AED Compliance Requirements: What Organizations Must Know

Sudden cardiac arrest does not announce itself. It can strike a coworker during a morning meeting, a student in a school gymnasium, or a gym member mid-workout. Every second counts — and as we move through 2026, the organizations best positioned to respond are those that have already done the compliance work before a crisis unfolds.

For organizations that want to do the right thing, the challenge often lies not in the intention but in the complexity. AED compliance requirements are not governed by a single national law. Instead, they emerge from a layered system of state statutes, federal workplace guidelines, local ordinances, and industry standards that can vary dramatically from one jurisdiction to the next. That complexity leaves many safety managers, HR professionals, and business owners unsure of where to start — and regulatory updates across multiple states this year have made staying current more important than ever.

This guide is designed to cut through that confusion. Whether you are building an AED program from scratch, auditing an existing one, or simply trying to understand your legal obligations, you will find clear answers here. We will cover the legal landscape, which facilities are typically required to have AEDs, how placement and maintenance work, what training looks like, and how to pull it all together into a program that actually protects people. 360 Safety is here as a trusted resource every step of the way, from equipment to CPR and BLS training.

The Legal Landscape Behind AED Requirements

One of the first things that surprises people learning about AED compliance is that there is no single federal law requiring most organizations to have an AED on site. Instead, the legal framework is a patchwork of federal guidelines, state statutes, and local rules that apply differently depending on where you operate and what kind of facility you run.

At the federal level, OSHA's General Duty Clause plays an important indirect role. Section 5(a)(1) of the Occupational Safety and Health Act requires employers to provide a workplace free from recognized hazards that are causing or likely to cause death or serious physical harm. While OSHA has not issued a specific AED standard, regulatory guidance and legal precedent have increasingly connected this clause to AED availability in workplaces where cardiac emergencies are a foreseeable risk. In settings with large workforces, physically demanding work, or older employee populations, the absence of an AED could be viewed as a recognized hazard left unaddressed.

At the state level, the picture becomes more specific. All 50 states have enacted some form of AED legislation, though the details vary considerably. Many state laws address who must have AEDs, where they must be placed, how they must be maintained, and what training is required. These statutes are updated regularly, which is why organizations should consult current resources rather than relying on outdated summaries.

One of the most important features of state AED legislation is liability protection. Most states have enacted Good Samaritan laws and AED immunity statutes specifically designed to encourage AED deployment. These laws generally protect organizations that acquire and maintain AEDs in good faith, as well as individuals who use an AED in an emergency, from civil liability. This protection exists to remove fear of lawsuits as a barrier to action. The policy logic is straightforward: society benefits when more people and organizations are willing to use AEDs, so the law creates a safety net for those who try to help.

Understanding this legal foundation helps organizations see AED compliance not as a bureaucratic burden but as a system designed to encourage life-saving action while providing reasonable legal cover for those who participate in good faith. Organizations looking to strengthen their overall workplace safety compliance will find that AED readiness fits naturally into a broader safety culture.

Which Facilities Are Commonly Required to Have AEDs

While no single federal mandate covers all workplaces, state laws have identified specific categories of facilities where AED requirements are most common. If your organization falls into one of these categories, there is a strong likelihood that your state has statutes directly applicable to you.

Fitness Centers and Gyms: Physical exertion increases cardiac risk, which is why fitness facilities are among the most frequently mandated locations in state AED laws. Many states require health clubs and fitness centers above a certain membership or occupancy threshold to have AEDs on site and staff trained to use them.

Schools and Educational Institutions: A growing number of states require AEDs in K-12 schools, colleges, and universities. Student athletes are a particular focus of these laws, and many states specifically require AEDs at athletic events and in school gymnasiums.

Large Office Buildings and Workplaces: Some states and localities require AEDs in office buildings above a certain square footage or occupancy level. Employers in these settings may also face indirect pressure from OSHA's General Duty Clause, as discussed above.

Sports Venues and Recreation Facilities: Stadiums, arenas, golf courses, and public recreation centers are commonly named in state AED statutes, particularly when they host large public gatherings.

Healthcare Facilities: Hospitals, clinics, and other healthcare settings almost universally have AED and defibrillation requirements, though these are typically governed by healthcare accreditation standards as well as state law.

Government Buildings: Many states require AEDs in state and municipal buildings, courthouses, and other government-owned facilities open to the public.

It is worth noting that even when an organization is not legally required to have an AED, many industry standards, insurance requirements, and liability considerations make having one a recognized best practice. Courts and juries have increasingly looked unfavorably on organizations that had no AED available during a preventable cardiac death, even in the absence of a specific legal mandate.

For organizations operating across multiple states, the complexity multiplies. Each jurisdiction has its own statutes, and what satisfies compliance in one state may fall short in another. The National Conference of State Legislatures maintains an AED law database that serves as a useful starting point for jurisdiction-specific research. Working with a knowledgeable provider like 360 Safety can help organizations navigate these differences without getting lost in the legal weeds. Explore our AED devices and solutions designed to meet requirements across a range of facility types.

Placement and Accessibility: Getting AEDs Where They Need to Be

Owning an AED is only the beginning. Where you place it and how accessible it is can determine whether it actually gets used in time to save a life.

The guiding clinical principle behind AED placement comes from the American Heart Association and the American Red Cross, both of which emphasize that defibrillation should occur as quickly as possible after cardiac arrest, ideally before the five-minute mark. Survival rates decline significantly with each passing minute without defibrillation. This principle shapes the widely referenced guideline that an AED should be retrievable and in use within three to five minutes of a cardiac event, which has practical implications for how many units a facility needs and where they must be located.

In a large building, a single AED locked in