No single federal law requires most private employers to have an AED. But that answer is incomplete in a way that gets organizations into legal trouble regularly. Many states have AED laws that require defibrillators in specific building types, industries, or public settings — and the list of covered facilities is often broader than employers expect.
Gyms, schools, daycare centers, golf courses, dental offices, government buildings, and workplaces above certain employee counts may be legally required to have an AED depending on your state, regardless of what federal law says or doesn’t say.
⚠️ The answer that gets organizations in trouble: “No federal requirement” is the answer people remember. The state law answer is the one that matters during a citation, a lawsuit, or a post-incident investigation. This guide covers federal law, which states mandate AEDs and for which facility types, what triggers the requirement, and what the legal exposure looks like when a cardiac arrest happens where an AED should have been and wasn’t.
Federal law: what it requires (and what it doesn’t)
At the federal level, there is no OSHA standard that explicitly mandates AEDs in private workplaces. OSHA has published guidance encouraging AED programs and has stated that AEDs are part of a comprehensive emergency response plan — but encouragement is not the same as a legal requirement.
What federal law does establish:
⚖️ OSHA General Duty Clause — Section 5(a)(1) of the OSH Act
Employers must provide a workplace “free from recognized hazards that are causing or are likely to cause death or serious physical harm.” Sudden cardiac arrest is a serious workplace emergency, and OSHA encourages AED programs as part of broader emergency preparedness. OSHA does not have a specific AED standard for most private workplaces, but General Duty Clause exposure is real and fact-specific. OSHA has cited employers under this provision for inadequate emergency response.
🏛 Federal Cardiac Arrest Survival Act (CASA) — 2000
Encouraged AED placement in federal buildings, supported federal AED program guidance, and provided liability protection for certain AED users and acquirers. Does not create a broad AED mandate for private employers.
✈️ Aviation (FAA)
FAA rules require AEDs on certain Part 121 air carrier aircraft with a maximum payload capacity of more than 7,500 pounds and at least one flight attendant. This is a hard aviation requirement, not general workplace guidance.
Bottom line on federal law: No explicit mandate for most private employers, but documented General Duty Clause exposure if a cardiac arrest occurs and no AED was available. That exposure is why most employment attorneys recommend treating AEDs as standard equipment regardless of whether a specific state law applies.
State law: where AEDs are legally required
This is the section that actually answers the question for most readers. State AED laws vary significantly, but the clearest picture comes from looking at which facility types appear most frequently across state statutes.
Facilities where AEDs are most commonly required by state law
| Facility type | States with requirements (examples) | Typical trigger |
|---|---|---|
| Public schools (K-12) | CA, NY, IL, TX, FL, OH, NJ, PA, NC, GA and 20+ others | All schools, or schools with athletics |
| Fitness centers and health clubs | CA, NY, IL, FL, NJ, MD, WA and others | Any facility with exercise equipment |
| Golf courses | NJ, IL, MD, CT and others | 18-hole courses specifically |
| State government buildings | Most states | Buildings open to the public |
| Colleges and universities | CA, NY, IL, TX and others | Campus-wide or athletic-specific |
| Dental offices | Some states | When sedation anesthesia is used |
| Daycare / childcare centers | Select states | Facilities above a certain enrollment |
| Places of public assembly | Select states | Occupancy above a threshold |
| Large employers | Select states | Headcount above a threshold (varies) |
| Hotels and resorts | Select states | Properties above a size threshold |
State-specific examples
🏛 California — H&S Code 1797.196
AED requirements apply to certain health studios, schools, public access settings, and specific worksites. Sets important maintenance, testing, inspection, notification, and recordkeeping rules for AED acquirers. California does not require a medical director or physician for AED acquisition or placement.
🏛 New York — Public Health Law 3000-b
Requires AEDs in health clubs, public schools, and state facilities. Also requires a collaborative agreement with a physician or emergency medical services provider, which functions similarly to medical direction.
🏛 Illinois — AED Act
Requirements apply to physical fitness facilities, schools, golf courses, and some public safety/government settings. Includes requirements for an operable AED on site, trained anticipated users, manufacturer-based maintenance/testing, and incident reporting.
🏛 Texas — Chapter 779
AED rules include requirements for certain schools and care-related facilities, local EMS notification, and training-related standards. Placement requirements should be checked by facility type.
🏛 Florida — F.S. 401.2915
Liability protection and emergency use standards, with specific AED requirements in some settings. Public schools that are members of the Florida High School Athletic Association must have an operational AED on school grounds.
🏛 New Jersey — Comprehensive AED Law
One of the most comprehensive state AED laws in the country. Requires AEDs in health clubs, golf courses, schools, state buildings, and certain sports venues. Also requires AED programs with training and maintenance records.
For a full state-by-state breakdown, the AED laws hub covers each state’s current statutes including facility types, training requirements, and maintenance documentation standards.
When is an AED required in a building?
