If no one on your staff is trained in CPR and someone collapses on your premises, your legal exposure depends on your industry, your state, and what you did to prepare. There is no single national law that requires every employer to keep CPR-certified staff, and that fact cuts both ways: it means you may not be breaking a specific rule, and it also means that "no rule" is not the same as "no risk." This article explains where liability without certified staff actually comes from, which employers face explicit requirements, what Good Samaritan laws do and do not cover, and the steps that reduce your exposure. It is educational information, not legal advice, and your attorney or insurer should answer questions specific to your business.
How Liability Arises When No One Is Trained
Liability rarely comes from the missing certificate itself. It comes from failing to meet a duty. Those duties fall into three groups: regulatory duties, such as OSHA workplace rules; contractual or licensing duties, such as a childcare license condition or a client contract; and the general duty of care you owe to employees, customers, and anyone in your charge.
Negligence in plain terms
Duty of care is the obligation to act as a reasonably careful operator in your position would. Negligence is a failure to meet that standard that causes harm. A plaintiff generally has to show four things: you owed a duty, you breached it, the breach caused the harm, and real harm resulted.
Consider an illustration. A small gym has no trained staff on the evening shift. A member collapses, employees hesitate, and no one starts compressions before paramedics arrive several minutes later. The member's family might argue that a gym, which invites people to exert themselves, should reasonably have trained staff and a response plan. The gym might argue that the outcome would have been the same regardless. That dispute over breach and causation is where these cases are fought, and the outcome depends on the facts and the jurisdiction. A daycare with no trained caregiver and a delayed response to a choking or drowning incident faces the same analysis, with a higher standard because the people in its care cannot help themselves.
Who can sue, and who usually cannot
Workers' compensation exclusivity is a rule in most states that makes workers' comp the main remedy for workplace injuries to employees, which often limits an employee's ability to sue the employer directly. The exceptions and details vary by state. The rule generally does not protect you from claims by customers, clients, parents, or visitors, who can bring ordinary negligence claims.
The "if we do nothing" myth
Many managers assume that doing nothing means they cannot be blamed. Courts and regulators can ask whether your lack of preparation was reasonable for your setting. A quiet accounting office and a fitness center, pool, or childcare program are judged against different expectations, because the foreseeable risk is different. Choosing not to prepare is itself a decision that can be examined later.
Which Workplaces Are Required to Have Certified Staff
Requirements are specific to industry and location. Treat the following as a map of where to look, not a final answer, and confirm current rules as of 2026 with the agencies named below.
OSHA's first aid standard
OSHA's first aid standard, 29 CFR 1910.151, says that when no infirmary, clinic, or hospital is in near proximity to the workplace, a person or persons must be adequately trained to render first aid. OSHA does not name CPR in that standard, and it does not require CPR certification for every workplace. Whether trained responders are needed depends on how close and how quickly medical help can arrive. OSHA has published letters of interpretation on what "near proximity" means and what training is adequate, and those letters can change how the rule is read, so check OSHA's website directly or ask a safety professional before relying on any summary, including this one. Employers in states with OSHA-approved state plans should also check their state agency, since those rules can differ.
Licensing-driven requirements
Much of the real mandate comes from licensing rather than general workplace law:
- Childcare: most states require CPR and first aid training for licensed childcare staff, often with specifics on infant and child techniques and on how many trained people must be present.
- Healthcare: clinical roles typically require Basic Life Support (BLS) certification as a condition of employment or licensure.
- Aquatics and athletics: lifeguards, coaches, and some school personnel have their own certification rules, set by state law, district policy, or the governing organization.
Check your own state, not your neighbor's
Midwest employers should not assume that the rules in one state match the next. Staffing ratios, required course content, and renewal timing can differ across state lines. Go to your state's childcare licensing agency or relevant licensing board, and to OSHA or your state occupational safety agency, and get the current requirements in writing.
What Good Samaritan Laws Do and Do Not Cover
A Good Samaritan law generally protects people who voluntarily give emergency aid in good faith from civil liability for their actions, with exceptions for gross negligence or willful misconduct. The details differ by state, including who counts as protected and whether compensation or a duty to respond changes the analysis.
The job-duty limit
Protection often weakens when responding is part of someone's job. A childcare provider, lifeguard, or employee designated as a workplace responder may be acting under a duty rather than as a volunteer, and some states treat that differently. Whether a particular role is covered is a state-specific question that an attorney can answer far better than a general article can.
