Employee safety training requirements are not a single list. They are built from federal OSHA standards, state-plan rules, industry regulations, and employer or insurer policies, and which ones apply to you depends on your hazards, your job roles, and your location. A hospital, a warehouse, and a dental office each face a different set, and company size alone does not exempt anyone.

That matters because the most common compliance failures come from assuming a generic training package covers everything. This article maps the law to specific training topics and roles, explains where CPR, First Aid, and AED training fit, and shows how to document your program so you can prove it when an inspector asks.

Where Workplace Safety Training Requirements Come From

The starting point is the Occupational Safety and Health Act of 1970. Its General Duty Clause requires employers to provide a workplace free from recognized hazards that are causing or likely to cause death or serious physical harm. The clause does not name any course. It is a catch-all that OSHA can use when a recognized hazard exists but no specific standard addresses it.

The specific training mandates live in OSHA standards, which are codified in Title 29 of the Code of Federal Regulations. Part 1910 covers general industry, and Part 1926 covers construction. Other parts address maritime and agriculture. An OSHA standard is an enforceable rule, and many of them include explicit training language: who must be trained, on what, and sometimes how often.

State plans can be stricter

Roughly half the states run their own OSHA-approved occupational safety programs, known as state plans. They must be at least as effective as federal OSHA, and many add requirements. California's Cal/OSHA, for example, enforces rules such as a written Injury and Illness Prevention Program that federal OSHA does not require in the same form. If you operate in a state-plan state, the state rule governs, so check your state agency's standards rather than relying on federal text alone.

Layers beyond OSHA

Other requirements sit on top of the legal baseline:

Industry regulators and accrediting bodies: healthcare facility licensing rules, childcare licensing, and accreditation standards often specify life-support or infection-control training.
Insurers: workers' compensation and liability carriers may require or reward training that exceeds the legal minimum.
Employer policy: contracts with clients, internal safety programs, and union agreements can add obligations you are bound to follow.

A practical way to think about it: the law sets the floor, and everything else raises it for your specific situation.

Training OSHA Commonly Requires by Standard

OSHA does not publish one universal training list. Training is triggered by the hazards present and the duties employees perform. Several general industry standards come up repeatedly:

Hazard communication (1910.1200): employees who may be exposed to hazardous chemicals must be trained on labels, safety data sheets, and protective measures.
Bloodborne pathogens (1910.1030): employees with occupational exposure to blood or other potentially infectious materials, common in healthcare, must be trained, with the content specified in the standard.
Emergency action plans (1910.38): employers required to have a plan must review it with employees covering evacuation, alarms, and their assigned roles.
Portable fire extinguishers (1910.157): where employees are expected to use extinguishers, they must be trained in their use and the hazards of fighting fires.
Lockout/tagout (1910.147): employees who service or maintain machinery must be trained on energy control procedures.
Personal protective equipment (1910.132): workers required to use PPE must know when it is necessary, how to wear it, its limits, and how to care for it.

Why hazards, not headcount, drive the list

An office with no chemicals, machinery, or blood exposure may need little beyond emergency action and exit training. A warehouse adds forklift operation, lockout/tagout, and hazard communication. A hospital adds bloodborne pathogens and clinical life-support expectations. Small employers are not exempt from training duties. OSHA does relax some recordkeeping rules for small employers, but that is a different matter from training.

Timing rules

Most standards follow a pattern: train employees initially when they are assigned a task, and retrain when workplace conditions, equipment, or procedures change, or when an employee's performance shows the training did not stick. Some standards add fixed intervals. Bloodborne pathogens training, for instance, requires an annual refresher, and fire extinguisher training is required at hire and annually where employees are expected to use them. Intervals differ by standard and can be revised, so confirm each one against the current text on osha.gov before you build your schedule.

Do Employers Have to Provide CPR, First Aid, and AED Training?

Sometimes by federal rule, often by state or industry rule, and almost always as a sensible precaution. The answer depends on where you work and what your workplace looks like.

The key general industry provision is 1910.151(b): when there is no infirmary, clinic, or hospital in near proximity to the workplace, a person or persons must be adequately trained to render first aid. OSHA's interpretation letters have indicated that for serious injuries such as cardiac arrest or severe bleeding, trained responders should be reachable within a few minutes, commonly cited as about three to four minutes. Treat that as guidance rather than a codified number, and read OSHA's current interpretation before relying on it. In practice, an ambulance arriving in ten minutes does not usually count as near proximity for life-threatening emergencies.

