PPO Compliance Requirements
Before a Private Patrol Operator permits any employee to perform the functions of a security guard, it must confirm that the person holds a current and valid security guard registration issued by the Bureau of Security and Investigative Services. Business and Professions Code section 7583.8 states the requirement without qualification or exception: a licensee shall not permit an employee to perform the functions of a security guard without confirming that the person holds a current and valid registration. Confirmation means checking the registration against the Bureau’s records rather than relying on a physical card or the officer’s representation, because a card can be expired, suspended, or revoked while still in the officer’s possession. Registration alone, however, does not establish that the officer is fully trained. Registration and training are separate obligations under the Private Security Services Act, and an agency that verifies one without the other has satisfied only half of what the law requires of it. The agency must therefore establish, before assignment and in its own records, both that the officer is validly registered and that each training requirement described in the sections that follow has been completed.
California requires three distinct categories of training, and a Private Patrol Operator must know where each of its officers stands on all three. The first is the initial course in the exercise of the power to arrest and the appropriate use of force, required under Business and Professions Code sections 7583.6(a) and 7583.7, consisting of three hours of Power to Arrest and five hours of Appropriate Use of Force, at least half of which must be delivered in person as traditional classroom instruction. This course is ordinarily completed as a condition of obtaining the registration itself. The second is security officer skills training: under section 7583.6(b), a registrant must complete not less than thirty-two hours, sixteen of which are due within thirty days of the date the registration is issued and the remaining sixteen within six months. The third is continuing training: under section 7583.6(e), a registrant must annually complete eight hours of specifically dedicated review or practice of security officer skills, which under the current BSIS curriculum includes at least two hours reviewing the appropriate use of force. Verification means holding the certificate of completion for each of these, issued by the course provider under section 7583.6(c), and knowing when the next annual cycle comes due.
The obligation to keep records is divided between the officer and the employer, and both halves matter. Under Business and Professions Code section 7583.6(g)(1), the registrant must maintain the certificate of completion received for each training course until the registration expires or is cancelled. Under section 7583.6(g)(2), the licensee must maintain, at its principal place of business or branch office, a record for each of its registrant employees verifying completion of the required trainings, for the duration of that person’s employment, and those records must be available for inspection by the Bureau upon request. The words “upon request” are what make this an operational requirement rather than a filing requirement. When the Bureau opens an audit or investigation, the agency does not receive time to reconstruct a file, locate a former training provider, or obtain a duplicate certificate; it produces what it has, officer by officer, and every gap is documented as a deficiency. An agency that is genuinely compliant but cannot prove it on request is, for practical purposes, in the same position as one that is not.
California does not require a Private Patrol Operator to retrain an experienced officer simply because that officer has changed employers. What the law requires is that the agency be able to verify the training and document it. Where the officer produces complete certificates, the agency verifies them, retains its record, and continues the annual training cycle; nothing obliges it to repeat training already completed. Where the officer cannot produce them, the statutory deadlines take over. Under Business and Professions Code section 7583.6(d)(2), a registrant who is unable to provide the employing licensee with the certificate of completion for the thirty-two hours of skills training must complete sixteen hours within thirty days of the employment date and the remaining sixteen hours within six months of that date. Section 7583.6(d)(1) treats the initial course the same way: a registrant who cannot provide that certificate must complete the training within six months of the employment date. Note carefully that these deadlines run from the date of employment rather than the date the registration was issued. An agency that hires an undocumented officer does not inherit whatever time remained on an earlier clock; it inherits a new thirty-day obligation, and the cost of meeting it, on its own payroll.
Failing to verify a registration, failing to ensure required training is completed, and failing to maintain or produce training records are each violations of the Private Security Services Act, and the Act treats a violation of any of its provisions as a basis for discipline. Under Business and Professions Code section 7587.1, the director may deny, suspend, or revoke a license where the licensee, or an officer, director, partner, or qualified manager of the licensee, has violated any provision of the chapter or any rule adopted under it, and that authority exists independently of any fine. Section 7583.37 provides that the director may assess fines as enumerated in Article 7, commencing with section 7587, and that the assessment of administrative fines is independent of any other action by the Bureau or by any local, state, or federal agency arising from the same conduct. Specific exposures are significant: section 7587.15 authorizes a fine of up to five thousand dollars per violation for certain failures, and the Bureau assesses a fine of five thousand dollars for failure to report a qualifying incident within seven business days under section 7583.2(f). A licensee that contests a fine, denial, suspension, or revocation may seek review by a Disciplinary Review Committee under sections 7581.2 and 7581.3. Because deficiencies are identified officer by officer, exposure in an audit scales with the size of the roster rather than with the seriousness of any single lapse. This summary describes published law and is not legal advice; agencies should consult the current text of the Act and their own counsel.
The structure the law creates works only if the paperwork survives, and in a workforce that moves frequently between employers it often does not. Certificates are lost, training already completed and paid for is completed again, and each new employer rebuilds the same file from the beginning. CPSO exists to close that gap. Through the Verisect platform, an officer’s registration, training, and credentials are verified against the issuing source and maintained continuously in a record that belongs to the officer and travels with them, so that a hiring agency can establish what has actually been completed rather than reconstruct it, and can identify genuine training gaps rather than presume them. This does not transfer, reduce, or satisfy the agency’s own obligations. The duty to confirm registration under section 7583.8, to ensure the required training is completed, and to maintain records available to the Bureau under section 7583.6(g)(2) remains exactly where the statute places it. What changes is the difficulty of performing those duties, and what an agency can then do with the time, instructors, and training budget it recovers: direct them toward the site-specific preparation only the employer can provide, including post orders, emergency and evacuation procedures, client policies, access control, workplace violence response, and the sector-specific requirements of the assignment.
Questions
Should an agency have any questions about these requirements, its compliance status, or its use of the Verisect platform, CPSO encourages it to reach out. Our team is available to provide clarification and support at info@cpsousa.com or through cpsousa.com. Agencies are encouraged to contact CPSO before a compliance issue arises rather than after, and to reference their agency name and PPO license number on all correspondence so we can assist quickly.
RESOURCES FOR SECURITY OFFICERS
RESOURCES FOR SECURITY AGENCIES
CPSO is here to help you succeed!
Reach out to us and learn more about what we can do for you
The security services industry is continually evolving, driven by advancements in technology and changing regulatory requirements. Our team is committed to supporting you through every stage of this transition, ensuring you remain equipped and prepared to meet the demands of a modern security environment.