Workplace Violence

California Workplace Violence Prevention Plan and Training

August 23, 2026·7 min read·Certified Training USA

Who this actually covers

The California requirement is unusual in its reach. It is not aimed at one industry the way retail specific rules are. Most employers with staff in the state fall inside it, subject to a narrow set of exclusions, which means offices, warehouses, clinics, restaurants and construction sites are all having the same conversation about the same document.

Employers who think of workplace violence as a security problem for high risk sites tend to find out late that they are covered. A quiet professional services firm is covered. So is a distribution site that has never had a single incident. Coverage follows employer status rather than your own read on how risky the work looks.

the Fair Employment and Housing Act (FEHA) sets the obligation and California Civil Rights Department enforces it in California. Take your scope reading from the agency rather than from a vendor page. Vendors have an interest in a wide reading, and the employers who get this wrong have usually taken their scope from whoever was selling them the course.

What the requirement asks for beyond a course

There is more to this than training. A written prevention plan, a log of violent incidents, and training that connects to that plan. Employers buy the course, tick the line item, and leave the two documents unwritten for months. The course is the visible part of the obligation and also the smallest part of it.

The plan has to be specific to your operation and it has to name who is responsible for each element. Plans bought as templates fail on exactly this point. They describe an employer in general rather than yours, and the first question anybody asks is how the document applied to the site where something happened.

Training should connect to the plan rather than run alongside it. Employees ought to come out knowing how to report, what happens next, and which hazards were identified where they personally work. On frequency, do not lift a number off a competitor's page. The current interval is published by California Civil Rights Department.

We are an office. Workplace violence rules are for hospitals and retail.
Coverage follows employer status rather than perceived risk, and the California requirement reaches most employers in the state. Offices still have customer visits, terminations, contractor access and personal disputes arriving from outside. A plan for a low risk office is shorter than one for a hospital, but a plan is still expected. Confirm your position with California Civil Rights Department rather than assuming your sector sits outside.

The categories a plan has to cover

Practitioners split workplace violence by the relationship between the person causing harm and the workplace. Violence by somebody with no legitimate business at the site. Violence by a customer, client, patient or anyone else you serve. Violence between coworkers. Violence by somebody with a personal relationship to an employee, which arrives from outside the business entirely.

The categories exist because the controls differ. Physical security and access control address the first. Service design, queue management and staffing levels address the second. Supervision, conduct policy and how complaints get handled address the third. The last needs a separate and much quieter conversation about safety planning with one individual employee.

A plan treating all violence as an intruder problem produces cameras and door codes and very little else. Most employers meet the customer category far more often than the intruder category, and the coworker category is where a slow build up is usually visible to colleagues for months before anything serious happens.

The category most plans miss

Violence arriving from an employee's personal life is the one employers most want to treat as private. It stops being private once the person shows up at your reception, calls the switchboard repeatedly, or waits in your car park at shift change. The workplace is a fixed, findable, predictable location, which is precisely why it gets used.

Handling it well is mostly logistics done quietly. A different parking spot, a changed shift, a photograph held at reception with the employee's agreement, a standing rule that nobody confirms whether an employee is working today. None of that requires the employer to take any position on the underlying personal situation.

What breaks it is a manager who tells somebody at the door which shift the employee is on, because being helpful is the default setting for most people on a front desk. Reception and security need a clear instruction about disclosure that does not depend on them knowing the individual case.

How this standard compares, by OSHA citation count
Fall Protection
30,929
Hazard Communication
28,898
Respiratory Protection
17,672
Lockout/Tagout
17,359
Powered Industrial Trucks
12,902
Scaffolding
11,522
Walking-Working Surfaces
11,110
Machine Guarding
9,782
The course
Workplace Violence Prevention in California
Documents this training with an instant, verifiable certificate. $49.
View the course

The violent incident log is an ongoing duty

The log is where most employers fall short a year in, because it is the only part needing attention after the launch project finishes. The plan is written once and reviewed periodically. The training is scheduled and forgotten. The log needs somebody recording events as they happen, including events that ended without any injury.

Log the near misses and the verbal ones. A patient who threw something and left, a customer who threatened a driver, a contractor who squared up to a supervisor. Those entries are what turn a vague feeling that the evening shift is getting worse into something a manager can put in front of a budget holder.

