The Definitive Resource
The Complete
AED Compliance
Guide
AED compliance isn't just a checkbox. It's the difference between a device that works when you need it and one that doesn't. This AED Compliance Guide covers everything from federal law to state requirements and facility-specific rules to liability. You'll learn what a well-run program actually looks like.
Why AED Compliance Actually Matters
Someone in the United States goes into sudden cardiac arrest outside a hospital every 90 seconds.[1] Survival odds drop 7–10% for every minute without defibrillation.[2] The average EMS response time is 8–12 minutes.[3] You don't need a calculator to see the problem.
An AED closes that gap, but only if it's there, working, and someone knows how to use it. Most facilities that own AEDs think they're covered. Many aren't. The gap between "we have an AED" and "we have a compliant AED program" is where people die and lawsuits win.
Every minute without defibrillation reduces survival odds by 7–10%
Compliance isn't a bureaucratic exercise. A well-run AED program means your device is charged, your pads and batteries aren't expired, your team knows where it is, and someone on every shift knows how to use it. Those details are what separate a life-saving tool from an expensive wall decoration.
"An AED that isn't maintained, registered, or accessible isn't a safety asset — it's a liability."
This guide gives you the full picture: what the law requires, what best practice looks like, and how to build a program that holds up, legally and practically.
Federal Baseline Requirements
The federal government doesn't mandate AED placement in most private facilities; that's largely left to the states. However, several federal laws and guidelines establish a baseline and offer important protections.
AEDs in federal buildings helped establish the standard other facilities are measured against
The Cardiac Arrest Survival Act (CASA)
Passed in 2000, CASA established the framework for federal AED programs and directed the placement of AEDs in federal buildings. More importantly, it created the model for state Good Samaritan laws by providing liability protection for lay responders who use AEDs in good faith.
OSHA General Duty Clause
OSHA doesn't have a specific AED standard, but the General Duty Clause (Section 5(a)(1)) requires employers to provide a workplace free from recognized hazards. OSHA has repeatedly cited the availability of AEDs as a factor in workplace safety, particularly in environments where cardiac events are more likely, like industrial facilities, fitness centers, and large office campuses.
OSHA's general guidance recommends AED response within 3–4 minutes of collapse.[6] That's the benchmark your placement strategy should be built around.
The AED Access to Every American Act
This legislation encourages AED placement in public places and created grant programs to support AED acquisition. While it doesn't mandate placement, it reflects federal intent to normalize AED access in community settings.
Federal Building Requirements
All federal buildings under GSA management are required to have AED programs, including trained responders, maintenance protocols, and coordination with local EMS. These standards serve as a practical model for non-federal facilities as they build their own programs.
Federal law sets a floor, not a ceiling. Your state may require significantly more. Always check state-specific requirements before assuming federal compliance is sufficient.
Requirements by Facility Type
AED requirements vary significantly based on what your facility is and how it's used. Below is a breakdown of how compliance typically applies across common facility categories. Remember: state law governs the specifics, so use this as a framework, not a substitute for checking your state.
Schools & Universities
Schools are among the most regulated facility types in most states, and for good reason. Athletic programs, large student populations, and the presence of children create both elevated risk and heightened legal expectations. Most state mandates require AEDs in gyms and athletic facilities at minimum. If your district doesn't already require pediatric pads for children under 55 lbs, it should.
Health Clubs & Fitness Centers
If you run a gym and don't have an AED, you're operating with significant legal exposure. Courts treat fitness centers as high-foreseeability environments: elevated heart rate, physical exertion, and a wide age range of members make cardiac events predictable. Many states mandate AEDs by name for this facility type, sometimes tiered to membership size or square footage.
Government & Municipal Buildings
Public buildings face the broadest obligations. High foot traffic, diverse visitor populations, and the public nature of the space create both a legal duty and a practical necessity. Most municipalities also require EMS registration, and increasingly, that registration is tied to 911 dispatch integration so emergency callers can be directed to your device in real time.
