- California employers may use Cal/OSHA's free model WVPP, write their own, or start from a template — but the finished plan must be site-specific, not a generic fill-in.
- A template satisfies only the written-plan element. SB 553 also requires training, a violent incident log, hazard assessments, and record retention.
- The most-cited template mistakes are blank or generic hazard-assessment and named-responsible-person fields.
- The plan must be reviewed at least annually and whenever a new or previously unrecognized hazard appears.
- A downloaded document does not update itself — training dates, log entries, and hazard reviews are ongoing work no template can do.
Where to get a free California WVPP template
Start with the one the state built. Cal/OSHA publishes a free, fillable model workplace violence prevention plan for general industry on the DIR website (dir.ca.gov), along with a companion employer fact sheet. It's free, it's already structured around the required elements of Labor Code §6401.9, and using it means you won't accidentally skip a required section by inventing your own outline. If you only take one thing from this page: download that, not a paid "compliance kit" that repackages the same public document.
The law doesn't require a particular form. You can adopt the model plan, write your own from scratch, or buy a template — what matters is that the finished written plan contains every required element and reflects your worksite. So the format question is genuinely the easy one. The questions worth your attention are what "compliant" requires, where employers go wrong filling the blanks, and what the template can't do for you at all.
What a compliant template must contain
A plan that meets §6401.9 isn't just a workplace-violence policy statement. It has to be site-specific, in effect at all times, and it must name the person or people responsible for implementing it. Beyond that, the written plan has to lay out procedures for each of the following — and a template is only worth using if it has a section for every one:
- Employee involvement. How employees and their representatives help develop and implement the plan — identifying hazards, shaping training, reporting and investigating incidents.
- Reporting without retaliation. How an employee reports violence or a threat, what happens next, and an explicit prohibition on reprisal.
- Communication. How the employer communicates workplace-violence matters to employees and how concerns are investigated and closed out.
- Coordination with other employers. How you coordinate the plan with any other employer whose workers share your site — or a clear statement that none do.
- Emergency response. How employees are alerted, where they shelter or evacuate, and how help is summoned.
- Training. How training is developed and delivered — initially, annually, and when the plan or a hazard changes.
- Hazard identification, evaluation, and correction. How you find, assess, and fix workplace-violence hazards, including periodic inspections.
- Post-incident response and investigation. Who secures the scene, investigates, and records findings after something happens.
- Review and revision. How and when the plan is reviewed — at least annually, after incidents, and when deficiencies appear.
If a template you're considering doesn't have a home for all of these, it will generate a citable gap — and under SB 553, each missing element is a separate citation. The Cal/OSHA model plan covers them all by design, which is why it's the safest starting point. For a section-by-section walkthrough of what to actually write in each blank, see our guide to filling out the model plan.
The five blanks that get employers cited
An inspector who has read a hundred of these templates reads straight past the boilerplate to the parts you filled in. The boilerplate is identical everywhere; the filled-in fields are where compliance is won or lost. These are the five that fail most often:
- The generic hazard assessment. The single most common failure. A template ships with example hazards, and the employer leaves them as-is instead of walking the actual site. Your plan should reflect what your worksite genuinely faces — and the four workplace-violence types help you think it through: a stranger with no business there (Type 1, e.g. robbery), a customer or client you serve (Type 2), a coworker or former employee (Type 3), and someone with a personal relationship to an employee (Type 4).
- The unnamed responsible person. A blank where a name should be, or a function ("Human Resources") that nobody on the floor can identify, or a person who left months ago. The test an inspector applies: ask an employee who owns the plan. If the answer doesn't match the paper, the field fails even though it's filled in.
- The copied plan. One document, several worksites, identical hazards in each. Site-specificity is the statute's word, not ours, and coverage applies per worksite — a plan that could belong to any business belongs to none.
