"Information and Telecom Compliance Guide: Platform-Wide Requirements"

The information and telecom industry has a blind spot the size of a cell tower, and it's this: you think compliance is a problem for construction companies and manufacturing plants.

It's not. It's your problem too. And if you run a data center, ISP, telecom infrastructure company, or any business that installs, maintains, or operates technology infrastructure in California, you are subject to the same Cal/OSHA requirements as every other employer in the state. Full stop.

I talk to telecom operators who have employees climbing 200-foot towers, trenching for fiber optic cable, working in data centers with enough electrical energy to power a small town, and handling batteries containing sulfuric acid — and they don't have a written IIPP. They don't have a Workplace Violence Prevention Plan. They might have a heat illness program scribbled on a napkin somewhere because one of their tower climbers almost passed out in August.

This is not a compliance posture. This is a liability in waiting.

Eight platform-wide compliance templates apply to your information and telecom operation. They are not suggestions. They are not "best practices." They are California law. Let me walk you through each one and show you exactly where your industry's unique hazards make them more critical — and more complicated — than you expect.

Template 1: Injury and Illness Prevention Program (IIPP)

California Labor Code Section 6401.7 requires your written IIPP. For information and telecom operations, this document must address a hazard profile that spans the full spectrum from ergonomic desk injuries to fatal fall hazards.

**Data center electrical hazards** are among the most serious risks in any industry. Your data centers contain high-voltage power distribution units, uninterruptible power supply systems, automatic transfer switches, and dense arrays of electrical panels. Arc flash incidents in data centers can generate temperatures exceeding 35,000 degrees Fahrenheit and blast pressures that throw workers across the room. Your IIPP must identify electrical hazards, reference your arc flash analysis (NFPA 70E), and establish approach boundaries for qualified and unqualified workers.

**Cell tower fall protection** is a life-safety issue that demands specific attention. Falls from communication towers are the leading cause of death in the telecom industry nationally. Cal/OSHA's fall protection requirements under Title 8 apply to every employee who works at elevation. Your IIPP must reference your fall protection program, identify qualified climbers, and address rescue procedures for workers suspended at height.

**Trenching for fiber installation** introduces excavation hazards governed by Cal/OSHA's excavation safety orders (Title 8, Sections 1539-1547). Cave-ins, utility strikes, and atmospheric hazards in trenches deeper than four feet all require documented procedures and competent person oversight.

**Ergonomics for desk workers** — your network operations center staff, help desk teams, system administrators, and office personnel — must be addressed under Title 8, Section 5110 when repetitive motion injuries have been identified. Don't make the mistake of thinking your IIPP only needs to cover field operations. The entire workforce is covered.

Template 2: Workplace Violence Prevention Plan (WVPP)

SB 553 applies to your telecom operation regardless of whether your employees interact with the public. The requirement is universal.

For information and telecom, the relevant scenarios include:

**Field technician exposure (Type 2):** Technicians entering customer premises for installation, repair, and maintenance encounter unpredictable environments. Hostile customers, domestic disputes in residential settings, and dangerous neighborhoods during off-hours service calls are all documented risk factors in the telecom field service industry.

**Data center security (Type 1):** Data centers contain high-value assets and sensitive information. Criminal intrusion attempts — while rare — represent a workplace violence risk that must be addressed. Your WVPP should integrate with your physical security program.

**Worker-on-worker (Type 3):** High-pressure operations environments — network outages, service-level agreement violations, and emergency restoration work — can create interpersonal tensions. Your WVPP must address procedures for reporting and resolving workplace conflicts.

Your plan must include the violent incident log, annual employee training, and documented procedures for responding to threats and incidents.

Template 3: Heat Illness Prevention Plan

If the only image that comes to mind when you think "heat illness" is a construction worker on a rooftop, you're missing the hazards in your own operation.

