Business owners should set their own policies based on their own assessment of risk to their employees and customers.  A mandate is unnecessary. Provide guidance instead.

Trust your citizens.  People will take the extra precautions to mitigate their own levels of risk.