Franchise Workplace Violence Prevention Compliance: What California and New York Already Require

When was the last time anyone at your franchise system asked a shift supervisor how to recognize a customer who is about to turn violent, and what that supervisor is supposed to do about it? For most multi-unit operators, the honest answer is never, because the employee handbook's safety section was written for slip-and-fall claims and theft, not for an escalating person at the counter. California and New York have both decided that gap is no longer optional to close, and the laws they passed apply to franchise locations the same way they apply to a corporate-owned store.

Franchise workplace violence prevention compliance used to be a healthcare and warehouse problem. As of mid-2024, it is a retail and restaurant problem with specific paperwork, specific training content, and a specific log that regulators can ask to see.

What a franchise workplace violence prevention plan actually has to contain

California's SB 553 took effect July 1, 2024, and it reaches virtually every employer in the state, including worksites with fewer than ten employees once the public can walk in. The law requires a written Workplace Violence Prevention Plan that names the hazards specific to each location (a drive-thru window at midnight is a different hazard profile than a daytime retail counter), involves employees in building it, and gets reviewed annually, after any deficiency surfaces, and after any violent incident.

The plan alone doesn't satisfy the law. Cal/OSHA also requires a violent incident log, a running record of every incident, the response taken, and what the investigation found. Franchise systems that treat this as a one-time PDF upload to a compliance folder are missing the part of the statute that actually gets enforced: the ongoing documentation trail, not the policy document itself.

The number behind why two states moved first

OSHA estimates workplace violence costs U.S. employers roughly $56 billion a year, a figure that spans lost productivity, medical costs, legal exposure, and turnover from employees who quit after an incident rather than go through it again. Retail doesn't lead on injury volume, but it leads on severity: the trade accounts for close to a quarter of all workplace homicides nationally, driven by a combination of cash handling, late-hour solo shifts, and storefronts with open public access. A franchise location running a single overnight clerk is sitting squarely inside that risk profile, whether the brand is a sandwich shop or a convenience store.

Legislators in Sacramento and Albany read those numbers and concluded that a voluntary safety culture wasn't closing the gap fast enough. The statutes that followed are not symbolic. They carry inspection authority, documentation requirements, and in New York's case, hardware mandates.

New York's version adds requirements California didn't

New York's Retail Worker Safety Act took effect June 2, 2025, for any retail employer with ten or more employees. The policy itself has to spell out the specific risk factors present at that workplace, the prevention methods in place, and the legal remedies available to an employee who experiences violence on the job, delivered in writing at hiring and annually after that, in each employee's primary language.

Training obligations scale with headcount. Employers with ten to forty-nine retail employees retrain every two years; fifty or more retrain annually. The sharpest requirement lands on larger operators: retail employers with 500 or more employees statewide have to install silent response buttons at every location and train staff on using them, with that mandate taking effect January 1, 2027. A ten-unit regional franchisee and a 600-location national franchisor are reading two very different compliance timelines off the same statute, and most multi-unit operators haven't mapped which bracket they actually fall into.

Why a franchisor's template policy doesn't satisfy either law

Both statutes require the plan to reflect the hazards of the specific location, not the hazards of the brand in general. A franchisor handing every franchisee the same two-page PDF and calling it done fails the customization requirement in both states, because a strip-mall location with a single rear exit has a different hazard profile than a free-standing building with a drive-thru and a loading dock, and the statute expects the plan to say so.

This is the same structural problem franchise systems keep running into with compliance generally: a policy that lives at headquarters and a liability that lives at the unit level don't automatically line up. The franchisor can supply a template and a training module. The franchisee is the one who has to customize both to an actual floor plan and actual shift patterns, factor in the local crime rate, and keep the result current as staff turns over.

The states quietly lining up behind California and New York

Colorado and Massachusetts both floated similar workplace violence prevention bills this year and watched them fail to pass, which is not the same as the issue going away. Oregon and Washington have a well-documented habit of adopting California's labor and safety rules within a legislative cycle or two of Sacramento acting first, and both states are already watching SB 553 closely. Illinois, New Jersey, and Washington have separately passed panic-button mandates for hotel workers, a narrower precedent showing state legislatures are willing to require hardware once a workplace violence bill clears committee, not just a policy binder.

A franchise system operating in six or eight states right now is one legislative session away from needing a third version of this plan, and the operators who build a flexible template now will spend a fraction of what the ones who wait will spend rebuilding from scratch under a deadline.

Building the plan and the log before an inspection forces it

Start with a location-by-location hazard assessment rather than a brand-wide one: note operating hours, cash-handling volume, exit count, and whether staff ever work alone. Draft the plan with input from the people actually working those shifts, since both statutes require employee involvement and an auditor will ask for evidence of it. Build the violent incident log as a standing form in whatever system already tracks safety incidents, not a separate spreadsheet nobody remembers to open, and assign someone at each location the job of logging every incident within days, not at quarter's end.

Revscale's franchise operators are increasingly asking for this kind of location-level compliance tracking to live in the same system as their other operational data, rather than as a standalone binder that only gets opened when a lawyer calls. Whichever system holds it, the plan needs the same thing the incident log needs: someone responsible for keeping it current, and a way to prove, in writing, that it actually changed after the last incident rather than after the last audit.

Franchise workplace violence prevention compliance is no longer a question of whether to have a plan. It's a question of whether the plan you have would survive a Cal/OSHA or New York Department of Labor inspector asking for the incident log, the training records, and the proof that someone read them this year.