Mandatory Compliance Training UK Employers Must Provide

Training is the boring bit that keeps people safe

Nobody opens a small business because they're excited about compliance training. But the moment you take on staff, you take on a legal duty to provide health and safety training and make sure people are equipped to work safely and lawfully. Get it right and it's quietly invisible. Get it wrong and it shows up at the worst time, usually after an accident or a claim.

Here's the plain-English version. What is required, what is sensible, and how to keep it organised so you can prove you did it.

Hazel (our Chief Wellbeing Officer) completed her fire-safety induction by walking confidently to the nearest exit, which happens to be the kitchen. We're working on it.

Quick Answer Box

• Do this: give health and safety training to everyone, then add role-specific training based on the real risks of each job.
• Legally required: health and safety training (including induction, and fire safety and manual handling where relevant) under the Health and Safety at Work etc. Act 1974.
• Strongly advisable: anti-harassment and equality training, given the duty to prevent sexual harassment.
• Write down: who was trained, on what, when, by whom, and when the refresher is due.

Why this matters more than you think

Training isn't paperwork for its own sake. It keeps people safe. It keeps you legal. If something goes wrong, it's your evidence that you acted responsibly.

The cautionary tales are real. Compliance failures can be extremely costly. The worst incidents often trace back to someone not being trained for the task in front of them. Closer to home, businesses face fines and tribunal claims not because they meant any harm, but because they couldn't show staff had been trained on the things that mattered. The difference between a defensible position and an expensive one is often a training record.

What the law actually requires

The cornerstone is the Health and Safety at Work etc. Act 1974, backed by the Management of Health and Safety at Work Regulations 1999. Together they require employers to provide the information, instruction, training, and supervision needed to keep people safe at work. The HSE guidance on health and safety training is the practical reference.

In practice, that means, as a minimum:

• Induction training for every new starter, covering your workplace, hazards, and emergency procedures.
• Fire safety, so people know what to do and how to get out.
• Manual handling, wherever lifting or carrying is part of the job.
• Risk-specific training for the particular hazards of a role (for example, working with chemicals, machinery, or at height).

This duty applies wherever people work, including at home. A hybrid or home-based worker still needs to understand safe working and your emergency expectations.

The training that depends on your role or sector

Beyond the universal health and safety baseline, what is required depends on what your people actually do. Common examples:

• First aid. The level of provision depends on your size and risk. Many workplaces need at least a trained first-aider.
• Food hygiene. Essential for food businesses, from cafés to caterers. The Food Standards Agency sets out what is expected.
• Safeguarding. Required in care, education, and any role working with children or vulnerable adults.
• Data protection and UK GDPR awareness. Anyone handling personal data should understand how to keep it secure and how to spot a breach.
• Anti-harassment and equality. Not a standalone legal requirement in the same way as health and safety, but now strongly advisable. The duty to take reasonable steps to prevent sexual harassment, introduced by the Worker Protection (Amendment of Equality Act 2010) Act 2024, makes good anti-harassment training one of the clearest ways to evidence those steps. The ACAS guidance on preventing sexual harassment is a sound starting point.

Statutory versus mandatory: a quick definition

These terms get used interchangeably, so here's the clean distinction.

• Statutory training is required by law or by a statutory body. Health and safety training under the 1974 Act is the classic example.
• Mandatory training is training your organisation decides is compulsory so staff can do their jobs safely and effectively. It may flow from legislation, official guidance, or your own judgement about a role.

The two overlap, and for record-keeping purposes you should track both the same way. The label matters less than the question: can you show this person was trained on what their job demands?

How to work out what your people need: a step-by-step checklist

• Start with your risk assessment. The hazards you identify point straight to the training people need.
• List every role and ask: what could go wrong, and what training prevents it?
• Separate the legally required (health and safety, sector statutory training) from the strongly advisable (anti-harassment, data protection).
• Decide on induction training for new starters and the right refresher cycle for each topic.
• Choose the delivery method to match the risk: e-learning for awareness topics, in-person or hands-on for practical skills.
• Build a simple training matrix listing who needs what, and when it is due.
• Schedule it, deliver it, and record it.
• Review the matrix at least annually and whenever roles, risks, or the law change.

