Staff Training Records in the UK: What to Keep and for How Long

Published 07 November 2026 · gribit

Manager recording staff training attendance

Keep a record of every piece of training each member of staff receives: who was trained, when, on what, by whom, and the outcome. Keep certificates alongside it. Hold the lot for the length of employment plus a sensible period afterwards, commonly six years. No single UK law fixes one retention period for every type of training record, so the detail depends on your sector and the kind of training. This guide covers what to record, how to track refreshers, how long to keep records and how a small business can stay organised without a filing cabinet.

Gribit

Keep Safety Records Together

Gribit helps small businesses record recurring safety checks, manage follow-ups and store certificates and documents in one digital logbook.

Visit Gribit

TL;DR

Record the person, the date, the subject, the trainer and the outcome for every session, and keep the certificate or sign-in sheet with it.
Training records help you decide when refresher training is due, and show you have spotted gaps.
Retention is not one fixed number. Six years after employment ends is a common benchmark, but some sectors and schemes set their own.
Training alone does not prove competence. Keep evidence of observation, assessment or results where the job needs it.
A digital logbook with reminders and secure document storage beats paper files that go missing at handover.

Why training records matter for a small business

Health and safety training has to happen during working hours and must be free for employees, as the HSE explains. The same HSE page says keeping training records helps you decide whether refresher training is needed. That is the everyday value: a record tells you who has been trained, who has not and who is overdue.

There is a second reason. If something goes wrong, such as an accident, an insurance query or an employment dispute, the first question is usually “what training did this person have?” A dated record answers it in seconds. A memory of “we went through that at the start” does not.

For pubs, shops, salons, offices and village halls, the usual training in question is simple: induction, fire safety and fire warden duties, first aid, manual handling, food hygiene, and any task-specific instruction. The records do not need to be elaborate. They need to be complete, consistent and easy to find.

What a staff training record should include

There is no single UK template for every employer. Official guidance in specific sectors does show what good looks like, and you can borrow the sensible parts.

The Food Standards Scotland meat industry guide says a training record should include the trainee’s name, the dates or duration, the type or level of training, the subjects covered, confirmation of attendance and the formal outcome, such as a test result or certificate. That is a clean baseline for any small business.

The HSE’s workplace transport guidance goes further for drivers, describing a central register with name, training history, training needs and planned training, plus the vehicles the person is competent to operate. The idea of one register, showing both past and planned training, works in any workplace.

For higher-risk activities, the Scottish manual handling passport scheme sets out minimum criteria for attendance records, including date and place of training, printed and signed names of trainer and trainee, a unique identifier such as a payroll number, the type of course and the modules covered. You do not need that level of detail for a fire extinguisher briefing, but a signature from both sides is a good habit.

A practical minimum record

For most small UK employers, this set of fields is enough:

Field	Why it matters
Employee name and role	Links the record to the person and their duties
Start date and induction date	Shows when training began
Subject and type (induction, refresher, task-specific)	Shows what was covered and why
Date and duration	Gives the timeline for refresher planning
Trainer or provider (in-house or external)	Shows who delivered it
Outcome (attended, passed, certificate number)	Shows the result
Next review or refresher date	Prevents lapses
Attached evidence (certificate, sign-in sheet)	Backs the entry up

The Red Tractor dairy standard, for example, asks for name, start date, induction date, details of training attended, the date and who provided it, and lists specific tasks a worker is trained to do. If you sell into an assurance scheme, check its own rules, because they can be stricter than general good practice.

Health and safety training records in particular

Health and safety training is where records earn their keep. Typical items to log include:

Induction, including emergency exits and assembly points
Fire safety awareness and fire warden training
First aid and appointed person training
Manual handling
Safe use of equipment or chemicals
Any change-of-process briefing

Keep the paperwork that proves each entry. A certificate from an external provider is ideal. For in-house sessions, a signed sign-in sheet with date, topic and trainer name does the job.

Tracking refreshers, expiry dates and gaps

A record that only looks backwards is half useful. The point is to know what is coming up.

Refresher intervals vary by subject and sector. Some examples from official guidance:

The HSE says asbestos awareness refresher training is needed every year, or more often if methods, equipment or the type of work change, and that training records help identify gaps.
For woodworking machine operators, the HSE says refreshers are needed at least every three to five years, and sooner if a risk assessment shows a need.
In adult social care in England, Skills for Care says the minimum refresher period for health and safety training is three years.
Food Standards Scotland says refresher training in meat plants is likely to be needed at least every two or three years, depending on job function.

Most of these are sector-specific, so treat them as examples of how regulators think, not as rules for your premises. Your own risk assessment decides what applies.

Triggers that call for training sooner

The HSE woodworking guidance lists events that should prompt retraining: a change in the system of work, new controls, new machines or equipment, an incident or near miss, and changes in legislation or guidance. The list is written for woodworking, but it translates easily. A new till system, a new cellar procedure, a new treatment in a salon or a new fire alarm panel are all reasons to log fresh training.

A simple gap check

Once a quarter, run through your staff list against your training list:

List every role and the training it needs.
List every person and mark what they have, with dates.
Highlight anything missing or due within the next three months.
Book the sessions and note the dates on the record.
Attach new certificates the day they arrive.

New starters, part-timers and seasonal staff are where gaps usually appear, so check them first.

Proving competence, not just attendance

A signed attendance sheet shows someone was in the room. Regulators and auditors increasingly want to see that the person can do the job.

