IIPP, HASP, SWPPP & Safety Plan Writing in California

Service area: Available in California, Nevada, Arizona, Oregon, Washington, Idaho, Montana, Utah, Wyoming, Colorado, New Mexico, North Dakota and South Dakota.

Safety Plan Writing

Every California employer is required to have a written Injury and Illness Prevention Program (IIPP) — and most businesses that handle hazardous materials, operate on construction sites, or conduct high-risk activities need additional written safety plans. A generic template downloaded from the internet will not satisfy a Cal/OSHA inspector.

McNeil Safety Consulting writes site-specific, Cal/OSHA-compliant safety plans for California employers across every industry — backed by 35+ years of experience and a Licensed Nurse on staff for healthcare-related programs.

• 35+ Years Cal/OSHA Experience
• Licensed Nurse on Staff
• Serving All of California

Fast Turnaround Available

Safety Plans We Write

Every plan is written specifically for your operations — not adapted from a generic template. We identify your actual hazards, describe your actual controls, and produce documentation that satisfies Cal/OSHA inspection requirements.

Industries We Serve

Every California employer needs an IIPP. Many need additional plans depending on their operations, industry, and the hazards present in their workplace.

• Manufacturing & Industrial
• Construction
• Healthcare & Nursing Facilities
• Film & Television Production
• Environmental Remediation
• Agriculture
• Warehousing & Logistics
• Automotive & Aerospace
• Food Processing
• Retail & Hospitality
• Property Management
• Government & Public Agencies

The Full Mandated Plan Set, and What Actually Triggers Each One

Most of the money wasted on safety documentation is spent on plans an employer never needed, while the one that was actually mandated goes unwritten until an inspector asks for it. The list below is organized by what triggers the obligation, with the governing citation for each, so you can see which apply to your operation before anyone writes anything.

Regulatory citations are current as of publication. Cal/OSHA amends Title 8 continuously and the water boards reissue their general permits on their own cycle, so every plan we write carries the operative order or section number and the date it was checked.

Cal/OSHA written programs — triggered by having employees, or by a specific exposure

• Injury and Illness Prevention Program (IIPP) — 8 CCR §3203. Every California employer, no exceptions, no headcount threshold. Construction adds §1509 and a Code of Safe Practices.
• Heat Illness Prevention, outdoor — 8 CCR §3395. Written plan required, in English and the language understood by the majority of employees.
• Heat Illness Prevention, indoor — 8 CCR §3396, effective 23 July 2024. Applies to indoor work areas that reach 82°F while employees are present; the engineering and administrative control requirements attach at 87°F, at a heat index of 87°F, or at 82°F where employees wear restricted clothing or work in high radiant heat. The written plan is required by §3396(i). Warehouses, kitchens, foundries, laundries and unconditioned production floors are the usual candidates, and most of them still have no plan.
• Workplace Violence Prevention Plan — Labor Code §6401.9 (SB 553), in force since 1 July 2024 for nearly all California employers. Note the detail that trips people up: this is a statutory requirement. Cal/OSHA’s general industry regulation is still in rulemaking, with adoption required by 31 December 2026. The obligation is real now; the standard is not final yet.
• Emergency Action Plan §3220 and Fire Prevention Plan §3221
• Respiratory Protection written program §5144 — with fit testing and the medical evaluation trail that goes with it
• Hearing Conservation §5097 — triggered by an 8-hour TWA at or above 85 dBA
• Hazard Communication §5194 — written program, SDS access, labeling, training
• Bloodborne Pathogens Exposure Control Plan §5193 — annual review and update required
• Confined Space §5157 (permit-required) and §5158
• Control of Hazardous Energy / lockout-tagout §3314
• Lead §1532.1 (construction) and §5198 (general industry); Respirable Crystalline Silica §1532.3; Asbestos §1529 and §5208
• Process Safety Management §5189, and §5189.1 for petroleum refineries

HASP — Health and Safety Plan, triggered by the work, not the workplace

8 CCR §5192(b)(4), and federally 29 CFR 1910.120(b)(4), require a site-specific plan that “shall address the safety and health hazards of each phase of site operation and include the requirements and procedures for employee protection.” It has to be kept on site. The regulation names the minimum contents: a hazard analysis for each site task, training assignments, PPE specification, medical surveillance, air and personnel monitoring and environmental sampling procedures, site control, decontamination, an emergency response plan, confined space entry procedures, and a spill containment program.

A HASP written by someone who has never run a decon line or sized an air monitoring program reads like it. Ours are written against the actual scope of work, the actual contaminants of concern and the actual exposure data, and they hold up when the work changes mid-project — which it does.

