California Radiation Safety Program: Cabinet X-Ray & XRF
If you operate a cabinet x-ray machine or a benchtop XRF (x-ray fluorescence) analyzer at a California facility, you have a written program to build, a state registration to file, and operator training to document.
If you operate a cabinet x-ray machine or a benchtop XRF (x-ray fluorescence) analyzer at a California facility, you have a written program to build, a state registration to file, and operator training to document. We help facilities pull all three together, correct what is already in place, or respond to a notice from the California Department of Public Health.
If you are still figuring out whether any of this applies to you, you are in the right place too. The short version: any facility in California that uses a radiation-producing machine has to register the machine with the state, write a Radiation Protection Program, and train the people who run it. That is true whether the machine is brand new, was inherited from a prior tenant, or has been sitting in a QC lab for ten years without a paper trail.
This page covers what California requires for cabinet radiography and enclosed XRF, what a real radiation safety program contains, and how a CDMS engagement actually works.
What CDMS Handles (and What We Do Not)
We will be specific up front, because radiation work is one of the few areas where scope discipline matters more than range.
CDMS develops radiation safety programs and operator training for fully enclosed cabinet radiography machines only. That includes benchtop XRF (x-ray fluorescence) analyzers used for metals testing, alloy verification, R&D, and incoming-materials QC, plus cabinet x-ray units used for non-destructive testing of parts and components. The shared characteristic: the cabinet is interlocked so the x-ray tube cannot energize when the door is open.
We do not handle open x-ray machines, shielded x-ray rooms, field radiography, or sealed radioactive sources. Those programs require a health physicist on the engagement, and we do not staff one. If you describe your equipment to us and it falls outside the cabinet-only scope, we will tell you immediately and point you toward a specialist firm. We would rather lose the project than write a program we are not qualified to write.
This is not laser safety either. Laser safety is governed by a separate set of federal rules (Title 21 CFR) and is a different program.
Why Facilities Call Us
Most radiation calls come from one of three situations. If any of these describe you, this service applies:
You received a notice or compliance letter from CDPH
(California Department of Public Health, Radiologic Health Branch) about a cabinet x-ray or XRF machine on site. The notice usually identifies a missing registration, a missing written program, or undocumented operator training. You have a corrective deadline and need it cleared.
You just bought or installed a benchtop XRF or cabinet x-ray.
Sales rarely mentions the regulatory side. Now the machine is on the bench, operators want to use it, and someone in EHS or operations realized California treats it as a registered radiation source.
You are an existing CDMS client adding a radiation machine
to a facility we already support for hazardous materials, waste, or safety programs. Folding the radiation program into the existing relationship is straightforward.
You will also see this come up during a broader EHS gap assessment when the assessor catalogs equipment and notices an unregistered radiation source.
If your facility has any radiation-producing machine and you cannot point to a current CDPH registration, a written Radiation Protection Program, a designated Radiation Safety Officer, and recent operator training records, you have a gap. That is the working definition.
What California Requires
Radiation safety for cabinet x-ray and XRF in California is regulated by two agencies, governed by two main rule sets, and built around four facility obligations.
| Element | Detail |
|---|---|
| State regulator | California Department of Public Health, Radiologic Health Branch (CDPH RHB). The primary authority for radiation-producing machines in California. Cal/OSHA covers worker protection. |
| Federal layer | 10 CFR Part 20 (ALARA dose framework), incorporated by reference into California’s rules. California is an Agreement State, so CDPH RHB administers both radiation-machine registration and radioactive-material licensing. CDMS’s scope is limited to radiation-producing machines (cabinet x-ray / enclosed XRF), not radioactive materials. |
| Governing rules | California Code of Regulations, Title 17, Division 1, Chapter 5 (the §30000-series, “California Radiation Control Regulations”). |
| Facility obligation 1: Registration | Each radiation-producing machine must be registered with CDPH within 30 days of acquisition. You register through the CDPH RHB online portal. |
| Facility obligation 2: Written program | A written Radiation Protection Program covering policy, responsibilities, controlled areas, training, operating procedures, monitoring, QA, posting, inspections, and recordkeeping. |
| Facility obligation 3: Operator training | Machine-specific training (including the written and practical exams required by 17 CCR §30337(c) before independent use), plus program-defined refresher training for every employee who operates or works around the machine. Documented. |
| Facility obligation 4: Annual audit + posting | An internal annual audit of the program, plus posted notices including RH 2364 “Notice to Employees” near the machine. |
A program is not a single document. It is the combination of a written plan, a registered machine, trained operators, and an annual cycle that keeps all three current. If any one is missing, CDPH treats the facility as non-compliant.
What Goes Into a Written Radiation Protection Program
The plan template we work from has a 13-section spine. Each section is there because CDPH expects it or because operators need it to do their job safely. The deeper structural breakdown lives on our radiation protection program requirements page, but the short version is here.