Induction versus refreshers

Training isn't a one-and-done event. Induction gets new starters safe and oriented from day one. Refreshers keep that knowledge current as people, equipment, and rules change.

How often you refresh depends on the topic and the risk. Fire safety and first aid are typically refreshed on a regular cycle. Awareness topics such as data protection might be annual. The key is to decide the cycle, write it down, and stick to it, rather than waiting for an incident to remind you.

Recording and evidencing training: the bit that saves you

If you can't prove training happened, then for practical purposes it didn't. Recording is the unglamorous step that turns "we definitely covered that" into solid evidence.

For each training event, capture:

• who was trained
• what the training covered
• the date it was completed
• who delivered it (and any certificate or test result)
• when the refresher is due

Keep records secure, easy to retrieve, and for long enough to be useful if there is an accident, a claim, or a tribunal. There isn't a single blanket statutory retention period for all training records, but tribunal time limits and any sector-specific rules mean you should keep them well beyond the training date. Check any rules that apply to your sector.

Tip: a central register plus certificates saved in one folder beats scattered inboxes every time.

E-learning versus in-person

Both have their place, and the right answer is usually a mix.

• E-learning suits awareness-level topics: data protection, anti-harassment basics, general fire awareness. It's efficient, easy to roll out, and the best platforms include a short test so you can evidence understanding, not just attendance.
• In-person or hands-on suits practical skills: first aid, certain manual handling, and equipment-specific training where someone needs to physically demonstrate competence.

Match the method to the risk and to how you will check the training actually landed.

Common mistakes (and the fix)

• Mistake: assuming "small business" means health and safety training is optional.

Fix: the duty applies from your first employee. Provide induction and the relevant risk-based training.

• Mistake: training people once and never refreshing.

Fix: set a refresher cycle for each topic and diarise it.

• Mistake: delivering training but keeping no record.

Fix: log who, what, when, and the next due date for every session.

• Mistake: forgetting home and hybrid workers.

Fix: the duty follows the worker, wherever they work.

• Mistake: treating anti-harassment training as optional.

Fix: it's strong evidence of "reasonable steps" under the Worker Protection Act, so include it.

A short example

A Hampshire care provider with eight staff was confident its team was "well trained". Then a safeguarding concern was raised, and the question came: can you show every member of staff completed safeguarding and that it was up to date? The training had happened, but it lived in scattered emails and one manager's memory.

After that scare, the owner built a simple training matrix: a single sheet showing each person, their required training, completion dates, and refresher due dates, with certificates stored alongside. The next time anyone asked, the answer took thirty seconds and looked thoroughly professional. Same training, far stronger position.

What to write down

Use a simple matrix that shows, for each employee:

• the training required for their role
• the date each item was completed
• who delivered it, plus any certificate or test result
• the next refresher due date
• where the certificates are stored

Bottom line

• Health and safety training is a legal duty from your very first employee.
• What else is mandatory depends on the role and sector, so let your risk assessment guide you.
• Anti-harassment and equality training is strongly advisable, not optional, given the duty to prevent harassment.
• Record everything. If you can't evidence it, you can't rely on it.

Right, what do you do now?

If you're not sure what training your team is legally required to have, or your records are scattered across inboxes, this is exactly the sort of thing we untangle in an HR Health Check. We map what is required, what is missing, and what to fix first.

For getting training organised and tracked properly, HR Excel helps you put the systems in place, and HR Protect gives you ongoing support when questions come up. You can also keep an eye on broader duties through our guide on the employer's RIDDOR reporting obligations.

Book your HR Health Check or a discovery call and let us make sure your people are safe, legal, and properly recorded. Until next time, keep buzzing and take care of your people!