Large Office Buildings
Office buildings don't get a pass just because cardiac events might seem unlikely. OSHA's 3–4 minute benchmark applies regardless of industry. A 10-story office building with one AED at reception isn't compliant; it's a liability. Floors above the third or fourth should have their own device. Buildings with 250+ occupants are increasingly named in state mandates.
Sports & Recreation Venues
Stadiums, golf courses, arenas, and rec centers are named in state statutes more often than any other commercial category. The combination of exertion, excitement, and large crowds is well documented as a cardiac risk profile. Courts have found facilities liable for not having AEDs, and for having them in locations that increased response time.
Healthcare-Adjacent Facilities
Dialysis centers, assisted living facilities, and outpatient clinics operate under a different compliance framework than public buildings, often combining state health department requirements with CMS standards or accreditation rules. The documentation requirements tend to be stricter, and medical oversight is more frequently mandated. Know which framework governs you.
Industrial & Manufacturing
Physical labor, heat exposure, and chemical environments significantly raise cardiac risk above the general population baseline. OSHA's General Duty Clause is the operative framework here, and inspectors have cited AED access in workplace safety findings. Your AED program should be part of your emergency response plan, not a separate afterthought.
Houses of Worship
Not always subject to mandatory requirements, the demographics of many congregations make cardiac preparedness genuinely important. Congregations with a diverse age range gathering weekly in large spaces, often without trained medical personnel nearby, pose a significant risk. For facilities that aren't frequently occupied, maintenance and accessibility planning matter even more than placement.
Navigating State AED Law
This is where compliance can get complicated. The federal government sets a baseline and gets out of the way. States do the heavy lifting, and they've all done it differently. Some have comprehensive mandates with specific placement requirements, penalties, and registration systems. Others have essentially said, “Here's your liability protection if you want it.” Understanding where your state falls changes what you need to do.
What States Typically Regulate
The six things most AED legislation touches are: which facilities must have devices and how many, whether your program needs to be registered with a health department or EMS agency, whether a physician medical director needs to sign off on your protocols, what kind of training is required and how often, what your maintenance documentation needs to look like, and what liability protections you get in return. Not every state covers all six, but the comprehensive ones do.
States With Comprehensive Mandates
A growing number of states have enacted more comprehensive AED legislation that includes required placement in specific facilities, emergency action planning, maintenance requirements, training expectations, and/or EMS coordination requirements. Representative list:
States With Broad Mandates
These states generally encourage AED access or require AEDs only in limited settings (such as certain schools, athletic venues, or public buildings), without broader statewide program management requirements. Representative list:
AED laws vary by state and are frequently updated. Requirements may differ based on facility type, industry, occupancy, athletics, or workplace risk factors. Always review your state and local regulations to ensure compliance.
Registration Isn't Just Paperwork
More than 20 states require some form of AED registration, notifying a health department, local EMS, or 911 dispatch of the device's location. Most organizations skip this step. That's a mistake on two fronts. First, when 911 dispatch knows where your AED is, they can tell callers to go get it while help is on the way. That's not a minor detail; it's the difference between a device being used in the first two minutes and the first eight. Second, in many states, the immunity protections you're counting on are conditional on your program's registration. Miss the registration, lose the protection.
Medical Director Requirements
California, Illinois, New York, and a handful of other states require AED programs to operate under physician oversight. This doesn't mean a doctor on-site; it means a licensed physician who has reviewed your protocols, signed off on your training approach, and can be named as your program's medical director. It sounds bureaucratic, but it's often the piece that unlocks your liability protection. Most AED vendors and program management services can connect you with a medical director if you don't have one.
Visit our State Legislation page for a state-by-state breakdown of AED laws. We maintain an updated tracker of AED requirements across all 50 states.
Running Your AED Program
Buying an AED is the easy part. Building a program that stays compliant, organized, and functional over time is where most facilities fall short. Here's what a well-managed program looks like.
A designated program coordinator is the single most important structural decision in AED program management
Designate a Program Coordinator
Every AED program needs a named owner: one person accountable for keeping the program current. Without it, nothing gets done consistently.