Introduction and Company Profile.
Who you are, what facility this covers, what equipment is in scope.
Policy: ALARA.
Every California radiation program has to commit in writing to ALARA, “As Low As Reasonably Achievable.” It is the governing principle for dose reduction.
Program Responsibilities.
Who does what. This is where the Radiation Safety Officer role lives, with specific duties assigned (annual inventory, review of operating procedures, equipment-procurement review, training oversight).
Controlled Areas of Radiation.
Where the machine sits, what the access controls are, how the area is posted.
Training.
What operators get before they touch the machine, what they get annually, and how it is documented.
Operating and Safety Procedures.
The day-to-day rules for using the machine. For most cabinet units, the manufacturer’s operating manual is the starting point. If the manual does not include adequate safety procedures, we develop and post them.
Personnel Monitoring.
Whether dosimetry (badges) is required. For most cabinet machines under normal use, formal dosimetry is not required, but the program documents why and provides the framework if usage changes.
Quality Assurance.
Periodic checks: interlocks (door and shutter), shutter-open indicators, high-voltage key switch, standard-thickness QC measurements where applicable.
Posting.
RH 2364 “Notice to Employees” posted in the work area, plus any caution signage required by the machine type.
Inspections and Audits.
The annual internal audit and the process for documenting findings and corrections.
Regulations.
A reference set of the applicable California and federal sections so operators and managers can find the source rule when they need to.
Registration Forms.
Copies of the CDPH registration, the written RSO designation and delegation of authority, and any equipment correspondence with the state.
Facility Drawing.
A simple layout showing where the machine sits relative to other work areas.
When we deliver the program, you get the binder (or its digital equivalent), the operator training materials, the quizzes (written and practical), and the registration documentation in one package. The plan is built to your facility and your specific machine, not pulled off a shelf.
The Radiation Safety Officer (RSO)
Every California facility with a radiation-producing machine has to designate a Radiation Safety Officer. The RSO is the person CDPH corresponds with, the person who signs off on the annual audit, and the person responsible for keeping the program current. It is a defined role with defined duties, not just a title.
For most cabinet-radiography facilities, the RSO is an existing employee (a lab manager, an EHS lead, a QC supervisor) who takes on the role formally with our support. The role can be delegated, but the designation has to be documented in writing with a delegation of authority signed by management. We walk through the duties, prepare the designation paperwork, and make sure the RSO has the procedures and training they need. The full role explainer is on our Radiation Safety Officer (RSO) page.
CDPH Registration
California requires every radiation-producing machine to be registered with CDPH RHB. New machines must be registered within 30 days of acquisition. Existing machines that were never registered have to be registered now, and the lack of prior registration is itself a finding CDPH expects you to correct.
You file registration through the CDPH RHB online portal. The state needs the machine details (manufacturer, model, serial number, installation date), the facility information, the responsible officer, and the use category. For most cabinet x-ray and XRF units the registration itself is straightforward, but the documentation has to be exactly right and the supporting program has to be in place. We handle the filing alongside the program build, or as a separate line item if a current program already exists. Step-by-step detail is on our cabinet x-ray and XRF registration page.
Operator Training
Operator training is where most facilities are weakest, and it is where CDPH inspectors focus. California expects two layers:
Machine-specific training
for any employee who operates the unit. This covers the specific equipment: how it operates, the interlocks, the safety procedures, how to recognize a malfunction. For first-time programs, training includes a written exam (typically a 50-question machine-specific quiz with a defined pass threshold) and a practical exam (typically a 25-question hands-on demonstration).
Program-defined refresher training
for every operator and anyone who routinely works around the machine. CDMS programs include an annual radiation awareness session. It covers what radiation is, the biological effects, exposure limits, dose-reduction methods, dosimeter use where applicable, and the inspection and reporting provisions under the California Radiation Control Regulations (§§30254–30255). CDPH’s RPP guidance supports training as a program element; the cadence and format are set by the program, not prescribed by a specific regulation.
For repeat clients, the annual refresher is a much narrower engagement than the initial program build. Training records are part of the deliverable, kept with the program binder, and produced on demand during a CDPH inspection.
How a CDMS Engagement Works
The work follows a consistent shape, scaled to the number of unique machine types and the registration status.
- 1. Qualification. A short scoping call where we confirm the machine is in scope (fully enclosed cabinet), get the make, model, and serial, ask about the trigger (notice of violation, new install, internal review), and confirm CDPH registration status. If it is not a cabinet machine, we tell you on this call.
- 2. Site visit. We come to your facility. Our consultant walks the area where the machine is installed, reviews the operating environment, examines the existing operating manual and any safety procedures already in place, checks interlocks and posting, and meets the people who will operate the machine. The site visit is short for a single-machine, single-site engagement and longer when multiple unique machine types are involved.
