"WVPP Annual Review: What Changed and What Is Due"

You wrote your Workplace Violence Prevention Plan. You trained your employees. You set up an incident log. You did the work.

And then you went back to running your business. Because that is what operators do — they handle the crisis, solve the problem, and move on to the next one.

Here is the part you missed: SB 553 does not let you move on. The law requires that your WVPP be reviewed and updated at least annually. And it requires review more frequently when specific triggering events occur.

Your plan is not a set-it-and-forget-it document. It is a living operational document that must reflect your current operations, current hazards, current personnel, and current procedures. A plan that was accurate 14 months ago and has not been touched since is out of compliance today.

And the annual review itself must be documented. It is not enough to read the plan and decide nothing has changed. You must document that you conducted the review, what you reviewed, what you found, and what you changed — even if you changed nothing.

Let me walk you through exactly what this review requires and how to execute it without it consuming your entire week.

What the Law Requires

SB 553 requires periodic review of your WVPP. The California Labor Code specifies that the plan must be reviewed at a minimum annually, and more frequently when certain conditions are met.

The review is not optional. It is not a best practice. It is a statutory requirement. If Cal/OSHA inspects your workplace and asks when your last plan review was conducted, you need a documented answer. "We review it every year" without documentation is the same as "we never review it" in the eyes of an inspector.

The review must cover the entire plan — not just the sections that you think might have changed. Every element that SB 553 requires in the plan must be re-evaluated during the annual review:

• Responsible persons — are the named individuals still in those roles?
• Hazard assessment — have your operations, locations, staffing, or environment changed?
• Employee involvement procedures — are employees still being engaged?
• Reporting procedures — are reporting channels still functional and accessible?
• Emergency response procedures — do they still match your facility layout and capabilities?
• Training program — is training current, and are records up to date?
• Incident log — is the log being maintained and are entries complete?

If you are reviewing only the sections you remember and skipping the rest, you are not conducting a review. You are conducting a spot check, and spot checks do not satisfy the statute.

Mid-Year Review Triggers

The annual review is the minimum frequency. Several events trigger an obligation to review your plan before the next annual cycle:

**A workplace violence incident occurred.** Any incident that results in an entry in your violent incident log should trigger a plan review. The question you are answering is: did the plan work? Did the response procedures function as documented? Did the hazard assessment account for this type of incident? If the answer to any of these is no, the plan must be updated.

**A new workplace violence hazard was identified.** Maybe a new client population brings different risk factors. Maybe you expanded into a location with different environmental hazards. Maybe an employee reported a concern that reveals a hazard your assessment did not capture. New hazards mean plan updates.

**Operations changed significantly.** You added a night shift. You opened a new location. You moved to a new facility. You changed your staffing model. You started serving a different customer population. Any of these changes may invalidate portions of your existing plan.

**A deficiency was identified.** During a training session, an employee raised a question that revealed a gap in the plan. During a fire drill, you realized your lockdown procedures conflict with your evacuation procedures. During an incident, a supervisor did not know their role. These deficiencies trigger plan review.

**A new regulation or guidance was issued.** Cal/OSHA issues guidance documents, FAQ updates, and enforcement directives. If new regulatory guidance changes how your plan should be structured or what it should contain, a review is triggered.

The common theme: any event that suggests your plan may no longer accurately reflect your workplace, your hazards, or your procedures triggers a review obligation. Do not wait for the annual cycle. Review when the trigger occurs.

The Annual Review Checklist

Here is a structured review process that covers every required element. Print this out. Work through it. Document every step.

Section 1: Plan Administration

• [ ] Are the persons responsible for implementing the plan still in those roles? If anyone has left, been reassigned, or changed responsibilities, update the plan with current names and titles.
• [ ] Is the plan administrator still the correct person for that role? Do they have the authority, access, and bandwidth to execute the responsibilities?
• [ ] Has the backup plan administrator been identified and trained?
• [ ] Is the plan stored in a location accessible to the plan administrator and other authorized personnel?

Section 2: Hazard Assessment

• [ ] Has a walk-through of each facility been conducted within the past 12 months to evaluate workplace violence hazards?
• [ ] Have employees been surveyed or consulted about new or changed workplace violence hazards since the last review?
• [ ] Have any new locations been added? If so, has a hazard assessment been conducted at each?
• [ ] Have operations changed in ways that affect the hazard profile? (New shifts, new roles, new client populations, staffing changes, layout changes)
• [ ] Have there been incidents or near-misses that revealed hazards not captured in the current assessment?
• [ ] Are all identified hazards addressed with specific corrective measures in the plan?

Section 3: Employee Involvement

• [ ] Have employees had an opportunity to participate in the plan review process?
• [ ] How was employee input solicited? (Surveys, meetings, suggestion box, committee)
• [ ] Was employee input documented?
• [ ] Were employee suggestions incorporated or addressed? If not, was the rationale documented?
• [ ] If you have authorized employee representatives (union), were they involved in the review?

Section 4: Reporting Procedures

• [ ] Are all reporting channels still functional? (Hotline numbers work, email addresses are monitored, forms are available, digital systems are operational)
• [ ] Do employees know how to report? (This should have been covered in the most recent training)
• [ ] Are reporting procedures posted in visible locations?
• [ ] Are reporting materials available in all languages spoken by your workforce?
• [ ] Is the anti-retaliation policy clearly stated and communicated?