HMBP — Hazardous Materials Business Plan, triggered by quantity on hand

California Health and Safety Code Chapter 6.95. Under HSC §25507, a business must establish and implement an HMBP once it handles a hazardous material at or above 55 gallons for a liquid, 500 pounds for a solid, or 200 cubic feet of compressed gas at standard temperature and pressure. Lower thresholds apply to extremely hazardous substances at or above their threshold planning quantity, and separate thresholds apply to certain irritants and sensitizers and to specified compressed gases. Statutory exemptions exist — closed-system refrigerants, lubricating oil under the stated limits, propane for on-premises use up to 500 gallons, and fuel in a vehicle’s own tank among them.

The plan is submitted electronically through the California Environmental Reporting System (CERS) to your local Certified Unified Program Agency, and the inventory has to be reviewed and certified on the schedule your CUPA sets. Most HMBP violations we see are not missing plans — they are inventories that no longer match what is actually in the building.

SWPPP — two different permits, two different qualifications

Construction. State Water Board Order WQ 2022-0057-DWQ, the 2022 Construction General Permit, took effect 1 September 2023 and replaced Order 2009-0009-DWQ. It covers construction that disturbs one acre or more, or less where the site is part of a larger common plan of development. The SWPPP must be prepared by a Qualified SWPPP Developer (QSD). Michael McNeil holds the QSD credential, so the plan and the signature come from the same office rather than being subcontracted out.

Industrial. Order 2014-0057-DWQ, as amended, covers facilities in the regulated SIC categories. It requires a SWPPP, a monitoring implementation plan, annual reporting, and escalating obligations if the facility drops into Level 1 or Level 2 exceedance status — at which point a Qualified Industrial Stormwater Practitioner becomes part of the picture. The two permits are routinely confused; they are not interchangeable and neither SWPPP satisfies the other.

WEAP — Worker Environmental Awareness Program, and an honest word about what mandates it

WEAP is not a Cal/OSHA standard, and anyone who tells you Title 8 requires it is selling something. It is a project-specific obligation that comes from the environmental side of the file: CEQA mitigation measures adopted in a project’s mitigation monitoring and reporting program, conditions in a USFWS or NMFS biological opinion, a CDFW §1602 lake or streambed alteration agreement, a Corps §404 permit or Regional Board §401 certification, or an agency’s own standard special provisions — Caltrans projects being the common example.

Where it applies, it applies hard: every worker on the ground must receive it before ground disturbance, the content has to match the resources the environmental document actually identified, and the sign-in roster is the compliance record an agency monitor will ask for. We build the WEAP from the project’s own mitigation measures and permit conditions rather than from a stock deck, and we deliver it in English and Spanish.

Federal OSHA written programs — for work outside California

In the federal OSHA states we serve — Idaho, Montana, Colorado, North Dakota and South Dakota — the plan set is different in an important way: there is no federal analogue to the IIPP. Federal OSHA has no general written safety program mandate, which is exactly why employers who cross state lines get this wrong in both directions, either carrying a California IIPP into a state that does not require it or assuming no written programs are needed at all.

The exposure-triggered programs do carry over: Hazard Communication 29 CFR 1910.1200, Respiratory Protection 1910.134, Control of Hazardous Energy 1910.147, Permit-Required Confined Spaces 1910.146 and 29 CFR 1926 Subpart AA in construction, Emergency Action Plans 1910.38, Fire Prevention Plans 1910.39, Process Safety Management 1910.119, HAZWOPER 1910.120, and the substance-specific standards for lead, silica, asbestos, cadmium and hexavalent chromium. Oregon, New Mexico and Wyoming run approved state plans with their own additions on top.

EPA and hazardous waste plans

• SPCC Plan — 40 CFR Part 112. Triggered by aggregate aboveground oil storage capacity over 1,320 gallons, counting only containers of 55 gallons or more, or completely buried capacity over 42,000 gallons, where a discharge could reasonably be expected to reach navigable waters. “Oil” is broader than fuel — hydraulic oil, transformer oil, cooking oil and lubricants all count.
• RCRA contingency plan — 40 CFR Part 262 Subpart M for large quantity generators, with the preparedness, prevention and emergency procedure requirements of §262.16 for small quantity generators. California adds its own hazardous waste requirements under Title 22 through DTSC and the CUPA.
• Risk Management Plan — 40 CFR Part 68, for regulated substances above threshold quantities; usually the same facilities caught by Cal/OSHA PSM under §5189, and the two documents must agree with each other.
• EPCRA Tier II reporting — 40 CFR Part 370; in California the obligation is met through the HMBP inventory in CERS.