The Office of Rail and Road says a record should show that a person has been assessed as competent, naming the competence standard, the assessor and the expiry date of the assessment. That is a rail-industry publication, but the structure is sound for any trade.

Quality management guidance on ISO 9001 makes a similar point: training alone is not enough to demonstrate competence, and evidence can come from tests, observations or results. If you do not hold ISO certification, you can still apply the idea. After manual handling or equipment training, a manager watches the task done properly and notes it on the record.

How long to keep training records

There is no universal statutory period for all training records. A HR and health and safety adviser notes that many employers keep records during employment and for a period afterwards under their own data retention policy, and that electronic certificates are often enough if stored securely and easy to access.

Some benchmarks you will see:

Source	Suggested retention
Employment records toolkit (Diocese of Oxford)	6 years after employment ends, tied to the six-year time limit for legal proceedings under the Limitation Act 1980
HR adviser guidance (Peninsula)	First-aid and fire-warden training: 6 years after employment. Health and safety representatives’ and employees’ training: 5 years after employment
NHS England records code (Appendix II)	Statutory and mandatory training: 10 years after completion. Other training: 6 years after completion
Red Tractor dairy standard	2 years after the person leaves the business

The NHS figures apply to NHS bodies and the Red Tractor figure to its members, so they show how widely the numbers vary rather than setting a rule for you. For a typical small business with no scheme requirements, a policy of employment plus six years is a defensible default. Check anything sector-specific with your trade body, insurer or an HR adviser.

Data protection still applies

Training records contain personal data, so UK data protection rules apply to them. The Information Commissioner’s Office has issued guidance on employment records which, as summarised by one law firm, says employers should collect and keep only the minimum personal information they need. In practice: record what is useful for training, do not pile unrelated personal detail into the same file, limit who can open it, and delete records when your retention period has run out.

Keeping records organised, secure and current

Most small businesses do not fail on the rules. They fail on the habits. Folders go missing when a manager leaves, certificates sit in someone’s email and the refresher date is in nobody’s diary.

A few habits make the difference:

One home for everything. One system, not a folder, a spreadsheet and a drawer.
Same-day entries. Log the session and attach the certificate when it happens.
Dates that prompt you. A refresher date nobody is reminded about is not a control.
Controlled access. Managers see and edit records. Staff see what they need.
Easy export. If an insurer, inspector or new manager asks, you can produce the records quickly.
Handover-proof. Anyone taking over should find the full history without asking the previous person.

Paper, spreadsheet or digital?

Paper is cheap and familiar, but it is easy to lose and hard to search. Spreadsheets are searchable but depend on one person keeping them up to date, with no reminders. A digital logbook with stored documents, access controls and automatic reminders solves the three weak points together. Whichever you choose, the test is whether a stranger could find a named employee’s full training history in under a minute.

Our perspective

Small businesses rarely lack good intentions on training records. What they lack is time. The pub manager has a cellar to sort, the salon owner has a full diary and the village hall treasurer is a volunteer. The record gets done once, then drifts.

That is why we built Gribit around recurring checks. Our approach is to schedule the item, record the result, keep follow-up actions visible and store the supporting certificates and documents in the same place. Reminders are automated, so the work is resolving what is overdue, not remembering to look.

We think the same logic suits the safety side of training records: fire warden refreshers, first aid certificates and the paperwork that sits behind them. Put them on a schedule, attach the evidence and give the right staff access. When a manager leaves, the history stays with the site, not with a person.

Our aim is to save you time compared with paper logbooks and spreadsheets, so you can spend your effort on fixing issues rather than managing paperwork.

Jon

Keeping safety checks and certificates in one place

Gribit is a digital logbook for small businesses to schedule, record and manage recurring safety checks such as fire alarm tests and first-aid kit inspections. You can track follow-up actions, store certificates and supporting documents, assign staff access, set automated reminders, export records and organise checks by site, item or location.

The Site Logbook Annual Plan costs £49 per year per site. You can see the plan and sign up for Gribit when you are ready to move your safety records off paper.

Gribit

If you run more than one site, each site has its own subscription, so records stay separated by location.

A short checklist to start this week

Decide the minimum fields every training record will carry.
Gather existing certificates and sign-in sheets for current staff.
Enter each person’s history, with dates and outcomes.
Set a refresher date for each item, based on your risk assessment and any sector guidance.
Agree who can view and edit the records.
Write down your retention period and when old records are deleted.
Diary a quarterly gap check.

FAQ

Do UK employers have to keep staff training records?

There is no single law that requires a record of every kind of training, but the HSE says keeping training records helps you decide if refresher training is needed. Some sectors and assurance schemes do require them explicitly. In practice, you need them to show staff are trained and competent.

How long should I keep health and safety training records?

There is no one statutory period. Six years after employment ends is a common benchmark, linked to the six-year limit for legal proceedings. Some sectors set longer or shorter periods, so check your trade body or insurer.

Is a digital certificate enough?

Often, yes. One UK HR and safety adviser says electronic certificates are often sufficient if stored securely and easy to access. Keep them with the training record and make sure the right people can retrieve them quickly.

Does attending a course prove someone is competent?

Not on its own. Guidance on competence says training alone does not demonstrate competence. Add evidence such as an observed task, a test or a manager sign-off, especially for equipment or manual handling.

Who should be able to see training records?

Managers and administrators who need them should have edit access, and others only what their role needs. Because records hold personal data, keep access limited, as the ICO’s employment records guidance points to minimal collection and sensible handling.