Let me be blunt with you.
If you run a call center, BPO operation, staffing agency, or administrative services company in California, you are sitting on a compliance time bomb. Not because your industry is inherently dangerous — you don't have workers dangling off scaffolding or handling explosives. But because Cal/OSHA does not care about your perception of risk. They care about documentation. And the businesses that get hammered hardest by inspectors are the ones who assumed "office work" meant "no compliance obligations."
That assumption will cost you money. Real money. The kind that shows up as citations, penalties, and — if you're really unlucky — a serious incident that exposes just how naked your compliance posture actually is.
Here's the reality: California requires every employer, regardless of industry, to maintain a baseline set of safety and health programs. No exceptions for "low-risk" operations. No exemptions for businesses with fewer than 50 employees. No free passes because your workers sit at desks instead of operating forklifts.
The eight platform-wide compliance templates that apply to your business support services operation are non-negotiable. Let me walk you through each one and show you exactly how they apply to your world.
Template 1: Injury and Illness Prevention Program (IIPP)
California Labor Code Section 6401.7 requires every employer to have a written IIPP. This is not optional. This is not a suggestion. This is the foundational compliance document that Cal/OSHA inspectors ask for first — before they look at anything else.
For business support services, your IIPP must address the hazards that actually exist in your workplace. And contrary to what many office-based employers believe, those hazards are real and documented.
**Ergonomic injuries** are the dominant hazard in your industry. Repetitive strain injuries from keyboard and mouse use. Carpal tunnel syndrome. Cervical and lumbar spine issues from prolonged sitting in improperly adjusted workstations. Cal/OSHA's ergonomics standard (Title 8, Section 5110) requires you to address repetitive motion injuries when they've been identified in similar operations — and they have been, extensively, in call center and BPO environments.
Your IIPP must include workstation assessment procedures, a system for employees to report discomfort without fear of retaliation, and a documented correction process. "We bought everyone a wrist rest" is not a compliant response.
**Multi-shift operations** add another layer. If you run 24/7 call center operations or evening-shift BPO teams, your IIPP must account for fatigue-related hazards, adequate lighting for night shifts, and security protocols for employees arriving and departing during off-hours.
Template 2: Workplace Violence Prevention Plan (WVPP)
SB 553, effective July 1, 2024, requires every California employer to maintain a written Workplace Violence Prevention Plan. This is separate from your IIPP. It has its own requirements, its own documentation standards, and its own enforcement mechanisms.
For business support services, workplace violence risk is not theoretical. It is a documented, studied, and well-understood hazard category.
**Type 2 workplace violence** — violence from customers, clients, or people the business serves — is the primary concern. Call center employees deal with angry, frustrated, sometimes threatening callers every single shift. The emotional and psychological toll is one thing. The escalation risk when those callers show up in person at your facility is another.
Your WVPP must include:
- Procedures for identifying and responding to threats received over the phone
- Physical security measures for facilities accessible to the public
- De-escalation training for frontline employees
- A violent incident log maintained for a minimum of five years
- Annual training for all employees on the plan's contents
If you have client-facing reception areas, visitor management protocols are not a luxury — they are a compliance requirement under the WVPP framework.
Template 3: Heat Illness Prevention Plan
Title 8, Section 3395 establishes California's heat illness prevention requirements. Most business support services employers read this and think, "We're indoors. Air-conditioned. This doesn't apply."
Wrong.
The standard applies to all outdoor work environments, and many business support services operations include outdoor components: facilities maintenance staff, courier services, on-site setup crews for staffing agencies, parking lot security. If any of your employees perform work outdoors when temperatures exceed 80 degrees Fahrenheit, you must have a compliant heat illness prevention plan.
Even for fully indoor operations, the template still serves as your documentation that you've assessed the hazard and determined it does not apply to your specific work conditions. Cal/OSHA inspectors appreciate seeing the assessment. They do not appreciate hearing, "We didn't think about it."
Additionally, **indoor heat** can be a legitimate hazard in server rooms, mailrooms with poor ventilation, and warehouse-adjacent operations where business support services share space with logistics operations.
Template 4: Hazard Communication Program (HazCom)
The Globally Harmonized System (GHS) aligned HazCom standard (Title 8, Section 5194) requires every employer to maintain a written hazard communication program, Safety Data Sheets (SDS) for all hazardous chemicals on-site, and employee training.
"But we're an office," you say. "We don't have chemicals."
You have cleaning products. You have toner cartridges. You have adhesives, degreasers for equipment maintenance, sanitizing agents, and — if your facility has a server room — potentially battery electrolyte from UPS systems.