The trigger varies by state, but the most common thresholds that make a building legally required to have an AED are:
🏢 Occupancy-based triggers
- Buildings regularly accommodating 50+ people (some states use 100 or 250)
- Any public assembly space above a defined capacity (arenas, stadiums)
- Schools with any student enrollment — most states don’t set a minimum
🏋️ Facility-type triggers
- Any health club or fitness facility with exercise equipment, regardless of size
- Any golf course with 18 holes
- Any facility with a competitive swimming pool (some states)
- Any facility where anesthesia is administered (dental, outpatient surgical)
👥 Employee-count triggers
- Some states require AEDs in workplaces above a headcount threshold
- 250+ employees is a common marker in states using this trigger
- Threshold varies — check your specific state statute
🏭 Industry-specific triggers
- Aviation (FAA mandate — Part 121 air carriers)
- Certain maritime operations
- Healthcare facilities (Joint Commission and CMS accreditation requirements)
No universal threshold exists. “When is an AED required in my building?” has a state-specific answer that depends on both the building type and the state you’re operating in. The trigger is almost always facility type first, occupancy second.
What happens if you don’t have an AED when you’re required to
Three categories of exposure — and all three are real.
⚠️ Regulatory fines and citations
States with AED mandates typically include enforcement provisions. In New Jersey, failure to comply with AED program requirements can result in fines. In California, state inspectors can cite health clubs under the Health & Safety Code. In most cases, first violations result in a compliance order and a grace period — but second violations and post-incident findings carry financial penalties.
⚖️ Civil liability
If an employee or visitor suffers a cardiac arrest at your facility, doesn’t survive, and an investigation reveals your building was legally required to have an AED and didn’t — or had one that wasn’t maintained — the Good Samaritan protection that most state AED laws provide specifically does not apply. That protection is conditional on having a compliant program. Without a compliant program, the facility faces civil liability for the outcome.
🏛 OSHA General Duty Clause findings
Post-incident OSHA investigations in workplaces where a cardiac arrest occurred and no AED was available can result in General Duty Clause citations even without a state-specific AED mandate. These citations carry their own fines and require corrective action plans.
What a legally compliant AED program actually requires
Having the device is the starting point, not the finish line. A compliant program in most states that require AEDs includes all of these:
- The device itself. An FDA-cleared AED appropriate for the facility — adult pads minimum, pediatric for schools and childcare.
- Proper placement. Visible, unobstructed, and accessible within 3 minutes of any location in the facility. The AHA recommends using a 3-minute response time guideline when deciding how many AEDs are needed — in practice, this often means placing AEDs near main corridors, reception areas, cafeterias, elevators, and gyms.
- Trained designated responders. At least one person per shift per location trained in CPR/AED from an AHA, Red Cross, NSC, or equivalent program. Some states require a minimum number of trained staff relative to building occupancy.
- Medical direction where required. Some states require a physician, emergency healthcare provider, or collaborative agreement as part of the AED program. New York requires a collaborative agreement. California does not require a medical director for AED acquisition or placement.
- Maintenance documentation. Monthly inspections with logged records covering status indicator, battery, pads, rescue kit, and device condition. The safer approach is to keep all records centrally stored and easy to export.
- EMS/PSAP notification. Many states require AED locations to be registered with local EMS or the Public Safety Answering Point (PSAP) so dispatchers know where AEDs are located.
- Incident reporting. Any use of the AED in a rescue attempt typically requires a post-event report filed with the device manufacturer and in some states with a state health agency.
The device alone is not enough. Having an AED without the program around it satisfies the letter of the law in very few jurisdictions and none of the spirit of it.
💡 AED Log manages the full compliance program — inspections, certifications, expiration alerts, and audit-ready records — from one dashboard.
Even where AEDs aren’t legally required, the risk calculus has shifted
Sudden cardiac arrest kills roughly 350,000 Americans per year outside hospitals, according to the American Heart Association. Survival without defibrillation drops about 10% per minute. The average EMS response time in the US is 7–10 minutes. The math means that in most workplaces, by the time EMS arrives, survival odds without an on-site AED are already low.
The business case for an AED doesn’t depend on a legal mandate. Employee safety, duty of care, insurance positioning, and reputational risk all point the same direction. The legal mandate just makes the decision binary in certain jurisdictions.
What changes the calculus in unregulated workplaces is the OSHA General Duty Clause. Once a workplace has a documented history of cardiac events among its workforce — common in any workplace with employees over 50, or physical labor workers of any age — the absence of an AED becomes harder to defend. Employment attorneys increasingly advise treating AEDs as standard safety equipment regardless of state mandates.
Managing compliance across multiple locations
For organizations managing AED programs across multiple facilities, compliance tracking becomes the bottleneck. Different states have different requirements. Different buildings trigger different facility-type mandates. Inspection records, training certifications, and medical direction agreements all need to stay current across every location simultaneously.
AED Log is built for exactly this structure. Every AED across every location is managed from one dashboard, with monthly inspection reminders tied to each device, battery and pad expiration alerts 60 and 30 days ahead, certification tracking for every designated responder, and audit-ready records that can be exported by location, by device, or by date range when a compliance review asks for them.
The AED laws hub maps out state-specific requirements by facility type so you can confirm which locations are legally mandated and which are operating on best-practice compliance. Pricing is tier-based, not per device — multi-location programs don’t pay more just because they cover more AEDs.
FAQ
Start managing your AED compliance in under 5 minutes
Free forever on 1 AED and unlimited users. No credit card. No trial clock.
✓ Multi-location ready
✓ Audit-ready from day one