Important disclaimer: This guide is general information, not legal advice. Laws differ by state and country and change frequently, and several of the rules described below shifted materially from 2024 to 2026. Nothing here substitutes for a licensed attorney reviewing your specific situation before you open, sign a contract, or change a policy. Treat this as a map of what to ask your lawyer about, not a legal opinion you can rely on.
Becoming an expert in gym law is rarely why anyone opens a fitness business. But a gym combines people, heavy equipment, physical exertion, recurring payments, and personal data, and each of those creates legal exposure. Weights fall, bodies get tested, contracts get disputed, and data gets collected. Injury-related claims are frequently cited as the largest single category of fitness-industry lawsuits, but they are only one category among many, alongside employment disputes, contract and refund complaints, discrimination and accessibility claims, and data privacy actions.
This guide breaks down the major categories of gym legal compliance in the United States, with notes on the UK, Europe, and Australia where relevant. It focuses on what actually causes problems in practice and, importantly, flags where the law has recently changed, because several widely repeated compliance claims are now out of date. Where a figure or rule needs checking against your specific state, this guide says so rather than presenting a single number as a universal truth.
How US gym compliance actually works
US gym compliance operates on three layers: local (city and county), state, and federal. Counterintuitively, the most urgent early issues usually start at the local level, where zoning, building codes, occupancy, and fire safety determine whether you can open at all. These are general business and safety rules, not fitness-specific ones, but they are the ones most likely to delay a launch.
At the federal level, workplace safety and consumer protection create baseline obligations if you employ staff, process payments, store personal data, or advertise. OSHA does not write gym-specific rules, but its standards on emergency planning, hazard assessment, and employee training shape what a legally safe workplace looks like.
If you are opening with limited bandwidth, the areas most likely to cause an acute problem in year one are employment misclassification, membership contract compliance, premises liability and AED requirements, and music licensing. Biometric data and website accessibility are real but tend to surface later as you grow. Getting an attorney to review your membership agreement and employment structure before opening is likely the single highest-return legal spend a new gym can make.
1. Employment law: the most frequent and costly disputes
Of all the legal areas a gym owner navigates, employment law generates the most frequent and expensive disputes because these problems compound over time. A misclassification that began on day one can create years of back-pay liability.
Employee or independent contractor?
No single employment issue costs gym owners more than misclassifying personal trainers as independent contractors when they function as employees. It is pervasive in the industry and frequently wrong.
The legal distinction turns on the economic reality of the working relationship, not on what the contract says or what title is used. In simple terms, a genuine 1099 contractor invoices the gym, sets their own hours, often brings their own clients, and handles their own taxes. A W-2 employee has taxes withheld, follows a schedule the gym sets, and works under the gym’s direction. The red flags that suggest a “contractor” is really an employee include the gym setting the schedule, the gym setting session prices, clients paying the gym rather than the trainer directly, and the gym dictating training methods.
This is an area where the law genuinely varies by state and where it has been in flux. Some states use a strict “ABC test” that makes it very hard to classify trainers as contractors. California’s AB 5 is the best-known example: to classify a trainer as a contractor, a gym must prove all three prongs, including that the work is outside the gym’s usual course of business. Because training is obviously the core business of a gym, most California gyms cannot satisfy that prong and effectively must treat trainers as employees. Massachusetts, New Jersey, and several other states apply similarly strict versions. Other states, including Texas, Florida, and New York, use a more lenient common-law test that gives gyms more latitude, though IRS scrutiny still applies.
At the federal level, the picture shifted recently: in 2025, the Department of Labor moved away from the stricter 2024 contractor rule toward a more traditional and flexible “economic realities” test. But, and this is the critical point, the federal rollback does not override strict state laws like California’s AB 5. A gym relying on the more permissive federal posture while operating in a strict-ABC state is exposed.
Verify before relying on this: the exact classification test in your state and the current federal posture at the time you read this, since both have changed within the last two years. This is a question for a local employment attorney, not a template.
