An IIPP, or Injury and Illness Prevention Program, is a written workplace safety plan that helps employers find and fix hazards before workers get hurt. It’s a proactive system rather than a reactive one: instead of waiting for an accident and then responding, an IIPP requires ongoing inspections, employee training, and documented procedures to reduce injuries, illnesses, and deaths on the job. Five states require every employer to have one, and 24 states mandate some version of it for certain businesses.
How an IIPP Works
At its core, an IIPP is a structured cycle. You identify hazards, correct them, train employees, investigate any incidents that do occur, and keep records of the whole process. The program has to be written down, not just talked about, and it needs a named person (or people) responsible for making it happen. The idea is that safety becomes a routine part of operations rather than something addressed only after someone is injured.
The financial case is strong. Employers who adopt IIPPs typically see a 15 to 35 percent drop in workplace injuries. In the construction industry specifically, states with mandatory IIPPs have seen total injury rates fall by 32 percent and lost-workday injuries drop by 38 percent. States that paired their IIPP mandates with incentives like workers’ compensation discounts saw even larger reductions than states that used only one approach.
The Eight Required Elements
California’s version, governed by Title 8, Section 3203 of the California Code of Regulations, is the most widely referenced IIPP framework. It spells out eight elements that every compliant program must include:
- Responsibility: The program must name the specific person or people who have authority to implement it.
- Compliance: There must be a system for making sure employees actually follow safe work practices.
- Communication: Employers need a way to talk with workers about safety in a language they understand, and employees must be able to report hazards without fear of retaliation. This can take the form of safety committees, regular tailgate meetings, or even suggestion boxes.
- Hazard Assessment: The program must include procedures for identifying and evaluating workplace hazards, including scheduled periodic inspections.
- Accident and Exposure Investigation: When an injury or illness does occur, the employer must investigate what happened and why.
- Hazard Correction: Unsafe conditions or practices must be corrected promptly, prioritized by how severe the hazard is.
- Training and Instruction: All workers must be trained on the hazards in their workplace when they’re first hired, whenever they’re given a new job assignment, and whenever new procedures or equipment are introduced. Training has to be delivered in a language and manner that employees actually understand.
- Recordkeeping: The employer must document inspections, training sessions, incidents, and corrective actions, and allow employees access to the program itself.
Which States Require an IIPP
There is no federal law requiring every employer to have an IIPP. OSHA has long encouraged these programs and has published guidance supporting them, but a universal federal mandate has never been enacted. The requirements exist at the state level, and they vary significantly.
Five states require a written safety program from all employers regardless of size or industry: California, Minnesota, Montana, Nebraska, and Washington. Eight additional states (Arkansas, Connecticut, Maine, New Mexico, New York, North Carolina, Texas, and Vermont) require one only from employers classified as high-hazard or high-risk. Five more states limit the requirement to employers above a certain size, with thresholds ranging from 10 to 25 employees per workplace.
Beyond those categories, 17 states require written safety programs specifically from employers who self-insure for workers’ compensation. A few states target specific sectors: Michigan requires them in construction, Oregon in forestry, and Idaho for public-sector workplaces. In total, 24 states have some form of mandatory safety plan on the books. If your state isn’t among them, an IIPP is voluntary but still considered a best practice by OSHA.
What Training Looks Like in Practice
Training is one of the elements employers most commonly underestimate. Under California’s standard, every worker needs safety training at three points: when they start the job, when their assignment changes, and when new equipment or procedures are introduced. If your workplace uses chemicals, there’s an additional requirement under hazard communication rules to train workers on the specific substances they may encounter.
The communication piece is equally important. An IIPP isn’t just a binder on a shelf. Employees need to know the program exists, understand how to report hazards, and feel confident they won’t face punishment for speaking up. Employers can meet this requirement through regular safety meetings, posted notices, digital systems, or one-on-one conversations, as long as the information reaches every affected worker in a form they can understand.
Recordkeeping Requirements
Documentation serves two purposes: it proves compliance during an inspection, and it creates a trail that helps you spot patterns over time. Your IIPP records should include completed inspection checklists, training logs with dates and attendee names, incident investigation reports, and documentation of how hazards were corrected.
Separately from the IIPP itself, federal OSHA requires employers to retain injury and illness logs (the OSHA 300 Log, annual summary, and 301 Incident Reports) for five years following the end of each calendar year they cover. During that five-year window, you’re required to update the 300 Log if new information comes to light about a recorded case, such as a change in the injury classification or outcome.
Getting Started as a Small Business
If you run a small operation, the idea of building a formal safety program can feel overwhelming, but it doesn’t need to be. OSHA’s guidance for small businesses emphasizes starting with a basic program, setting simple goals, and expanding over time. Implementing an IIPP doesn’t typically require hiring additional staff or spending heavily. For most small employers, it means integrating safety into the routines you already have: adding a safety topic to weekly meetings, walking the job site with a checklist, and writing down what you find and how you fix it.
Cal/OSHA publishes a free model IIPP template specifically for non-high-hazard employers that you can adapt to your own workplace. The American Society of Safety Professionals also offers a guidance manual designed for smaller organizations. The key is to treat it as a living document. An IIPP that gets written once and forgotten doesn’t protect anyone. One that gets updated after every inspection, every near-miss, and every new hire is what actually keeps people safe.