What Certifications Are Required For Employee Safety...

No single certification applies to every employer. Which credentials your employees need depends on your industry, the hazards in your workplace, and the state where you operate. Federal OSHA rules mostly require that workers be trained and competent, not that they hold a particular card, and state laws, licensing boards, and client contracts can add requirements on top.

That gap between "trained" and "certified" is where many employers go wrong. They either overspend on credentials nobody requires or assume a certificate they hold covers obligations it does not. This guide explains how federal standards, state rules, and industry expectations combine to determine what your team needs, and how to turn that into a training plan you can defend in an inspection.

Training Requirements vs. Certifications: Why the Difference Matters

OSHA, the Occupational Safety and Health Administration, is the federal agency that sets and enforces workplace safety standards. Most of its standards say an employer must ensure employees are trained to a defined level. They rarely say the employee must hold a specific certificate. A certification is a card or credential issued by a training provider after the learner completes a course and, usually, passes an assessment. Training is the legal obligation; certification is often the evidence that you met it.

Some standards do expect training from a qualified source. First aid and CPR are the best-known examples: OSHA wants responders trained by a credible provider, and in practice that means a recognized course from an organization such as the American Heart Association or the American Red Cross. Other standards, such as lockout/tagout, leave the course content and delivery largely to you, as long as employees can actually perform the work safely.

Common assumptions that cause trouble

• "There is one OSHA certification." There is not. Obligations are hazard-specific.
• "OSHA 10 or 30 cards are federally mandatory." They are voluntary course completion cards from the OSHA Outreach Training Program. Some states, cities, and project owners require them, but federal law does not.
• "An OSHA 10 card covers everything." It is general awareness training. It does not replace training on the specific hazards of your site, such as the equipment you operate or the chemicals you handle.
• "Any online certificate counts." Online-only courses are often rejected for skills-based credentials like CPR and BLS, particularly by regulators and employers who expect hands-on practice.
• "Certificates last forever." Many expire and need renewal.

Keep the distinction in mind through the rest of this guide. For each requirement, ask two questions: what must employees be able to do, and what proof will show they were trained to do it?

Federal OSHA Standards That Drive Training Obligations

Two layers of federal law shape training. The General Duty Clause of the Occupational Safety and Health Act requires employers to provide a workplace free from recognized hazards likely to cause death or serious harm. It applies even when no specific standard covers the hazard. Beyond that, individual standards in 29 CFR Part 1910 (general industry) and Part 1926 (construction) trigger training for particular hazards. If the hazard exists in your workplace, the training duty follows.

Examples from general industry

• Hazard communication (29 CFR 1910.1200): employees who work with or near hazardous chemicals must be trained on labels, safety data sheets, and the specific chemical hazards in their area.
• Bloodborne pathogens (1910.1030): employees with reasonably anticipated exposure to blood or other potentially infectious material need training at hire and annually. This often includes designated first aid responders.
• Lockout/tagout (1910.147): workers who service or maintain machinery must be trained in controlling hazardous energy. Others who work near the equipment need to understand the procedures and why they must not restart it.
• Respiratory protection (1910.134): workers required to wear respirators need medical evaluation, fit testing, and training, with annual fit testing and annual retraining as the standard requires.
• Powered industrial trucks (1910.178): forklift operators must complete formal and practical training and be evaluated at least once every three years.

Notice how different these are. Some name a refresher interval, some require a performance evaluation, and some leave the format open. The standard itself, not a generic safety card, defines what compliant training looks like.

When retraining is required

Many standards require retraining outside any fixed schedule. Typical triggers include new hazards or equipment, changes to procedures, and evidence that an employee does not understand or follow the rules, such as a near miss, an observed lapse, or an incident. Where a standard sets an annual refresher, treat it as a floor, not a ceiling.

Regulation text and numbering can be amended, so confirm the current wording of each standard you rely on at osha.gov before building your program around it.

First Aid, CPR, and AED Training: When OSHA Expects It

The key general industry rule is 29 CFR 1910.151(b). It says that when there is no infirmary, clinic, or hospital in near proximity to the workplace, a person or persons adequately trained to render first aid must be available. OSHA's interpretation letters have tied "near proximity" to emergency response time, generally pointing to about three to four minutes for life-threatening injuries such as cardiac arrest or severe bleeding. Check OSHA's current interpretations, since the guidance is published in letters, not in the rule text itself.

Construction has its own version in 29 CFR 1926.50, which requires trained first aid providers on job sites where emergency care is not reasonably accessible, along with stocked first aid supplies. Because construction sites are often remote or changing, this requirement comes up more often than many contractors expect.

What "adequately trained" looks like in practice

OSHA expects first aid training to cover the emergencies the workplace could realistically produce. Where sudden cardiac arrest is a plausible risk, that includes CPR and use of an AED (automated external defibrillator). Courses from the American Heart Association, the American Red Cross, or an equivalent nationally recognized provider are the safest choice because inspectors, insurers, and clients recognize them.

BLS vs. CPR

CPR (cardiopulmonary resuscitation) and AED courses are designed for lay responders and suit most general workplaces. BLS (Basic Life Support) is the healthcare-provider level. It covers team-based resuscitation, advanced airway basics, and higher-performance compressions, and it is typically required for nurses, EMTs, dental staff, and many other clinical roles. If a licensing board or accreditor says BLS, a standard CPR card will not satisfy it.