The cost of getting it wrong is real and recent. In 2025, a federal court gave final approval to a $12 million settlement resolving claims that Equinox failed to pay overtime to its New York personal trainers. A separate $36 million settlement resolved similar wage-and-hour claims from more than 15,000 Equinox employees in California. Misclassification and unpaid overtime claims are among the most common and most expensive fitness-industry lawsuits, and they frequently arrive as class actions.
Hiring, termination, and at-will employment
Most US states follow at-will employment, but it is narrower than many owners assume. Anti-discrimination laws (Title VII and state equivalents) prohibit basing hiring or firing on protected characteristics, including race, sex, religion, national origin, disability, and age (40 and older under the ADEA). Casual interview questions about family plans or medical history create exposure, and many states and cities prohibit salary-history questions.
A frequent surprise: an employee handbook that describes a progressive discipline process (verbal warning, written warning, termination) can be read as a contractual promise to follow that process. Skip the steps and fire someone abruptly, and a wrongful-termination claim becomes more viable. Handbooks should include clear at-will disclaimers. The single most protective practice here is contemporaneous documentation: record performance issues and the reasons for termination in writing at the time they occur, not after a claim is filed.
Overtime under the Fair Labor Standards Act
The FLSA requires time-and-a-half for non-exempt employees working over 40 hours in a week. Front desk staff, cleaners, and floor attendants are almost always non-exempt, and gym operating patterns (early mornings, late evenings, weekends, covering absences) push staff toward or past 40 hours easily. Asking staff to “stick around” after a shift or attend unpaid mandatory meetings creates unpaid wage claims, and the FLSA statute of limitations runs two years, or three for willful violations.
Group fitness instructors paid a flat per-class rate are in a particular gray area: that model works only if total hours are tracked, the effective hourly rate never falls below minimum wage, and overtime is paid when due. Several states set minimum wages well above the federal $7.25 floor, and California applies daily overtime after 8 hours, not just weekly after 40. Multi-state operators need state-specific payroll practices. Verify current minimum wage and overtime rules for each state you operate in, as these change regularly.
Sexual harassment
Under Title VII and state laws, sexual harassment is unwelcome conduct of a sexual nature that creates a hostile or offensive environment, and in a gym, it applies to both staff-to-member and member-to-member interactions. “Unwelcome” is the operative word; conduct does not have to be intentional to qualify, and a single severe incident can constitute harassment.
Federal Title VII obligations generally apply to employers with 15 or more employees, but many state laws go much further. New York’s Human Rights Law covers employers with as few as one employee and extends protections to customers in places of public accommodation. California, Illinois, Connecticut, and others mandate harassment-prevention training regardless of employer size. A gym is almost certainly a place of public accommodation, which means the exposure extends beyond employees to members.
Member-on-member harassment is the least settled area. No federal law directly requires a gym to intervene when one member harasses another, but if a gym knows about a pattern and does nothing, and someone is harmed, negligence and public-accommodation liability can follow. A written harassment policy, a clear complaint procedure, anonymous reporting channels, and staff training are both legally protective and increasingly an industry-standard expectation. Verify your specific state’s training mandates and public-accommodation rules, since New York and California in particular impose detailed requirements.
2. Premises liability: the physical-risk category
A gym is a place where people stress their bodies on heavy equipment and hard, sometimes wet, surfaces. That creates an inherent risk that no waiver fully eliminates. Premises liability holds operators responsible for injuries caused by unsafe conditions or inadequate care.
Negligence claims from member injuries
To win a negligence claim, an injured person generally must show you owed a duty of care, breached it, and thereby caused quantifiable harm. The most common sources are wet floors, poorly maintained equipment, and inadequate supervision. Courts have repeatedly found gyms liable where a member slipped on a wet surface that the staff knew or should have known about, with no warning sign in place. Routine cleaning logs and prompt hazard response are not just good practice; they are evidence of due care that can decide a case.
Equipment maintenance is equally critical. A fraying cable, a treadmill with a faulty stop, a cracked rack upright: these are foreseeable dangers. Maintain a written inspection schedule, document every inspection, and take defective equipment out of service immediately rather than leaving it available pending repair. If a member is injured on equipment you knew was defective, or that routine inspection would have caught, liability is hard to contest.