What these laws do not do
The most common misconception is that Good Samaritan laws shield the employer. They protect the person who acts, and generally for that act. They do not typically protect a business from claims that it failed to train staff, failed to adopt an emergency plan, or failed to maintain equipment. Those are claims about your preparation, not about a rescuer's split-second conduct.
There is also a practical point. These laws protect an attempt at rescue, but they do nothing to make the attempt effective. A well-meaning employee who has never practiced compressions, or who freezes because they fear making things worse, is legally protected in many cases and still unable to help. Training closes that gap, and legal immunity does not.
AEDs, Response Plans, and the Gaps That Create Exposure
Many states have AED laws covering where devices must be placed, how they must be maintained, and whether those who use them are immune from civil liability. These laws vary widely, and some apply only to certain facility types such as schools, gyms, or government buildings. Look up your state's statute rather than assuming a general rule.
Where exposure tends to hide
A device on the wall creates the impression of preparedness. The gaps that cause trouble are usually these:
- An AED with a dead battery or expired electrode pads, because no one checks it.
- No written emergency action plan, meaning a documented set of steps for who does what in a medical emergency.
- No one assigned to call 911, retrieve the AED, and meet responders at the entrance.
- Staff who know the device exists but are afraid to use it.
- Coverage that exists on the day shift but not on evenings, weekends, or at a second location.
An illustration: the AED on the wall
Suppose an office or fitness center bought an AED two years ago, mounted it near reception, and never trained anyone. When a visitor collapses, the receptionist calls 911 but does not know whether to use the device, and a few minutes pass. If a claim follows, the existence of the AED may actually highlight the problem: the business recognized the risk, bought equipment, and then did not prepare people to use it. That does not mean liability is automatic, but it is a harder position to defend than a documented program with trained staff and maintenance records.
The medical reasoning behind preparation is well established. The American Heart Association's guidelines emphasize that early CPR and early defibrillation are central to survival from cardiac arrest, and that survival chances fall as time passes without them. The AHA publishes updated guidelines periodically, so consult its current edition for specifics. Because ambulances take time to arrive, the people already in the building are the first link in the chain.
Practical Steps to Reduce Risk and Show Due Diligence
You cannot eliminate legal risk, but you can show that your preparation was reasonable. A sensible sequence looks like this:
- Identify the rules that apply to you. Check OSHA or your state safety agency, your licensing body, your contracts, and your insurance policy.
- Assess staffing across every shift and location. Look at nights, weekends, off-site events, and times when your trained person is on vacation.
- Train enough people to cover every shift. One certified employee is not a plan if they work Monday through Wednesday mornings.
- Schedule renewals before certifications lapse. CPR certifications from major providers such as the American Heart Association and the American Red Cross are commonly valid for two years, but confirm the period with the issuing organization for your specific course.
- Write and practice an emergency action plan. Assign roles, post instructions, and run short drills.
Match the course to the setting
General workplaces and childcare programs usually need CPR/AED and First Aid training, with infant and child content where children are present. Healthcare providers generally need BLS. Employers with many staff often find on-site group training the simplest way to cover shifts without sending people to separate classes.
Keep the paper trail
Records are how you demonstrate reasonable preparation after the fact. Keep a certification roster with expiration dates, training attendance records, AED inspection and battery and pad logs, and notes from drills.
Ask your attorney and your carrier
An attorney can tell you what duties apply to your business and state. Some insurers ask about safety training or may offer favorable terms for documented programs, but that varies by carrier, so confirm directly with yours rather than assuming.
Training, Records, and Working Equipment: The Core of Lower Risk
The clearest way to reduce liability without certified staff is to remove the condition itself: train people, document the training, and keep your equipment ready. Nothing in the law substitutes for a trained coworker who acts in the first minutes.
Start by mapping who is certified on each shift and at each location, and note where the gaps are. Then take that list to your attorney or insurer if you have questions about your specific obligations. When you are ready to fill the gaps, Midwest CPR Center offers CPR, First Aid, AED, and BLS training for individuals and workplace teams.
Don't wait until an emergency happens. Equip yourself and your team with life-saving skills today. Schedule your CPR certification class now and gain the confidence to respond when every second counts.