The most common thing I hear about California Labor Code section 6401.9, the statute most people know as SB 553, is that it applies to employers with ten or more employees. I have heard it from producers, from venue operators, from a security director at a company large enough to know better, and from two people who had already decided they were exempt on that basis. It is not what the statute says. The misreading is doing real damage, because the businesses most confident they are outside the law are frequently the ones squarely inside it.

What the exemption actually requires.

There is a small-workplace exemption. It is narrow, and it is conjunctive, which is the part that gets lost. To fall inside it you need all three of the following at once:

Fewer than ten employees present at the location at any given time. Not on payroll, not on average, not full-time equivalents. Present.

The workplace is not open to the public.

And the employer is in compliance with the Injury and Illness Prevention Program requirements of title 8, section 3203.

Miss any one and the exemption does not apply. Most people who quote the headcount have never read the other two conditions, and the second one is where productions and events fall out immediately.

"The exemption is not a headcount. It is three conditions that must all be true, and the one about the public is the one that catches events."

A production is open to the public more often than it thinks.

A closed set feels private. It is fenced, it is badged, there is a guard on the gate. But the question is not whether the site feels private, it is whether members of the public can physically enter. Vendors deliver. Couriers arrive. Day players and background come and go on paperwork that was signed that morning. A location shoot on a public street is, by definition, in public. A venue in load-in has trades walking through it who have never been vetted by anyone on your call sheet.

The practical consequence is that a public-facing event or production is covered regardless of headcount. A ten-person crew on a closed stage might be exempt. The same ten people shooting on a sidewalk are not. This is not a technicality anyone should be relieved to discover late.

What the law actually asks for.

Three things, and they are not paperwork exercises. A written Workplace Violence Prevention Plan specific to your operation, not a section bolted onto a generic safety manual. Training delivered to every employee on that plan, interactive enough that people can ask questions and get answers from somebody who actually knows the plan. And a Violent Incident Log, kept separately, recording every incident whether or not anyone was hurt, retained for five years.

The plan has to identify workplace violence hazards, evaluate them, correct them in a timely way, and set out how the organization responds when a threat or an incident occurs. Read that sentence again as an operator rather than a compliance officer. Identify the hazards, evaluate, correct, respond. That is a site assessment and a response plan. It is the work protective operations already does, written in regulatory language.

Who is the employer on a production.

This is where it gets uncomfortable, and where I would want a lawyer rather than me. A production is a multi-employer worksite. The production company, the venue, the staffing agency, the security contractor and half a dozen vendors each employ people standing on the same ground. Each of those employers carries its own duty. The plan has to address how they coordinate, which means somebody has to own the coordination, and on most productions nobody has been asked to.

If you are the production and you assume the venue has it covered, and the venue assumes the security contractor has it covered, the result is not shared compliance. It is three organizations each individually exposed.

The clock already ran.

The requirement has been enforceable since July 1, 2024. There is no grace period left, no phase-in for smaller employers, and no meaningful defense in having been unaware. What is still ahead is the permanent standard: the Occupational Safety and Health Standards Board is required to adopt a general industry standard by December 31, 2026, and it is expected to be more prescriptive than the statute. Plans written narrowly to the current text will need amendment.

That timing is the actual argument for doing this properly now rather than buying a template. A plan built from a real site assessment survives the new standard with an amendment. A plan downloaded to satisfy a checkbox gets rewritten from nothing.

The uncomfortable part.

Nobody can certify you compliant with Cal/OSHA. Not a consultant, not a software vendor, not a law firm, and not us. Anyone selling a compliance certificate is selling a document with no standing in an inspection. What can be built is a plan that matches your operation, training your people actually sat through with a record of it, and a file that survives contact with an inspector. That is the whole of what exists.

If you run events or productions in California and you concluded you were exempt on a headcount, go back and check the other two conditions. Most of the businesses that believe they qualify do not.

This article is general information about a California statute and is not legal advice. It does not create an attorney-client or advisory relationship. Whether the exemption applies to a specific operation is a question for your own counsel.