What legislation states employers must have a health and safety policy?

In the US, there is no national legislation or regulation with that requirement. A few states have that as part of their Occupational Safety and Health regulations.