Public Access Triggers Coverage at Any Size

California Labor Code §6401.9 covers any employer with 10 or more employees on site at the same time, or any workplace accessible to the public, regardless of headcount. The second half of that test is the one retail and visitor-facing operators run into.

A five-person property management office with a walk-in lobby is covered. A three-person retail counter is covered. A ten-person warehouse with a will-call pickup window is covered. The trigger is whether a non-employee can walk in during business hours, not how many people are on the payroll. When we walk a facility for the first time, the public-access question is one of the first things we work through with the operations lead, because employers routinely under-call it. A back office with a vendor doorbell counts. A reception area where applicants drop off resumes counts.

If you operate multiple sites and some are public-facing while others are not, each site is evaluated on its own. For the full coverage map, see who is covered and exempt under SB 553.

Type 2 Violence Drives the Plan for Public-Facing Sites

SB 553 organizes workplace violence into four types. For public-facing operations, Type 2 violence is the dominant category and the one your plan has to address in real depth. Type 2 is committed by someone the business serves: a customer, a tenant, a client, a visitor, a patient. The perpetrator has a legitimate reason to be on the premises, and the violence happens at the point of contact.

This is the broadest category in the rule and the one most often underestimated on existing plans. We see Type 2 incidents in:

• Retail stores and restaurants, especially at the counter and during closing hours
• Property management offices managing tenant disputes
• Medical, dental, and behavioral health offices (outside the separate health care WVPP standard)
• Distribution warehouses that take customer pickups or returns
• Social service agencies and government counters
• Cannabis retail and any operation that handles cash with public traffic
• Transit, schools, and any setting with high-volume public contact

Type 1 (criminal intent, robbery, after-hours intrusion) also belongs in a retail plan, particularly for cash-handling or extended-hours operations. Type 3 (worker-on-worker) and Type 4 (personal relationship violence) apply to every facility regardless of public access. But Type 2 is the category that distinguishes a public-facing plan from one built for a closed industrial site, and it is where most of the site-specific work happens.

What a Public-Facing Plan Has to Address

The written plan and training for a public-facing facility have to cover, at minimum:

• De-escalation procedures for employees who interact with customers, tenants, or visitors. Generic “stay calm” language does not satisfy the rule. The training has to walk specific scenarios for the type of public contact your operation has.
• Customer-area design and physical controls. Counter height and depth, sight lines from the back to the public area, exit access for employees, the placement of panic alarms or duress signaling, lighting at entry and parking, and access control between public and employee-only space.
• Response procedures for an escalating customer, an intoxicated or agitated visitor, a refusal to leave, and a credible threat. The plan has to name who is called, when law enforcement is contacted, and how the incident is documented in the violent incident log.
• Opening, closing, and cash-handling protocols if applicable. Single-staff opening or closing, deposit drops, and after-hours customer interactions are common Type 1 exposure points.
• Coordination with security contractors and landlords for facilities that share a property or rely on outside security. SB 553 specifically requires coordination with outside employers whose workers share the workplace.
• Training for receptionists and front-line staff on visitor screening, handling someone asking for an employee by name (a Type 4 indicator), and when to summon backup.

The hazard assessment in the plan has to walk the actual public areas of your facility, not a generic floor plan. That is the section a Cal/OSHA inspector reads first.

Common Gaps We See on Retail and Public-Facing Plans

When we review an existing plan for a public-facing client, a short list of gaps comes up over and over:

• A generic Type 2 section that names the category but does not describe the actual customer-facing areas, hours, or risks at the site.
• A reporting channel that runs through the on-shift supervisor only. When the threat involves the supervisor or a customer-supervisor interaction, the channel does not work.
• No documented coordination with the landlord, security contractor, or shared-property neighbors. Multi-tenant retail and office buildings need this in writing.
• Training delivered as a single corporate video with no site walk and no facility-specific content. The rule asks for site-specificity.
• A violent incident log that nobody knows exists. Front-line employees have the right to view the log within 15 calendar days of a request, and that only works if the log is actually being maintained.

These are exactly the gaps that look fine on a corporate-level checklist and surface when Cal/OSHA pulls the plan for one specific location.

Build the Plan Around the Site, Not the Other Way Around

A public-facing SB 553 plan is a site document first and a corporate document second. Whether you are a single-location retailer working out the basics or a multi-site operator with a base plan that needs site-specific sections built out, the work is the same: walk the public areas, identify the Type 2 hazards, name the responsible persons, document the controls, and train the people who interact with the public on the specific scenarios at that location.