Construction is more explicit. Standard 1926.50 requires first aid supplies and trained first aid providers on job sites, and where medical help is not readily accessible, a person with valid first aid and CPR training must be available. Industries such as childcare, healthcare, schools, fitness facilities, and lifeguarding frequently require CPR by state law or licensing rules, sometimes with specific course content.

AED and BLS expectations

No general OSHA standard mandates AEDs, but OSHA strongly encourages them as part of a first aid program. Many AED rules are set by states and vary on who must have a device, who must be trained, and whether medical oversight or registration is needed. Check your state's requirements directly. For clinical staff, Basic Life Support (BLS) is typically expected by employers and licensing boards. BLS is the healthcare-provider level of CPR training, covering team-based response, airway management with a bag-mask device, and AED use.

The online-only card problem

A common misconception is that an online-only CPR card is accepted everywhere. OSHA has stated that first aid and CPR training should include hands-on practice of skills, which a purely online course cannot provide. Many licensing boards and employers likewise reject online-only credentials. Blended formats, with online learning plus an in-person skills session, are widely accepted, but confirm acceptance with your regulator, insurer, or licensing board before you enroll staff.

Who Needs Which Training: Matching Roles to Requirements

Once you know the rules, assign training by role. An example breakdown for a mixed workplace might look like this:

Clinical staff: BLS certification and bloodborne pathogens training, plus any facility-specific infection-control content.
Designated workplace responders: First Aid, CPR, and AED training for the employees you name as your on-site first aid providers.
Supervisors: hazard recognition, incident reporting, and the emergency action plan, including how to account for staff during an evacuation.
General staff: emergency exits and alarms, hazard communication where chemicals are present, and how to summon help.

Building the list from your own site

Start with a hazard assessment: walk the workplace, review injury and near-miss logs, and note chemicals, machinery, lifting, driving, and exposure to bodily fluids. Then do a job task review, listing what each position actually does, not what the job description says. Match each task to the standards that apply. The result is a training matrix with roles on one axis and required courses on the other, and gaps become obvious.

Include everyone. Temporary, part-time, and seasonal workers are covered by OSHA protections, and staffing agencies and host employers share responsibility for their training. Shift coverage matters too: a trained first aid provider who works only days leaves nights uncovered.

Training workers can understand

OSHA expects training to be delivered in a language and vocabulary workers understand. If part of your workforce is more comfortable in Spanish or another language, provide materials and instruction accordingly. Training that employees cannot follow does not satisfy the requirement, regardless of the sign-in sheet.

Recordkeeping, Refresher Schedules, and Proving Compliance

If you cannot show training happened, an inspector may treat it as if it did not. Some standards, such as bloodborne pathogens, explicitly require training records, including dates, content summaries, trainer names and qualifications, and attendee names and job titles. Others do not spell out records, but documentation is still your best evidence. Verify which standards apply to you, and as a default keep:

Attendee names and job titles
Training dates and topics covered
Trainer name and qualifications
Certification card copies and expiration dates
Assessment or skills check results, where applicable

Certification cycles and tracking

CPR, First Aid, AED, and BLS credentials are commonly valid for two years, though the exact period depends on the issuing organization. Use a spreadsheet or learning management system that flags expirations, and set reminders at least 60 to 90 days ahead so you can schedule classes before anyone lapses. Remember that a lapsed credential can leave a shift without a qualified responder.

Mistakes that cause citations

Letting certifications lapse because no one owns the tracking.
Training only at hire and never retraining when standards require it.
Skipping retraining after incidents, new equipment, or process changes.
Using generic content that ignores the hazards at your actual site.

Training-related violations are among the issues OSHA cites, and penalties can be substantial, with higher amounts for willful or repeated violations. Dollar figures are adjusted annually for inflation, so check OSHA's penalties page for the current amounts as of 2026 rather than relying on any number quoted in an article.

Audit Your Training Against the Rules That Apply to You

Requirements depend on your hazards, your roles, and your location. Federal OSHA sets the baseline, your state plan may raise it, and your industry regulator and insurer may raise it again. The reliable way to stay compliant is to compare what you actually deliver against what those rules say.

Start by listing the standards that apply to your site, building a role-by-course matrix, and checking records for gaps and upcoming expirations. Pay special attention to first aid coverage on every shift, since that is where lapses carry the highest stakes.

Don't wait until an emergency happens. Equip yourself and your team with life-saving CPR skills that could make all the difference when seconds count. Register for a certification class today and gain the confidence to respond when someone needs help most. Best Choice CPR can schedule CPR, First Aid, BLS, or AED training for your team.