When Cal/OSHA Shows Up: What Inspectors Look for in Your IIPP
A Cal/OSHA inspector at your front desk is not the time to find out your IIPP is missing, outdated, or written for federal OSHA. By the time the inspector signs in, the document either meets California IIPP requirements or it doesn’t.
A Cal/OSHA inspector at your front desk is not the time to find out your IIPP is missing, outdated, or written for federal OSHA. By the time the inspector signs in, the document either meets California IIPP requirements or it doesn’t.
This piece walks through what a Cal/OSHA inspector actually checks when they arrive, where most facilities come up short, and what you can do before that visit happens. For the broader picture of the program itself, see our overview of California IIPP requirements and what they cover.
The IIPP Is the First Thing They Ask For
Cal/OSHA inspections start with a records request. The Injury and Illness Prevention Program under Title 8 CCR §3203 sits at the top of that list, along with the OSHA 300 log and any program-specific records (respirator, lockout/tagout, hearing conservation, hot work) the facility is required to maintain.
When we walk a facility ahead of an expected visit, the first question we ask is simple: where is the IIPP, and who can put their hands on it in under five minutes? If the document takes longer than that to find, or if what’s on the shelf doesn’t match what’s actually happening on the floor, the inspection has already started badly.
Two things the inspector confirms within the first hour:
A written IIPP exists.
It identifies who is responsible for the program, ideally a specific person and title rather than a bare job title.
That second piece catches more facilities than people expect. §3203(a)(1) requires the program to identify the person (or persons) with authority and responsibility for implementing it. The regulation allows “person or persons,” but a named individual leaves no ambiguity for an inspector, where “the Plant Manager” with no name attached invites follow-up questions.
The Implementable Test
A common framing we use with clients comes from an EHS director: if Cal/OSHA comes in, they will check your IIPP and confirm you are implementing what you said you would.
That is the test. A binder on a shelf is not compliance. Inspectors compare the document to the practice. If the IIPP says monthly safety meetings happen, they ask to see the sign-in sheets. If it lists a hazard inspection schedule, they ask for the most recent inspection report. If it identifies training topics, they pull employees aside and ask what training they received and when.
We have seen IIPPs that look complete on paper fail this test in the first 20 minutes. The inspector does not argue with the document. They walk to the floor, ask a forklift operator about their last training, and compare the answer to the training log.
What Cal/OSHA Inspectors Check, Element by Element
§3203 sets eight required elements under subsection (a), plus recordkeeping under subsection (b). Inspectors check each one against actual practice. This is the implementable test in detail:
| IIPP Element | What the Inspector Asks For |
|---|---|
| Responsibility | The named person, their role, and how their responsibility is communicated to employees. |
| Compliance | How the company gets employees to follow safety rules (recognition, discipline, or both) and documentation that the system is used. |
| Communication | How employees can raise safety concerns without fear of retaliation. Sign-in sheets from safety meetings. Anonymous reporting mechanisms. |
| Hazard Assessment | The inspection schedule and recent inspection reports. Documented hazard assessments for any new operations, equipment, or processes. |
| Accident Investigation | The investigation file for any injury logged on the OSHA 300. A real root cause, not “employee was not careful.” |
| Hazard Correction | Evidence that hazards identified in inspections or investigations were actually fixed, with dates and corrective actions documented. |
| Training | Training records by employee for every required topic. New-hire training, job-change training, training after incidents, and topic-specific training (HazCom, respirator, LOTO, forklift, and any others applicable to the facility). |
| Employee Access | That employees and their designated representatives can examine and receive a copy of the written Program, and that the IIPP states how. |
| Recordkeeping (§3203(b)) | Training logs. Inspection logs. Accident investigation files. The IIPP itself, current and dated. For employers required to keep them, the OSHA Form 300, 300A, and 301 logs. |
For a deeper breakdown of each one, see the eight required elements an inspector checks.
Operate in more than one state? Federal OSHA vs. California IIPP for multi-state employers →
Have indoor heat exposure too? California’s indoor heat illness standard (§3396) →
The Records Inspectors Pull First
A few specific records get pulled in nearly every inspection. If these are missing, incomplete, or inconsistent with the IIPP, the inspector treats it as evidence of a paper-only program:
- OSHA Form 300 (current year and three prior years): log of work-related injuries and illnesses.
- OSHA Form 300A: annual summary, posted in a visible location from February 1 to April 30 each year.
- OSHA Form 301: individual incident reports.
- Training documentation: by employee, by topic, by date, with the trainer’s name.
- Codes of Safe Practice: job-specific safe work practices for each job classification. One of the most practical ways to meet §3203(a)(2)’s requirement for a system getting employees to follow safe work practices, not generic boilerplate.
- Hazard assessment records: including the PPE hazard assessment certification under Title 8 §3380.
The most common gap we see is between Form 300 entries and accident investigation files. An injury made the log, but no investigation was documented. That is a §3203(a)(5) finding waiting to be cited.
What Gets Cited Most Often
After working with California facilities post-inspection, the most common IIPP-related citations cluster in a few areas:
- The IIPP exists but is federal OSHA, not California. This is almost universal among multi-state employers and acquired facilities.
- The IIPP exists but has no named responsible person, or the named person no longer works at the facility.
- Training records are missing for topics the IIPP says are covered.
- Codes of Safe Practice are generic or missing for at least one job classification.
- Hazard assessments are outdated or were never performed for a new piece of equipment or process.
- The heat illness prevention section is absent or generic, despite the facility being subject to §3395 (outdoor) or §3396 (indoor, effective 7/23/2024).
Cal/OSHA does not need to find a serious injury to issue a citation on any of the above. The program documentation itself is the citation target.
Before the Inspector Arrives
The work that matters happens before the visit, not during it. A practical pre-inspection review looks like this:
Confirm the IIPP is California-specific and dated within the last 12 months.
Confirm the named responsible person still works at the facility (and that their role description still matches the program).
If your facility is required to keep OSHA 300 logs, pull the last three years and match each recordable injury to an investigation file.
Pull training records by employee. Identify gaps before the inspector does.
Walk the floor with the IIPP in hand. If the program says it happens, confirm it happens.
Check that any heat illness, workplace violence (WVPP), and program-specific appendices reflect actual operations, not template defaults.
We typically run this review during a gap assessment. The output is a list of findings the facility can address before they become regulator findings.
Trusted throughout California
BSY started working with CDMS last year after our in-house EHS person departed the company. CDMS reviewed our existing operational permits as well as any additional Federal, State and Local regulations that could apply and helped us to create a comprehensive compliance calendar to track regulatory deadlines and submittal due dates. The CDMS team does an excellent job of tracking everything and can be relied upon to complete the forms accurately and assist with submittals, allowing me to focus on our business.
Speak with a CDMS EHS expert
Tell us about your facility and your deadline. You’ll get a clear read on what applies and a scoped plan to handle it.