Most security company owners in California find out how the wage and hour system works the same way: a letter arrives from a law firm nobody has heard of, on behalf of a guard who quit four months ago, and it is not asking about that guard.
It is asking about every guard, on every post, for the past four years.
That is the part people miss. California's Private Attorneys General Act turns one former employee's complaint into a claim on behalf of the entire workforce. The individual claim might be worth a few thousand dollars. The representative claim is worth whatever your headcount multiplied by your pay periods says it is worth.
This guide covers what has to be in place at hire, what has to be documented every shift after, and what actually decides these cases. If you have not yet formed your company, start with our guide on how to start a security company in California first.
This is not legal advice. Wage and hour law changes constantly, and how it applies depends on your operation. Every policy, agreement and handbook described here should be drafted or reviewed by a California employment attorney before you use it.
Why security companies get targeted more than most
Plaintiff-side employment firms are not picking guard companies at random. The business model has four features that make violations close to structural:
- Solo posts. A guard alone at a site cannot walk away for thirty duty-free minutes without leaving the site unattended. That single operational fact is the origin of most meal period claims in this industry.
- Round-the-clock coverage. Overnight and split shifts multiply premium exposure and make second meal periods a live issue.
- High turnover. Every departing guard is a potential plaintiff, and the four-year lookback means people you have not employed since 2022 still count.
- Weak recordkeeping. Paper timesheets, call-in check-ins and texted shift reports produce records that cannot be verified — and an unverifiable record is functionally the same as no record.
None of these are reasons to lose. They are reasons the documentation has to be better than it would need to be in another industry.
What every California guard hire needs on day one
Missing paperwork is the cheapest violation to prevent and one of the most common to find. Assemble the packet once, apply it identically to every hire, and keep the signed originals.
| Document | Authority | Notes |
|---|---|---|
| Wage Theft Prevention Act notice | Labor Code 2810.5 | Given at hire, in the language the employee normally uses. Reissue when pay information changes. |
| Form I-9 | Federal | Complete within three business days of the start date. |
| W-4 and California DE 4 | Federal and state | Separate forms. The DE 4 is not optional. |
| Workers compensation notice | Labor Code 3551 | Given at hire, plus the pamphlet. |
| Paid sick leave notice | Labor Code 246 | Now 5 days or 40 hours per year. |
| Employee handbook acknowledgment | Best practice | See below. This is the one people skip. |
| Meal and rest period policy acknowledgment | Best practice | Separate signature, not buried in the handbook. |
| On-duty meal period agreement | Wage Order 4, section 11 | Only where the nature of the work genuinely prevents relief. Must be revocable in writing. |
| BSIS guard registration verification | Business and Professions Code 7583.5 | Verify the card is active before the first shift, and record that you checked. |
| Harassment prevention training | Government Code 12950.1 | Within six months of hire, then every two years. Two hours for supervisors, one for everyone else. |
The employee handbook is not a formality
A handbook is where your meal and rest period policy actually lives, and a policy you cannot produce is a policy you did not have. When a claim arrives, the first thing opposing counsel asks for is your written policy and the signed acknowledgment. If you hand over neither, the argument that violations were isolated rather than systemic is gone before it starts.
At minimum your handbook needs a written meal and rest period policy stating the timing and duration, an explicit statement that guards are relieved of all duty during meal periods, a procedure for reporting a missed or interrupted break, an anti-retaliation statement, and a timekeeping policy requiring accurate recording.
Then get it signed. An unsigned handbook proves nothing.
Meal and rest periods: the rules that generate the claims
This is the centre of gravity for guard company litigation. The rules are not complicated; complying with them on a solo post is.
Meal periods. A duty-free, uninterrupted 30-minute unpaid meal period must begin before the end of the fifth hour of work. A second is required before the end of the tenth hour. The first can be waived by mutual consent if the shift is six hours or less; the second can be waived if the shift is twelve hours or less and the first was taken.
Rest periods. Ten paid minutes for every four hours worked "or major fraction thereof," as close to the middle of each work period as practicable. Rest periods cannot be combined with meal periods or used to leave early.
Premium pay. One extra hour of pay at the regular rate of compensation for each workday a compliant meal period was not provided, and another for rest periods — up to two premium hours a day. Under Ferra v. Loews Hollywood Hotel, "regular rate of compensation" includes nondiscretionary bonuses and shift differentials. If you have been paying premiums at base rate, you have been underpaying them, and the underpayment is its own violation.
On-duty meal agreements: use them correctly or not at all
Where the nature of the work genuinely prevents a guard from being relieved of all duty — a single-officer post with no available relief is the textbook case — an on-duty meal period is permitted. Three conditions, all required:
- The nature of the work actually prevents relief. Convenience and cost do not count.
- There is a written agreement signed by the employee.
- The agreement states it is revocable in writing by the employee at any time.
The meal is paid as time worked. Get this wrong and you have not solved the meal period problem, you have documented it.
Rounding is finished
Two cases closed the door. Donohue v. AMN Services held that employers may not round meal period punches, and that time records showing short, late or missing meals create a rebuttable presumption that the meal period was not provided. Camp v. Home Depot went further: where an employer captures actual time worked, it must pay for all of it.
Practical translation — if your system records the real punch, pay the real punch. And if your records show a 26-minute meal, the presumption is now against you and you need evidence to rebut it.
