHA enforcement trends, and precedent from the healthcare workplace violence standard (Title 8, Section 3342), here are the areas where the permanent standard is expected to expand or modify current requirements.
More Specific Hazard Assessment Requirements
The current SB 553 statute requires a workplace violence hazard assessment but provides limited guidance on methodology. The permanent standard is expected to prescribe a more structured approach:
- **Frequency requirements.** Expect a specific mandate for initial assessment plus annual reassessment, with defined triggers for interim assessments (facility changes, incidents, staffing changes).
- **Documentation standards.** The standard will likely specify what a documented hazard assessment must contain — not just that you did one, but what format it takes and what elements it must address.
- **Employee participation requirements.** Expect more specific requirements for how employees must be involved in the assessment process — surveys, interviews, walk-throughs, or committee participation.
- **Risk ranking methodology.** Some advisory discussions have explored requiring employers to rank identified hazards by severity and probability, similar to the approach used in the healthcare standard.
If your current hazard assessment is a paragraph in your WVPP that says "we assessed our workplace and identified the following hazards," you will need to significantly expand it.
Enhanced Training Requirements
The current SB 553 training requirements are relatively general — train employees on the plan, provide annual refreshers, document attendance. The permanent standard is expected to add specificity:
- **Minimum training hours.** The healthcare standard requires a specific number of training hours. Expect the general industry standard to follow suit, likely 1-2 hours for initial training and 1 hour for annual refreshers.
- **Content requirements.** Expect a defined curriculum outline that specifies topics that must be covered, rather than the current general requirement to train on "the plan."
- **Competency assessment.** The standard may require employers to verify that employees understood the training — through written quizzes, practical demonstrations, or scenario-based assessments. Attendance alone may not satisfy the requirement.
- **Trainer qualifications.** The current law does not specify who can deliver training. The permanent standard may require trainers to meet certain qualifications — experience, certifications, or subject matter expertise.
- **Interactive training.** Expect a requirement that at least a portion of the training be interactive — not a video watched alone. This mirrors the trend in harassment prevention training requirements under SB 1343.
Strengthened Incident Investigation Requirements
Current SB 553 requires an incident log. The permanent standard is expected to add formal investigation requirements beyond logging:
- **Investigation timelines.** Expect a defined timeline for initiating and completing investigations — likely investigation initiated within 24 hours and completed within a specified period (15-30 days).
- **Investigation methodology.** The standard may prescribe investigation elements — witness interviews, evidence collection, root cause analysis, corrective action identification.
- **Investigation documentation.** More specific requirements for what the investigation file must contain, separate from the incident log.
- **Corrective action tracking.** Requirements to document that corrective actions identified through investigation were actually implemented, with verification dates.
Recordkeeping and Retention Requirements
The current statute is relatively thin on recordkeeping specifics. The permanent standard is expected to fill in the details:
- **Retention periods.** Expect specific retention periods for the WVPP, training records, incident logs, hazard assessments, and annual review documentation. The healthcare standard requires five-year retention for many records — expect something similar.
- **Availability requirements.** Specific requirements for making records available to employees, employee representatives, and Cal/OSHA inspectors — including response timelines.
- **Electronic recordkeeping standards.** If you maintain records electronically, expect requirements for data integrity, backup, access controls, and audit trails.
Industry-Specific Provisions
SB 553 applies to all employers with limited exceptions. The permanent standard may include industry-specific provisions that add requirements for sectors with elevated workplace violence risk:
- **Retail.** Specific provisions for cash handling, working alone, late-night operations, and customer-facing violence.
- **Healthcare.** Integration with the existing healthcare workplace violence standard (Section 3342) to create a coherent regulatory framework.
- **Hospitality.** Hotel and restaurant-specific provisions addressing worker isolation, guest interactions, and late-night service.
- **Social services.** Provisions for employees who work in client homes or community settings.
If you operate in one of these industries, watch the advisory committee discussions closely. Industry-specific provisions will add requirements beyond the general standard.
