Are businesses required to have an AED? For most businesses, no. There is no general federal law requiring an automated external defibrillator on site at offices, retail stores, restaurants, or similar workplaces. The only broad federal AED mandate covers commercial airlines. Beyond that, requirements come from state and local laws aimed at specific business types, most commonly gyms, dental offices that use sedation, schools with athletic programs, and public pools.
Why There’s No General Federal Requirement
OSHA does not require AEDs. Its own guidance states that “OSHA standards do not specifically address automated external defibrillators.”1Occupational Safety and Health Administration. Automated External Defibrillators (AEDs) – Overview The agency encourages employers to include AEDs in a workplace first-aid program, especially where emergency medical services response times are long or the work raises cardiac risk, but that encouragement carries no legal weight.
The provision most often raised in this discussion is the OSHA general duty clause, which requires every employer to furnish a workplace “free from recognized hazards that are causing or are likely to cause death or serious physical harm.”2GovInfo. 29 U.S.C. 654 – Duties of Employers and Employees OSHA has never interpreted that language to require AEDs, and no employer has been cited under it for not having one. In a low-risk office, sudden cardiac arrest is not the kind of recognized hazard the clause was built to address.
Federal buildings themselves aren’t required to have them either. In 2023, the General Services Administration published guidelines for voluntary “safety station” programs in federal facilities and stated plainly that such programs “are voluntary and are not mandatory for Federal facilities.”3Federal Register. Guidelines for Safety Station Programs in Federal Facilities
The One Federal Exception: Commercial Aircraft
Commercial air travel is the single industry with a genuine federal AED mandate. Since April 2004, FAA regulations have required all Part 121 passenger-carrying aircraft that have a flight attendant and a maximum payload capacity of more than 7,500 pounds to carry an approved automated external defibrillator.4eCFR. 14 CFR 121.803 – Emergency Medical Equipment The device must be readily accessible to crew and passengers, clearly marked, and inspected on the schedule set by the airline’s operations specifications. The rule covers essentially every domestic commercial flight.
State AED Requirements by Business Type
The real patchwork sits at the state level. States have singled out specific business categories, and the list keeps growing. The categories most commonly covered:
- Health clubs and fitness centers. Roughly 14 states require AEDs at gyms and fitness facilities. This is the most common state-level mandate, reflecting that intense exertion is a known cardiac trigger.
- Schools. About 20 states plus the District of Columbia require AEDs in K-12 schools, with some laws specifically tied to schools with athletic programs.
- Dental offices. Around 22 states require AEDs in dental practices, almost always linked to offices that administer deep sedation or general anesthesia rather than routine care using local anesthetics.
- Public swimming pools. At least 6 states require AEDs at public or community pools.
- Government buildings. A small number of states require AEDs in certain state or local government buildings such as courthouses and capitol buildings.
- Nursing homes. A couple of states explicitly mandate AEDs in long-term care facilities.
These figures move as more states pass legislation, so check your state’s current statutes directly if your business falls into any of these categories. Specifics matter: some laws apply only to facilities above a certain square footage or membership count, and many spell out exactly where the device must be placed, how it must be signed, and who must be trained to operate it.
If You’re Not Required, Should You Have One Anyway?
A common concern among business owners is that putting an AED on site creates legal exposure if someone uses it incorrectly or the device malfunctions. The legal framework actually pushes the opposite direction. All 50 states have some form of Good Samaritan law protecting people who use an AED in an emergency, and federal law adds a baseline layer on top.
Federal Immunity Under 42 U.S.C. §238q
Under federal law, a person who uses or attempts to use an AED on someone experiencing a perceived medical emergency is generally immune from civil liability for harm resulting from that use.5GovInfo. 42 U.S.C. 238q – Liability Regarding Emergency Use of Automated External Defibrillators The same immunity extends to the business that acquired the AED, as long as it notified local emergency responders of the device’s location within a reasonable time, properly maintained and tested the device, and provided appropriate training to the employee who used it.