Plans that contradict each other are their own citation risk. An RMP that describes one emergency response posture, a HASP that describes another and an Emergency Action Plan that names a third assembly point is a finding waiting to happen. We write them as one set.

Air district permitting and reporting — AQMD

California regulates air emissions through 35 local air districts, not through one statewide agency. South Coast AQMD covers Orange County and the non-desert portions of Los Angeles, Riverside and San Bernardino counties; move a project into the San Joaquin Valley, the Bay Area or the Mojave and the rules, forms and deadlines change with it. Equipment that emits generally needs a Permit to Construct and then a Permit to Operate before it runs, and major sources carry Title V obligations on top.

• Annual Emission Report (AER) — permitted facilities report emissions each year. South Coast AQMD folded AB 2588 toxic emissions reporting into the AER beginning with the 2000–01 cycle, so facilities in that program report air toxics quadrennially through the same submittal.
• AB 2588 Air Toxics “Hot Spots” Program — Health & Safety Code §44300 et seq. Emissions inventory, health risk assessment where the district requires one, and public notification if risk thresholds are exceeded. This is the program that turns a routine permit into a community-facing problem, and it is the one facilities are least prepared for.
• Rule 1403, asbestos demolition and renovation — see below. The single most commonly violated air rule on a construction site.
• Rule 403 fugitive dust, with a dust control plan on larger earthmoving sites; Rule 1466 where soil containing toxic air contaminants is disturbed, which is the rule that governs excavation on a contaminated site; Rule 402 public nuisance, which needs no numeric exceedance at all — a complaint is enough.

Who prepares and signs it. South Coast AQMD imposes no consultant licensing requirement on emissions reporting. The Annual Emission Report is certified by a responsible official of the facility and prepared by a qualified professional. Michael McNeil is a Registered Industrial Hygiene Professional (RIHP) and Registered Environmental Professional (REP), and prepares and signs this reporting himself. The AER is due by 5:00 p.m. on 1 May for the preceding data year. Filing is triggered at roughly four tons per year of SOx, VOC, NOx, SPOG or PM, or 100 tons per year of carbon monoxide, or by inclusion in the AB 2588 program or CARB’s Criteria and Toxics Emission Reporting regulation. The only air district document that carries a named credential requirement is the Rule 1403 asbestos survey below, and that is an asbestos-specific rule rather than a general restriction on air district reporting.

Rule 1403 in detail, because it is where projects get stopped. An asbestos survey report signed by a Certified Asbestos Consultant is required before any demolition or renovation — including in buildings believed to be asbestos-free, because there is no date after which asbestos in building materials was banned. Notification to South Coast AQMD must be filed 10 working days, or 14 calendar days, before work starts, and notification is required for every demolition, including those where no asbestos was found. The narrow exception is a residential single-unit dwelling where less than 100 square feet of intact material is removed. That CAC signature requirement attaches to the survey report itself and to nothing else in the air district rulebook. We manage the whole path — survey coordination and CAC engagement, the notification filing, and the Cal/OSHA §1529 worker-protection side that runs in parallel under an entirely different agency.

DTSC and California hazardous waste reporting

The Department of Toxic Substances Control administers California’s hazardous waste program under 22 CCR Division 4.5, with day-to-day generator inspection usually delegated to your local CUPA. The obligations that generate findings:

• EPA / California identification number — 22 CCR §66262.12, site-specific, required before waste moves
• Manifests — 22 CCR §§66262.20 and 66262.21, tracked through EPA’s national e-Manifest system, with copies retained three years
• Accumulation time limits — §66262.34, tied to Health & Safety Code §25123.3, which sets 90, 180, 270 or 365 days depending on the generator and the unit. Blowing an accumulation clock converts a generator into an unpermitted storage facility, which is a materially worse violation
• Personnel training — §66265.16 for generators at or above 1,000 kg per month, completed within six months of hire, with records held through closure and three years after separation
• Land disposal restriction notifications, exception reports, and biennial report records — all on three-year retention
• Tiered permitting for on-site treatment — Permit by Rule, Conditional Authorization and Conditional Exemption, each with its own notification and fee
• Universal waste — 22 CCR Division 4.5, Chapter 23, which California applies more broadly than the federal rule does

The trap for multi-state operators: California classifies a range of wastes as hazardous that RCRA does not. A waste stream that ships as non-hazardous from a plant in Idaho or Colorado can be a California hazardous waste at an identical operation in Fontana, with a manifest, a licensed hauler and a permitted destination attached to it. Corporate waste profiles written at headquarters are wrong in California more often than they are right.

