California Active Shooter Rules for Employers and Schools

California active shooter rules for employers and schools come from two main sources: Senate Bill 553, which since July 1, 2024 has required nearly every California employer to keep a written Workplace Violence Prevention Plan, and the Education Code, which requires every K–12 school to build tactical response procedures for armed intruders into its comprehensive school safety plan. Both come with training obligations, recordkeeping duties, and real financial penalties for skipping them.

What SB 553 Requires of California Employers

SB 553 added Labor Code Section 6401.9. The statute requires employers to establish, implement, and maintain a written Workplace Violence Prevention Plan that is available to employees at all times and addresses hazards specific to each work area.¹

“Workplace violence” is defined broadly. It covers any act or threat of violence at a place of employment, from four sources: someone with no connection to the business, customers or clients, current or former employees, and someone with a personal relationship with an employee.¹ An active shooter scenario sits inside that definition.

The written plan has to name the people responsible for implementation, either by name or job title. It has to describe how employees will be involved in developing the plan, how you will coordinate with other employers who share your worksite, how emergencies will be handled, how incidents will be reported without retaliation, and how incidents will be investigated afterward.²

Alongside the written document, employers must keep a violent incident log recording details of every workplace violence event. Logs have to be retained for at least five years and produced to employees, their representatives, or Cal/OSHA within 15 calendar days of a request, at no cost.²

Who Is Exempt

Not every employer is covered. SB 553 exempts healthcare facilities already regulated under separate Cal/OSHA workplace violence rules, Department of Corrections and Rehabilitation facilities, and law enforcement agencies operating under POST standards. Employees who telework from a location of their own choosing that the employer does not control are outside the law. So are workplaces with fewer than ten employees that are not open to the public, provided they already comply with California’s Injury and Illness Prevention Program requirements.¹ Even in an exempt category, Cal/OSHA can still order compliance by special order if a workplace presents elevated risks.

Training Employees Must Receive

A plan in a drawer is not compliance. SB 553 requires initial training for all employees when the plan is first established, annual refresher training after that, and additional focused training whenever a new hazard is identified or the plan changes.³

The training must cover how employees can get a copy of the plan, how to report incidents without retaliation, job-specific hazards and corrective measures, the purpose of the violent incident log, and an interactive session with someone knowledgeable about the plan. That last piece matters. Handing out a pamphlet does not satisfy the requirement. Employees have to be able to ask questions and get real answers.³

What California Schools Must Include in a Safety Plan

Every school district and county office of education in California has to develop a comprehensive school safety plan for each K–12 campus. The schoolsite council writes the plan, consulting with local law enforcement, fire, and other first responders. The finished plan and any updates must be shared with those agencies.⁴

Under Education Code Section 32282, the plan must include procedures for tactical responses to criminal incidents, including situations involving individuals with guns on campus. Those procedures have to be tailored to the specific school and its community.⁵ Active shooter planning is not optional supplemental content. It is a required part of the safety plan.

Smaller districts, those with fewer than 2,501 units of average daily attendance, can develop one districtwide plan instead of separate plans for every school. Districts may also decide, in consultation with law enforcement, to have administrators rather than the schoolsite council draft the tactical response portions, and those portions can be kept confidential.⁴

Rules for Active Shooter Drills in Schools

Nothing in California law requires a school to run active shooter drills. But if a school chooses to run one, AB 1858 amended Education Code Section 32282 to impose specific limits on how the drill can be conducted.

Drills cannot include theatrical makeup simulating blood or wounds, anyone acting as the shooter, anyone acting as a victim, or instructions telling students to physically attack or swarm an assailant.
Real weapons, gunfire blanks, and explosions are prohibited.
Drill content and terminology must be age-appropriate and developmentally appropriate, and it must be developed with the involvement of school-based mental health professionals.
Parents, teachers, administrators, and school personnel must be notified in advance, including the expected duration of the drill.
Parents can opt their children out.
Announcements must be made immediately before the drill begins and immediately after it ends.
Parents receive a follow-up notice afterward with contact information for community resources such as mental health counseling and gun violence reduction organizations.

These are legal requirements, not best practices.⁶ A school that runs a realistic simulation with a role-played shooter, or that trains children to swarm an attacker as part of a drill, is out of compliance regardless of intent.

Penalties for Non-Compliance

Cal/OSHA Penalties for Employers

Cal/OSHA enforces SB 553, and the fines are substantial. As of 2025, serious violations carry a maximum penalty of $25,000 per violation. Willful or repeat violations can reach $162,851, with a minimum of $11,632 for willful offenses. These figures are adjusted annually for inflation. An employer with no written plan, no training records, and no incident log is exposed on multiple fronts, and each deficiency can be cited separately.

Criminal penalties exist for the most serious failures. Under Labor Code Section 6425, an employer who willfully violates a safety standard and causes an employee’s death or permanent impairment faces up to one year in county jail, a fine of up to $100,000, or both. For corporations, the maximum fine is $1,500,000. A repeat conviction within seven years escalates to state prison and corporate fines of up to $2,500,000.⁷

The general duty clause is a separate exposure. Under both federal OSHA and California law, employers have to provide a workplace free from recognized hazards likely to cause death or serious physical harm.⁸ Active shooter incidents have been recognized as a workplace hazard. Even before SB 553 took effect, Cal/OSHA could cite employers under this clause for failing to address foreseeable violence risks. SB 553 made the requirements explicit.

Consequences for Schools

The penalty structure for schools is less direct. California requires comprehensive school safety plans, but the statutes do not specify a mechanism for cutting state funding to a school that fails to comply. What does exist is the state’s general enforcement authority over mandated programs and the practical fact that a school without an adequate safety plan faces severe civil liability if an incident occurs. AB 1858 requires the state to reimburse schools for costs associated with implementing its new drill rules, treating them as funded mandates rather than conditions attached to existing funding.⁶

Gun Violence Restraining Orders as a Prevention Tool

Preparedness is not only about response. California’s Gun Violence Restraining Order is a civil court order that temporarily suspends a person’s access to firearms, ammunition, magazines, and body armor when there is evidence they pose a significant danger of causing injury. For employers running threat assessments and schools evaluating warning signs, it is a legal tool worth knowing.

Law enforcement officers, family members, and other eligible petitioners can file for a GVRO in Superior Court. The legal standard depends on urgency: emergency orders require “reasonable cause,” temporary orders require “substantial likelihood,” and longer-term orders after a hearing require “clear and convincing evidence.” Unlike other restraining orders, a GVRO does not name protected parties and does not require the subject to stay away from specific people or places. It restricts dangerous firearm access only.⁹

When a co-worker makes credible threats or a student’s behavior raises concerns, knowing this mechanism exists, and knowing how to involve law enforcement in petitioning for one, gives employers and schools something they can actually do before an incident begins.

1
California Legislative Information. California Labor Code 6401.9
2
California Department of Industrial Relations. Cal/OSHA Workplace Violence Prevention for General Industry
3
California Department of Industrial Relations. Workplace Violence Prevention in General Industry – Employer Fact Sheet
4
California Legislative Information. California Education Code EDC 32281
5
California Legislative Information. California Education Code EDC 32282
6
California Legislative Information. California AB-1858 Comprehensive School Safety Plans – Active Shooters – Armed Assailants – Drills
7
California Legislative Information. California Labor Code LAB 6425
8
Occupational Safety and Health Administration. OSH Act of 1970 – Section 5 Duties
9
California Attorney General. Gun Violence Restraining Orders – A Practical Implementation Guide