7.1 Cal/OSHA Injury & Illness Prevention Program (IIPP) & Recordkeeping

California's workplace safety system rests on one foundational document: the written Injury and Illness Prevention Program, or IIPP. For a C-20 HVAC contractor, understanding the IIPP and the recordkeeping rules that surround it is not optional trivia for the Law & Business exam — it is the backbone of the Safety domain, worth roughly 14% of that exam, and it is the first thing a California Division of Occupational Safety and Health (Cal/OSHA) compliance officer asks to see when they arrive at a jobsite.

Cal/OSHA is a division of the California Department of Industrial Relations (DIR). California operates its own federally approved State Plan under Section 18 of the Occupational Safety and Health Act of 1970, which means the state may — and does — enforce standards stricter than federal OSHA. Those standards live in Title 8 of the California Code of Regulations (8 CCR). Federal OSHA has never adopted a universal written injury-prevention-program mandate; California has required one from virtually every employer since 1991.

The IIPP Mandate: 8 CCR § 3203

Under 8 CCR § 3203, every employer operating in California — whether a sole proprietor who occasionally hires a helper, or a fifty-technician commercial HVAC firm — must establish, implement, and maintain an effective written IIPP. There is no small-employer exemption from having the program itself. What can vary by size is how much of the implementation must be documented in writing, discussed below.

An effective IIPP must contain eight specific elements:

Employers with fewer than 10 employees receive one narrow accommodation: they are not required to keep the written records documenting how they carried out certain inspection and training steps, as long as they can otherwise demonstrate compliance. Every employer, no matter how small, must still have the written IIPP document itself and must still implement all eight elements in practice.

Cal/OSHA Recordkeeping: Forms 300, 300A, and 301

A separate but related set of rules — Title 8, Chapter 7, Subchapter 1, Article 2 (8 CCR §§ 14300 et seq.) — governs how employers log and report individual injuries and illnesses over the course of a year:

• Form 300, Log of Work-Related Injuries and Illnesses — a running log of every recordable injury or illness during the calendar year.
• Form 300A, Summary of Work-Related Injuries and Illnesses — an annual tally, signed by a company executive.
• Form 301, Injury and Illness Incident Report — a detailed report completed for each individual recordable case.

Partial exemption: an employer with 10 or fewer employees at all times during the previous calendar year does not have to maintain Forms 300, 300A, and 301 for routine cases, unless the Bureau of Labor Statistics or Cal/OSHA specifically requests records in writing. This exemption is narrow — it never excuses an employer from the separate, mandatory duty to immediately report a serious injury, illness, or fatality, covered in Section 7.4, and it does not excuse the underlying written IIPP requirement.

Posting: covered employers must post Form 300A at each establishment from February 1 through April 30 of the following year, in a conspicuous, employee-accessible location — even in a year with zero recordable injuries, in which case the form is posted showing all zeros.

Retention: Form 300, the associated privacy case list if one exists, Form 300A, and Form 301 must all be retained for five years following the end of the calendar year they cover.

Electronic submission: establishments with 250 or more employees, and establishments with 20 to 249 employees in industries Cal/OSHA and federal OSHA classify as high-hazard, must submit Form 300A data electronically each year, with a current federal deadline of March 2. Many construction trades appear on the designated high-hazard list; a growing C-20 contractor should confirm its own establishment's status rather than assume small size is disqualifying.

One enforcement detail worth remembering for the exam: a 2019 change to Labor Code § 6317 eliminated the old rule that recordkeeping citations expired after six months like most Cal/OSHA violations. A recordkeeping violation is now treated as continuing until it is corrected, discovered by the Division, or the underlying duty to keep the record no longer exists, which in practice can extend an employer's exposure across the full five-year retention window (see Section 7.4 for the general six-month citation rule this modifies).

For a C-20 licensee, the practical exam takeaway is layered: the written IIPP is universal and non-negotiable regardless of company size; routine Form 300-series logging has a real, size-based exemption; and serious-incident reporting has no size exemption at all.