Keep identifying detail out of the log where the record does not need it. The purpose is pattern and prevention rather than a personnel file about the person who was harmed. Confirm what the log has to contain and how long you keep it with California Civil Rights Department instead of guessing from a template.

Reporting that employees will actually use

Reporting routes fail for ordinary reasons. The route runs through the manager involved in the event. It is a form nobody has ever seen. It sits on an intranet page reachable only from a desk, inside a business where most people do not have a desk. Fix the route before worrying about the wording of the policy.

Employees need to know what a report triggers. Silence afterwards teaches everybody watching that reporting achieves nothing, and reporting rates fall accordingly within a few months. Even a short acknowledgement and a note of what changed as a result is enough to keep the channel alive and used. Say it when you launch the route rather than months afterwards.

Do not make severity a filter at the point of reporting. Employees are poor judges of what matters to a pattern, and a rule that only serious events get reported strips out exactly the low level data that would have shown a problem building somewhere before it became a serious event.

Records you should be able to produce

The realistic list is the plan with its version history, evidence of the hazard assessment that fed into it, a training record showing who was trained and on what content, and the log itself. If you can produce those four things without a scramble, you are in reasonable shape for most questions.

Version history matters more than employers expect it to. A plan never amended since the day it was written suggests it has never been used. Dated revisions following an incident, a site change or a new shift pattern are the strongest available evidence that the document is a working one.

Keep the training content itself and not only completion certificates. A certificate proves attendance at something. The material proves what that something covered, and that is the question asked whenever training is challenged as generic. Store both in the same place so nobody has to chase a vendor for it later.

We bought the training for everyone. Are we done now?
Training is one part. The written prevention plan and the violent incident log are separate requirements, and the plan has to be specific to your sites rather than a template with your name dropped into it. Employers who stop at the course usually discover the gap during an inspection or straight after an incident. The plan is the document that gets asked for first.

Who should take this course

Everybody covered by the plan should have the training, which in most employers means the whole workforce rather than a nominated group. Temporary staff, agency workers and anyone on a long term contract at your site are the usual gap, since they belong to somebody else's onboarding process and nobody owns them locally.

Supervisors need the same content plus the reporting and log duties, because they receive the first report in almost every case that matters. If a supervisor does not know that an incident belongs in the log, the log will simply not reflect what has been happening at their site. Give supervisors the log itself to look at during the session.

At $49 per seat, full coverage is cheaper than the argument about who was in scope. Employers who trained a subset and then had to reconstruct the reasoning usually conclude that drawing the line cost them more time than simply crossing it would have done. Run it once per site and keep a single roster for each.

Frequently asked questions

How often does California workplace violence training have to be repeated?

We do not publish an interval here, because a wrong number becomes a compliance failure for the employer who acts on it. The current interval is published by California Civil Rights Department, and that is the source to check before you set a training calendar. Your plan should also record what triggers a refresher at a site.

Do we need a separate plan for every location?

The plan has to reflect the hazards where people actually work. Employers with several sites usually run one plan carrying site specific sections rather than a single generic document. If your locations differ in access, hours or customer contact, those differences belong in the plan. A document that could describe any employer answers nothing after an incident.

What goes in the violent incident log?

Events involving violence or threats connected to the work, including ones that caused no injury. Verbal threats, near misses and incidents involving customers or people from outside all belong there. Keep the detail proportionate and avoid unnecessary identifying information about the person harmed. Confirm the required fields and retention period with California Civil Rights Department.

Does using a security contractor cover this for us?

No. Guards address one category of risk and do not produce your plan, your log or your training record. Contracted security is a control inside a plan rather than a substitute for one. Include contractors in your briefing where they work on your site, and keep your own records whatever their employer holds.

Do temporary and agency workers need to be trained?

In practice yes, where they work at your site under your direction. They face the same hazards and are usually least familiar with the building, the exits and the reporting route. Agencies vary in what they actually deliver, so confirm rather than assume, and keep your own record of what you covered.

Get your team certified

Every course maps to the regulation it satisfies and issues a verifiable certificate. Browse the catalog and certify your workforce today.

See all courses