Validity periods

CPR, AED, and BLS cards commonly remain valid for two years, which is the standard for both the American Heart Association and the American Red Cross. Confirm the period printed on the card or published by the issuing organization, because it can differ by course type and may change.

Industry and Role-Specific Certifications

Beyond baseline federal rules, the hazards of your sector determine which credentials matter most.

• Construction: OSHA 10 and 30 cards are widely required by contractors, owners, and some jurisdictions, even though federal law does not mandate them. Specific standards also call for a competent person, meaning someone able to identify existing and predictable hazards and with authority to correct them. This designation applies to excavation and scaffolding, among others, and it rests on training and experience, not a single card. Fall protection training is required for anyone exposed to fall hazards.
• Healthcare and childcare: State licensing rules or accreditation bodies frequently require BLS for clinical staff, or CPR and first aid for childcare providers. These requirements typically specify the issuing organization and a hands-on skills component.
• General industry and warehousing: Forklift operators need training and an evaluation every three years. Workers handling hazardous materials need hazard communication training and, depending on the materials, additional emergency response training.

A lower-risk contrast

A typical office has a lighter baseline. Employers generally need an emergency action plan, evacuation training, and fire extinguisher instruction if employees are expected to use extinguishers. CPR and AED training is usually not mandated in that setting, but it is inexpensive insurance, and many employers add it voluntarily alongside an on-site AED.

Where voluntary training earns its place

Workers in remote, rural, or hazardous settings, such as field crews, utility teams, and heavy industrial sites, often face a longer wait for emergency medical services. Severe bleeding can become fatal within minutes, so tourniquet and bleeding control training, such as the Stop the Bleed course, is a sensible addition even where no regulation asks for it. Pair the training with tourniquets and bleeding control supplies located where injuries are most likely.

State Rules and Local Requirements That Add to Federal Law

Federal OSHA is not the only regulator. As of 2026, roughly two dozen states and territories operate their own OSHA-approved State Plans, which must be at least as effective as federal OSHA and can be stricter. California (Cal/OSHA), Washington, and Oregon are well-known examples. The exact count changes, so check the State Plans page on osha.gov for the current list. If you operate in a State Plan state, the state standards, not just the federal ones, govern your obligations.

State-specific rules can change the training picture considerably. California, for example, requires most employers to maintain an Injury and Illness Prevention Program, which includes training employees on workplace hazards. Many states also have CPR or AED requirements for particular facilities, such as schools, fitness centers, and certain public buildings, and some specify who must be trained and how many AEDs must be on site. Rules of this type vary widely and are updated by legislatures regularly.

Where to check

• State labor department or State Plan agency: for workplace safety standards and training mandates.
• Professional licensing boards: for role-specific requirements such as BLS for nurses or CPR for childcare staff.
• Your insurer: workers' compensation and liability carriers sometimes require or reward specific training.
• Client and contractor agreements: many contracts require OSHA 10 or 30 cards, or named certifications, as a condition of site access.

Treat anything you read, including this article, as a starting point as of 2026. Confirm current requirements with the agency that governs your workplace before you finalize your training plan, and re-check at least annually.

Building a Compliance Plan: Audit, Train, Document, Renew

A workable plan has four steps. None of them is complicated, but skipping any one is where compliance programs fail.

1. Audit hazards and map roles. Walk the workplace and list the hazards: chemicals, machinery, vehicles, heights, bloodborne exposure, remote locations. Then list every job role and match it to the standards, state rules, licensing requirements, and contract terms that apply. The output is a simple matrix of role versus required training.
2. Choose accredited providers. For CPR, AED, and BLS, pick courses from recognized organizations and confirm that they include in-person, hands-on skills practice with an instructor. Online-only courses may be fine for awareness topics but are often refused by regulators, licensing boards, and clients for skills-based credentials. Ask the regulator or customer before you buy, not after.
3. Document everything. Keep records of who was trained, the date, the topic, the instructor or provider, and the expiration date. Store certificates where HR and safety staff can both find them. Set renewal reminders well ahead of expiration, with a buffer of a few months for scheduling classes.
4. Pair training with equipment. Trained responders still need tools. Make sure AEDs are visible, accessible, and checked on a regular schedule, including battery and pad expiration dates. Keep first aid kits stocked, and place tourniquets and bleeding control supplies where they can be reached quickly. Assign someone to inspect each item and log it.

360 Safety provides CPR and BLS training along with life-saving devices such as AEDs, tourniquets, and first aid products, so employers can address both the training and the equipment side of this plan with one provider. Whichever provider you choose, confirm that their courses meet the specific requirements your regulator, licensing board, or client has set.

Start With Your Role Matrix This Week

Required certifications come from three sources: the hazards in your workplace, your industry, and your state. Everything else is best practice, which is still worth doing but should not be confused with a legal obligation. The fastest way to find your gaps is to list each role, note which requirements apply, and compare that list against the training records you actually hold.

Where the comparison shows gaps, close the life-safety ones first. CPR, AED, BLS, and first aid training protect people in the moments when no one else can help, and they are the credentials most likely to expire unnoticed.

Ready to put safety into action? Whether you need CPR certification, workplace safety training, or guidance on selecting and maintaining life-saving equipment such as AEDs, we're here to help. Our training programs and safety solutions are designed to help individuals and organizations respond confidently when every second counts. Schedule your training today and take the next step toward creating a safer, more prepared workplace and community.