Immunity disappears if the harm resulted from willful misconduct, gross negligence, or reckless indifference to the victim’s safety. It also does not apply to licensed health care professionals acting within their professional scope, or to hospitals and clinics whose core purpose is patient care.5GovInfo. 42 U.S.C. 238q – Liability Regarding Emergency Use of Automated External Defibrillators The federal statute acts as a floor; if your state provides equal or greater immunity, the state law governs.
The Risk of Not Having One
For businesses where state law requires an AED, the liability math is simple. Failing to comply and then having someone suffer cardiac arrest on your premises creates an obvious negligence claim.
Even where no statute requires one, premises liability law has been expanding into gray territory. Property owners have a duty to protect against foreseeable risks, and with roughly 350,000 out-of-hospital cardiac arrests each year in the United States, plaintiffs’ attorneys have argued that cardiac events are foreseeable in certain settings. That argument carries the most weight where people engage in vigorous physical activity, or in large and isolated facilities where paramedics cannot arrive quickly. Using an AED within the first few minutes of a cardiac arrest roughly doubles the person’s chance of survival, and the legal trend is toward more AED requirements, not fewer.
Ongoing Responsibilities if You Have One
Buying the device is the easy part. Running the program is where businesses stumble, and maintenance failures are exactly what strip away the federal Good Samaritan protections.
Registration and Placement
Many states require you to register each AED with your local emergency medical services system or a state registry. Registration lets dispatchers and paramedics know the device is on site, which can shape how they handle a 911 call. Even where registration isn’t legally required, it’s free and takes minutes. The AED itself needs to be mounted somewhere visible and accessible, with clear signage. Think about placement the way you would a fire extinguisher: someone in a panic should be able to find it in under a minute from anywhere in the building.
Maintenance and Training
AEDs need regular inspections, typically monthly visual checks at a minimum. Each inspection should confirm that the status indicator shows the device is ready, that the electrode pads haven’t expired, and that the battery has adequate charge. Batteries last two to five years depending on model; pads last two to four. Both must be replaced immediately after any use on a patient, even if they haven’t expired. Keep written inspection records. If someone is harmed and your AED fails because of expired pads or a dead battery, those logs are the first thing an attorney will ask for, and their absence is almost as damaging as the failure itself.
Most state AED laws require that at least some staff be trained in CPR and AED use. Modern devices provide voice-guided instructions and are designed to be usable by untrained bystanders, but trained users respond faster and make fewer errors. Courses through the American Heart Association and the Red Cross take a few hours and remain valid for two years.
Medical Director Oversight
Some states require a licensed physician to serve as the medical director for your AED program. The medical director reviews your protocols, approves training standards, and may need to receive reports after any deployment. The cost is modest, often $100 to $200 per year through state-affiliated programs or third-party AED management services. A few states provide medical oversight free of charge through their EMS agencies.
What an AED Program Costs
Cost is why many businesses that should have an AED still don’t. The expense is real but more manageable than most people assume.
- The AED unit itself typically runs $1,000 to $2,500 depending on brand, features, and whether you buy or lease. Leasing spreads the cost into annual payments over about five years.
- Replacement batteries run roughly $100 to $400, and electrode pads or combination pad-and-battery packs run $50 to $280, depending on model. You’ll replace these every two to five years under normal conditions, or immediately after each use.
- A basic wall-mounted cabinet with an alarm and AED signage costs $100 to $300.
- Group CPR/AED classes run roughly $30 to $80 per person through national organizations.
- Medical director fees, where required, generally run $100 to $200 per year, with some state programs offering oversight at no cost.
Total first-year cost for a single-AED program with trained staff typically falls between $1,500 and $3,500, with a few hundred dollars annually after that for maintenance and training renewals. AED purchases are deductible as ordinary business expenses, and some businesses negotiate volume discounts through insurance carriers or industry associations. Businesses required by law to have AEDs should also check whether their state offers grant programs or subsidies aimed at expanding AED access in public-facing facilities.