What Employers Should Prepare for Now
You do not need to wait for the permanent standard to be published to start preparing. The direction of travel is clear, and the investments you make now will put you ahead of the curve rather than scrambling to catch up when the final standard drops.
Build a robust hazard assessment now.
Do not wait for the standard to tell you how to do a hazard assessment. Walk your facilities. Survey your employees. Document your findings in detail. Rank your hazards by severity and probability. Create a corrective action plan for each identified hazard. This is what the standard is going to require, and building the practice now means you will be in compliance the day the standard takes effect.
Upgrade your training program.
If your training is currently a 20-minute overview followed by a sign-in sheet, start building a more comprehensive program now. Develop a structured curriculum. Add interactive elements. Build in competency assessments. Document everything. When the standard specifies minimum training hours and content requirements, you want to already be meeting them.
Formalize your investigation process.
Do not wait for an incident or a regulation to tell you how to investigate workplace violence. Build an investigation protocol now: who investigates, what steps they follow, what they document, how corrective actions are tracked, and how the investigation file is maintained. Practice the protocol through tabletop exercises.
Implement proper recordkeeping.
Assume a five-year retention period for all workplace violence prevention records. Organize your files now: WVPP versions with dates, training records by year, incident logs with entries, hazard assessments with dates, annual review documentation, investigation files. If you are maintaining records electronically, implement access controls and backup procedures.
Participate in the rulemaking process.
When the proposed standard is published for public comment, read it and comment. You do not need to be a regulatory expert to submit a comment. If a proposed requirement is impractical for your industry or your company size, say so. If a requirement is unclear, ask for clarification. The public comment process exists for employers to shape the final standard. If you do not participate, the standard will be shaped by people who may not understand your operational reality.
The Healthcare Standard as a Preview
If you want to see what the permanent general industry standard might look like, read the existing healthcare workplace violence standard — California Code of Regulations, Title 8, Section 3342.
The healthcare standard includes:
- Detailed hazard assessment requirements with specific factors to evaluate
- Training requirements with defined content and minimum hours
- Incident investigation requirements with timelines
- Recordkeeping with five-year retention
- Annual plan review requirements
- Employee involvement requirements
- Reporting and response procedures
The general industry permanent standard will not be identical to the healthcare standard — healthcare has unique workplace violence risks that justify unique requirements. But the structure and level of specificity will be similar.
If your current program would satisfy the healthcare standard, you are well-positioned for the permanent general industry standard. If it would not, the gap between your current program and the healthcare standard gives you a reasonable estimate of the gap between your current program and the upcoming permanent standard.
The Strategic Perspective
Let me give you the business case for preparing now rather than waiting.
**Compliance programs built under pressure are worse.** When the permanent standard is published with a 90-day implementation deadline, every employer in California will be scrambling simultaneously. Safety consultants will be booked solid. Training providers will be overloaded. Compliance software vendors will jack up their prices. You will be building your program under time pressure, resource constraints, and inflated costs.
**Early compliance is a competitive advantage.** While your competitors are scrambling to catch up, you are already compliant. Your insurance premiums reflect a mature program. Your bid packages include documentation that competitors cannot match. Your employees know you take their safety seriously.
**The permanent standard will not be less stringent.** Regulatory standards never get weaker over time. The permanent standard will be equal to or more demanding than the current statutory requirements. Everything you build now will still be needed later — plus more. No investment in compliance preparation is wasted.
**Enforcement will intensify.** Cal/OSHA enforcement of workplace violence prevention requirements has been ramping up since SB 553 took effect. When the permanent standard is adopted, enforcement will intensify further because inspectors will have more specific regulatory criteria to enforce. The ambiguity that sometimes gives employers a pass under the current statute will be replaced by specificity that makes violations easier to cite.
The permanent standard is coming. The only question is whether you will be ready when it arrives or whether you will be one of the employers calling their attorney at 11 PM trying to figure out how to comply by the effective date.
You know the right answer. Act on it.