- 3. Program development. We build the written Radiation Protection Program to your facility. Where the manufacturer’s manual provides adequate safety procedures, we incorporate it. Where it does not, we develop and document the procedures. We prepare the machine-specific written and practical quizzes.
- 4. CDPH registration. If the machine is not registered, we file. If registration is current, we verify it and incorporate the documentation into the program binder.
- 5. Training delivery. Initial machine-specific training plus radiation awareness, with attendance records and exam documentation. Annual refreshers can be scheduled into an ongoing relationship.
- 6. Annual audit and refresh. Once the program is in place, the annual cycle is much lighter. Many facilities fold this into our ongoing compliance management service so the annual audit, training refresh, and CDPH correspondence stay current without anyone having to remember to schedule them.
We do not commit to a specific number of days or weeks before we have seen your facility and confirmed scope. We will provide a fixed-price quote and a timeline after the scoping call.
What Happens If a Facility Skips the Program
CDPH RHB runs a routine inspection program for registered machines. Inspectors look for the written program, the operator training records, the posted notice, and the annual audit. A facility that has the machine but no program is the most common deficiency, and it is the easiest one for an inspector to document. The state issues notices of violation, requires written corrective actions on a defined timeline, and can suspend the registration for repeat or uncorrected findings. The follow-on costs (operational downtime, expedited consulting work, internal time to respond) almost always exceed what it would have cost to build the program correctly the first time.
The other risk is liability. Without a written program, documented training, and verified interlock checks, a facility has no defense if an operator is injured or an inspection turns up a more serious deficiency. The written program is the record that shows you took the obligation seriously.
How This Connects to Your Other Compliance Programs
A cabinet radiography program does not exist in isolation. The annual obligations (audit, training refresh, CDPH correspondence, posting checks) are exactly the kind of recurring work that fits inside an ongoing compliance schedule. Our bridge on folding radiation and BBP into ongoing compliance management covers how facilities typically structure the recurring side.
If radiation came up because a broader compliance review surfaced it, the next conversation is usually about what else the review found. The same gap assessment that catches an unregistered XRF often catches missing hazard communication, an outdated IIPP, or a Bloodborne Pathogen Exposure Control Plan that has not been reviewed since the first-aid team changed. These are separate programs with separate regulators, but they tend to surface together.
Frequently Asked Questions
Do I need a Radiation Protection Program if my XRF is “low energy” or “handheld”?
Yes, if it produces ionizing radiation it is regulated. California treats handheld XRF and cabinet XRF differently in some operational respects, but both require CDPH registration and a written program. CDMS develops programs for cabinet and benchtop enclosed units; handheld XRF involves additional considerations we will assess during qualification.
Our machine came with a safety manual. Is that the program?
The manufacturer’s operating manual is one input. It is not the full program. A Radiation Protection Program also covers facility-specific procedures, the RSO designation, training documentation, the annual audit, posting, recordkeeping, and CDPH registration. Where the manual covers operating safety procedures adequately, we incorporate it. Where it does not, we develop the missing pieces.
How long does CDPH registration take?
The CDPH RHB online portal processes registrations on the state’s schedule, which varies. The 30-day clock is on the facility to file, not on the state to approve. Filing promptly is what matters for compliance.
Do operators need dosimetry badges?
For most fully enclosed cabinet machines under normal use, formal personnel dosimetry is not required. The written program documents the determination and the framework, so if usage changes (more frequent operation, longer exposures, machine modifications), the dosimetry question can be revisited without rewriting the program.
Who can serve as our Radiation Safety Officer?
The RSO is typically an existing employee with operational responsibility for the area where the machine sits (an EHS manager, lab manager, QC supervisor). The role requires training and a written designation documenting the person’s authority and scope of responsibility. We help select the right person, prepare the designation, and equip them with the procedures and references they need.
Is this the same as CDMS’s other safety programs?
No. Radiation is regulated by CDPH and Cal/OSHA, not by your local CUPA (which may be a county environmental health department, fire department, or another local agency depending on jurisdiction). It runs on its own annual cycle and its own paperwork. We treat it as a distinct program even when it sits inside a broader compliance relationship.
Trusted throughout California
BSY started working with CDMS last year after our in-house EHS person departed the company. CDMS reviewed our existing operational permits as well as any additional Federal, State and Local regulations that could apply and helped us to create a comprehensive compliance calendar to track regulatory deadlines and submittal due dates. The CDMS team does an excellent job of tracking everything and can be relied upon to complete the forms accurately and assist with submittals, allowing me to focus on our business.
Speak with a CDMS EHS expert
Tell us about your facility and your deadline. You’ll get a clear read on what applies and a scoped plan to handle it.