- Track pad and battery expiration dates for every device
- Schedule and document monthly inspections
- Maintain training records and flag upcoming recertifications
- Manage device registration with health departments or EMS
- For multi-site organizations: assign a secondary contact at each location who performs checks and escalates issues
Build Your Written Response Plan
Roles need to be assigned before anyone collapses, not during the emergency. A one-page plan is enough, but a binder nobody opens isn't.
- Who calls 911
- Who retrieves the AED
- Who starts chest compressions
- Who meets EMS at the entrance
- How to report the event to required agencies after
- How to restore the device to service and who reviews the incident
Maintain a Living Inventory
Document every AED your organization owns. A spreadsheet works for small programs; purpose-built AED management software is worth it at five or more devices across multiple locations.
- Serial number and device model
- Physical location
- Battery replacement date and expiration
- Pad expiration date
- Last inspection date
- Registration status
Coordinate With Local EMS
Beyond registration requirements, proactive EMS coordination is one of the highest-value steps you can take.
- Ensures 911 dispatch can direct callers to your device in real time
- Allows EMS to familiarize themselves with your facility layout before an event
- Often opens access to free or subsidized training resources
Set calendar reminders 90 days before every battery and pad expiration. Replacement parts need to be ordered, received, and installed before expiration, not after the device fails its next check.
Post-Event Procedures
After any AED deployment, including training use, act immediately before returning the device to service.
- Replace pads immediately (they are single-use)
- Check and document battery status
- Record the event: date, time, location, patient info, responding personnel
- Report to required state or local agencies if applicable
- Retrieve event data from the device if your model supports it
AED Placement & Quantity
The guiding principle for AED placement is deceptively simple: anyone in your facility should be able to retrieve a device and return to the victim within 3–4 minutes. Everything else, including quantity, floor coverage, and cabinet selection, flows from that benchmark.
AEDs should be reachable from any point in your facility within 3–4 minutes on foot
The 3–4 Minute Rule
This comes directly from OSHA guidance and is grounded in the science of defibrillation.[6] An average person walking briskly covers roughly 200–300 feet per minute. A response time of 3–4 minutes means your AEDs need to be within approximately 600–1,200 feet of any potential victim, accounting for the time to recognize the emergency, locate the device, retrieve it, and return.
In practice, this translates to roughly one AED per floor in most commercial buildings, with additional units in high-risk areas like fitness centers, cafeterias, and assembly spaces.
High-Priority Placement Zones
- Main lobbies and reception areas, the first point of arrival for responding staff
- Fitness centers and gyms, the highest cardiac event risk in most facilities
- Cafeterias and break rooms, which see high daily foot traffic
- Main corridors on each floor of multi-story buildings
- Near security stations or reception desks where trained staff are stationed
- Outdoor areas and parking structures in larger campuses
- Any room with regular large gatherings (auditoriums, conference centers, chapels)
Cabinet Selection and Accessibility
Wall-mounted cabinets keep AEDs visible, accessible, and protected. Choose cabinets that are alarmed; the audible alert notifies nearby staff of a retrieval event and deters tampering. Ensure cabinets are mounted at a height accessible to most adults and are not blocked by furniture, equipment, or signage.
For outdoor locations, weatherproof cabinets rated for temperature extremes are essential. AEDs stored outside their rated temperature range can fail to function correctly, a consideration worth addressing before you need the device.
Signage Requirements
AEDs should be marked with the standard AED signage (green or white heart with lightning bolt) at the device location and with overhead or directional signage visible from the main corridor. Several states specifically require directional signage as part of their compliance requirements. Even where it isn't mandated, visible signage dramatically improves response time: people can't use what they can't find.
Maintenance & Inspection
AED maintenance is non-negotiable, not because regulators require it (though many do), but because an unmaintained device is a device that may fail when someone's life depends on it. Most modern AEDs perform daily self-tests and display a status indicator. Your inspection program should verify that indicator and document the check.
