Blog Details
Healthcare organizations are built to save lives, yet many still treat their own emergency readiness as a checkbox. For U.S. hospitals, clinics, long-term care facilities, dental practices, and home health agencies, OSHA training and resuscitation readiness are not just frontline issues. They are governance issues. Who is trained, when their certification expires, whether the AED on the second floor has a working battery, and whether anyone can prove it during an audit all come back to leadership oversight. As this month's QHSE International USA theme is Corporate Governance and Compliance, this article looks at how healthcare leaders can turn CPR, AED, and first aid training from a scattered HR task into a controlled, measurable part of their compliance program.
Healthcare remains one of the most hazardous sectors to work in. According to the U.S. Bureau of Labor Statistics, the total recordable case rate in health care and social assistance was 3.4 cases per 100 full-time workers in 2024, compared with 2.3 across all private industry. Healthcare workers face patient handling injuries, sharps exposures, chemical hazards, and workplace violence, often in the same shift.
At the same time, cardiac emergencies do not only happen to patients. Visitors, contractors, and staff can collapse in lobbies, parking garages, administrative offices, and outpatient suites. The American Heart Association reports that about 350,000 people in the U.S. have an out-of-hospital cardiac arrest each year, that about 90% of those events are fatal, and that bystander CPR can double or triple survival.
When a facility cannot show who was trained, how often, and to what standard, the gap is not just operational. It is a governance, risk, and compliance failure that exposes the organization to regulatory findings, accreditation issues, litigation, and reputational harm.
Healthcare employers in the U.S. operate under several overlapping frameworks. Understanding how they fit together is the first step toward a defensible program.
Most healthcare workplaces fall under OSHA 1910, the General Industry standards. Under 29 CFR 1910.151(b), when there is no infirmary, clinic, or hospital in near proximity that is used to treat all injured employees, the employer must have a person or persons adequately trained to render first aid, with adequate first aid supplies readily available. This matters most for standalone clinics, urgent care centers, dental and physician offices, laboratories, administrative buildings, and home health teams working in the field.
OSHA's Best Practices Guide to Fundamentals of a Workplace First-Aid Program adds useful direction. It states that CPR training should include AED training when an AED is available at the worksite, notes that instructor-led retraining for life-threatening emergencies should occur at least annually, and points to a recommendation for CPR and AED skills review and practice at least every six months. The same guide also clarifies that OSHA does not certify first aid courses, which is why employers rely on recognized programs such as HSI First Aid, CPR and AED Certification.
Other OSHA 1910 standards shape the healthcare emergency picture as well:
Bloodborne Pathogens (1910.1030): The bloodborne pathogens standard applies to all occupational exposure to blood or other potentially infectious materials, which includes staff who provide first aid or CPR as part of their duties.
Hazard Communication (1910.1200): Disinfectants, sterilants, and pharmaceuticals must be covered in your hazard communication program, and responders need to know which chemicals are present in the areas they serve.
Emergency action planning: Your CPR and AED response procedures should connect directly to your wider emergency response plan, not sit in a separate binder.
For accredited hospitals and critical access hospitals, The Joint Commission's resuscitation standards, effective January 1, 2022, require the hospital to provide education and training to staff involved in resuscitative services at orientation, periodically after that, and when responsibilities change. The standards also emphasize data collection and internal case review, which means training is expected to be tied to measurable performance, not just attendance.
No single rule tells a healthcare organization exactly who must hold CPR certification. That decision belongs to leadership, based on job hazard analysis, facility layout, patient population, and accreditation expectations. That is precisely why this is a governance issue: the organization must define the requirement, resource it, monitor it, and prove it.
The biggest change affecting healthcare training programs this year is the move to the 2025 resuscitation guidelines. The 2025 American Heart Association Guidelines for CPR and Emergency Cardiovascular Care, published in October 2025, introduced several practical changes:
Choking response: For conscious adults and children, rescuers now alternate five back blows with five abdominal thrusts. For infants, the guidance is five back blows alternated with five chest thrusts.
Opioid emergencies: A new algorithm for suspected opioid overdose, including public guidance on when to use naloxone. This is highly relevant for emergency departments, behavioral health units, and outpatient settings.
A single Chain of Survival: One chain now applies to adult and pediatric arrests, in or out of the hospital, with added emphasis on recovery and survivorship.
Education: More instructor-led and community training to improve bystander response, since only about 41% of adults who have a cardiac arrest outside the hospital receive CPR before EMS arrives.
