California — Workplace Safety

The California Occupational Safety and Health Act of 1973 establishes the state's workplace safety framework to assure safe and healthful working conditions for all California workers. The Division of Occupational Safety and Health (Cal/OSHA), part of the California Department of Industrial Relations, enforces occupational safety and health standards for private-sector and state and local government employers. Cal/OSHA has jurisdiction over almost every workplace in California, with federal OSHA retaining enforcement authority only over federal government employers (including USPS), private employers on federal enclaves and military installations, maritime employment on navigable waters, and tribal workplaces on reservations.

Source: Cal. Lab. Code § 6300; Cal/OSHA Jurisdiction

Every California employer must establish, implement, and maintain a written Injury and Illness Prevention Program (IIPP) in accordance with Title 8 California Code of Regulations Section 3203. The requirement applies regardless of employer size or industry classification. The IIPP must be in writing and available at each worksite (or at a central location for non-fixed worksites). Employers in non-high-hazard industries who adopt and implement Cal/OSHA's model IIPP in good faith are not subject to a civil penalty for a first violation of Section 3203.

Source: 8 CCR § 3203

California employers must immediately report any workplace fatality, or any serious injury or serious illness, to Cal/OSHA. This duty is far stricter—and more precisely defined—than the federal OSHA minimum.

Definition of “Serious Injury or Illness” (as of Jan. 1, 2020): Under 8 CCR § 342(a), a “serious injury or illness” is defined by 8 CCR § 330(h). Since Assembly Bill 1805 (effective January 1, 2020), “serious injury or illness” includes:

• Inpatient hospitalization (for reasons other than medical observation or diagnostic testing),
• Amputation,
• Loss of an eye, or
• Any serious degree of permanent disfigurement.

These criteria apply both to workplace incidents and to those occurring in connection with employment. The definition was broadened in 2020 to remove prior exclusions and now also covers incidents in public street or highway construction zones.

What must be reported and when: Employers must report any employee death or serious injury/illness as soon as practically possible, but not later than 8 hours after learning of the event (or when they should have learned about it with reasonable diligence). The report must be made to the nearest Cal/OSHA district office.

How to report: Reports may be made by telephone, or—if Cal/OSHA’s online reporting system is available—through that system. Until the online system is operational, Cal/OSHA will accept reports by telephone or email. (This is detailed in Cal/OSHA’s FAQ.)

Other reporting parties: Any fire or police agency responding to a workplace incident involving serious injury, illness, or death is also required to immediately notify the nearest Cal/OSHA district office (8 CCR § 342(b)).

Source: 8 CCR § 342; 8 CCR § 330(h); Cal/OSHA Serious Injury/Illness Reporting FAQ

California adopted a dedicated indoor heat-illness prevention standard—Title 8, California Code of Regulations, section 3396 (“Heat Illness Prevention in Indoor Places of Employment”)—which took effect July 23, 2024.

Scope and Applicability Section 3396 applies to all indoor work areas where the temperature equals or exceeds 82°F (27.8°C) when employees are present. An "indoor" place is any space under a ceiling or roof that restricts airflow and is enclosed by walls, doors, windows, dividers, or partitions along its perimeter. There are notable exclusions: locations under the control of employees working remotely, incidental exposures of less than 15 minutes in an hour (unless within vehicles or shipping containers), emergency response operations, and governmental correctional/juvenile detention facilities.

Trigger Conditions and Employer Duties Once the temperature or heat index reaches 87°F (or 82°F when workers wear heat-retentive clothing or are exposed to radiant heat), employers must implement specific protective measures:

• Engineering controls (e.g., ventilation, air conditioning) to lower temperature/heat index below 87°F (or 82°F for restricted clothing/radiant heat), unless not feasible.
• If engineering controls alone cannot achieve compliance, employers must use administrative controls (shift rotations, work/rest scheduling).
• If necessary, personal heat-protective equipment must be provided.

Employers must also ensure access to potable drinking water (minimum one quart per hour per employee or with replenishment plan), cool-down rest areas kept at 82°F or below, and allow employees to take cool-down rests as needed. Additional requirements include employee training, acclimatization for newly assigned workers, heat monitoring and recordkeeping, an emergency response policy, and a written Heat Illness Prevention Plan, which may be integrated with the broader Injury and Illness Prevention Program (IIPP) under section 3203. The written plan must be in English and any language understood by the majority of employees.

Regulatory and Legislative Background This standard fulfills California’s legislative order in Labor Code § 6720 (SB 1167, 2016), directing Cal/OSHA to draft rules addressing indoor heat by 2019—culminating in § 3396, effective July 23, 2024.

Source: 8 CCR § 3396; Cal. Lab. Code § 6720

Scope and Covered Employers California Labor Code § 6401.9, operative July 1, 2024, requires virtually all California employers to establish, implement, and maintain a written Workplace Violence Prevention Plan (WVPP), either within the existing Injury and Illness Prevention Program (IIPP) or as a standalone document. Exceptions are detailed in the statute and include: (1) employers already covered by the healthcare-specific standard (8 CCR § 3342), (2) Department of Corrections facilities complying with regulations, (3) POST-certified law enforcement agencies covered by their own requirements, (4) employees teleworking from a location not under employer control, and (5) employers with fewer than 10 employees not accessible to the public, provided they comply with 8 CCR § 3203. The statute references 8 CCR § 3342 only for defining scope; compliance details for that section are not covered here.

