SB 553 became law on September 30, 2023, and took effect on July 1, 2024. But the story is not finished. SB 553 was always designed as a two-phase regulatory initiative: the statute established the immediate requirements, and the Cal/OSHA Standards Board was directed to develop a permanent standard through the formal rulemaking process.
That permanent standard is coming. When it arrives, it will change what you are required to do, how you are required to document it, and how Cal/OSHA inspects and enforces your compliance. If you built your WVPP to the statutory minimums and assumed the job was done, you are about to discover that the statutory minimums were the floor — and the permanent standard is raising it.
This briefing covers the current status of the rulemaking process, the proposed changes that are on the table, what the public comment period revealed, and what you should be doing now to prepare for a standard that will be more specific, more detailed, and more enforceable than the current statute.
The Rulemaking Process: Where We Are
The Cal/OSHA Standards Board initiated the formal rulemaking process for a permanent workplace violence prevention standard in 2025. The process follows the Administrative Procedure Act, which requires:
- **Advisory committee meetings** — Stakeholder input on proposed regulatory language. Multiple meetings have been conducted with employer representatives, labor organizations, healthcare industry groups, and workplace violence prevention experts.
- **Draft regulatory text** — The Standards Board staff prepares proposed regulatory language based on advisory committee input, existing research, and enforcement experience from the first year of SB 553 implementation.
- **Notice of Proposed Rulemaking** — Formal publication of the proposed standard with a 45-day public comment period. This is the stage where the proposed requirements become public and stakeholders submit written comments.
- **Public hearing** — The Standards Board conducts a hearing where interested parties testify for or against specific provisions.
- **Final action** — The Standards Board votes to adopt, modify, or reject the proposed standard.
- **Office of Administrative Law (OAL) review** — The adopted standard is reviewed for procedural compliance and clarity.
- **Effective date** — Typically 30-90 days after OAL approval, with possible delayed effective dates for specific provisions that require implementation time.
As of Q2 2026, the rulemaking process is in the advanced stages. Advisory committee meetings have been completed. Draft regulatory text has been circulated. The formal Notice of Proposed Rulemaking is anticipated in the second half of 2026, with a potential effective date in 2027.
These timelines are estimates. Rulemaking in California is unpredictable — political considerations, budget constraints, Standards Board meeting schedules, and the complexity of public comments all affect timing. But the direction is not in question. The permanent standard is coming.
Proposed Changes: What Is on the Table
Based on advisory committee discussions, enforcement experience, and the draft regulatory text that has circulated among stakeholders, the permanent standard is expected to address the following areas where the current statute is either silent or ambiguous:
Greater Specificity in Plan Requirements
The current statute requires employers to maintain a WVPP with specific elements — responsible persons, reporting procedures, hazard assessment, training, and incident investigation. The permanent standard is expected to add detail to each element:
**Responsible persons.** The current statute requires "names or job titles of persons responsible for implementing the plan." The permanent standard is expected to require specific role descriptions, backup designations, and documentation of the responsible person's qualifications or training to perform the role. Naming someone as the WVPP administrator will not be sufficient if they have not been trained on what the role requires.
**Reporting procedures.** The current statute requires procedures to accept and respond to reports. The permanent standard is expected to specify minimum reporting channels (a single channel may be deemed insufficient), response time requirements, documentation standards for reports and responses, and specific anti-retaliation provisions that go beyond the current statutory language.
**Hazard assessment.** The current statute requires employers to identify and evaluate workplace violence hazards. The permanent standard is expected to require documented hazard assessment methodology, specific evaluation criteria, frequency of reassessment, and correlation between identified hazards and the corrective actions in the plan.
Industry-Specific Provisions
The advisory committee process revealed significant differences in workplace violence risk profiles across industries. The permanent standard may include industry-specific provisions or appendices addressing:
**Healthcare.** Enhanced requirements for facilities where patient-generated violence is a documented and persistent hazard — emergency departments, psychiatric facilities, home health care, and substance abuse treatment centers. These provisions may include specific staffing requirements, physical security measures, and clinical violence risk assessment protocols.
**Retail.** Requirements for establishments with cash-handling, public-facing operations, and late-night hours. Specific provisions for robbery prevention, customer confrontation management, and store layout considerations.
**Social services.** Requirements for employees who conduct home visits, work with involuntary clients, or provide services to populations with elevated violence risk.
**Education.** Requirements for K-12 schools and higher education institutions addressing student-generated violence, parent confrontations, and campus security.
The scope of industry-specific provisions depends on the final regulatory text. Some advisory committee participants advocated for comprehensive industry annexes; others argued for a single standard with general principles. The outcome will likely be a compromise — general requirements with industry-specific guidance documents or appendices.