Watch item, not yet law: EPA published a proposed Paper Manifest Sunset Rule on 5 March 2026, with the comment period closed on 4 May 2026. As proposed, paper manifests would no longer be accepted 24 months after a final rule issues, leaving only hybrid or fully electronic manifests. It is a proposal, not a requirement, and we will say so until it is final — but generators still running paper should be planning for it now.

Written and signed by Michael Karl McNeil, RIH, QSD — see federal and multi-state qualifications. Call (626) 546-9384 to find out which of these you actually need.

Frequently Asked Questions

Is an IIPP required for every California employer?

Yes. California Labor Code Section 6401.7 and Cal/OSHA Title 8 Section 3203 require every California employer — regardless of size, industry, or number of employees — to have a written Injury and Illness Prevention Program (IIPP). The IIPP must include a written policy statement, methods for identifying and evaluating workplace hazards, procedures for correcting hazards, a communication system for employees, training procedures, and a recordkeeping system. Failure to have a compliant IIPP is one of the most commonly cited Cal/OSHA violations.

What makes a good IIPP versus a generic template?

A generic IIPP template downloaded from the internet or purchased as a fill-in-the-blank document is almost always inadequate for a Cal/OSHA inspection. A compliant IIPP must be specific to your workplace — identifying the actual hazards present in your operations, describing the specific controls you use to address them, naming the person responsible for the program, and documenting actual training conducted with your employees. Cal/OSHA inspectors are trained to identify generic templates that have not been customized to the employer’s actual operations, and they cite them accordingly. A site-specific IIPP written by an experienced consultant demonstrates genuine compliance.

What is a HASP and when is it required?

A Health and Safety Plan (HASP) is required by Cal/OSHA Title 8 Section 5192 (Hazardous Waste Operations and Emergency Response) for any work involving hazardous waste operations — including site characterization, remediation, emergency response, and treatment, storage, and disposal facility operations. The HASP must be site-specific, addressing the specific hazards present at the site, the controls to be used, emergency response procedures, and training requirements. A HASP must be prepared before work begins and must be on-site and available to all workers during operations.

What is a SWPPP and who needs one in California?

A Stormwater Pollution Prevention Plan (SWPPP) is required for construction sites that disturb one or more acres of land, and for certain industrial facilities that discharge stormwater under the State Water Resources Control Board’s Construction General Permit or Industrial General Permit. The SWPPP identifies potential sources of stormwater pollution, describes Best Management Practices (BMPs) to prevent or reduce pollutants in stormwater discharges, and establishes an inspection and monitoring program. Failure to have a compliant SWPPP can result in significant fines from the Regional Water Quality Control Board.

What is an HMMP and HMBP?

A Hazardous Materials Management Plan (HMMP) and Hazardous Materials Business Plan (HMBP) are required under California Health and Safety Code Chapter 6.95 for facilities that handle hazardous materials above specified threshold quantities. The HMBP is submitted electronically through the California Environmental Reporting System (CERS) and must be updated annually. It includes an inventory of hazardous materials, site maps, emergency response and training procedures, and employee training documentation. Failure to file a current HMBP is a violation subject to significant penalties from the Certified Unified Program Agency (CUPA).

How often do safety plans need to be updated?

Most Cal/OSHA safety plans must be reviewed and updated whenever there is a change in operations, equipment, or personnel that affects the hazards addressed by the plan — and at minimum annually for many programs. The IIPP must be updated when new hazards are introduced or when the program is found to be inadequate. The ATD Exposure Control Plan must be reviewed annually. The Bloodborne Pathogens Exposure Control Plan must be reviewed annually and whenever procedures change. SWPPP and HASP must be updated when site conditions change. We offer annual review and update services to keep your programs current.

Every engagement is handled personally — nothing is farmed out. Michael Karl McNeil performs the site work, the sampling, the program writing and the citation defense himself; Zennin Sedacey-McNeil, LVN handles the occupational health and medical surveillance side. Work is never subcontracted, brokered to a partner firm, or assigned to a contract inspector hired locally for the assignment. See the service area page for what we do in each of the eleven states.

States We Serve

McNeil Safety Consulting provides this service to clients in the following states:

• California
• Nevada
• Arizona
• Oregon
• Washington
• Idaho
• Montana
• Utah
• Wyoming
• Colorado
• New Mexico
• North Dakota
• South Dakota

To confirm coverage for your site, call (626) 546-9384.