Home > Resources > Compliance Guides > Retail Worker Safety Act
RETAIL WORKER SAFETY COMPLIANCE
Retail Worker Safety Act Requirements in New York, California, and Washington
Three states now mandate workplace violence prevention programs for retail employers, and New York requires silent response buttons by January 1, 2027. This guide breaks down the compliance requirements, employer thresholds, and deadlines for each state so you can assess your exposure and close gaps before enforcement begins.
DOES THIS APPLY TO YOU?
Three Signals That Your Stores Are Covered
Most multi-state retailers meet at least one of these criteria.
You Operate Retail Stores in NY, CA, or WA
New York covers retailers with 10 or more employees statewide (500+ for the silent response button mandate). California applies to virtually all employers with no size exemption for public-facing retail. Washington covers any employer with at least one isolated worker, regardless of company size.
Your Employees Work Alone or in Isolated Areas
Stockroom clerks, back-of-house staff, fitting room attendants, and associates working opening or closing shifts all meet the isolation criteria these laws target. Washington specifically defines "isolated employee" as someone who spends 50% or more of daily hours without a coworker or supervisor within immediate response distance.
You Lack a Documented Workplace Violence Prevention Plan
Even outside NY, CA, and WA, the federal OSHA General Duty Clause requires employers to address recognized hazards. Retail workers handling cash, working late or early shifts, and confronting aggressive customers meet the "recognized hazard" threshold. A written prevention plan is the baseline expectation.
THE REGULATORY FRAMEWORK
A Patchwork of State Laws with Different Requirements
New York Retail Worker Safety Act
NY Labor Law Section 27-e (SB 8358-C, amended by SB 740 / A.1678)
Requires retail employers to adopt a written workplace violence prevention policy and provide interactive training. Larger employers must also deploy "silent response buttons" that alert internal security or management during emergencies. The February 2025 amendment changed the alert target from law enforcement to internal personnel.
Deadline
Phase 1 (policy + training): June 2, 2025. Phase 2 (silent response buttons): January 1, 2027.
Applies To
10+ retail employees statewide for policy and training. 500+ retail employees statewide for silent response buttons.
Penalties
Enforced by NY State Dept of Labor (SHER Program). Employees can file complaints via Form SH550. Education-focused enforcement during initial rollout, with citations authorized.
California SB 553 — Workplace Violence Prevention
CA Labor Code Section 6401.9 (amending 6401.7)
Requires all California employers to maintain a written Workplace Violence Prevention Plan (WVPP) customized to each work location. The law classifies workplace violence into four types and mandates hazard identification, incident logging, and employee involvement. It does not specifically require panic buttons, but employers must implement feasible control measures.
Deadline
Effective July 1, 2024. Already in force.
Applies To
All California employers. No size exemption for public-facing retail.
Penalties
Up to $18,000 per first-time violation. Up to $25,000 per repeat or willful violation. Penalties assessed per violation, and multiple citations are possible for multiple failures.
Washington HB 1524 — Isolated Worker Protection
RCW 49.60.515 (expanded by House Bill 1524)
Requires employers to provide portable panic buttons to isolated employees in retail, hotel, security, and property services. Buttons must be simple to activate, summon immediate on-scene assistance, and identify the employee location. The law has no employer size minimum.
Deadline
Effective January 1, 2026.
Applies To
Any employer with at least one isolated employee. No minimum company size.
Penalties
Willful violation: $1,000 per violation. Repeat willful violation: $2,000 to $10,000 per violation. Department may reduce penalties if employer demonstrates corrective action.
Federal OSHA General Duty Clause
OSH Act Section 5(a)(1)
Requires all employers to provide a workplace free from recognized hazards. There is no specific OSHA standard for workplace violence, so enforcement relies on the General Duty Clause. A December 2024 ruling (Professional Security Consultants) found that documented policies and training can defeat OSHA citations even after a violent incident.
Deadline
Ongoing. No specific compliance date.
Applies To
All employers.
Penalties
Enforcement is weaker than state-level laws after the PSC ruling. State laws carry stronger compliance pressure for retail.
Not Legal Advice
This guide summarizes publicly available regulatory information as of May 2026. It is not legal counsel. Consult qualified employment counsel in your operating states for compliance guidance specific to your organization.
STATE-BY-STATE REQUIREMENTS
What Each State Requires — Side by Side
Compare the three active state laws across the dimensions that matter most for compliance planning.
| Requirement | New York | California | Washington |
|---|---|---|---|
| Statute | NY Labor Law Section 27-e (SB 8358-C) | CA Labor Code Section 6401.9 (SB 553) | RCW 49.60.515 (HB 1524) |
| Employer Threshold | 10+ employees (policy). 500+ employees (silent response buttons). | All employers. No size exemption for retail. | Any employer with 1+ isolated employee. |
| Technology Requirement | Silent response buttons required (wearable, fixed, or employer-provided mobile). No BYOD. | No specific technology mandate. Employers must implement feasible control measures. | Portable panic buttons required. Must be simple to activate with location identification. |
| Training | At hire + every 2 years (10-49 employees). At hire + annually (50+ employees). Interactive format required. | At initial assignment + annually. Must match worker education level and language. | Before isolation work begins + annually + before any technology change. |
| Documentation | Written workplace violence prevention policy. Must identify risk factors specific to retail. | Written WVPP per location. Violent Incident Log. Hazard records retained 5 years. Training records retained 1 year. | Written sexual harassment policy. Panic button purchase and utilization records. |
| Deadline | Phase 1: June 2, 2025. Phase 2: January 1, 2027. | July 1, 2024. Already in effect. | January 1, 2026. |
| Penalties | Citations authorized by NY Dept of Labor. Education-focused initial enforcement. | Up to $18,000 per first-time violation. Up to $25,000 per repeat violation. | $1,000 per willful violation. $2,000-$10,000 per repeat willful violation. |
New York Retail Worker Safety Act
New York's law is the most prescriptive of the three states, with explicit technology requirements for large retailers.