Monthly visual checks take under two minutes per device — the barrier is having a system, not finding the time
Monthly Visual Inspections
Someone should physically verify each AED every month. The full check takes under two minutes per device; the barrier is having a system, not finding the time.
- Confirm the status indicator is green (or shows a ready checkmark)
- Verify the device is in its designated location
- Check that the cabinet is unobstructed and undamaged
- Confirm pads and battery are within their expiration dates
- Log the inspection with date and inspector name
Battery Management
Battery failure is one of the most common causes of AED malfunction. Don't wait for the device to flag an error.
- Most AED batteries last 2–5 years in standby mode depending on the model
- Track expiration dates proactively and replace before they expire
- Keep at least one spare battery on hand per device model
Electrode Pad Expiration
Pad degradation is real: expired pads may fail to adhere or may not deliver adequate energy.
- Shelf life is typically 2–5 years from manufacture date
- Check expiration dates at every monthly inspection
- Always keep a spare set on hand
- Pediatric pads required for children under 55 lbs; track separately if applicable
Post-Deployment Inspection
Any AED use, including training, requires inspection before the device goes back into service.
- Replace pads immediately (single use only)
- Check battery status
- Retrieve and save event data if your model supports it
- Document the inspection before returning the device to its location
Manufacturer Service Intervals
Beyond routine checks, most manufacturers recommend full servicing every 5–7 years. Check your device manual for model-specific guidance. Register your device with the manufacturer to receive firmware updates and safety recall notices.
Many states require documented maintenance records as part of their AED compliance requirements. Even where not mandated, a written inspection log is critical evidence of due diligence in the event of a legal dispute.
CPR & AED Training Requirements
Modern AEDs are designed to walk an untrained bystander through the defibrillation process with clear audio and visual prompts. But training still matters, significantly. Trained responders act faster, perform better CPR, and experience less hesitation when it counts. Training is also a legal requirement in many states and a condition of liability protection in others.
Trained responders act faster and with more confidence. Training dramatically improves outcomes
Who Needs to Be Trained
Start with anyone likely to be first on scene, then build outward. Many states require at least one trained person on-site during all operating hours; factor in evenings, weekends, and turnover.
- Security and front desk staff
- Facilities and maintenance personnel
- Coaches, athletic directors, PE staff
- Any floor warden or designated safety officer
- Build training into onboarding so coverage doesn't erode over time
Accepted Training Programs
AHA and American Red Cross certifications are accepted everywhere. Most courses run 2–4 hours and cover compressions, rescue breathing, AED operation, and cardiac arrest recognition.
- American Heart Association (AHA) — HeartSaver and BLS courses
- American Red Cross (ARC) — CPR/AED and First Aid courses
- HSI — widely accepted alternative for workplace training
- Blended formats (online + in-person skills check) are now widely accepted and far easier to schedule for large teams
Recertification
Certifications are valid for two years. Put recertification on the calendar 90 days before expiration; don't find out at an audit that half your designated responders have lapsed.
- Track each certified employee's expiration date in your program inventory
- Set automated reminders 90 days out
- Refresher courses typically run 1–2 hours
Pediatric Training Considerations
Facilities regularly serving children should ensure training reflects the population on-site.
- Pediatric CPR technique differs meaningfully from adult protocol
- Pediatric electrode pads required for children under 55 lbs
- Applies to schools, rec centers, childcare facilities, and youth athletic programs
Training Records
Maintain a log for every certified staff member. Required in many states, and essential if your program is ever audited or challenged.
- Employee name
- Certification date and expiration date
- Training program and certifying organization
- Keep records for a minimum of five years
Liability & Good Samaritan Law
The most common reason organizations hesitate on AED programs is fear of liability. What if someone uses it wrong? What if it doesn't work? What if we're responsible? Those are the wrong questions. The right question is: what happens to your organization when someone has a cardiac arrest on your property and you either don't have an AED or the one you have doesn't work? Courts have been answering that question for two decades, and the answers are not in favor of unprepared facilities.