HSI has aligned its programs to the new science. Its HSI CPR AED (G25) program conforms to the 2025 AHA Guidelines Update. For organizations with in-house instructors, the change carries a compliance requirement of its own: according to an HSI training center notice, all HSI instructors must complete the G2025 Instructor Update Course before they can purchase G2025 materials or teach the new programs.
If your organization has internal instructors, this is a clear action item. An instructor who has not completed the update creates a quiet compliance gap that may not show up until a surveyor or auditor asks for records.
Workplace violence remains a top concern for healthcare employers. According to MedCity News, OSHA moved its proposed "Workplace Violence in Health Care and Social Assistance" rule to Long-Term Action status in its Spring 2025 regulatory agenda, meaning a federal standard is at least a year away. That does not remove the risk. OSHA can still cite employers under the General Duty Clause, and several states have their own requirements. The practical lesson for governance teams is to avoid waiting for a final rule and build violence prevention, emergency response, and first aid readiness into one integrated program now.
Here is a practical framework healthcare leaders can use to bring emergency readiness under proper governance.
Start with a job hazard analysis for every role and location. Clinical staff, security officers, front desk teams, facilities technicians, and home health workers each face different risks and response expectations. Document which roles require HSI First Aid, CPR and AED certification, which require healthcare-provider-level training, and which need awareness only. Put the decision in writing and have it approved by leadership.
HSI certifications are valid for two years, so tracking expiry dates is essential. Maintain a single register that records the employee, role, course, delivery format, instructor, completion date, and expiration date. Set reminders 60 to 90 days before expiry. A central register is one of the first things an auditor will ask to see, and it is often the weakest part of a healthcare training program.
An AED that is not maintained is a liability. The American Heart Association AED implementation guide advises employers to follow state and local AED regulations, have legal counsel review the program, and involve risk management or safety teams. Assign an AED program coordinator, map every device, log monthly inspections, and track pad and battery expiration dates. Include AED checks in your routine workplace inspections and safety audits.
Large or multi-site healthcare organizations often find that relying only on external providers creates scheduling bottlenecks and gaps in coverage. Developing internal HSI instructors through a Train the Trainer program allows you to schedule training around shifts, run regular skills refreshers, and respond quickly when new staff join. It also gives you more control over quality, consistency, and records, provided your instructors stay current with updates such as G2025.
Treat every emergency response as a learning opportunity. After any medical emergency, cardiac event, or near miss, conduct an incident investigation that looks at response time, AED retrieval, communication, and whether trained responders were available. Report readiness metrics to leadership or the safety committee at least quarterly, such as:
Percentage of required staff with current certification
Number of certifications expiring within 90 days
AED inspection completion rate
Mock code or drill completion and findings
Corrective actions opened and closed
This closes the loop between training and performance, which is exactly what modern accreditation and management system standards expect.
When QHSE USA conducts a compliance audit or gap assessment in healthcare settings, the same issues tend to appear:
Training records spread across departments with no single source of truth
Certifications that expired months earlier without anyone noticing
AEDs with expired pads or batteries, or devices missing from the facility map
Non-clinical staff and night shift teams left out of training plans
Emergency response procedures that do not reflect the 2025 guideline changes
No link between incident investigation findings and training updates
Each of these is fixable, but only if someone owns it. A short internal review against the controls above can reveal where your biggest risks are.
QHSE USA works with healthcare employers to combine practical training with strong governance. Through our training courses, we deliver HSI First Aid, CPR and AED Certification covering adult, child, and infant CPR, AED use, choking response, bleeding control, and response to stroke and cardiac arrest, with in-person and blended learning options. Our HSI Train the Trainer Instructor Development Course prepares your own staff to become HSI instructors, and existing instructors from other reputable organizations may qualify through a reciprocity process.
Beyond training, our consultancy services help healthcare organizations with risk assessments, safety audits, gap assessments, incident investigation, emergency preparedness, and ISO management systems, so that emergency readiness fits into a wider framework of governance, risk, and compliance. Learn more about our work with U.S. organizations on the QHSE International USA page, explore our full range of training services, or read more about QHSE International.
In healthcare, readiness for the unexpected is part of the mission. Strong OSHA training, current HSI CPR and AED certification, well-maintained equipment, and clear accountability protect patients, visitors, and staff, and they give leadership the evidence needed to show that compliance is being managed, not assumed. With the 2025 guidelines now in place, this is the right time to review who is trained, how your instructors stay current, and how your program performs under audit.
Ready to strengthen your healthcare emergency readiness? Contact QHSE USA to schedule HSI First Aid, CPR and AED training, build an in-house instructor team through Train the Trainer, or book a healthcare compliance gap assessment with our consultants.