AED requirements
Sudden cardiac arrest can strike members of any age, and survival drops sharply with every minute before defibrillation. A significant number of states require health clubs to have an Automated External Defibrillator on site and staff trained to use it. Reporting on this area consistently names Pennsylvania, New York, California, Illinois, New Jersey, and Massachusetts among the states with specific AED mandates for fitness facilities, but the precise requirements (number of devices, placement, training intervals, inspection) vary by state and sometimes by facility size.
The consequences of non-compliance cut both ways. Operating without a legally required AED exposes you to regulatory penalties, and more seriously, if a member suffers cardiac arrest in a facility that was required to have an AED and did not, that statutory violation becomes powerful evidence of negligence in a civil suit. Courts have allowed wrongful-death claims to proceed against gyms lacking an AED even where a liability waiver existed, because waivers generally do not cover gross negligence. Verify your specific state’s AED statute, as this is exactly the kind of requirement that a one-time attorney consultation should confirm.
Supervision standards
Beyond the general duty to supervise reasonably, some states set instructor-to-participant ratios for higher-risk class formats such as cycling, aquatic fitness, and youth programming. Where such ratios exist, violating them turns a general negligence question into a straightforward statutory breach. Even without specific ratios, courts look to industry standards, including guidance from bodies like the American College of Sports Medicine, as a benchmark for reasonable supervision. Keeping class sizes defensible, ensuring instructors are certified for what they teach, and documenting credentials all reduce both the chance of injury and your legal exposure if one occurs.
Insurance and waivers
A waiver can reduce ordinary-negligence exposure, but it does not protect against gross negligence, for example, ignoring repeated reports of faulty equipment or failing to maintain a legally required AED. Carry general liability, professional liability, and employee-related coverage, and update policies when your offerings change. Digital tools can support compliance here: automating waiver collection and keeping a clean audit trail of signed forms make the difference between “we’re sure they signed something” and provable documentation.
3. Membership contract law: the heavily regulated core
The membership contract governs the relationship with every paying member and how either party can exit. It is also one of the most heavily regulated commercial agreements in US consumer law, and many state health-club statutes carry per-violation penalties, meaning one flawed template used across hundreds of members can multiply into serious liability.
Cancellation rights and cooling-off periods
Most states with health-club consumer-protection statutes require a cooling-off period after signing, during which a member can cancel for a full refund. Commonly cited windows are three business days in several states and five business days in California, but the exact period is state-specific and must be verified. These are mandatory statutory rights that generally must appear in the contract itself, often in bold type near the signature line. Burying or omitting the notice is a violation, not just poor service.
Many states also mandate cancellation rights that persist through the life of the contract, such as the right to cancel for a prorated refund if the member relocates beyond a set distance from any of the gym’s facilities, or if a physician certifies a disability preventing use for a significant period. These hardship rights generally cannot be contracted away. Recent state activity has pushed toward easier cancellation: New York amended its Health Club Services Act to require gyms to accept cancellations through multiple channels, including website, email, phone, and mail, and California prohibits making cancellation materially more burdensome than sign-up.
Automatic renewals and the FTC Click-to-Cancel rule: what actually happened
This is the area where older compliance guides are now most likely to be wrong, so read carefully.
The FTC finalized a Click-to-Cancel rule in October 2024 as part of its Negative Option Rule, built on the principle that canceling should be as easy as signing up. However, on July 8, 2025, the US Court of Appeals for the Eighth Circuit vacated that rule in its entirety, on procedural grounds, days before its main provisions were to take effect. The rule never came into force. The FTC did not appeal, and in early 2026 it issued an Advance Notice of Proposed Rulemaking to start the process over from scratch, a process that took roughly five years last time. So as of this writing, there is no federal Click-to-Cancel rule in effect, only a proposed restart.
What this does not mean is that automatic renewals are unregulated. Two things still bite:
First, the Restore Online Shoppers’ Confidence Act (ROSCA) independently requires clear disclosure of terms before billing, express informed consent, and a simple way to stop recurring charges. The FTC continues to enforce ROSCA and Section 5 of the FTC Act against burdensome cancellation practices.
