California IIPP Requirements: What Every Employer Must Know

If you employ even one person in California, you are required by law to have a written Injury and Illness Prevention Program — commonly called an IIPP. No exceptions. No minimum employee count. No industry exemptions.

Yet the IIPP is one of the most commonly cited violations in Cal/OSHA inspections. Why? Because most employers either do not have one, have one that was downloaded from the internet and never customized, or have one that was written years ago and never updated.

Here is what the law actually requires — and what it takes to have an IIPP that will hold up under inspection.

The Legal Requirement

California Labor Code Section 6401.7 and Cal/OSHA Title 8 Section 3203 require every California employer to establish, implement, and maintain an effective Injury and Illness Prevention Program. The program must be in writing.

This requirement has been in effect since 1991. There is no grace period for new businesses. If you open a business in California and hire your first employee, you need an IIPP before that employee starts work.

What Must Be in Your IIPP

Cal/OSHA specifies eight required elements for a compliant IIPP:

1. Responsibility

Your IIPP must identify the person or persons responsible for implementing and maintaining the program. This cannot be vague (“management is responsible”). It must name a specific person or position.

2. Compliance

Your program must include a system for ensuring that all employees comply with safe and healthy work practices. This typically includes your disciplinary policy for safety violations — and it must be enforced consistently.

3. Communication

You must have a system for communicating with employees about occupational safety and health matters. This includes how you inform employees about hazards, how they can report unsafe conditions, and how you respond to safety concerns. Employees must be able to report hazards without fear of reprisal.

4. Hazard Assessment

Your IIPP must describe how you identify and evaluate workplace hazards — including scheduled periodic inspections, procedures for investigating occupational injuries and illnesses, and a method for identifying new hazards when operations change.

5. Accident/Exposure Investigation

When a workplace injury, illness, or near-miss occurs, you must have a procedure for investigating it to determine the cause and prevent recurrence. The investigation must be documented.

6. Hazard Correction

Your program must describe how you correct unsafe or unhealthy conditions — including timelines for correction and interim protective measures when immediate correction is not possible.

7. Training and Instruction

All employees must receive training on general safe work practices and on the specific hazards of their job. Training must be provided when the IIPP is first established, to new employees, to employees given new job assignments, and whenever new hazards are introduced. Training must be documented.

8. Recordkeeping

You must maintain records of your hazard assessments, inspections, and training. For employers with 10 or more employees, records must be maintained for at least one year. Training records must be maintained for at least one year.

Why Generic Templates Fail

A Cal/OSHA compliance officer is trained to spot a generic template. Here is what they look for:

Placeholder text. If your IIPP says “[insert hazard here]” or “see attached list,” it is not compliant. The hazards must be specifically identified.

Wrong industry. A template written for an office environment will not address the hazards in a construction site, nursing facility, or manufacturing plant. Your IIPP must address the actual hazards in your actual workplace.

No named responsible person. “The safety officer is responsible” is not sufficient if you do not have a safety officer. The IIPP must reflect your actual organizational structure.

No training records. The best-written IIPP in the world is worthless if you cannot prove that employees were trained on it. Training documentation is a required element — and it is one of the first things an inspector asks for.

Never updated. If your IIPP was written in 2015 and your operations have changed significantly since then, it is not compliant. The IIPP must be reviewed and updated whenever there is a change in operations, equipment, or personnel that affects the hazards it addresses.

The Cost of Non-Compliance

Cal/OSHA can cite an employer for failing to have a compliant IIPP as a serious violation — carrying a penalty of up to $25,000 per violation. If the inspector finds that the lack of an IIPP contributed to an employee injury, the penalty exposure increases significantly.

Beyond the financial penalty, an employer without a compliant IIPP has no documented basis for defending against claims that they failed to provide a safe workplace. In workers’ compensation litigation and civil suits, the absence of a written safety program is powerful evidence of negligence.

What a Compliant IIPP Actually Looks Like

A compliant IIPP for a California employer is a document that:

Identifies the specific hazards present in your workplace by name (not generic categories)
Describes the specific controls you use to address each hazard
Names the specific person responsible for the program
Includes your actual training schedule and documentation system
Reflects your actual operations, not a hypothetical workplace
Has been reviewed and updated within the past year

It is typically 15–40 pages for a small to mid-size employer, depending on the complexity of operations and the number of hazards present.

Getting Your IIPP Right

If you do not have an IIPP, or if you have one that you know would not survive an inspection, the time to address it is before Cal/OSHA shows up — not after.

McNeil Safety Consulting writes site-specific IIPPs for California employers across every industry. We do not use templates. We visit your facility, identify your actual hazards, and write a program that reflects your actual operations.

Call (626) 546-9384 for a free consultation. We can typically complete an IIPP within 2–3 weeks of our initial site visit — and we provide the training documentation system you need to stay compliant going forward.

McNeil Safety Consulting provides safety plan writing and IIPP development for California employers across every industry. We also offer Cal/OSHA safety training with complete documentation packages.

Explore Topics

# IIPP # Cal/OSHA # injury illness prevention program # California employers # workplace safety compliance

Written by

Michael McNeil, McNeil Safety Consulting

Content creator and writer sharing insights and stories.

Cal/OSHA Compliance