Wage statements and timesheets
Labor Code 226(a) requires nine specific items on every wage statement: gross wages, total hours worked, piece-rate units if applicable, all deductions, net wages, the pay period dates, the employee's name and last four of the SSN or employee ID, the employer's name and address, and all applicable hourly rates with the hours worked at each.
Missing items are among the easiest violations to plead because they are visible on the face of the document. Every guard, every pay period.
Timesheets have to reconcile with everything else. When your timesheet says a guard worked 8:00 to 16:00, your patrol records show checkpoint scans through the entire shift with no 30-minute gap, and your pay stub shows no meal premium, you have produced the plaintiff's exhibit yourself.
What changed in 2024, and why it matters more than anything else here
California substantially reformed PAGA in mid-2024. For notices filed on or after 19 June 2024:
- Standing narrowed. The plaintiff must have personally suffered each violation they allege, rather than using one violation as a key to the whole Labor Code.
- Penalties capped for employers who prepared. An employer that took all reasonable steps to comply before receiving a PAGA notice can have penalties capped at 15 percent. Taking those steps within 60 days after notice caps them at 30 percent.
- Cure provisions expanded, including for wage statement violations.
Read that middle point again, because it changes the economics of compliance. "Reasonable steps" means things like periodic payroll audits, lawful written policies, supervisor training on those policies, and taking corrective action on problems you find. These are now worth a defined, statutory discount on your exposure — and only if you did them before the letter arrived.
Compliance stopped being purely defensive in 2024. It became a priced asset. But it only counts if you can prove you did it, which brings us to the part that decides cases.
Documentation is the whole defence
In a wage and hour dispute the employer carries the burden of showing compliance. Where records are absent or unreliable, courts resolve the ambiguity in the employee's favour. A guard's recollection, however inaccurate, will beat your absence of evidence.
So the record has to be:
Contemporaneous. Created at the time of the event, not reconstructed later. A timestamped, GPS-verified record made during the shift carries weight a memo written six months later never will.
Accurate. Records that overstate problems are as dangerous as records that hide them. If your documentation says a guard missed five patrols and the GPS data shows they completed them, you have destroyed your own credibility on every other document you produce.
Consistent. Applied to every guard the same way. Selective documentation is the pattern opposing counsel is hunting for, and it is straightforward to demonstrate — they simply compare the file of the person suing you to everyone else's.
The trap: papering a file after the fact
This is worth being blunt about, because it is a common instinct and it is a catastrophic one.
Since 1 January 2024, an adverse employment action taken within 90 days of protected activity — a complaint about wages, breaks, safety, or a DLSE filing — carries a rebuttable presumption of retaliation under Labor Code 98.6. The burden shifts to you.
So if a guard complains about meal breaks and disciplinary documentation about that guard suddenly appears in the following weeks, you have not built a defence. You have handed the other side a retaliation claim on top of the wage claim, and retaliation claims carry their own penalties and attorney fee awards.
Discovery will surface when each record was created. Metadata does not forget. A jury that concludes an employer manufactured a paper trail will disbelieve everything else that employer produced.
The documentation that wins is boring: real records, made in real time, about everyone, whether or not anyone is threatening to sue.
How Safetrac produces records that hold up
This is the problem Safetrac was built for. Every action a guard takes is captured as it happens, GPS-pinned and timestamped, without anyone having to remember to write it down.
- Verifiable time and location. Checkpoint scans and patrol activity are GPS-tagged and timestamped, so shift records are backed by location data rather than a guard's memory or a supervisor's reconstruction.
- Meal and rest period tracking. Breaks are recorded as they are taken, producing the contemporaneous evidence that a compliant break was actually provided — and flagging the ones that were not, while there is still time to pay the premium instead of litigating it.
- Automatic disciplinary documentation. Missed patrols and missed breaks are logged automatically as they occur. Because the record is generated by the system at the moment of the event, it is contemporaneous and consistent by construction, applied to every guard identically. That is precisely the evidence courts credit, and precisely the evidence a manually-maintained file cannot produce after the fact.
- Reports your counsel can actually use. Daily Activity Reports and incident records are exportable as PDFs with timestamps, locations, photos and signatures attached — the format a defence attorney wants when they are trying to end a claim early rather than pay to settle it.
You still need the handbook, the signed acknowledgments, the correct wage statements and a lawyer who knows this area. Safetrac covers the operational half: proving what actually happened on shift, every shift, for every guard.
Final thoughts
The uncomfortable truth about California wage and hour law is that being right is not the same as being able to prove it. A significant share of these claims settle not because the employer did anything wrong, but because the cost of proving it exceeds the cost of paying it. The process is the punishment.
The only real answer is to make proving it cheap. Written policies, signed at hire. Accurate wage statements, every period. Break records created as the breaks happen. Patrol data that reconciles with the timesheet. Documentation applied to everyone, generated as events occur, not assembled once a letter arrives.
Do that, and the 2024 reforms now reward you for it with a capped exposure. Skip it, and you are negotiating from a position where the other side's story is the only one with evidence behind it.
Resources and links:
- California Labor Commissioner — Meal Periods
- California Labor Commissioner — Rest Periods
- IWC Wage Order 4 (Professional, Technical, Clerical, Mechanical)
- Labor Code 226 — Wage statement requirements
- PAGA overview — California Department of Industrial Relations
- BSIS licensee lookup
- California Civil Rights Department — harassment prevention training