A compliant AED program reduces your liability. The absence of one creates it.
Good Samaritan Protections
Every state has Good Samaritan laws protecting people who respond in good faith to a medical emergency. For AEDs, most states extend that protection to lay responders using a publicly accessible device, and to the organization that deployed it, if the response is reasonable and the program meets the state's requirements. That last part is the catch. The immunity isn't unconditional. It comes with the compliance requirements attached. A registered, maintained, properly deployed AED program earns the protection. An afterthought doesn't.
When Facilities Get Sued
Gyms, sports venues, golf courses, and large employers have all faced negligence claims following cardiac events on their properties. The legal theory is consistent: if a cardiac event was foreseeable (and in a gym or stadium, it clearly is), the facility had a duty to prepare for it. Failing to have an accessible AED has been the basis for verdicts in the millions. So has having one that was inaccessible. So has having one with expired pads. The standard isn't "did you try." It's "did you do what a reasonably prudent facility would have done."
A facility that has compliant AEDs, maintains them, trains its staff, and keeps its documentation current has a defensible position. A facility with an AED in a locked storage room with dead batteries does not.
What Voids Your Protection
- Expired pads or dead batteriesAn unmaintained device can void Good Samaritan immunity in many states, and definitely strengthens a plaintiff's negligence argument.
- Failure to registerIf your state ties immunity to registration, an unregistered program has no protection.
- Blocked or inaccessible AEDsCourts treat an inaccessible AED as if it didn't exist at all.
- Gross negligenceWillful disregard for known safety obligations removes all Good Samaritan protections.
- Wrong device for the contextSome states specify approved AED models; using a non-approved device may not qualify for statutory protection.
The Math on Not Acting
A basic AED program (device, cabinet, training, registration) runs a few thousand dollars. Multi-location programs with proper management infrastructure might run a couple of thousand dollars annually. A single negligence verdict in a cardiac arrest case can be in the seven-figure range. The math doesn't require explanation. What requires explanation is the organization that knows the risk and still doesn't act.
For organizations managing multiple facilities, AED.US AED Compliance & Readiness Packages help turn fragmented AED requirements, expiring consumables, and unexpected replacement costs into one predictable operating expense.
"The question isn't whether you can afford a compliant AED program. It's whether you can afford not to have one."
Document Everything
If your program is ever challenged, your documentation is the evidence. Inspection logs, training certificates, registration confirmations, and post-event reports tell the story of a facility that took this seriously. Keep records for a minimum of five years, or longer where your state requires it. Make sure they're somewhere accessible to your legal and risk teams, not just in a facilities binder in a supply closet.
This guide is informational and does not constitute legal advice. AED liability law varies significantly by state and circumstance. Consult qualified legal counsel for guidance specific to your organization and jurisdiction.
Ready to get compliant?
Audit Your Program.
Close the Gaps.
Use our free self-audit checklist to assess your facility across all five compliance categories — placement, maintenance, training, signage, and registration. It takes about 10 minutes and tells you exactly where you stand.
- American Heart Association. Out-of-Hospital Cardiac Arrest Fact Sheet. heart.org
- StatPearls / NIH National Library of Medicine. Defibrillation. ncbi.nlm.nih.gov/books/NBK499899
- Journal of Emergency Medical Services. Response Times: Myths, Measurement and Management. Cites NFPA 1710 standard (8:59 urban target). jems.com
- Sudden Cardiac Arrest Foundation. Myths and Facts. Cites AHA data: 68.5% of OHCAs occur in homes, 21% in public settings. sca-aware.org
- Circulation / American Heart Association Journals. Impact of Bystander Automated External Defibrillator Use on Survival and Functional Outcomes in Shockable Observed Public Cardiac Arrests. Bystander AED use associated with 2.62x higher odds of survival to hospital discharge. ahajournals.org
- Occupational Safety and Health Administration. Standard Interpretation: Clarification of "near proximity" for emergency medical services. January 16, 2007. osha.gov