Second, and more importantly for most gyms, roughly 30 states have their own automatic-renewal laws, and several (California, New York, Colorado) impose requirements as strict as or stricter than the vacated federal rule. Many practitioners now treat California’s automatic-renewal law as the de facto national standard. A concrete recent example: in 2025, the New York Attorney General secured a $600,000 settlement from Equinox specifically for making memberships hard to cancel, requiring it to change its practices and offer refunds.
The practical takeaway: design your cancellation process to be at least as easy as sign-up, comply with ROSCA, and meet the strictest state law that applies to you. Do not rely on the federal rule being either in effect or absent, since that is exactly the kind of thing that may change again. Verify the current status of both the FTC rulemaking and your state’s automatic-renewal law before finalizing your contract.
Refunds for closures and service disruptions
The pandemic exposed a gap in many agreements: what happens when the gym cannot deliver what a member paid for? State approaches vary, but the consistent principle is that members who prepaid for services they cannot receive are entitled to a remedy, either a refund or a contract extension. Some states specify the mechanics (for example, contract extensions for short closures and prorated refunds for longer ones), and where a state has no specific health-club statute, general Unfair or Deceptive Acts or Practices (UDAP) laws apply, often with enhanced damages. Continuing to bill during a prolonged closure without offering refunds or extensions is a classic UDAP risk. Verify your state’s specific closure-refund rules.
The per-violation penalty problem
The feature that makes contract law genuinely dangerous is that many state health-club statutes were designed so that a single flawed template creates one violation per membership. A deficient cancellation notice used across a thousand memberships is not one problem; it is potentially a thousand. This is precisely why the highest-return legal investment before opening is a custom, attorney-drafted membership agreement built for your specific state, not a template downloaded from the internet. Automating contract delivery, renewal notices, and billing also creates the audit trail that demonstrates compliance.
4. Zoning, licensing, and permits: the local layer
Before you open and while you operate, your gym sits inside a web of hyperlocal rules that differ not just by state but by city and neighborhood. The categories are consistent even when the specifics are not.
Certificate of Occupancy (CO)
The local government’s confirmation that a space is safe and approved for its use. No gym should open without one, and operating without a valid CO can expose the owner to personal liability for injuries in an uncertified space. Gyms face a stricter CO process than most retail or office tenants because, under the widely adopted International Building Code, fitness centers with an occupant load of 50 or more are typically classified as Group A-3 (Assembly), a higher-risk category that triggers stricter egress, occupant-load, restroom, and often fire-sprinkler requirements. The process usually requires sealed drawings from a licensed architect or engineer, and taking over a non-gym space can stretch the timeline to months. Notably, whether a small studio falls under Assembly or the lighter Business classification can come down to a local official’s interpretation of occupant load.
Zoning compliance
A separate, ongoing question is whether how you operate fits the location’s land-use rules. Gyms draw zoning scrutiny for three reasons: noise, traffic, and operating hours. Noise ordinances typically tighten between roughly 10 pm and 7 am, exactly when an early-opening gym with loud music is most exposed. Parking minimums are often higher for fitness use than for office use because gym traffic concentrates in short windows. Staying within approved parameters rarely draws enforcement; consistently pushing against them through neighbor complaints eventually does.
Business licenses and health-club registration
A CO is not a business license, and both are required. Most jurisdictions require a general business or mercantile license, renewed annually. On top of that, most states with health-club consumer-protection statutes require the gym to register with a state agency (often the Attorney General’s consumer-protection bureau) before selling memberships, sometimes 30 days before opening or advertising, and sometimes with a surety bond. Specialty offerings add more: pools trigger health-department permits, childcare spaces need facility licensing, and tanning beds are separately regulated. Each carries its own renewal deadline. Verify the specific licensing and registration requirements for your city and state, since these are among the most location-dependent rules in this entire guide.
5. ADA compliance: applies to every gym, regardless of size
Unlike employment thresholds that start at 15 employees, the ADA’s Title III public-accommodation obligations apply to a gym with two members as readily as one with twenty thousand. ADA compliance has three dimensions: the physical facility, the equipment, and the digital presence.