- The empty coordination section. "No other employers" written at a site with a nightly cleaning crew or a staffing-agency temp. If it truly doesn't apply, say so explicitly — an inspector reads a blank bracket as unfinished, not as not-applicable.
- Involvement you can't evidence. The plan says employees participate; nothing — no meeting note, no survey, no walkthrough sign-in — shows they ever did. Involvement you can't document didn't happen, as far as an audit is concerned.
Skip the blank document. Answer the questions once.
SB553Ready walks you through the same site-specific decisions in plain English, assembles a written plan with every required element named and filled, and then keeps the training, log, and annual review the plan promises on track — from $59/mo.
Why the template alone is not the program
Here's the part most "free template" pages never tell you: a completed plan satisfies one element of SB 553. The law requires a working program, and a static document can't run a program. Alongside the written plan, you have to keep seven kinds of records and do the recurring work behind them:
- Training for everyone — full-time, part-time, seasonal, supervisors, and managers — initially, annually, and whenever the plan or a hazard changes, with interactive Q&A led by someone who knows your plan. See the training requirements guide.
- A violent incident log capturing every act or threat of violence — including verbal or written threats, regardless of injury or whether police were called — with personal identifying details kept out of the log itself.
- Hazard identification and evaluation records from your periodic inspections, plus hazard correction records showing each fix and its date.
- An incident investigation record for each event (this is where names go, not the log).
- The annual review record, documenting that the plan was reviewed at least once a year and after incidents.
Most of these records are kept five years; training records are kept at least one year. And employees can ask to examine and copy the plan, training, log, and hazard records within 15 calendar days, free of charge. A downloaded template gives you none of that — it gives you a document with today's date, which is true for exactly one day. The training dates advance, incidents need logging when they happen, and the hazard review comes due whether or not anyone remembers it. That ongoing work is the actual compliance obligation; the template is just where it starts.
Two practical next steps once you have a template in hand: run your situation against the compliance checklist so nothing in the seven-records set slips, and if you're not certain you're even covered, the coverage guide walks the default rule and the four narrow exceptions.
Sources
- Labor Code §6401.9 — the SB 553 workplace violence prevention program requirements, including the required elements every template must contain and the site-specific standard.
- Cal/OSHA model Workplace Violence Prevention Plan & employer fact sheet (dir.ca.gov) — the free, fillable model plan for general industry and its companion fact sheet, the template referenced throughout this page.
Frequently asked questions
Where can I get a free SB 553 plan template?
Cal/OSHA publishes a free, fillable model workplace violence prevention plan for general industry on the DIR website (dir.ca.gov), with a companion employer fact sheet. You can use the model plan, write your own, or use any template — the law doesn't require a specific form, only that your written plan contains every required element and is specific to your worksite.
Does using a template make me compliant with SB 553?
No. A completed template satisfies only the written-plan element. SB 553 also requires training for every employee, a violent incident log, hazard identification and correction records, an incident investigation record, and an annual review — none of which a template performs for you. The document is the starting line, not the finish.
What's the most common mistake people make filling out a template?
Leaving the hazard-assessment and named-responsible-person fields blank or generic. A template copied across worksites with the same boilerplate hazards, or a plan that names a function nobody on the floor can identify, fails the site-specific requirement an inspector checks first.
How often does the plan have to be reviewed once I've filled out the template?
At least annually, and again whenever a new or previously unrecognized hazard appears, after any incident, and whenever a deficiency in the plan becomes apparent. A downloaded document does not update itself — the review is recurring work no template can do.
Do I need a separate template for each location?
The written plan must be specific to each worksite's hazards and operations, and the duty applies per worksite. A shared framework or template is fine, but the named responsible people, the hazard assessment, and the procedures have to reflect each actual location, not a single generic copy.
How we research & review these guides →
This article is general information about California law, not legal advice, and SB553Ready is a software tool, not a law firm. Statutes and enforcement practice change; confirm your compliance program with qualified counsel or a safety professional. Statute text: Labor Code §6401.9.