Updated November 8, 2026. This article was written at the end of August 2024, two months after California’s general workplace violence prevention requirements became enforceable. It summarizes Labor Code section 6401.9 and Cal/OSHA guidance as they applied to restaurants, bars, and stores at that time. A note on later rulemaking appears at the end. It is general information, not legal advice.
A new plan for the back office binder
Most hospitality managers already keep an Injury and Illness Prevention Program, a heat plan if staff work outside, and a stack of training records. Since July 1, 2024, most California employers have needed one more document: a written workplace violence prevention plan. The requirement comes from Senate Bill 553, which added Labor Code section 6401.9. Its core provisions became operative on July 1, 2024, and Cal/OSHA enforces them.
Restaurants, bars, nightclubs, hotels, and liquor stores have obvious reasons to take this seriously. Staff handle cash, work late, refuse service to intoxicated guests, and remove people who will not leave. This article explains what the law requires and how a licensed hospitality business can build a plan that reflects real shifts rather than generic templates.
Who the law covers
Section 6401.9 applies broadly to employers, employees, and places of employment in California, with listed exemptions. The exemptions include health care settings covered by a separate Cal/OSHA standard, employees teleworking from a location of their choice, and places of employment where fewer than 10 employees work at any given time and that are not accessible to the public, if they comply with the Injury and Illness Prevention Program rule. A restaurant, bar, or store open to customers does not fit that small-workplace exemption, because it is accessible to the public.
What counts as workplace violence
The law defines workplace violence as any act of violence or threat of violence that occurs in a place of employment. It includes the threat or use of physical force that results in, or has a high likelihood of resulting in, injury, psychological trauma, or stress, whether or not the employee is injured, and incidents involving a firearm or other dangerous weapon, including common objects used as weapons. Lawful self-defense or defense of others is excluded.
The statute sorts incidents into four types, and hospitality businesses can face all of them:
- Type 1: violence by someone with no legitimate business at the site, such as a robbery at a liquor store register.
- Type 2: violence directed at employees by customers or visitors, such as a guest who shoves a bartender after being refused another drink.
- Type 3: violence by a present or former employee, supervisor, or manager.
- Type 4: violence by someone who does not work there but has a personal relationship with an employee, such as an ex-partner who shows up during a shift.
Cal/OSHA’s workplace violence guidance for general industry lists risk factors that will sound familiar to anyone who has closed a bar: exchanging money, working alone, working at night and in early morning hours, and having valued items such as cash on site.
What the written plan must contain
Under section 6401.9(c), the plan must be in writing, easily accessible to employees and Cal/OSHA at all times, and specific to the hazards of each work area and operation. It may be a stand-alone section of the Injury and Illness Prevention Program or a separate document. Required elements include:
- Names or job titles of the people responsible for the plan.
- Procedures to involve employees and their representatives in developing and carrying out the plan, including identifying hazards, designing training, and reporting and investigating incidents.
- Methods to coordinate with other employers, such as a staffing agency or a contracted security company.
- Procedures to accept and respond to reports of workplace violence, and to prohibit retaliation against employees who report.
- Procedures to communicate with employees about how to report concerns and how investigations and corrective actions will be shared.
- Emergency procedures, including how to alert employees, evacuation or sheltering plans, and how to get help from security and law enforcement.
- Procedures to identify, evaluate, and correct hazards, including inspections when the plan is first set up, after each incident, and when a new hazard becomes known.
- Post-incident response and investigation procedures.
- A review of the plan at least annually, after an incident, and when a deficiency appears.
The violent incident log
Section 6401.9(d) requires employers to record every workplace violence incident in a violent incident log. Entries must include the date, time, and location; the type of violence; a detailed description; who committed it, such as a customer or coworker; the circumstances, such as working alone, during low staffing, or in poorly lit areas; where it happened; the kind of incident, such as a physical attack or a threat; and consequences, including whether security or police were called. Personal identifying information about the people involved must be left out.
For bars, this log is distinct from an alcohol incident log that records refusals and cutoffs. Many managers will keep both. A refused sale that ends calmly belongs in the service log; a guest who threatens a server after a refusal belongs in the violent incident log as well.