Physical accessibility is the most established dimension. The ADA’s 2010 Standards for Accessible Design set specific requirements for accessible parking spaces scaled to lot size, continuous accessible routes from parking to entrance, accessible entry alternatives where key fobs or turnstiles are used, and accessible routes connecting all member areas. Locker rooms have detailed requirements, including accessible lockers and, where showers exist, at least one compliant roll-in shower. The most frequently violated requirement in practice is equipment spacing: the ADA requires clear floor space (commonly cited as 30 by 48 inches) adjacent to equipment so a wheelchair user can approach and transfer. Packing a treadmill row or free-weight area too tightly creates a violation regardless of how compliant the rest of the facility is.
Equipment and accommodation are an evolving area. The ADA does not currently require gyms to buy specific adaptive equipment, but it does require reasonable modifications to policies and an individualized interactive process when a member requests an accommodation. Blanket policies excluding members with certain conditions, without individual assessment, are likely violations. Staff training on how to handle accommodation requests has become a genuine risk-management priority.
Digital accessibility is the fastest-growing ADA litigation area. Updated DOJ guidance has clarified that websites tied to physical places of public accommodation should meet WCAG 2.1 Level AA standards, which means your website, member portal, online booking system, and app need to be usable by people who are blind, have low vision, are deaf, or cannot use a mouse. Common violations that generate lawsuits include images without alt text, poor color contrast, booking flows that cannot be navigated by keyboard, uncaptioned video, and untagged PDF forms. Website accessibility lawsuits number in the thousands annually, and the fitness sector is squarely in the exposure zone, partly because serial plaintiffs scan business websites systematically.
One specific warning worth heeding: accessibility overlay widgets, the JavaScript plugins that claim to make any site instantly ADA-compliant, are not a safe shortcut. Courts and plaintiffs’ attorneys have grown specifically skeptical of overlay-reliant sites, and a meaningful share of website accessibility lawsuits now cite overlays as barriers rather than solutions. Installing one and considering the matter closed may increase exposure rather than reduce it.
Enforcement is active and reaches large operators. The DOJ has pursued major national gym chains, which signals that size offers no insulation. The practical approach for a new gym is to commission an ADA audit of the physical space before opening, brief staff on accommodation procedures, and have the website evaluated against WCAG 2.1 Level AA by a qualified professional before launch. Verify current ADA penalty amounts and WCAG guidance, as both the technical standards and the civil-penalty figures are updated periodically.
6. Intellectual property: naming, branded programs, and music
Two IP areas come up for gyms: trademark (branding and program names) and copyright (mainly music).
Naming and branding. If you are building a gym brand from scratch, invest in a proper trademark clearance search before committing to a name, including checking existing registrations in relevant classes. A clearance search costs a fraction of rebranding after a cease-and-desist letter. Your brand is more than the name: logo, iconography, and the overall member experience can together form a protectable package, which matters if you ever franchise.
Branded fitness programs. Program names can be trademarks. CrossFit is the most aggressively enforced example: operating as a CrossFit affiliate requires completing certification and paying an annual licensing fee (widely reported around $3,000; verify current amount), and CrossFit LLC has pursued gyms even for advertising “CrossFit-style” training. Zumba similarly requires certified instructors and authorized use of the name. The instructive counter-example is Pilates: a court invalidated the Pilates trademark in 2000 after ruling the word had become generic, so any gym can use it freely today. The practical rule: before using any branded program name in schedules, marketing, signage, or merchandise, confirm whether it is trademarked and whether you hold the needed license. A USPTO search and a visit to the program owner’s site answer this quickly.
Music licensing is where gyms most often stumble, in two distinct ways.
For music played in the gym, publicly performing copyrighted music in a commercial space requires licenses from the Performing Rights Organizations (ASCAP, BMI, SESAC, and GMR), since each represents a different catalog and no single license covers everything. Crucially, standard background-music services generally exclude synchronized fitness use, so a background license covering the gym floor does not cover a cycling or HIIT class choreographed to the music; that requires a separate, higher-tier license. Statutory damages for infringement are substantial, and the specific PRO fee structures vary by venue size, speaker count, and membership. Verify current PRO fee structures directly, as the specific dollar figures cited in older guides may be outdated.