Workplace Violence Prevention Plan Requirements The WVPP must be accessible to employees and must include all elements in § 6401.9(c):

• Names or job titles of responsible persons;
• Procedures for employee/representative involvement in plan development, hazard identification, training, and incident reporting;
• Methods for coordinating with other employers on multiemployer worksites;
• Procedures for accepting and responding to reports, including anti-retaliation protections;
• Communication processes for reporting, result sharing, and corrective actions;
• Emergency response procedures (alerting, evacuation, shelter-in-place, obtaining assistance);
• Procedures for developing, providing, and evaluating training;
• Hazard identification and evaluation procedures (including scheduled and unscheduled inspections);
• Investigation and corrective action procedures for workplace violence incidents;
• Procedures for reviewing and updating the plan annually and after violent incidents or deficiencies.

Training Requirements Employers must provide effective training covering all topics required by § 6401.9(e): the contents and availability of the plan; how employees can participate and report concerns without reprisal; definitions and statutory requirements; job-specific hazards and corrective actions; emergency response measures; and access to records/logs. Training must occur when the plan is first established, at hire, annually, and when new or previously unrecognized hazards are identified or the plan changes (per § 6401.9(e)(5)). Interactive Q&A with a knowledgeable individual is required. Training content and frequency should remain closely trackable to the statute’s language to ensure compliance.

Violent Incident Log Requirement Each workplace violence incident must be recorded on a violent incident log in accordance with § 6401.9(d), omitting personally identifying information. Log entries must capture: date/time/location; type of violence; incident description; perpetrator classification; circumstances; location type; incident nature (e.g., attack, threat, weapon, sexual assault); consequences (e.g., emergency response), and the preparer’s information. Logs are reviewed during annual plan review and must be retained for five years. Confidentiality provisions in the statute must be observed, and logs must be made available to Cal/OSHA and, upon request, to employees and representatives within 15 calendar days, consistent with all privacy caveats.

Effective Date and Future Standards These WVPP requirements are effective July 1, 2024. As a separate Departmental duty, Cal/OSHA (DIR) must propose permanent workplace violence prevention standards no later than December 31, 2025, for Standards Board adoption by December 31, 2026. This timeline does not create immediate new duties for employers beyond § 6401.9.

Source: Cal. Lab. Code § 6401.9

Employers may meet Cal/OSHA’s IIPP access and recordkeeping requirements using electronic formats—including cloud‑based platforms—for both the written Program and the records documenting its implementation (inspections, training), provided certain conditions are met.

1. Written IIPP (Program) access — format, timing, and free copies Under Title 8 CCR § 3203(a)(8)(B): upon request by an employee or designated representative, employers must provide a printed copy of the written IIPP free of charge, within five business days. However, if the requester agrees to receive an electronic copy, that satisfies the requirement instead of providing a print version.

Alternatively, employers whose employees predictably and routinely use electronic communications during their work may satisfy the requirement by providing unobstructed access via a company server or website—i.e., the employee can view, print, or email the current Program as part of their work routine.

That electronic access must allow basic functions (view, print, email) and cannot be blocked or burdensome; it's intended to serve as a barrier‑free option.

2. Implementation and training records — format neutrality and retention period Title 8 CCR § 3203(b)(1)–(2) require keeping inspection and training documentation for at least one year (longer for certain employers), but they say nothing about format. Therefore, maintaining these records electronically—whether stored on cloud platforms, shared drives, or other digital systems—is fully acceptable, so long as the records include the required content and are retrievable for inspection during the retention period. Exceptions: Employers with fewer than 10 employees, and certain employers with fewer than 20 employees in non-high-hazard industries, may have modified recordkeeping or are exempt, as detailed in §3203(b)(2).

Cal/OSHA imposes no specific technical requirements (e.g., file format, offline backup, encryption), only that the records exist and are locatable for the specified duration. No regulation prohibits electronic storage; this is based on the regulation's silence on any format restriction, so long as content, access, and retention obligations are met.

Summary table (plain‑language quick view):

| Document Type | Format Allowed? | Access / Retention Requirement | |---------------|------------------|-------------------------------| | IIPP (written Program) | Print or electronic | Must provide printed copy free within 5 business days, unless employee opts for electronic; or provide website/server access if employees routinely use electronic communication | | Inspection and training records | Electronic acceptable | Must retain for at least 1 year (exceptions for small employers per §3203(b)) |

Take‑away for practitioners Yes, you can store both your IIPP and its required records electronically—including via cloud platforms—if you ensure:

• For the IIPP itself, that electronic access functions allow employees to view/print/email, and you still offer printed copies when requested or provide electronic only with requester’s consent.
• For records, maintain the data with required elements, retain them 1+ year, and ensure they are accessible to Cal/OSHA inspectors.

No regulation prohibits electronic storage, so long as you meet content, access, and retention rules.

Source: 8 CCR § 3203(a)(8)(B), (b)