Every single one of those products has an SDS. Every single one requires inclusion in your HazCom program. Your employees who might be exposed — including your janitorial staff — must be trained on how to read SDS sheets, understand GHS pictograms, and know what to do in a spill or exposure incident.
**Indoor air quality** is the stealth hazard here. Off-gassing from new carpet, furniture, and equipment in sealed office environments has generated Cal/OSHA complaints and inspections. Your HazCom program should reference your building ventilation standards and complaint procedures for air quality concerns.
Template 5: OSHA 300 Log and Recordkeeping
If you have more than 10 employees at any point during the calendar year, you must maintain OSHA 300, 300A, and 301 forms documenting all recordable workplace injuries and illnesses. The 300A summary must be posted in a conspicuous location from February 1 through April 30 each year.
Business support services employers routinely under-record injuries. Ergonomic injuries develop gradually, and employees often don't report them until they're severe. Your recordkeeping system must include a clear reporting mechanism and training so employees understand that early-stage repetitive strain symptoms are reportable.
**Multi-site operations** complicate this further. If you operate multiple call center locations or have employees dispatched to client sites, you must maintain logs for each establishment. Temporary staffing agencies face the additional complexity of determining whether the host employer or the staffing agency is responsible for recording — Cal/OSHA's multi-employer citation policy (Title 8, Section 336.10) makes this a shared obligation.
Template 6: Emergency Action Plan (EAP)
Title 8, Section 3220 requires a written Emergency Action Plan covering evacuation procedures, emergency escape routes, procedures for employees who remain to operate critical operations before evacuating, and a system to account for all employees after evacuation.
For business support services, the EAP has industry-specific considerations:
- **Large headcount facilities:** Call centers may have hundreds of employees on a single floor. Your evacuation plan must account for staggered evacuation routes and assembly areas large enough to manage the headcount.
- **Multi-shift handoffs:** Emergency procedures must be communicated to all shifts, including overnight teams who may have reduced supervisory staff.
- **Technology dependencies:** If your operation is a 24/7 service desk, your EAP must address data protection and system shutdown procedures during emergencies.
- **Accessibility:** Ensure evacuation routes accommodate employees with disabilities, including designated assistance personnel.
Template 7: Incident Investigation Procedures
When a workplace injury, illness, or near-miss occurs, California requires a documented investigation to identify root causes and implement corrective actions. This isn't a suggestion buried in the IIPP — it's an explicit requirement under Section 3203(a)(6).
For business support services, the incidents you're most likely to investigate include:
- Ergonomic injuries that escalated despite early reporting
- Slip, trip, and fall incidents in office environments
- Workplace violence incidents or threats
- Stress-related claims tied to high-volume call operations
Your investigation procedure must be documented, and investigations must be completed promptly. "We'll look into it" is not a compliant investigation. You need a written report identifying what happened, why it happened, and what you changed to prevent recurrence.
Template 8: Training Records Management
Every compliance template listed above includes a training requirement. And every training requirement demands documentation proving the training occurred, who attended, what was covered, and when it happened.
This is where business support services companies fail most often. Not because they don't train — most do, at least informally. They fail because they don't document. No sign-in sheets. No training outlines. No records of content delivered. No evidence of annual refresher training.
Cal/OSHA's position is simple: if you can't prove it happened, it didn't happen. Your training records must be organized, accessible, and retained for the duration required by each specific standard. For most, that's the duration of employment plus additional retention periods.
**High turnover** in call centers and BPO operations makes this especially critical. If you're onboarding 50 new employees per quarter, your training documentation system must be robust enough to handle that volume without gaps.
The Bottom Line
Eight templates. Eight non-negotiable compliance requirements. Zero exemptions for "office-based" businesses.
The business support services industry has unique hazard profiles — ergonomic injuries from repetitive computer work, workplace violence from stressed callers, indoor air quality concerns in sealed environments, and the logistical complexity of multi-shift, multi-site operations. These aren't theoretical risks. They're the exact scenarios that generate Cal/OSHA citations and OSHA 300 Log entries.
You can build and maintain all eight programs yourself. You can hire a safety consultant at $200 per hour to help you figure it out. Or you can do what smart operators do: hand the entire compliance burden to someone who manages it for you, keeps it current, and makes sure you're never caught flat-footed when an inspector walks through your door.
**Protekon's managed compliance service handles all eight platform-wide templates for business support services operations.** We build your programs, maintain your documentation, manage your training records, and keep everything current as regulations change. You run your business. We run your compliance. [Schedule a compliance assessment](https://protekon.com) and find out exactly where your gaps are — before Cal/OSHA finds them for you.
