SB 553 for auto repair shops

Is your shop actually covered? Probably yes.

Start from the default: SB 553 — California Labor Code §6401.9 — applies to all California employers, employees, and worksites unless you fit one of four narrow exceptions completely. Coverage is evaluated per worksite, and the law has been enforceable since July 1, 2024. Cal/OSHA can cite you now; the fact that the Standards Board is still due to adopt a formal regulation by the end of 2026 does not delay your duty to comply.

The exception most small shops reach for is the small-worksite exemption. It only helps if you meet all three of these conditions at the same time:

• Fewer than 10 employees working at the site at any given time — that means physical presence at the busiest moment, counting temps and contractors, not the number of names on your payroll.
• The site is not accessible to the public.
• You maintain a compliant Injury and Illness Prevention Program (an IIPP under Title 8 §3203).

Here is where almost every repair shop falls out. If a customer can walk in to drop off keys, describe a problem, wait for a quick service, or pay a bill, your worksite is accessible to the public — and you fail the second condition. When that happens, headcount no longer matters: a five-person shop with a public counter is covered exactly like a forty-bay dealership service department. "We're just a garage" is not an exemption.

A genuinely closed operation might thread the needle — say, a private fleet-maintenance bay behind a locked gate with no public access, fewer than ten people present at once, and a compliant IIPP. Those shops are rare, and the burden is on you to show you fit. If you run more than one location, evaluate each one on its own: a public-facing storefront and a back-lot warehouse are separate analyses. When in doubt, run the coverage checker for a location-level read, or work through the full breakdown in the does SB 553 apply to my business guide.

The hazards that actually drive shop confrontations

SB 553 sorts workplace violence into four types. For an auto repair shop, the weight sits heavily on Type 2 — the people you serve — but all four are worth naming in a site-specific plan:

• Type 2 — billing, estimate, and repair-quality disputes. This is your main flashpoint. A customer who feels overcharged, was surprised when the final invoice ran past the estimate, or believes the repair didn't fix the problem can escalate fast at the counter. Because the aggressor is someone the business serves — a customer — every act or threat here is loggable workplace violence under the law, regardless of whether anyone was hurt or police were called.
• Type 1 — criminal intent. Someone with no legitimate business at the shop: a break-in or a robbery, often tied to the cash, tools, parts, and vehicles you keep on site. The risk concentrates around opening, closing, and after-hours, when staffing is thin.
• Type 3 — worker-on-worker. Conflict between current or former employees, supervisors, or managers — including a fired technician who returns. Less visible than counter disputes, but a foreseeable hazard the plan must address, including how a threat from a former employee is reported and handled.
• Type 4 — personal relationships. An outsider with a personal connection to one of your employees — for example, a domestic or ex-partner — who shows up at the shop. The plan should describe how staff alert each other and respond when this risk is flagged.

Two situations specific to repair shops deserve their own attention, because owners routinely leave them out of generic templates:

• After-hours key drop and vehicle pickup. Night-drop boxes, early-bird drop-offs, and late pickups commonly put a single employee meeting a customer outside normal hours, often with keys and cash changing hands and no one else around. That's a lone-worker and access-control hazard. It cuts across types — a billing dispute (Type 2) or a robbery (Type 1) is far more dangerous when only one person is on site.
• Held vehicles, mechanic's liens, and customer property. When a customer can't get their car back because of an unpaid bill — or is angry about belongings left inside it — the counter can turn hostile. The legal lien process is one thing; the safety question is a separate one. Name it as a recurring hazard and decide in advance how staff de-escalate and when they step back.

Keep your hazard descriptions specific to the actual shop — entrances, the counter layout, the cash handling point, exterior lighting, and any history of incidents. Site-specific detail is exactly what an inspector looks for, and it's what makes the plan genuinely useful to your crew.

What a shop WVPP must address

Your written Workplace Violence Prevention Plan has to be site-specific, in effect at all times, and name the person or people responsible for it. Beyond the standard procedures the statute requires — employee involvement, reporting without retaliation, communication, emergency response, training, hazard identification and correction, post-incident investigation, and annual review — here's what a repair shop's plan should spell out:

• A counter de-escalation procedure for billing disputes. Name what a service writer does when a customer becomes hostile over a bill or estimate: who they call (owner, manager), the words and steps to de-escalate, where the customer is directed, and the threshold for calling law enforcement.
• Lone-worker controls for after-hours pickup and drop. Decide whether after-hours pickups are appointment-only, who is authorized to do them alone (if anyone), the check-in procedure, and what the lone employee does if they feel unsafe. A "last person out" protocol for closing belongs here too.
• A held-vehicle and lien escalation step. Separate from the legal lien process, write down how staff handle a customer who is denied their car: de-escalate, involve the owner, document, and when to involve police. Keeping the safety response written and consistent protects both staff and the business.
• Cash, key, and access controls. Where cash is handled, how keys are secured, who has after-hours access, and the exterior lighting and camera coverage that reduce Type 1 robbery exposure around open and close.
• A confidential reporting channel. The statute requires a way to report incidents and threats without fear of retaliation. Name the mechanism (owner, manager, or a tip line) and restate the anti-retaliation rule — §6310 protects employees who report.
• A violent incident log. Every act or threat of violence gets logged — the only carve-out is lawful self-defense. The log omits personal names (those go in the separate investigation record) and is kept for five years.

Training every person in the shop

SB 553 training reaches everyone — full-time, part-time, and seasonal, plus supervisors and managers. That means it isn't only for the service writers at the counter. A technician who gets approached by an angry customer in the bay, or who covers the desk over lunch, faces the same hazards and needs the same training.

Three timing rules apply, and all three matter to a shop with turnover:

• Initial training when the plan is first established, and for any new hire before they begin working under the plan. Fold it into onboarding so it isn't left to whenever the manager gets to it.
• Annual training for the whole team. Pick a fixed date and run it once a year so you have one clean set of attendance records, not scattered anniversaries.
• Triggered training whenever you identify a new hazard or change the plan — for example, if you add a night-drop box or change after-hours pickup procedures.

One requirement trips up shops that buy a generic online module: the training must include interactive questions and answers with a person knowledgeable about your own shop's plan. A canned video alone doesn't satisfy it. Whoever runs the session needs to be able to answer "what do I actually do at our counter when this happens." Keep training records for at least a year — your written plan, training records, and the incident log have to be made available for an employee to examine and copy within 15 calendar days, free of charge.

Why "we're small" is an expensive assumption

The reason coverage matters so much here is the cost of guessing wrong. For citations issued on or after January 1, 2025, a regulatory or general violation runs up to $16,285, a serious violation up to $25,000, and willful or repeat violations from $11,632 up to $162,851. Critically, each missing element of the program can be cited separately — no written plan, no training records, no incident log, no annual review can stack into multiple citations rather than one. A shop that assumed it was exempt and has nothing in place is exposed on every front at once.

The fix is cheap by comparison: confirm coverage, put a real site-specific plan in place, train your crew, and keep the records. If you want a structured starting point, the Cal/OSHA model WVPP guide walks through the free template section by section, and the SB 553 guide for retail is a useful companion if your shop also sells parts, tires, or accessories over a counter.

Sources

Frequently asked questions