For music in social media content, this is a separate and often more dangerous exposure. Holding PRO performance licenses for your physical space grants no rights to use that music in videos posted online. Online video requires a synchronization license from both the publisher and the record label, and for popular commercial music, these are typically unavailable to small businesses on any realistic terms. Platform tools (Instagram’s and TikTok’s in-app music) include limited licensing only for content posted within those platforms, not for reposting elsewhere. Music labels have systematically expanded enforcement against small-business social accounts, and statutory damages per infringed work are high enough that a year of Reels using copyrighted songs can create exposure exceeding a single-location gym’s revenue. Note also that a platform muting or removing a video does not cure the infringement; the rights holder can still pursue damages. The safe approaches are royalty-free or licensed libraries (such as Epidemic Sound or Artlist), in-platform music used only within that platform, or content without music, plus auditing and cleaning up your existing archive.
7. Data privacy: biometrics are the sharp edge
Gyms collect names, addresses, payment details, emergency contacts, health questionnaires, and sometimes body-composition metrics. The era of collecting all of that with minimal scrutiny is over.
Biometric data is the sharpest exposure, and this is another area where the law recently changed in a way that older guides miss. Illinois’ Biometric Information Privacy Act (BIPA) is the strictest in the country and applies to any gym using fingerprint or retinal scanners for check-in. It requires written notice and consent before collecting biometric data, and it carries statutory damages of $1,000 per negligent violation and $5,000 per reckless or intentional violation, with a private right of action that does not require proving actual harm.
What changed: In August 2024, Illinois amended BIPA (SB 2979) so that repeatedly collecting the same person’s biometric data by the same method counts as a single violation rather than one per scan, dramatically reducing the “annihilative” damages that earlier interpretations allowed. In April 2026, the Seventh Circuit held that this amendment applies retroactively to pending cases. The amendment also confirmed that an electronic signature satisfies the written-consent requirement. So while the $1,000 and $5,000 per-violation figures are still accurate, the per-scan multiplier that made BIPA so terrifying has been curtailed. It remains a serious law, and class actions continue, but any guide describing BIPA damages as accruing per scan is now out of date. Verify the current state of BIPA and its retroactivity, as this is actively evolving.
Beyond Illinois, California (CCPA), Virginia, Colorado, and a growing list of states have general consumer-data-privacy laws that apply if you collect member data digitally. If you handle health-related data such as body-composition tracking or health questionnaires, HIPAA may apply depending on how that data is handled. Verify which state privacy laws apply to you, since the map of state privacy statutes is expanding year over year.
8. Tax classification and business structure
Not strictly “law,” but closely related and decided on day one. Your business structure and tax decisions shape your legal and financial exposure for as long as you operate. Two gym-specific points: sales tax on memberships varies by state (some tax gym memberships, some do not, and getting it wrong creates back-tax liability), and the employee-versus-contractor classification discussed in section 1 has both tax and employment consequences. Verify your state’s treatment of membership sales tax, and involve an accountant early.
9. Food, supplement, and product sales
If your gym sells supplements or food, additional rules apply: FDA regulations on supplement labeling and health claims, state food-handler permits in some jurisdictions, and product-liability exposure if a product causes harm. Keep health claims conservative and verify your state’s food-handling permit requirements before selling consumables.
10. Beyond the US: UK, Europe, and Australia
The US relies on statute-by-statute, state-by-state layering over federal minimums. The UK, EU, and Australia lean more on centralized frameworks. A full treatment is beyond this guide, but the headline is that data protection in particular is stricter and more centralized abroad: the UK and EU operate under GDPR, which imposes more prescriptive consent, access, and breach-notification requirements than most US states, and Australia has its own Privacy Act framework. If you operate internationally, treat each jurisdiction’s data-protection and consumer-contract rules as a separate compliance project and get local advice. This section is a pointer, not a guide; verify the specific requirements of any country you operate in with local counsel.
