Statutory vs Mandatory Training - What UK Law Actually Requires
Training providers sell a lot of courses as "legally required". Most of them are not, at least not in the way the marketing implies, because UK law almost never names a course or a certificate.
What the law actually requires is adequate training for the risks of the work. Which course delivers that, and whether a certificate is involved, is nearly always the employer's judgement to make and to defend.
This guide separates statutory training, required by legislation, from mandatory training, required by your employer, regulator, insurer or contract, and shows what the main instruments actually say.
What the Law Actually Says, Activity by Activity
| Activity | What the legislation requires | Named certificate? |
|---|---|---|
| First aid | Adequate provision of trained "suitable persons", based on a needs assessment | No; course names like FAW come from HSE guidance |
| Fire safety | Adequate safety training at recruitment and on new risks | No |
| Display screen equipment | Adequate training for workstation users | No |
| Hazardous substances (COSHH) | Suitable and sufficient information, instruction and training | No |
| Asbestos | Adequate training at regular intervals for anyone liable to exposure | No; HSE says certificates are not proof of competence |
| Forklifts and work equipment | Adequate training for users and supervisors | No; there is no such thing as a forklift licence |
| Food hygiene | Handlers supervised and instructed and/or trained commensurate with their work | No certificate required |
| Security work | SIA licence-linked qualification before applying for a front line licence | Yes |
The Root Duty Everyone Shares
The foundation is section 2 of the Health and Safety at Work Act 1974, which requires "such information, instruction, training and supervision as is necessary" for health and safety. Every activity-specific rule in the table sits on top of that duty.
Regulation 13 of the Management Regulations 1999 gives it a shape: training on recruitment, training when risks change, repeated periodically where appropriate, and always during working hours. That is the statutory training cycle, and note what it does not say: no named courses, no fixed refresher intervals, no certificates.
Even the classic "certificate" subjects follow the pattern. Manual handling training is not mentioned in the Manual Handling Operations Regulations at all; it flows from the general duties. HSE is explicit that asbestos work needs no certificate and that a certificate is not proof of competence.
Where the Law Really Names a Qualification
The genuine exceptions are narrow. Front line security work needs an SIA licence, and you must complete a licence-linked qualification before you can apply, which makes private security the clearest case of statutory, course-shaped training in mainstream UK employment.
Regulated sectors sit in between. In CQC-regulated care, providers must give staff "such appropriate support, training, professional development, supervision and appraisal as is necessary", and the regulator expects safeguarding training at induction with updates at appropriate intervals; the courses are still not named in the legislation, but the regulator audits them as though they were.
What Mandatory Training Actually Means
Mandatory training is whatever someone with power over your business says it is: an employer, a regulator, a commissioner, an insurer or a client contract. CQC's own guidance draws exactly this line, listing "statutory training" and "other mandatory training, as defined by the provider for their role" as separate things.
The NHS runs the largest version of this, with a national statutory and mandatory training framework currently being rebuilt. Outside healthcare, mandatory lists mostly come from accreditations, tender requirements and insurance conditions, which is why two identical businesses can carry very different training matrices.
The practical consequence: when a provider tells you a course is legally required, ask which instrument requires it. The honest answer is usually "your risk assessment decides", and our guide to professional writers versus templates applies the same test to documents.
The Training Duties Arriving Next
From 30 October 2026 the sexual harassment prevention duty strengthens from "reasonable steps" to "all reasonable steps", and employers become liable for third-party harassment unless they took all reasonable steps to prevent it. The regulator's guidance already treats training for workers and managers as a core step, with effectiveness reviewed and refreshers at regular intervals; our October 2026 checklist covers the full wave.
From January 2027, unfair dismissal protection arrives at six months' service rather than two years. That is not a training duty either, but it makes manager training on probation, performance and dismissal processes considerably more valuable than it was.
Training Records and the Training Matrix
There is no general statutory duty to keep training records; there is a practical necessity to, because records are how you demonstrate the adequate training the law does require. Official guidance makes the expectation plain in places, with food businesses told to keep training records to show at inspection and asbestos guidance recommending a record per individual.
The working tool is a training matrix: every role, the training the risk assessment and your regulators attach to it, who has done it and when it is next due. Kept current, it answers an inspector, an insurer, an auditor and a tribunal with the same document, and it belongs alongside your training and development policy rather than in someone's inbox.
Training Policy and Procedure Writers
Policy Pros writes the documents that make training defensible: training and development policies, training needs analyses and matrices, induction procedures and the health and safety policies the statutory duties hang from. The HSE's training guidance sets the expectations; we write the paperwork that meets them for your business specifically.
If your training matrix could not currently show an inspector who needs what and when, contact us for a free quote, or call 020 3951 2875.
Frequently Asked Questions
Is first aid training legally required?
First aid provision is legally required: the First-Aid Regulations 1981 require adequate equipment, facilities and trained suitable persons, based on a needs assessment. No specific course is named in the regulations; FAW and EFAW are course structures from HSE guidance, and even annual refreshers are recommended rather than mandatory.
Do forklift drivers need a licence?
No. HSE is explicit that there is no such thing as a forklift licence. The law requires adequate training for anyone using work equipment, and certificates issued by training bodies are evidence of that training rather than a legal requirement in themselves.
What is the difference between statutory and mandatory training?
There is no legal definition of either term. By convention, statutory training is training legislation requires, directly or by necessary implication, while mandatory training is what an employer, regulator, insurer or contract requires. CQC's guidance uses exactly this split, treating mandatory training as defined by the provider.
Do we legally have to keep training records?
There is no general statutory duty to keep them, but the law requires adequate training and records are the realistic way to demonstrate it. Some official guidance is explicit, with food businesses told to keep training records to show at inspection, and sector regulators such as CQC audit training records in practice.
Does the new harassment duty require training?
The duty, which strengthens to all reasonable steps from 30 October 2026, does not name training. The regulator's guidance treats training workers and managers as a core preventative step and expects its effectiveness to be reviewed, so in practice a tribunal will ask what training you gave and when it was refreshed.
