Written Injury and Illness Prevention Program (IIPP) Minimum Content

Why this matters

Federal OSHA does not require a written IIPP for most employers, but many states do, including California, Washington, Oregon, Hawaii, Minnesota, Nevada, and New York (public employers). California's Title 8 Section 3203 is the most-enforced; it applies to every employer with at least one employee. A trade business in any of these states without a documented IIPP is subject to citation on first inspection, with classification (general, serious, willful) driving penalty severity. The written program is also what the workers comp auditor asks for at the annual policy audit; missing or inadequate flags the policy for higher experience-modification scrutiny.

What an IIPP is

A written systematic approach to identifying and correcting workplace hazards before they cause injury. Three core elements: identifies who is responsible for safety; describes how hazards are identified; describes how identified hazards are corrected and how employees are trained. Active implementation, not just a binder on a shelf, is the standard inspectors and auditors check.

Minimum required content (California Title 8 Section 3203)

California's IIPP is the most-detailed US requirement and works as a template. Eight required elements: responsibility (named person and title, not just "management"); compliance (system for ensuring employees follow safe practices, including evaluation, recognition, retraining, last-resort discipline); communication (safety meetings, posted notices, employee suggestion process, language employees understand); hazard assessment (scheduled inspections, post-incident inspections, new-equipment inspections); accident and exposure investigation (cause determination and prevention of recurrence); hazard correction (timeline by severity); training (at program establishment, at hire, at new-hazard introduction, after demonstrated lack of understanding); recordkeeping (inspections, training, corrective actions).

Washington WAC 296-800, Oregon OAR 437-001, Minnesota 5208, Nevada NRS 618.383, Hawaii HRS 396 have substantially similar requirements with state-specific variations.

What the document looks like

A working IIPP for a trade business is 8 to 20 pages of body text plus appendices for forms, checklists, and references. Structure:

Section 1. Policy statement and responsibilities

A brief management commitment statement signed by the owner or GM: the business prioritizes safety, will provide the resources, and expects every employee to participate. Name the safety coordinator (often the owner or operations manager in small businesses) with authority to stop unsafe work, require corrective action, and recommend discipline. Supervisors and crew leads own crew safety on each job; employees follow safe practices, report hazards, and participate in training.

Section 2. Compliance and communication

Compliance: safety in performance reviews, recognition of safe behavior, retraining after deviations, progressive discipline for repeated or serious violations. Communication: initial training at hire, weekly toolbox or tailgate talks (5 to 15 minutes documented), posted OSHA notices, anonymous hazard-reporting mechanism, multilingual where employee primary languages other than English are present.

Section 3. Hazard assessment, investigation, correction

Inspection cadence: pre-job hazard assessment at each new site, weekly job-site inspections during the project, annual shop/office comprehensive inspection, post-incident inspection, new-equipment inspection before first use. Each produces a written record (date, inspector, findings, corrective actions).

For any reportable incident: secure the scene, provide first aid/medical care, investigate within 24 hours, document root cause and corrective action, report to workers comp carrier within the carrier window, report to OSHA within the OSHA window (8 hours for fatality; 24 hours for inpatient hospitalization, amputation, or loss of an eye).

Hazard correction timeline: imminent danger immediate (stop work); serious hazard within 24 hours; other within 7 days or per documented action plan. Interim measures (PPE, work-area exclusion) cover any gap.

Section 8. Training and recordkeeping

Mandatory training topics (vary by trade): general safety orientation at hire, job-specific hazards (ladder safety, fall protection, electrical, confined spaces, lockout-tagout, hot work), PPE selection/fit/use/maintenance, emergency response, hazard communication with SDS, heat illness prevention where required, defensive driving for vehicle operators, trade-specific (HVAC refrigerant, electrical arc flash, plumbing lead and asbestos awareness). Training records capture date, topic, trainer, attendees, materials.

Retention: training records duration of employment plus 3 years (29 CFR 1910.1020); inspection records 5 years; incident investigation records 5 years; OSHA 300 log 5 years (29 CFR 1904); workers comp medical records 30 years for some categories per 29 CFR 1910.1020.

Appendices: IIPP review log, inspection checklists, incident investigation form, employee-signed training acknowledgment, toolbox talk topics, emergency action plan, SDS binder reference, posted OSHA notices.

Annual review and trade-specific augmentations

The IIPP is reviewed at least annually: confirm current with regulations, update contacts and named responsibilities, review prior-year incidents and findings for improvement, document in the review log. A program not reviewed in three years is an inspection finding regardless of content quality.

Trade-specific written sub-programs supplement the base: fall protection (29 CFR 1926.501, over 6 feet construction); hazard communication (29 CFR 1910.1200); lockout-tagout (29 CFR 1910.147); respiratory protection (29 CFR 1910.134); bloodborne pathogens (29 CFR 1910.1030); heat illness prevention (California Title 8 Section 3395, Washington, Oregon, and others); confined space entry (29 CFR 1910.146). Each has its own training, inspection, and recordkeeping requirements.

Common IIPP failures

Template downloaded but never customized (no named responsibilities, generic procedures, inspector flags immediately); written but not implemented (document exists but toolbox talks never happened, inspections undocumented); outdated (not reviewed in 4 years, obsolete regulations and replaced personnel); no language access (Spanish-speaking crew receives English-only training); training records missing (supervisor cannot produce).

References

• California Title 8 California Code of Regulations Section 3203 - Injury and Illness Prevention Program
• 29 CFR 1904 - Recording and Reporting Occupational Injuries and Illnesses
• 29 CFR 1910 - Occupational Safety and Health Standards (general industry)
• 29 CFR 1926 - Safety and Health Regulations for Construction
• Washington WAC 296-800-140 - Accident Prevention Program
• Oregon OAR 437-001-0760 - Employer Responsibility to Provide a Safety Committee or Safety Meetings
• OSHA Recommended Practices for Safety and Health Programs (advisory; nationally applicable)