25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

California Extends Workplace Violence Prevention Requirements to Most Employers

Employers in California must ensure they implement detailed Workplace Violence Prevention Plans following the passing of Senate Bill 553 by the California legislature, and the signing of the bill by Governor Gavin Newsom.

The bill aims to improve protection for employees against workplace violence, which is a leading cause of death in the workplace. The Occupational Safety and Health Administration (OSHA) has yet to impose national standards for workplace violence, although OSHA has taken action against several hospitals and health systems that have failed to provide a safe working environment with controls to protect employees from violence in the workplace under existing standards in the OSH Act.

States are permitted to introduce their own workplace violence standards. The California Division of Occupational Safety and Health (Cal/OSHA) has required hospitals to implement safety rules to protect employees from workplace violence since April 2017, and those requirements have now been extended to virtually all employers in the state. The new law includes exceptions, such as employers with fewer than 10 workers who are not accessible to the public, businesses that employ teleworkers who work from a location of the employee’s choosing that is outside the control of the employer, and health care facilities, service categories, and operations covered by Section 3342 of Title 8 of the California Code of Regulations.

The new requirements call for a Workplace Violence Prevention Plan to be established, implemented, and maintained, which must be made available and easily accessible to employees and authorized employee representatives. The plan must be in effect at all times and be specific to the hazards and corrective measures for each work area and operation.

Get The FREE
OSHA & HIPAA Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

The plan must include:

  • Names or job titles of the persons responsible for implementing the plan.
  • Effective procedures to obtain the active involvement of employees and authorized employee representatives in developing and implementing the plan.
  • Methods the employer will use to coordinate the implementation of the plan with other employers, when applicable, to ensure that those employers and employees understand their respective roles.
  • Effective procedures for the employer to accept and respond to reports of workplace violence, and to prohibit retaliation against an employee who makes such a report.
  • Effective procedures to ensure that supervisory and nonsupervisory employees comply with the plan.
  • Effective procedures to communicate with employees regarding workplace violence matters on how to report incidents and how those incidents will be investigated.
  • Effective procedures to respond to actual or potential workplace violence emergencies.
  • Procedures to identify and evaluate workplace violence hazards.
  • Procedures to correct workplace violence hazards.
  • Procedures for post-incident response and investigation.
  • Procedures to review the effectiveness of the plan and revise the plan as needed.
  • Procedures for training employees on the plan.

All incidents of workplace violence must be logged, with detailed information recorded on each incident, including whether the incident was reported to law enforcement, the actions taken in response to the incident, and the steps taken to prevent similar incidents in the future. All employees must be provided with appropriate training, such as how to obtain help from individuals responsible for responding to workplace violence emergencies and how to make complaints.

The bill takes effect on January 1, 2025, with compliance with the new requirements required by no later than July 1, 2024.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist