Skip to content 
Picture this: it’s a Tuesday afternoon and one of your employees suddenly collapses in the break room. Someone calls 911, but in the chaos, nobody knows what to do next. Does anyone on your team know CPR? Are you legally required to have trained staff on-site? And if something goes wrong, where does that leave you?
If those questions made you pause, you are not alone. Workplace CPR requirements are one of those compliance topics that small business owners know they should understand but rarely get a straight answer on. The rules vary by industry, by state, and sometimes by the specific tasks your employees perform. What OSHA requires for a construction crew is different from what applies to a retail shop, and what your state mandates for a childcare center is different from what applies to a dental office.
The good news is that it is not as complicated as it seems once you break it down. There is a core set of federal standards that apply to certain industries, a layer of state-level rules that may apply to yours, and then a broader zone of practical and ethical considerations that apply to almost every business regardless of legal mandate.
This article will walk you through what OSHA actually says, which industries face explicit requirements, and how to build a sensible training plan whether you are required to or not. By the end, you will have a clear picture of where your business stands and exactly what steps to take next. No legal jargon, no vague disclaimers. Just clear, actionable information you can actually use.
What OSHA Actually Says About CPR Training
Here is the honest answer most people do not get: OSHA does not have a single, universal rule that says every employer must have CPR-trained staff. What OSHA does have is a combination of a broad foundational clause and a set of industry-specific standards that together create real obligations for many small businesses.
The foundational rule is the General Duty Clause, found in Section 5(a)(1) of the Occupational Safety and Health Act. It requires employers to provide a workplace free from recognized hazards that are causing or likely to cause death or serious physical harm. Courts and regulators have interpreted this to include situations where cardiac emergencies are a foreseeable risk and no emergency response capability exists. In plain terms: if someone could reasonably have a cardiac event at your workplace and you have taken no steps to prepare, you may be exposed under the General Duty Clause even if no specific CPR standard applies to your industry.
Beyond the General Duty Clause, OSHA does publish specific standards that explicitly require CPR-trained personnel. The most commonly cited is 29 CFR 1926.50, which covers first aid requirements in construction. It requires that trained first aid personnel be available on-site when a medical facility is not in near proximity. Similar requirements appear in standards for electric power generation and transmission work (29 CFR 1910.269), logging operations, and maritime industries. These are not suggestions. They are enforceable standards with compliance expectations attached.
The distinction between a legal requirement and a best practice is worth taking seriously. Many small businesses, particularly those in retail, hospitality, or professional services, are not covered by a specific OSHA CPR standard. But that does not mean they have zero exposure. If an employee or customer experiences a cardiac emergency and it later comes out that no one on staff had any training and no emergency plan existed, the absence of a specific mandate does not automatically protect a business from liability in civil proceedings or regulatory scrutiny under the General Duty Clause.
The practical takeaway: knowing whether a specific OSHA standard applies to your industry is the starting point, not the finish line. Even if you land in the “not explicitly required” category, the General Duty Clause and basic liability considerations still point toward having a plan.
Industries and Situations Where CPR Training Is Mandatory
Some industries have no ambiguity. If your business operates in one of these sectors, CPR training is not optional. It is a documented compliance requirement.
Construction: Under 29 CFR 1926.50, construction employers must ensure that trained first aid personnel are available at the worksite when a hospital, clinic, or physician is not reasonably accessible. CPR is a core component of that first aid competency. This applies to general contractors and subcontractors alike.
Electrical work: The standard at 29 CFR 1910.269, which governs electric power generation, transmission, and distribution, requires that employees be trained in first aid and CPR. Given the risk of electrocution and subsequent cardiac arrest in this work environment, the requirement is directly tied to the nature of the hazard.
Logging: OSHA’s logging standard requires that at least one person trained in first aid, including CPR, be present at each logging operation. Remote work locations make this especially critical since emergency services may be far away.
Maritime industries: Shipyard employment and marine terminals fall under separate OSHA maritime standards that also include first aid and CPR training requirements.
Beyond federal OSHA, state-level requirements add another layer that varies significantly. Many states operate their own OSHA programs, including California (Cal/OSHA), Washington (L&I), Michigan (MIOSHA), and others. These state plans are permitted to exceed federal OSHA requirements, and many do. A small business operating in one of these states may face more stringent obligations than the federal baseline.
