A good plan with bad records is still noncompliant. The violent incident log fields, the retention clocks, the privacy rule, and the 15-day production requirement.
Ask a California employer what SB 553 requires and most will say "a workplace violence prevention plan." That is half the answer. Labor Code 6401.9 also builds a recordkeeping system around the plan, and that is where compliance quietly fails. A company can hold a perfectly good written plan and still be out of compliance because the log entries are thin, the retention clock is misunderstood, or nobody can produce records when an employee asks.
Every workplace violence incident goes in the log, and the statute defines violence broadly: threats count, psychological trauma counts, no injury is required. Each entry must record the date, time, and location, the violence type or types, a detailed description, and a classification of who committed the act, customer, stranger with criminal intent, coworker, supervisor, partner or spouse, among others. It must also classify the circumstances: whether the employee was rushed, working alone, in a poorly lit area, or working at a low staffing level.
Those circumstance fields are the point. A year of honest entries shows you that incidents cluster on closing shifts or in one stairwell, which turns the log from paperwork into your hazard map.
One rule surprises people: the log must omit personal identifying information for anyone involved. No names, addresses, phone numbers, or combinations of details that would identify a person. The entry describes the incident, not the people. This matters when the log is shared, and it will be shared, because employees and their representatives can request copies.
At multiemployer worksites, the employer whose employees experienced the incident keeps the log and gives a copy to the controlling employer. If you run a site with contractors or staffing agencies, write that flow into your plan.
Keep three different retention periods straight. Records of hazard identification, evaluation, and correction: five years. Violent incident logs: five years. Investigation records: five years, and these must not contain medical information as defined in the Civil Code. Training records: one year, and they must show dates, content or a summary, the trainer's name and qualifications, and the names and job titles of everyone who attended.
The training list is the one auditors actually pull first, because it is the easiest to check. "We trained everyone in March" is not a record. A sign-in sheet with a content summary is.
Employees and their representatives can request the hazard records, the logs, and the training records, and you have 15 calendar days to produce them, for examination and copying, at no cost. Cal/OSHA can ask for all of it at any time. The employers who struggle here are not hiding anything; they simply cannot assemble records that live in three inboxes and a supervisor's notebook.
The fix is boring and cheap: one folder, physical or digital, with the plan, the log, the hazard records, the investigations, and the training sign-ins, owned by a named person who appears in the plan itself.
The statute ties the loop shut: your annual training must cover the log itself and how employees can obtain these records. Employees who know the log exists use it. Employees who have never heard of it report incidents into the void, and the void produces nothing at review time.
Braav builds SB 553 compliance programs for California employers, including the recordkeeping system behind the plan. Book a call to get yours in order.