**Cell tower work** in California summers means your tower climbers work in direct sunlight, at elevation, wearing fall protection harnesses and carrying equipment. They cannot easily access shade or water. The physical demands of climbing compound the heat stress. Title 8, Section 3395 requires water, shade, rest breaks, high-heat procedures at 95°F, acclimatization for new workers, and emergency response protocols.

**Trenching and outside plant work** — fiber installation, cable pulling, pedestal maintenance — is outdoor manual labor that falls squarely within Section 3395's scope.

**Data center hot aisles** can exceed 95°F during normal operations. While Section 3395 technically applies to outdoor work, indoor heat hazards must be addressed in your IIPP under the general duty clause. Workers performing extended maintenance in hot-aisle environments need the same protections: hydration, rest breaks, and symptom monitoring.

Your heat illness prevention plan must cover every outdoor work scenario and should address indoor heat exposures in data centers and telecom equipment rooms.

Template 4: Hazard Communication Program (HazCom)

The GHS-aligned HazCom standard (Title 8, Section 5194) applies to your operation, and your chemical inventory is more extensive than most telecom operators realize.

**UPS battery handling** is the headline hazard. Lead-acid batteries contain sulfuric acid electrolyte. Lithium-ion battery systems present thermal runaway risks. Both require SDSs, proper labeling, and employee training on handling procedures, spill response, and first aid.

Your complete chemical inventory likely includes:

• Battery electrolyte (sulfuric acid)
• Diesel fuel for backup generators
• Coolants for data center cooling systems
• Isopropyl alcohol and contact cleaners for electronics maintenance
• Cable-pulling lubricants
• Fiber optic splicing compounds (UV-cured adhesives)
• Compressed gases (nitrogen for cable pressurization, CO2 for fire suppression)
• Herbicides for right-of-way maintenance
• Concrete and asphalt repair compounds for trench restoration

Every product needs a current SDS. Every exposed employee needs training. The "we're a tech company, we don't use chemicals" excuse will not survive the first 30 seconds of an inspection.

Template 5: OSHA 300 Log and Recordkeeping

Information and telecom operations generate a distinctive injury profile:

• **Falls from height:** Tower climbing, ladder work, aerial lift operations
• **Electrical injuries:** Contact with energized systems in data centers, telecom closets, and power distribution
• **Trenching injuries:** Cave-in, struck by equipment, utility strikes
• **Ergonomic injuries:** Repetitive strain from keyboard work, neck and back injuries from extended desk work
• **Vehicle accidents:** Fleet vehicles used for field service, especially during emergency response
• **Chemical exposure:** Battery electrolyte, cleaning solvents

Your OSHA 300 Log must capture all recordable injuries and illnesses. The 300A summary must be posted February 1 through April 30 each year.

**Remote and distributed workforces** complicate recordkeeping. If your field technicians report to a central location, injuries are recorded at that establishment. If they report directly to field sites, you must designate a recording location. Get this right — inconsistent recordkeeping is one of the most common citation categories.

**Tower climbing injuries and fatalities** must be reported to Cal/OSHA within eight hours (fatality or in-patient hospitalization) or 24 hours (amputation or loss of an eye). The clock starts when you learn of the incident, not when the paperwork is complete.

Template 6: Emergency Action Plan (EAP)

Your EAP under Title 8, Section 3220 must address emergency procedures that reflect the specific risks of information and telecom operations.

**Data center emergencies** require specialized procedures:

• **Fire suppression activation:** Clean agent or inert gas systems (FM-200, Novec 1230, IG-541) can reduce oxygen levels. Your EAP must address pre-discharge alarms, mandatory evacuation before system activation, and re-entry procedures after discharge.
• **Electrical emergencies:** Arc flash incidents, equipment failures, and power distribution faults require specific de-energization and rescue procedures.
• **Battery room emergencies:** Hydrogen gas accumulation from charging lead-acid batteries creates explosion risk. Sulfuric acid spills require specific response procedures and PPE.
• **Cooling failure:** Loss of cooling in a data center can escalate to equipment shutdown. Your EAP should address controlled shutdown procedures to protect both equipment and the workers performing emergency maintenance.

