SB 553 for Salons and Spas: The One-on-One Risk Most Owners Miss

Salons and spas present a workplace violence risk profile that most business owners do not associate with their industry. There are no cash registers being robbed at gunpoint. There are no late-night shifts in empty buildings. But the defining characteristic of salon and spa work, one-on-one service in a private or semi-private setting, creates exposure to workplace violence types that many WVPPs fail to address entirely.

Cal/OSHA does not exempt low-profile industries. If you have employees in California, you need a WVPP. And if your employees spend time alone with clients behind closed doors, your plan needs to address that specifically.

Type 2 Violence: The Client in the Room

Type 2 workplace violence involves a person who has a legitimate relationship with the business. In salons and spas, this is the client. The service model, where a single provider works with a single client in a treatment room or styling chair, creates conditions that elevate risk when a client becomes aggressive or inappropriate.

Scenarios Cal/OSHA expects your WVPP to address:

• Inappropriate physical contact during services. Massage therapists, estheticians, and waxing professionals work in close physical proximity. Your plan must describe what happens when a client crosses a boundary.
• Verbal aggression over service outcomes. A client dissatisfied with a result who becomes threatening or abusive.
• Clients under the influence. Individuals who arrive intoxicated and become unpredictable during the appointment.
• Refusal to leave. A client who will not vacate the premises after being asked.

A plan that describes customer interactions generically without addressing the one-on-one dynamic is not site-specific.

Type 4 Violence: Domestic Violence Spillover

This is the risk most salon owners miss entirely. Type 4 workplace violence involves someone who has a personal relationship with an employee. Domestic violence spillover into the workplace is a recognized risk, and salons are particularly vulnerable.

• Predictable schedules. Stylists often work the same days and hours every week. A violent partner knows exactly where they are.
• Public-facing location. Walk-in access means a perpetrator can enter without screening.
• Small staff. Many salons operate with 2 to 5 employees. There is no security desk or access control.
• Publicly listed names. Many salons list their stylists by name on websites and social media, making it easy for a stalker to confirm an employee's workplace.

Your WVPP must include a protocol for responding to domestic violence situations at your worksite: who the employee notifies, how the salon responds to a threatening individual, and whether schedule adjustments are available as a protective measure.

The Client Behavior Policy and Right to Refuse Service

Every salon and spa WVPP should reference a written client behavior policy that states:

• What behavior is unacceptable. Inappropriate touching, sexual comments, threats, verbal abuse, arriving under the influence.
• The right to terminate the appointment. Any provider can stop a service at any time if they feel unsafe.
• The right to refuse future service. The salon will decline future bookings with clients who have violated the policy.
• Documentation requirements. Incidents are logged, even if they do not result in physical harm.

Cal/OSHA expects to see this referenced in your WVPP. Inspectors will ask employees whether they know they can stop a service.

The Code Word System

A code word system is a practical safety control that Cal/OSHA considers a best practice for one-on-one service businesses. The system works simply:

1. The team selects a word or phrase that sounds natural in a salon context.
2. If an employee uses the code word when speaking to a colleague or the front desk, it signals they need immediate help.
3. The receiving employee initiates a pre-determined response: entering the room, calling management, or calling 911.

Your WVPP should describe whether a code word system is in place and what the response protocol is. A code word that staff learned once during onboarding and have since forgotten is not a functioning control.

Private Room Protocols

If your business has treatment rooms or any service area not visible to other staff, your WVPP must describe protections:

• Room design. Whether doors have locks (and who controls them), whether there is visibility from common areas.
• Check-in intervals. Whether another staff member checks in during long appointments.
• Panic buttons or alert systems. Whether providers can summon help without leaving the room.
• Booking protocols. Whether new clients are scheduled during busier hours when more staff are present.

What to Do Next

If your salon or spa has a WVPP from a generic template, it almost certainly does not address private room protocols, domestic violence spillover, code word systems, or client behavior policies. These are the elements that make a plan site-specific to your industry.

Cynserus generates WVPPs built for salons and spas that address Type 2 and Type 4 violence and incorporate your specific service model. The intake process takes about 10 minutes.