Is Your IIPP Compliant With SB 198? The Implementable Standard
Most California facilities we walk into have a written IIPP somewhere. The question Cal/OSHA actually asks isn’t whether you have one. It’s whether the one you have is being implemented.
Most California facilities we walk into have a written IIPP somewhere. A binder on a shelf. A PDF on the network drive. A 250-page document handed off from a previous EHS manager. The question Cal/OSHA actually asks isn’t whether you have one. It’s whether the one you have is being implemented.
That difference is the whole point of SB 198. The statute and Title 8 CCR §3203 both use the same three-verb requirement: every California employer must establish, implement, and maintain an effective Injury and Illness Prevention Program. Establishing it gets you a document. Implementing and maintaining it is what makes the program compliant. For a wider look at the program and the eight required elements, see our injury and illness prevention program services for California employers.
This piece is about the second and third verbs: how to tell whether your IIPP is doing the work the regulation expects, or whether it’s a paper program waiting to fail an inspection.
What Cal/OSHA Means by “Effective”
§3203 doesn’t grade your IIPP on length or polish. It uses one word: effective. Cal/OSHA’s enforcement guidance treats the IIPP as a “living document” that has to reflect the actual operations of the facility, the actual hazards on the floor, and the actual people doing the work. An inspector who opens your binder is comparing what it says to what they see.
That comparison runs in both directions:
- If the document describes a process the facility no longer does, the IIPP is out of date.
- If the floor has a hazard the document doesn’t cover, the hazard assessment is incomplete.
- If the document names a person who left two years ago, the responsibility element is broken.
- If the training roster lists employees who are no longer there and omits the ones who are, the training program isn’t being maintained.
None of these are theoretical. They are the most common findings we see when we open an existing IIPP during a gap assessment. The binder looks complete. The implementation is not.
The Implementable Test: Seven Signs Your IIPP Is Paper-Only
When we review an existing program, we are running a version of the same check a Cal/OSHA inspector would run. Here is the seven-item self-assessment we walk facilities through. If you can’t answer “yes” with documentation in front of you, the element isn’t implementable in its current form.
Named responsibility is a current employee on site. §3203(a)(1) requires the program to identify the person (or persons) responsible for it; the best practice is a specific named individual and title rather than a bare job title. If that person has left, retired, or never set foot in this facility, the line is dead. A corporate VP three states away does not meaningfully own implementation.
The hazard assessment matches what is actually on the floor. New equipment, new chemicals, a new process line, a new job classification: every one of these triggers a re-assessment under §3203(a)(4). When the assessment dates are older than the equipment, the program has fallen behind.
Codes of safe practice exist for every job classification. Job-specific codes of safe practice are one of the most practical ways to meet §3203(a)(2)’s requirement for a system ensuring employees follow safe work practices. We routinely see facilities with twelve or fifteen job classifications and three generic codes copied out of a template. That’s a program that hasn’t been customized to the work, and it’s exactly the kind of gap an inspector probes.
Training records match payroll. Pull a current employee roster. For each employee, the training file should show IIPP training at hire, plus training for each new hazard, new substance, new process, or new assignment introduced since they started. Gaps between hire date and first training entry are a recurring citation source.
Inspections were actually performed, and findings were actually closed. Scheduled and unscheduled inspections under §3203(a)(4) leave a paper trail. So does hazard correction under §3203(a)(6). An inspection log with no findings is almost always wrong. A log with findings but no closure dates shows the correction system isn’t working.
Accident investigation forms were used after the last OSHA 300 entry. If a recordable incident is on the Form 300, there should be a matching investigation in the IIPP appendix. Inspectors compare the two directly.
Employees can describe the program in plain language. This is the test that surprises most facilities. Pull three people from the floor. Ask who they report a hazard to and what happens next. If they can’t answer, the communication element under §3203(a)(3) isn’t implemented, regardless of what the document says.
A program that passes all seven of these is implementable. A program that fails two or more is paper compliance, and a Cal/OSHA inspection will surface it.
What “Implementable” Looks Like in Practice
When we walk a facility and the IIPP is actually working, a few things are true at once.
The document is shorter than people expect. A workable IIPP for a mid-sized facility is rarely more than 60 to 100 pages including the appendix, because the appendix is built around the programs the facility actually needs (the respirator program, the lockout/tagout program, the hot work permit) rather than every section Cal/OSHA has ever published. We have walked into facilities holding 628-page federal-derived binders that nobody had read. That length is itself a failure: §3203(a)(7) requires training on the program, and a document nobody can read can’t be trained on.
The named responsible person is on site. The communication system is something the floor knows how to use. The hazard reporting form is posted, used, and processed. The codes of safe practice describe what the maintenance lead, the forklift operator, and the line worker actually do, not generic boilerplate.
And the program reflects this facility, not a template. Federal OSHA does not have an IIPP-equivalent requirement for general industry. Multi-state employers whose program was built from federal templates and then adapted for California almost always fail the implementable test. For a deeper look at that mismatch, see federal OSHA safety programs versus California IIPP requirements.
When Paper Compliance Becomes a Citation
The risk of running a paper IIPP isn’t only the citation itself. The harder problem is that the program isn’t doing what it was built for. When an employee is hurt and the investigation shows the hazard was present, the training wasn’t delivered, and the correction wasn’t documented, the IIPP’s failures shape the enforcement response, the workers’ compensation review, and the legal exposure.
Cal/OSHA inspectors are trained to test implementation. They ask for the IIPP, they pull training records, they walk the floor, and they compare what the document promises to what the operation actually does. The standard isn’t whether the binder exists. It’s whether the program is being run. For a closer look at how inspectors approach this, see what Cal/OSHA inspectors check during an IIPP review.
A good follow-up step, especially if a gap assessment or a recent inspection has already surfaced specific findings, is to address the underlying program rather than the line items. Patching the named-responsibility line without rebuilding the hazard assessment or refreshing the codes of safe practice tends to surface the same deficiencies in the next inspection cycle.
Trusted throughout California
BSY started working with CDMS last year after our in-house EHS person departed the company. CDMS reviewed our existing operational permits as well as any additional Federal, State and Local regulations that could apply and helped us to create a comprehensive compliance calendar to track regulatory deadlines and submittal due dates. The CDMS team does an excellent job of tracking everything and can be relied upon to complete the forms accurately and assist with submittals, allowing me to focus on our business.
Speak with a CDMS EHS expert
Tell us about your facility and your deadline. You’ll get a clear read on what applies and a scoped plan to handle it.