Incident Log Enhancements
The current violent incident log requirements are relatively straightforward. The permanent standard is expected to add:
**Categorization requirements.** More detailed classification of incidents by type, severity, and outcome — moving beyond the current four-type categorization to include subcategories that enable trend analysis.
**Near-miss reporting.** The current statute does not explicitly require near-miss documentation in the incident log. The permanent standard may require a separate near-miss log or integrated near-miss tracking within the incident log.
**Analysis requirements.** The current statute requires maintaining the log. The permanent standard may require periodic analysis of log data — identifying trends, patterns, and systemic factors that should inform plan updates and corrective actions.
Training Enhancements
The current statute requires training at plan establishment and annually thereafter. The permanent standard is expected to:
**Specify minimum training content.** The current statute lists general topics. The permanent standard may specify minimum content requirements for each topic, minimum training duration, and qualifications for trainers.
**Require competency verification.** Current training requirements focus on delivery — you must provide training. The permanent standard may require verification that employees understood the training — through assessments, demonstrations, or other competency verification methods.
**Address specific populations.** Training requirements for supervisors (who have different responsibilities than line employees), new employees (who need training before exposure, not during the first annual cycle), and temporary workers (who need training from the host employer, not just the staffing agency).
Corrective Action Documentation
The current statute requires employers to implement corrective actions based on hazard assessments and incident investigations. The permanent standard is expected to require:
**Written corrective action plans** with specific elements: hazard identified, corrective action selected, person responsible, implementation timeline, interim protective measures, and verification of effectiveness.
**Follow-up documentation** confirming that corrective actions were implemented as planned, on schedule, and that they achieved the intended result.
**Trend analysis** connecting corrective actions to incident data — demonstrating that corrective actions are reducing incident frequency and severity over time, or identifying why they are not.
What the Public Comment Period Revealed
The advisory committee process and informal public comments have surfaced several recurring themes:
**Employer concerns about cost.** Small employers have expressed concern that enhanced requirements will impose costs disproportionate to their size and risk profile. The Standards Board has indicated that the permanent standard will include scalability provisions — different requirements for employers with fewer than a specified number of employees, or simplified compliance options for low-risk industries.
**Labor organization advocacy for stronger protections.** Labor organizations have advocated for specific staffing requirements (minimum staff-to-client ratios in high-risk settings), engineering controls (panic buttons, security cameras, controlled access), and expanded training requirements (annual is insufficient for high-risk environments). The permanent standard is likely to reflect some but not all of these advocacy positions.
**Healthcare industry complexity.** Healthcare employers have argued that workplace violence prevention in clinical settings requires clinical expertise that a general standard cannot adequately address. The resolution may be a healthcare-specific appendix or a separate rulemaking process for healthcare workplace violence prevention.
**Enforcement practicality.** Cal/OSHA enforcement staff have provided input on which provisions are inspectable and which are aspirational. Requirements that sound good on paper but cannot be verified during an inspection are likely to be modified or removed from the final text.
What You Should Do Now
The permanent standard has not been adopted. You are not required to comply with proposed changes that have not been finalized. But if you wait until the standard is adopted to begin preparation, you will be scrambling to implement significant program changes within a narrow effective-date window.
**Actions to take now:**
- **Review your current WVPP against the proposed enhancements described above.** Where does your current program fall short of what the permanent standard is likely to require? These are your preparation priorities.
- **Strengthen your incident log.** Even before the permanent standard requires it, categorize incidents more granularly, track near-misses, and analyze log data for trends. This improves your program now and positions you for compliance when enhanced requirements take effect.
- **Upgrade your training.** Move beyond annual PowerPoint delivery. Implement scenario-based training, competency verification, and role-specific training for supervisors. These changes improve safety outcomes regardless of regulatory requirements.
- **Document corrective actions completely.** Even if your current documentation meets the current statute, add the elements the permanent standard is likely to require: implementation timelines, responsible persons, interim measures, and effectiveness verification.
- **Designate and train your responsible person.** If your WVPP administrator has never received formal training on workplace violence prevention program management, address that now. The permanent standard will almost certainly require documented qualifications.
- **Subscribe to Cal/OSHA Standards Board meeting notices.** The rulemaking process is public. You can track every advisory committee meeting, read every draft regulatory text, and submit public comments. Ignorance of the process is a choice, not an inevitability.
Protekon Tracks the Regulatory Pipeline
Regulatory intelligence is a core function of managed compliance. Protekon monitors the Cal/OSHA Standards Board rulemaking process, evaluates proposed changes against your current program, and prepares implementation plans before new requirements take effect.
When the permanent standard is adopted, your program will already comply — because the preparation started during the rulemaking process, not after the effective date.
That is the difference between reactive compliance and managed compliance. One responds to citations. The other anticipates standards. The cost is the same. The outcomes are not.