**Tower rescue:** If your employees climb communication towers, your EAP must include competent rescue procedures for workers who become incapacitated at height. Self-rescue training is not sufficient — you must have a rescue plan that addresses the scenario where the worker cannot participate in their own rescue.

**Trench rescue:** For fiber installation operations involving trenches deeper than four feet, rescue procedures for trench collapse must be documented and trained.

Template 7: Incident Investigation Procedures

Telecom and information technology incidents often involve complex technical factors that require investigators with industry-specific knowledge.

Your incident investigation procedures must be documented and must produce written reports with root cause analysis and corrective actions.

Industry-specific investigation scenarios:

• **Tower falls and near-falls:** Investigation must examine equipment condition (harnesses, lanyards, anchorage points), tower structural integrity, weather conditions, worker training and certification, and fatigue factors (particularly during extended outage restoration).
• **Electrical incidents:** Investigation must include analysis of lockout/tagout compliance, arc flash labeling accuracy, PPE adequacy, and whether the worker was qualified for the task performed.
• **Trench incidents:** Investigation must examine soil classification, protective system selection (shoring, sloping, shielding), competent person presence, and utility locate accuracy.
• **Vehicle incidents:** Fleet vehicle accidents during field service require investigation that examines driver training, vehicle condition, route planning, and whether time pressure from service-level agreements contributed to the incident.
• **Ergonomic injuries:** Systematic investigation of workstation setup, work duration, break patterns, and previous complaints.

Every near-miss is an investigation opportunity. The tower climber who caught himself after a slip. The trench wall that showed signs of instability before a cave-in occurred. The arc flash that was narrowly avoided. These near-misses are gifts — they tell you exactly where your next serious incident will occur.

Template 8: Training Records Management

Information and telecom operations require training across a wide range of specialized topics:

• IIPP hazard awareness
• Fall protection and tower climbing (including rescue)
• Electrical safety and arc flash awareness (NFPA 70E)
• LOTO procedures for data center and field equipment
• Confined space awareness (manholes, vaults, equipment enclosures)
• Trenching and excavation safety (competent person designation)
• HazCom and chemical-specific training
• Heat illness prevention
• WVPP annual training
• EAP and emergency procedures
• Forklift and aerial lift operation (if applicable)
• First aid, CPR, and AED (especially for tower crews and data center staff)
• Defensive driving for fleet vehicles

Each training topic has specific documentation requirements. Your training records must demonstrate not just that training occurred, but that the content was appropriate for the hazards and that employees demonstrated competency where required.

**Contractor training verification** is essential for telecom operations that use subcontractors for tower climbing, trenching, or data center construction. Your contractor management program should include pre-qualification requirements for safety training documentation. Under Cal/OSHA's multi-employer citation policy, you can be cited as a controlling employer for hazards on your sites even when contractor employees are exposed.

**Certification tracking** for tower climbers, qualified electrical workers, competent persons for excavation, and other specialized roles requires a system that alerts you before certifications expire. An employee working with an expired certification is an untrained employee in Cal/OSHA's eyes.

Technology Companies Are Not Exempt From Safety Laws

The information and telecom industry exists at the intersection of desk work and some of the most hazardous field operations in any industry. Tower climbing, high-voltage electrical work, trenching, and confined space entry are inherently dangerous activities that demand rigorous safety programs and meticulous documentation.

The eight platform-wide templates aren't a bureaucratic burden — they're the minimum documentation framework that California requires. And for an industry with fatality rates that consistently outpace the national average for tower work, these programs save lives.

You built your business on infrastructure that keeps the world connected. Build your compliance program on infrastructure that keeps your workers alive and your company protected.

**Protekon manages all eight platform-wide compliance templates for information and telecom operations.** From tower climbing fall protection programs to data center electrical safety documentation, we build it, we maintain it, and we keep it current. You keep the network running. We keep your compliance running. [Start your compliance assessment](https://protekon.com) and find out where your documentation stands — before Cal/OSHA does.