Cal/OSHA Recordkeeping: Managing Violent Incident Logs, Retention, and Worker Privacy
Detailed recordkeeping rules under California Labor Code section 6401.9 require five-year log retention and strictly controlled employee access rights.
Editorial hold — human review pending.
Country: United States. Research snapshot: 2026-10-20. Source / development date: 2024-07-01.
Unresolved verification flags
California-specific requirements, not a nationwide US mandate. Verify exemptions, sector coverage, current Labor Code requirements and any newly adopted implementing standard.
Resolve these limitations and the article-specific legal checklist before approval. This draft is educational information, not legal advice.
United States. Development date: 2024-07-01. Research snapshot: 20 October 2026.
Mandated Recordkeeping Infrastructure
Following the enactment of California Senate Bill 553, California Labor Code section 6401.9 entered into effect on July 1, 2024, setting rigorous new workplace safety recording requirements across general industry employers [source: launch-source-14]. A primary compliance pillar of the law is the creation and maintenance of a dedicated Violent Incident Log. The statute mandates that whenever an act of workplace violence occurs—defined as any physical assault or threat of violence involving physical force, weapons, or objects used as weapons that induces physical injury, psychological trauma, or stress—employers must document specific required information about the event into the log [source: launch-source-14].
Log Contents, Retention Periods, and Parallel Obligations
Labor Code section 6401.9 establishes precise record-retention timeframes that human resources and safety divisions must maintain: - Violent Incident Logs: Must be retained for a minimum of five years [source: launch-source-14]. - Incident Investigation Records: Must be preserved for a minimum of five years [source: launch-source-14]. - Hazard Identification, Evaluation, and Correction Records: Must be retained for a minimum of five years [source: launch-source-14]. - Training Records: Must be retained for a minimum duration of one year [source: launch-source-14].
These obligations function in parallel with longstanding reporting duties under title 8 of the California Code of Regulations. For instance, employers must record work-related injuries on Cal/OSHA Form 300 and retain those logs for five years, complete Form 5020 (Employer’s Report of Occupational Injury or Illness) for incidents causing lost work time or requiring medical care beyond first aid, and immediately report serious injuries, illnesses, or deaths to Cal/OSHA under title 8, section 342(a) [source: launch-source-14]. In addition, employers must provide injured employees with notice of workers' compensation eligibility within one working day of a workplace violence incident.
Access Rights, Transparency, and Privacy Boundaries
Cal/OSHA sets explicit boundaries regarding who can inspect workplace safety documentation. Under state rules, all records of hazard identification, evaluation, and correction, alongside training files and violent incident logs, must be made available to employees and their authorized employee representatives upon request [source: launch-source-14]. Such access must be granted without cost, permitting examination and copying within 15 calendar days of receiving the request. Furthermore, all records—including incident investigation files—must be provided to Cal/OSHA inspectors upon regulatory request [source: launch-source-14].
Balancing statutory transparency against personal privacy requires careful administrative boundaries. The law requires recording violent events while ensuring records remain legally compliant. Because log entries involve sensitive incidents—such as Type 3 co-worker disputes or Type 4 domestic violence intrusions—employers must structure logs accurately to ensure disclosure to employees within the 15-day window remains legally permissible under state guidelines without compromising sensitive investigation files.
Practical Governance Recommendations
To ensure privacy compliance and operational efficiency, executive leadership should formulate clear administrative workflows. As a governance recommendation, organizations may establish centralized, access-controlled digital repositories for the Violent Incident Log, separating factual log entries from preliminary, confidential investigative files. In a hypothetical scenario, an enterprise receiving a record request from a union representative might use a standardized disclosure intake form to track the 15-calendar-day compliance timeline, ensuring the requested logs are delivered accurately and without administrative charge. These internal procedures represent prudent management practices, not statutory rules.
Legal review required
This article provides general informational commentary and does not provide formal legal certification. Workplace legal advisors must review corporate recordkeeping policies before publication. The legal verification checklist must address: 1. The current legal status and specific recordkeeping requirements of California Labor Code section 6401.9 and Cal/OSHA enforcement instructions. 2. Strict separation of violent incident logs accessible to workers within 15 calendar days from internal investigation records subject to agency-only review. 3. Compliance with Title 8 California Code of Regulations section 342 reporting deadlines for serious violence-related injuries. Corporate counsel must resolve any uncertainty concerning the interaction between public disclosure mandates and employee privacy rights before publishing internal policies.