Frequently asked questions
What are the most important legal requirements for opening a gym?
The four most likely to cause acute problems in year one are worker classification (employee vs. contractor), a compliant membership contract, premises liability, including AED requirements and music licensing. An attorney reviewing your membership agreement and employment structure before you open is generally the highest-return legal spend a new gym can make. Beyond that, you need a Certificate of Occupancy, the right business and health-club registrations, and ADA compliance.
Do I have to classify personal trainers as employees or contractors?
It depends on your state and on how the relationship actually works, not on what the contract says. Strict “ABC test” states like California (AB 5) and Massachusetts make it very hard to classify trainers as contractors because training is the gym’s core business. More lenient states like Texas and Florida give more latitude. The federal standard shifted in 2025 toward a more flexible test, but it does not override strict state laws. Misclassification is the most expensive recurring risk in the industry, so verify your state’s rule with an employment attorney.
Is the FTC Click-to-Cancel rule still in effect?
No. The Eighth Circuit vacated it in full in July 2025, before its main provisions took effect, and as of early 2026, the FTC has only begun a fresh rulemaking process. However, automatic renewals are still regulated: ROSCA applies federally, and roughly 30 states have their own automatic-renewal laws, some as strict as the vacated federal rule. The safe approach is to make canceling as easy as signing up and comply with the strictest state law that applies to you.
Does my gym need an AED?
In many states, yes. Reporting consistently names Pennsylvania, New York, California, Illinois, New Jersey, and Massachusetts among states with AED mandates for fitness facilities, but the specifics vary. Beyond any statutory requirement, lacking an AED can become powerful evidence of negligence if a member suffers cardiac arrest, and courts have allowed wrongful-death claims to proceed despite liability waivers. Verify your state’s AED statute.
Does the ADA apply to a small gym?
Yes. Unlike employment thresholds that start at 15 employees, the ADA’s public-accommodation rules apply to a gym of any size. That covers physical accessibility (parking, entrances, locker rooms, equipment spacing), the handling of accommodation requests, and increasingly your website and booking system under WCAG 2.1 Level AA. Avoid relying on accessibility overlay widgets, which courts increasingly treat as inadequate.
Can I play any music I want in my gym or in my social media videos?
No, and these are two separate issues. In-gym music requires performance licenses from the PROs (ASCAP, BMI, SESAC, GMR), and standard background-music services usually do not cover choreographed fitness classes. Social media videos require a separate synchronization license from both the publisher and the label, which is typically unavailable for popular music to small businesses. Use royalty-free or licensed libraries or in-platform music kept within that platform.
Do I need to worry about biometric data if I use fingerprint check-in?
If you operate in Illinois, yes, significantly. BIPA requires written consent before collecting biometric data and carries statutory damages of $1,000 to $5,000 per violation. A 2024 amendment reduced exposure by making repeated scans of the same person count as a single violation rather than one per scan, and a 2026 appeals ruling applied that retroactively, but it remains a serious law. Several other states have general privacy laws that may apply to digital member data. Verify the rules for your state.
How often should I review my gym’s legal compliance?
Treat it as an ongoing cycle, not a one-time task. Review hazard and incident logs monthly, staff certifications quarterly, and contracts, insurance, and privacy practices annually. As this guide shows, major rules changed between 2024 and 2026, so an annual legal review is genuinely necessary rather than optional.
A practical compliance rhythm
Compliance is not a one-time task; it is a repeatable cycle. A workable rhythm for most gyms:
Before opening, get an attorney to review your membership agreement, employment structure, and required state registrations, and commission an ADA audit of the space. Monthly, review hazard and incident trends and confirm equipment inspection logs are current. Quarterly, audit staff certifications and CPR/first-aid credentials. Annually, review your contracts, insurance, and privacy practices against current law, since, as this guide shows, the law moves.
Digital membership tools can carry a real part of this load by automating waiver and digital-form collection, contract delivery, renewal notifications, and billing, each of which creates the audit trail that turns “we think we complied” into “here is the record.” Platforms with built-in digital forms and contract management are designed with these obligations in mind, though the software supports compliance rather than replacing legal review.