Section 5: Emergency Response Procedures

• [ ] Do emergency response procedures match your current facility layout? (If you renovated, moved furniture, changed access points — procedures may need updating)
• [ ] Are safe rooms / shelter-in-place locations still appropriate and accessible?
• [ ] Are evacuation routes still accurate and posted?
• [ ] Is the communication system for emergencies functional? (PA systems, mass text systems, phone trees)
• [ ] Have emergency procedures been practiced or drilled in the past 12 months?
• [ ] Is law enforcement contact information current?
• [ ] Are relationships with local law enforcement maintained? (Have you introduced yourself to the local precinct or sheriff's station?)

Section 6: Training Program

• [ ] Has annual training been conducted for all employees within the past 12 months?
• [ ] Are training records complete? (Date, attendees, topics, duration, trainer)
• [ ] Have new hires since the last training cycle received initial training?
• [ ] Were any triggered trainings required and conducted? (Post-incident, post-plan-change)
• [ ] Is the training curriculum still accurate? Does it reflect the current plan?
• [ ] Is training available in languages spoken by your workforce?
• [ ] Are supervisors trained on their specific responsibilities under the plan?

Section 7: Incident Log

• [ ] Is the incident log being maintained?
• [ ] Are all entries complete and free of personally identifiable information?
• [ ] Is the log stored securely with appropriate access controls?
• [ ] Have incidents been reviewed for patterns or trends?
• [ ] Have corrective actions from logged incidents been implemented and verified?

Section 8: Overall Plan Effectiveness

• [ ] Has the number or severity of incidents changed since the plan was implemented or last reviewed?
• [ ] Have employees expressed concerns about the plan's effectiveness?
• [ ] Have any corrective actions from the previous review been implemented?
• [ ] Are there outstanding action items from the previous review that have not been addressed?

Documenting the Review Process Itself

This is the part most employers skip, and it is the part that matters most to an inspector.

You must document the review — not just the plan updates that resulted from it, but the review process itself. Here is what your review documentation should include:

**Review date.** The specific date the review was conducted.

**Reviewer(s).** Who conducted the review — names and titles.

**Scope.** What was reviewed — ideally, a reference to the checklist sections above.

**Findings.** What was identified during the review — both items that require changes and items that were found to be current and adequate. "No changes needed in Section 3" is a valid finding. It demonstrates that you looked at Section 3 and made a deliberate determination.

**Changes made.** A list of every change made to the plan as a result of the review, with a brief explanation of why each change was made.

**Action items.** Any items identified during the review that require future action, with assigned owners and deadlines.

**Employee involvement.** How employees were involved in the review — what input mechanism was used, how many employees participated, summary of input received.

**Sign-off.** Signature of the plan administrator and any other designated reviewers, with date.

This documentation becomes part of your compliance record. When Cal/OSHA asks for evidence of your annual review, this is what you hand them. It proves that the review occurred, that it was comprehensive, that employees were involved, and that findings were addressed.

Without this documentation, you have no evidence that a review occurred. And "we did it but didn't write it down" is not a defense that has ever worked with an inspector.

The "Nothing Changed" Trap

Here is a mistake I see constantly: employers conduct the review, determine that nothing has changed, and therefore document nothing.

This is wrong on multiple levels.

First, it is almost certainly not true that nothing has changed. In a 12-month period, you hired new employees, someone left, your schedule shifted, you added a client, you moved equipment, or something else happened that affects at least one element of your plan. If you are telling me nothing changed in a year, you are either not looking carefully or not being honest.

Second, even if nothing substantively changed, you still need to document the review. A documented review that concludes "all elements current, no changes required" is a valid review. An undocumented review is not a review.

Third, the review date on the document matters. If your plan is dated January 2025 and the inspector visits in March 2026, they want to see evidence of a review between those dates. If your plan still says January 2025 and you have no separate review documentation, you are out of compliance on the annual review requirement.

Update the review date on the plan itself. Attach the review documentation. Even if nothing else changed, the date changes.

Timing and Scheduling

Pick a date. Put it on the calendar. Make it recurring.

I recommend picking a date that is two months before your insurance renewal. This serves two purposes: it ensures your plan is current when your underwriter requests compliance documentation, and it gives you a natural external deadline that creates urgency.

If your insurance renews in October, schedule your annual WVPP review for August. Review the plan, update what needs updating, document the review, and include the updated plan in your renewal package.

The review itself should take 2-4 hours for a single-location employer and 4-8 hours for a multi-location employer. That includes the facility walk-through, employee input collection, document review, and documentation of findings.

If you are spending less than two hours, you are probably not reviewing everything. If you are spending more than eight hours, you probably need a better system.

What Happens When You Skip the Review

Let me be direct about consequences.

If Cal/OSHA inspects and finds that your WVPP has not been reviewed in the past 12 months, you receive a citation for failure to maintain an effective plan. The plan may have been excellent when it was written. It does not matter. If it has not been reviewed, it is out of compliance.

If an incident occurs and the investigation reveals that a plan deficiency contributed to the incident — and that deficiency would have been caught during an annual review — you have a negligence argument on your hands. Plaintiff's attorneys love evidence that an employer had a plan, knew it needed regular review, and chose not to do it.

If your insurance underwriter requests your WVPP and the last review date is 18 months old, you are going to get questions you do not want to answer. And those questions will be reflected in your premium.

The annual review is not bureaucratic overhead. It is the mechanism that keeps your plan operational and your organization defensible.

Do it. Document it. Date it. File it. Move on with your year.

Then do it again in 12 months.