Training requirements
Under section 6401.9(e), employers must train employees when the plan is first established and annually after that. Training must cover the plan and how to get a copy, the law’s definitions, how to report incidents without fear of reprisal, job-specific hazards and corrective measures, strategies to avoid physical harm, the violent incident log, and how to obtain records. It must include an opportunity for interactive questions and answers with someone who knows the plan. Additional training is required when a new hazard is identified or the plan changes. Materials must fit employees’ education level, literacy, and language.
Records
The law sets retention periods: five years for hazard identification, evaluation, and correction records; one year for training records, which must include dates, content summaries, trainers, and attendees; five years for violent incident logs; and five years for incident investigation records. Employees and their representatives can request most of these records, which must be provided within 15 calendar days at no cost.
Building a hospitality plan that fits
Walk the floor at closing time
The required initial inspection is a chance to look at the business the way staff experience it at 1:45 a.m. Check lighting in the parking lot and at the back door, how cash is moved to the safe, whether the bartender can see the entrance, and where a server can retreat if a guest becomes threatening.
Connect refusals to safety
Refusing service is one of the most common triggers for Type 2 incidents in bars. Staff trained in responsible beverage service already learn to refuse politely and early. Build on that by setting rules for when a manager takes over, when security steps in, and when staff should disengage and call police. Our article on RBS skills that reduce burnout covers refusal techniques that lower the temperature.
Plan for working alone
Convenience stores and small bars often have one employee on duty late at night. Consider staffing changes, cash limits in the register, visible cameras, and a check-in routine with a manager. Our LEAD guide for off-sale retailers discusses support for clerks on solo shifts.
Coordinate with contractors
If a security company provides door staff, the plan should explain how incidents involving those workers are reported and logged, and how training is coordinated.
Involve employees
The law requires active employee involvement. A short meeting where servers, bartenders, and door staff describe the situations that worry them will produce a better plan than one written alone in an office.
Do not forget harassment
Some threatening behavior also raises harassment concerns. Our harassment prevention guide covers separate training obligations that may overlap.
A scenario at a neighborhood bar
A guest is refused service at 11:30 p.m. and becomes angry, slamming a glass and threatening the bartender. Following the plan, the bartender steps back from the bar and signals the manager, who calmly asks the guest to leave. When the guest refuses and continues shouting, the manager calls police. The guest leaves before officers arrive. The next day, the manager completes the violent incident log without personal identifying details, reviews camera footage, and holds a short meeting with the closing staff. The team decides to add a second staff member to the bar on Friday nights and to move the manager’s station closer to the entrance.
Reporting without retaliation
The law requires procedures to accept reports and to prohibit retaliation against employees who report. In a hospitality setting, that means making it easy for a server to report a regular customer who makes threats, even if that customer spends a lot of money. Give employees more than one way to report, such as telling a manager directly or using a written form, and explain how they will hear back about the investigation and any corrective action. A plan that staff do not trust will not surface the hazards it is meant to address.
Keep the reporting form short. A date, time, location, a description of what happened, and who was involved are enough to start, and the manager can complete the log entry afterward.
Frequently asked questions
When did the requirements take effect?
Section 6401.9’s main provisions became operative on July 1, 2024.
Can we use a template?
Cal/OSHA offers a model plan as a resource, but the law requires a plan specific to your hazards, work areas, and operations.
Do small restaurants need a plan?
The small-workplace exemption applies only to places with fewer than 10 employees present at any time that are not accessible to the public. Businesses open to customers generally do not qualify.
Current context as of November 8, 2026
Section 6401.9(h) required Cal/OSHA to propose, by December 31, 2025, and the Occupational Safety and Health Standards Board to adopt, by December 31, 2026, a formal standard on workplace violence prevention plans. Cal/OSHA’s general industry page describes that rulemaking. Employers should check Cal/OSHA’s current pages for the status of the standard and any requirements beyond the statute described above.
The bottom line
Workplace violence prevention is now a written, trained, and logged obligation for most California hospitality employers. A plan built around real closing-time risks, refusals, cash handling, and solo shifts protects staff and gives managers a clear playbook when a night goes wrong.
Pair Your Plan With Trained Staff
De-escalation starts at the bar. ServeTrain’s ABC-approved online RBS course helps California servers and managers recognize intoxication and stop trouble early. Before enrolling, register or log in to your RBS Portal account with ABC and confirm your chosen course appears in the portal’s training provider search.
Sources
This article is general information, not legal advice.