Separate from state OSHA plans, many states have standalone laws requiring CPR training for specific business types. Childcare facilities in most states are required to have CPR-certified staff present at all times. Schools, fitness centers, and certain healthcare-adjacent businesses frequently face similar mandates. These laws are typically administered through licensing agencies rather than OSHA, which is why business owners sometimes miss them. If your business requires a state license to operate, it is worth reviewing whether that licensing framework includes a CPR or first aid training requirement.
AED ownership is another compliance trigger that business owners often overlook. Many states have laws governing AED placement in businesses, and those laws frequently include a requirement that trained personnel be on-site to use the device. The National Conference of State Legislatures tracks these laws, and the specifics vary widely. The key point is that if you have purchased an AED for your business, you may have simultaneously created a legal obligation to maintain CPR-trained staff. AED ownership and CPR training are not separate decisions. In many states, they are inseparable compliance items.
The Gray Zone: When It Is Not Required but Still Smart
Most retail shops, offices, restaurants, and service businesses do not fall under a specific OSHA CPR standard. If you run a marketing agency, a hair salon, or a small accounting firm, you are likely in what we might call the gray zone: not explicitly required to have CPR-trained staff, but not entirely off the hook either.
The cardiac emergency risk does not disappear just because your industry is low-risk by OSHA’s classification. Workplaces with aging employees, physically demanding tasks, or high customer traffic all carry meaningful exposure. A customer experiencing a cardiac event in your store, a longtime employee collapsing during a stressful workday, or a delivery driver suffering an arrest in your parking lot are all scenarios that can happen in any business environment.
Insurance and liability considerations are worth understanding here. CPR training alone does not eliminate liability, and no one should treat it as a legal shield. However, demonstrating a reasonable duty of care matters in both civil litigation and insurance contexts. A business that can show documented training, a written emergency action plan, and properly maintained equipment is in a meaningfully different position than one that took no steps at all. The absence of preparation can become a focal point in legal proceedings even when no specific regulation was violated.
There is also a practical business case that has nothing to do with compliance. Employees who have been trained in CPR report feeling more confident and capable in their workplace. That confidence extends to how they interact with customers and how they perceive their employer’s investment in their wellbeing. For customer-facing businesses, the ability to respond effectively to an emergency in front of other customers can have real implications for your reputation.
Perhaps the most compelling argument is simply the math of emergency response. The American Heart Association has noted that survival rates from cardiac arrest decline rapidly with each minute that passes without intervention. In many areas, especially suburban and rural locations, EMS response times mean that several minutes will pass before professional help arrives. In that window, a bystander who knows CPR is often the only option. If that bystander happens to be your employee, their training is not just a compliance checkbox. It is the difference between life and death for someone in your care.
How Many Trained Employees Do You Actually Need?
This is one of the most practical questions small business owners ask, and the answer depends on a few variables rather than a single universal number.
Where specific OSHA standards apply, the requirement is typically framed around availability and response time rather than a raw headcount. The general principle is that a trained person must be able to reach an injured worker within a reasonable time, often interpreted as three to four minutes. That framing has real implications for how you staff your training program. If you have one certified employee but they work a different shift than most of your team, you may not actually be meeting the spirit of the requirement during those other shifts.
For small businesses assessing their own needs, a practical framework involves three questions. First, how many employees are on-site during each shift? A business with ten employees spread across two shifts needs to think about coverage per shift, not just total headcount. Second, what is the physical layout of your workspace? A single open floor plan is very different from a multi-story building or a facility with isolated work areas. A trained employee who is always in the back office may not be reachable in time if an emergency happens in the front of the building. Third, do any of your employees regularly work alone or in isolated conditions? Solo workers in remote or low-traffic areas represent a distinct risk category that requires separate consideration.
A reasonable starting point for most small businesses is to ensure that at least one trained employee is present during every operational shift, with a second trained person as backup coverage for absences and turnover. For larger teams or more complex physical environments, a higher ratio makes sense.
Certification currency is just as important as headcount. CPR certifications from the American Heart Association and the American Red Cross, the two primary nationally recognized bodies, typically require renewal every two years. A training program that accounts for renewal and new hire onboarding is what separates a one-time effort from a sustainable program.
Choosing the Right CPR Certification for Your Team
Not all CPR certifications are the same, and choosing the right level for your team matters both for compliance purposes and for practical effectiveness.