Phase 1 — Policy and Training (June 2, 2025)
All retailers with 10 or more employees statewide must have a written workplace violence prevention policy identifying risk factors specific to their operations: late night or early morning hours, handling cash, working alone or in small numbers, and uncontrolled public access.
Training must be interactive. Digital training platforms qualify if properly designed. Materials must be available in English and the 12 most common non-English languages in New York.
Phase 2 — Silent Response Buttons (January 1, 2027)
Retailers with 500 or more employees statewide must deploy silent response buttons. The February 2025 amendment (SB 740 / A.1678) changed the original bill significantly:
Alert target:: Internal security, manager, or supervisor. Not law enforcement.
Allowed forms:: Physical buttons in accessible locations, wearable devices, or mobile phone-based applications on employer-provided devices.
BYOD prohibition:: Personal phones cannot serve as the compliance mechanism. Employers must provide the device.
Location tracking:: Prohibited except when the button is actively triggered.
Coverage:: If using wearable or mobile devices, every employee at the location must be equipped.
What "Retail Store" Means
Sells goods directly to the public at retail. Excludes establishments where food is primarily consumed on premises (restaurants). Employee threshold is counted across all locations statewide.
YOUR COMPLIANCE CHECKLIST
Seven Steps to Assess Your Compliance Posture
Use this checklist as a genuine self-assessment, not a product evaluation guide.
Determine Which Laws Apply to Your Operations
Map every retail location to its state jurisdiction. Count total employees statewide per state to determine which thresholds you meet. A 50-store chain in New York with 480 employees is exempt from the silent response button mandate but still must comply with the written policy and training requirements.
Document Your Current Workplace Violence Prevention Program
Pull your existing policies, training records, and incident logs into one file. California requires a written WVPP per location. New York requires a written policy identifying retail-specific risk factors. If you have a corporate-level policy but nothing site-specific, you likely have a gap in California.
Assess Current Emergency Communication Capabilities
Walk each store with a floor plan and note how staff currently call for help in every area: sales floor, stockroom, fitting rooms, receiving dock, and parking lot. Identify dead zones where cell signals drop, Wi-Fi does not reach, or employees are physically isolated from coworkers.
Identify Coverage Gaps Against State Requirements
Compare your current capabilities against each applicable state law. New York requires employer-provided devices, which means personal phones do not count. Washington requires portable devices with location identification. California requires documented feasible controls, which means "we tell employees to call 911" may not meet the standard.
Evaluate Technology Options for Your Environment
Assess whether proposed solutions work in your actual store conditions. Key questions: Does the device work in back-of-house areas without Wi-Fi? Does it require a smartphone app that stockroom employees may not carry? Does it provide the location precision responders need in a 100,000-square-foot store? Can it function independently of your store IT infrastructure?
Establish Documentation and Record-Keeping Procedures
California requires 5-year retention of hazard records and a Violent Incident Log with specific data fields. All three states require training documentation. Set up a system to capture incident reports, training completions, device maintenance records, and corrective actions before you need it, not after an enforcement inquiry.
Train Staff and Validate the Program
New York mandates interactive training in English and the 12 most common non-English languages in the state. Washington requires training before an employee works in isolation. Run a tabletop exercise in at least one location: simulate an activation, measure response time, confirm that every employee knows what to do and that every area of the store has coverage.
MEETING THE REQUIREMENTS
How Organizations Satisfy These Requirements
The Requirement: Employer-Provided, Purpose-Built Devices
New York explicitly prohibits BYOD for silent response buttons. Washington requires portable devices carried by isolated employees. Both states place the compliance obligation on the employer to provide the technology, not the employee to use a personal phone.
The Operational Reality: Back-of-House Coverage
Retail emergencies often happen in stockrooms, receiving docks, fitting rooms, and parking lots — areas where Wi-Fi coverage is inconsistent and employees may not carry smartphones. A compliance solution must work in these environments without depending on store IT infrastructure.
The Gap Most Solutions Leave Open
The majority of panic button products on the market require either a smartphone app or Wi-Fi connectivity. App-based solutions fail the BYOD test in New York and create adoption friction with staff who do not carry phones during shifts. Wi-Fi-dependent solutions leave dead zones in back-of-house areas where incidents are most likely.
What Leading Retailers Are Deploying
Organizations closing these compliance gaps are moving to wearable hardware that operates on facility-deployed networks. These devices do not rely on Wi-Fi, smartphones, or store IT systems. They provide location identification for responders and meet the "simple to activate" requirement in Washington with a single button press.
How Positive Proof Addresses This
Positive Proof wearable panic buttons operate on a facility-deployed network with automatic cellular failover. They work in stockrooms, receiving docks, and fitting rooms without Wi-Fi or smartphone dependency. Each device provides room-level location precision using the facility-deployed network, enabling responders to find the employee who activated the alert. The system meets New York silent response button specifications, Washington portable device requirements, and supports California documentation obligations through integrated incident logging.
Common Compliance Questions
Answers to the questions retail compliance and LP teams ask most often.
Not Sure Where Your Stores Stand on Compliance?
Schedule a compliance review with Positive Proof. We walk through your operating states, employee thresholds, current capabilities, and coverage gaps — then map out what you need before the next deadline.
Schedule a Compliance ReviewYOUR NEXT STEP
New York Phase 1 Compliance Is Due June 2, 2025
Washington follows on January 1, 2026. New York silent response buttons on January 1, 2027. Start your compliance assessment now and build to the timeline that applies to your stores.
Contact Us