A single message can shut down a school. One voicemail can lock down a hospital. An angry post can clear out a sanctuary before a service even begins.
Officials take threats aimed at institutions very seriously, and and starting January 1, 2026, California law gives officials the ability to bring criminal charges against someone who makes a credible threat against an institution.
Starting January 1, 2026, Penal Code section 422.3 will go into effect. The new law targets credible threats of serious violence aimed at people at specific institutions, even when the threat doesn’t name an identifiable individual.
The new law can be charged as either a misdemeanor or a felony. That means penalties can range from up to one year in county jail on a misdemeanor filing to 16 months, two years, or three years on a felony filing. And even before a case reaches court, the collateral damage can hit fast: arrests, device seizures, protective orders, job consequences, and a rapid-moving investigation driven by screenshots, messages, and metadata.
If you or someone you know has been accused of making a threat against an institution, your freedom is at risk. Contact the Helfend Law Group today to begin building your defense.
- What changes on January 1, 2026
- How Penal Code 422.3 works
- What prosecutors must prove under Penal Code 422.3
- Was there a willful threat of serious violence?
- Was the threat aimed at people at one of the covered institutions?
- Was the statement made with the intent that it be taken as a threat?
- Was the threat unequivocal, unconditional, immediate, and specific?
- Did the threat cause sustained fear, and was that fear reasonable?
- What “by any means” looks like in the real world
- Penalties under Penal Code 422.3
- Why the penalties matter in real cases
- How Penal Code 422.3 interacts with Penal Code 422
- Common scenarios where 422.3 charges can show up
- Defense pressure points in institution-based threat cases
- What to do if you’re being investigated for a threat
- Talk to Helfend Law Group about a Penal Code 422.3 allegation
What changes on January 1, 2026
SB 19 created Penal Code section 422.3, a new criminal threats statute focused on threats of death or great bodily injury aimed at people at sensitive locations, including:
- Daycares
- Schools and universities
- Workplaces
- Houses of worship
- Medical facilities
The law also modernizes how threats are treated in practice. It explicitly covers threats made “by any means,” including images and threats posted or published online. And it makes clear that prosecutors do not need to prove the person intended to actually carry out the threat, so long as the person intended the statement to be taken as a threat and the threat meets the legal standards.
How Penal Code 422.3 works
Penal Code 422.3 borrows much of the structure prosecutors use for classic “criminal threats” cases, but it shifts the focal point from an identifiable individual to a category of potential victims at a defined location.
This is not a “bad joke” statute. It is not meant to punish vague venting or abstract political rhetoric.
To fit 422.3, the threat must be specific enough, immediate enough, and serious enough that it conveys a real prospect of execution, and it must actually cause sustained fear that is reasonable under the circumstances.
What prosecutors must prove under Penal Code 422.3
In a real case, the prosecution will build the charge around a checklist of elements. The core questions are:
Was there a willful threat of serious violence?
The threat must be a willful statement to commit a crime that would result in death or great bodily injury. The law is aimed at serious, violent threats, not insults, general anger, or statements that don’t rise to that level.
Was the threat aimed at people at one of the covered institutions?
This is where 422.3 differs from traditional criminal threats cases. The statute focuses on threats directed at people “at” a daycare, school, university, workplace, house of worship, or medical facility. The threat can be framed broadly, such as “everyone there,” “people at that campus,” or “the staff at that clinic,” so long as the other elements are met.
Was the statement made with the intent that it be taken as a threat?
The prosecution must show the speaker intended the statement to be taken as a threat, even if the speaker did not intend to carry it out. That distinction matters. The law is aimed at intentional intimidation and fear-inducing communications, not misunderstood sarcasm or careless phrasing that lacks intent.
Was the threat unequivocal, unconditional, immediate, and specific?
The statute requires a high standard: the threat, on its face and under the circumstances, must be so unequivocal, unconditional, immediate, and specific that it conveys gravity of purpose and an immediate prospect of execution.
This is where context becomes critical. Courts do not analyze a threat in a vacuum. They consider the surrounding circumstances, including:
- Prior history between the speaker and the institution
- Whether the speaker has made similar statements before
- Whether the message includes details (time, place, method)
- Whether the message references real-world events, weapons, or plans
- Whether the message was delivered in a way that suggests escalation
Did the threat cause sustained fear, and was that fear reasonable?
For 422.3, it is not enough that someone felt briefly unsettled. The threat must cause a person or persons to be in sustained fear for their own safety or the safety of others at the location, and that fear must be reasonable under the circumstances.
In practice, prosecutors often use facts like these to show sustained fear:
- Lockdowns, evacuations, or shelter-in-place orders
- Calls to law enforcement and deployment of officers
- Canceled classes, services, shifts, or appointments
- Security measures taken in response to the threat
- Statements from witnesses describing ongoing fear after receiving the threat
What “by any means” looks like in the real world
SB 19 does not limit threats to face-to-face statements. A threat can be delivered through:
- Text messages and group chats
- DMs on social media
- Public posts, stories, or comments
- Photos or memes paired with threatening language
- Voicemails
- Anonymous messages or burner accounts
This is a double-edged sword. It helps prosecutors capture modern threats. It also increases the risk of misidentification and overcharging, especially when an account is shared, spoofed, hacked, or used by someone else.