Heartsaver CPR AED: This is the American Heart Association course designed specifically for non-medical personnel in workplace and community settings. It covers adult, child, and infant CPR, AED use, and relief of choking. For most small business employees without clinical backgrounds, this is the appropriate starting point and the one most commonly accepted for OSHA and state compliance documentation.
First Aid combined courses: Many certification programs bundle CPR with First Aid training, which covers wound care, fractures, burns, and other common workplace emergencies. For businesses that want to build broader emergency response capability, a combined CPR and First Aid certification is often more practical than CPR alone.
BLS (Basic Life Support): BLS is the standard designed for healthcare providers and individuals in higher-risk roles where they may need to perform CPR in clinical or professional settings. For most non-medical small business employees, BLS is more than what is required. However, if your business employs medical staff, operates in a healthcare-adjacent environment, or has employees whose roles involve direct patient or client care, BLS may be the appropriate standard.
ACLS (Advanced Cardiovascular Life Support): ACLS is a clinical certification for healthcare professionals managing advanced cardiac emergencies. It is not relevant for standard small business compliance purposes.
Group and corporate training formats offer a significant advantage for small businesses. Rather than sending individual employees to public certification classes on separate days, an on-site group training session allows you to certify your entire team in a single block of time. This reduces lost productivity, ensures everyone receives consistent instruction, and often costs less per person than individual enrollments. It also allows the training to be customized to your specific work environment and the scenarios your employees are most likely to encounter.
When evaluating any certification program, look for hands-on skill practice with mannequins and AED trainers, scenario-based learning that mirrors real emergencies, and a credential issued by a nationally recognized organization. A certificate that satisfies OSHA documentation requirements and holds up to scrutiny during an inspection is not a minor detail. It is the whole point.
Building a Compliant Workplace Safety Plan That Lasts
Getting your team certified is the most important step, but it is not the last one. A compliant workplace safety program requires documentation, equipment, and a clear plan for how emergencies are actually managed when they happen.
Documentation is what makes your training program visible to regulators, insurers, and legal reviewers. Keep a record for each certified employee that includes their name, the course they completed, the certifying organization, the date of certification, and the renewal date. Store these records somewhere accessible and review them at least annually to identify upcoming expirations. During an OSHA inspection, being able to produce clean, current records demonstrates that your program is real and ongoing, not a one-time effort.
If your business has an AED on-site, its placement and maintenance deserve the same attention as your training records. AEDs should be positioned where they can be reached within two minutes from any point in your facility. Many states require businesses to register their AEDs with local emergency medical services so that dispatchers can direct callers to the device during a 911 call. Check your state’s requirements and confirm your device is registered if applicable. Monthly visual checks and regular battery and pad inspections should be part of your routine safety procedures, logged and dated just like any other compliance activity.
An emergency action plan ties everything together. OSHA actually requires written emergency action plans for most businesses with more than ten employees, but even businesses below that threshold benefit from having one. A good emergency action plan assigns specific roles: who calls 911, who retrieves the AED, who meets the ambulance, who clears the area. Trained employees should know explicitly that they are expected to respond. Untrained employees should know their role in supporting the response without getting in the way.
Review your emergency action plan at least once a year and whenever you hire new employees, change your physical layout, or add new equipment. A plan that was written three years ago and has never been updated is not a functional safety tool. It is a document that creates a false sense of preparedness.
Your Next Steps Start Here
Here is the bottom line on workplace CPR requirements for small businesses: if your industry falls under a specific OSHA standard, compliance is not optional and the path forward is clear. If you operate in the gray zone where no specific mandate applies, the practical and ethical case for trained employees is still compelling enough that most thoughtful business owners choose to act anyway.
The good news is that getting compliant does not have to be complicated or expensive. A single group training session can certify your entire team, satisfy documentation requirements, and give your employees skills they will carry for life. Pairing that training with a properly placed AED and a simple emergency action plan puts you in a genuinely strong position, not just on paper but in the moments that actually matter.
Respond and Rescue makes this straightforward. Whether you need group CPR and First Aid training for your team, AED equipment for your facility, or help building a complete emergency preparedness plan, everything is available in one place. There is no need to piece together training from one provider, equipment from another, and compliance documentation from a third.
When a real emergency hits, there is no pause button and no second chances. Get hands-on CPR, First Aid, and AED training that prepares you to act fast and with confidence when it matters most. Find a local class or schedule your on-site training now and leave certified, prepared, and ready to save a life.
