Multi-Location Businesses and SB 553: One Plan or Many?

SB 553 requires Workplace Violence Prevention Plans to be site-specific. For single-location businesses, this is straightforward. For businesses operating multiple California locations, the question gets more complicated: do you need a separate WVPP for every site?

The answer depends on how similar your locations are, how different their hazards are, and how you structure the documentation.

The Site-Specific Requirement

Labor Code Section 6401.9 requires that WVPPs address the specific hazards, conditions, and procedures at each worksite. A plan that describes one location but is applied to others without modification does not satisfy this requirement.

The elements that must be site-specific:

• Physical address and worksite description. Layout, entry points, parking areas, and building characteristics.
• Hours of operation. Different schedules create different risk windows.
• Designated responsible persons. Specific individuals at each location, not just a corporate contact.
• Hazard identification. Each location may face different hazards based on neighborhood, customer demographics, and building design.
• Existing security measures. Camera systems, alarms, access control, and lighting vary by site.
• Emergency response procedures. Exits, assembly points, nearest hospitals, and local emergency numbers differ.

When One Plan Can Cover Multiple Sites

A single WVPP can cover multiple locations when those locations are substantially similar. The conditions:

Identical operations. Locations perform the same work, serve the same customer type, and follow the same procedures. A chain of quick-service restaurants with a standardized model qualifies. A company running both a retail store and a warehouse does not.

Similar physical layouts. Locations share the same floor plan, entry configuration, and security infrastructure. Common for franchises and chain retailers built to a standard design.

Comparable risk profiles. Locations are in areas with similar crime patterns and have similar staffing levels. A high-crime urban location and a suburban shopping center may need separate treatment even if operations are identical.

If these conditions are met, a single WVPP with location-specific appendices is reasonable. The core plan describes standardized procedures. Each appendix contains site-specific details.

What Goes in Location-Specific Appendices

Each appendix must include:

• Physical address and worksite description
• Hours of operation for that location
• Names and titles of designated responsible persons on-site
• Location-specific hazards not covered by the general plan
• Security measures specific to that site
• Emergency response details (exit routes, assembly points, nearest hospital)
• Operational differences from the standard model

The appendix supplements the core plan with information an inspector needs to verify compliance at that specific location.

When Separate Plans Are Necessary

Separate plans are needed when locations differ materially:

Different types of work. A corporate office and a retail location face fundamentally different hazards. Controlled access versus public traffic, cash handling, extended hours. These require separate plans.

Significantly different risk environments. A location adjacent to a busy transit hub has a different risk profile than a quiet suburban office, even under the same company.

Different staffing models. A location staffed by a single employee during certain hours has different risk factors than one that always has multiple employees present. Solo work is a recognized hazard factor.

Different physical configurations. A ground-floor storefront with a glass facade has different security considerations than a second-floor office in a controlled-access building.

Documentation Per Location

Regardless of plan structure, certain documentation must be maintained for each location:

Training records. Each employee trains on the plan for their worksite. Training for Location A does not satisfy the requirement for Location B if the plans differ.

Incident logs. Each location maintains its own violent incident log. A centralized database works operationally, but records must be retrievable by location.

Hazard assessments. Each location must have documented hazard identification. Inspectors expect evidence that the specific hazards at their site have been assessed.

Plan accessibility. The applicable plan must be available to employees at each location, whether physical copies, digital access, or both.

How Cynserus Handles Multi-Site

Cynserus Pro tier is built for multi-location businesses. The platform generates a separate, site-specific WVPP for each location based on individual intake responses. Each plan reflects the unique address, layout, staffing, hazards, and security measures of that site.

For standardized operations, the intake process captures common elements once, then focuses on site-specific differences for each additional location. Each location gets its own incident reporting access, incident log, and designated personnel. The admin dashboard provides a centralized view across all locations.

Multi-location compliance is about ensuring every site has documentation that reflects its specific conditions. The structure is flexible. The specificity requirement is not.

For businesses with multiple California locations, see Cynserus Pro pricing or our enterprise solutions page.