Penalties under Penal Code 422.3
For adults, Penal Code 422.3 is a wobbler. That means it can be charged as a misdemeanor or a felony, depending on the facts, the defendant’s record, and the prosecutor’s approach.
- Misdemeanor exposure: up to one year in county jail.
- Felony exposure: felony sentencing under realignment (served in county jail), with the standard triad of 16 months, two years, or three years.
For people under 18, the statute uses a different path, including referral to services in eligible cases and misdemeanor treatment in ineligible cases. In many adult-focused investigations, that juvenile framework is less relevant, but it signals a broader theme: the law is trying to address institutional safety while steering many youth cases toward services rather than automatic felony treatment.
Why the penalties matter in real cases
A wobbler statute gives prosecutors leverage early. Even if a case ultimately resolves as a misdemeanor, the threat of a felony filing can shape bail, plea negotiations, and probation terms. It can also drive how aggressively investigators pursue evidence, especially digital evidence.
It’s also important to think beyond the maximum jail numbers. In institution-based threat cases, penalties and court orders often come with practical consequences that show up immediately, including:
- Emergency protective orders or no-contact orders, sometimes issued at arraignment
- Restrictions on returning to the location involved (a workplace, campus, clinic, or house of worship)
- Probation conditions that limit online activity, communications, and contact with certain people
- Required counseling, anger management, or mental health-related evaluations in some cases
- Employment and licensing fallout triggered by the allegation itself, long before any conviction
This is why early defense work matters. The right approach can change how the case is charged, what evidence comes in, and what options exist for keeping the outcome as controlled as possible.
How Penal Code 422.3 interacts with Penal Code 422
SB 19 also includes an important limitation: a person cannot be convicted for the same threat under both Penal Code 422 and Penal Code 422.3.
That said, prosecutors can still pursue other charges tied to the same incident, depending on what happened. Threat cases frequently come bundled with allegations tied to phones, online conduct, weapons, probation conditions, restraining orders, or false reports. The charging map can get complicated quickly, which is why early defense strategy matters.
Common scenarios where 422.3 charges can show up
Threat cases rarely begin with a “clean” fact pattern. They usually start with stress, conflict, and a trail of digital evidence that gets interpreted in the worst possible light.
Here are common pathways into a 422.3 investigation:
Workplace fallouts
An employee or former employee sends a message after termination or discipline, referencing the workplace, coworkers, or “everyone there.” Even if the message is sent to one person, the target can be framed as people at the workplace.
School or campus threats
A student, parent, or outsider posts or messages something about violence at a campus. Many of these cases involve social media, screenshots, and fast-moving rumors. The immediate response tends to be aggressive because institutions cannot risk getting it wrong.
Houses of worship
Threats aimed at a congregation, clergy, or attendees often trigger rapid law enforcement response. The broader the audience, the more likely prosecutors argue the threat is institution-based and covered by 422.3.
Medical facilities
Threats against a clinic, hospital, or staff can arise from frustration over care, billing, mental health crises, or personal conflict. These cases can move quickly because the facility is operationally sensitive and the public safety response tends to be swift.
Defense pressure points in institution-based threat cases
Threat cases feel straightforward from the outside. They often aren’t. Many prosecutions hinge on inference and interpretation, and that creates room for defense work.
Identity and attribution
Who actually sent the message? Can the prosecution prove the defendant authored it, controlled the account, and transmitted the communication? Device access, shared passwords, spoofed numbers, and hacked accounts can change the case.
Context and meaning
Threat language is sometimes figurative, impulsive, or quoted from culture. Context can matter, including the surrounding conversation, prior statements, and whether the message was escalated or de-escalated immediately after.
Intent to be taken as a threat
The prosecution must prove the statement was intended to be taken as a threat. That becomes a fact fight when the message is ambiguous, sarcastic, reactive, or poorly worded but not intended as intimidation.
The “unequivocal, immediate, and specific” requirement
Many communications are ugly but not specific. Some are conditional (“if you don’t…”). Some lack any detail that suggests immediacy. The defense can attack whether the message truly conveys an immediate prospect of execution.
Sustained fear and reasonableness
The law requires sustained fear that is reasonable. If the fear was fleeting, exaggerated, or not tied to the defendant’s communication, that can be a meaningful challenge.
Search and seizure issues
Threat investigations often involve rapid searches, device seizures, and statements taken in high-pressure interviews. The legality of a stop, a search warrant, or an interrogation can be a major leverage point.
What to do if you’re being investigated for a threat
If law enforcement contacts you, or your workplace/school tells you an investigation has started, the next steps matter.
- Do not “clear it up” in an interview. Threat cases turn explanations into admissions.
- Do not consent to searches of your phone or devices.
- Do not delete posts, messages, or accounts. Deletion can look like consciousness of guilt and can destroy context that helps the defense.
- Do not contact the institution or the people involved. Even well-intended contact can be framed as intimidation or escalation.
- Get counsel involved early, before you make statements or decisions that lock you into a narrative.
Talk to Helfend Law Group about a Penal Code 422.3 allegation
SB 19 takes effect January 1, 2026, and it creates a new way to charge threats aimed at workplaces, schools, houses of worship, and medical facilities, even when no specific victim is named. If you are accused of making a threat, the case will move fast, the evidence will be heavily digital, and the consequences can be severe.
Contact Helfend Law Group to discuss what happened, understand your exposure under Penal Code 422.3, and build a defense strategy before the situation escalates.
Published December 24, 2025.