You have no items in your shopping basket.
Statutory and mandatory training is one of the most searched and most misunderstood areas of workforce compliance in the UK. Employers, managers, compliance leads, trainers and staff often ask the same practical questions: what is statutory training, what is mandatory training, who decides what staff must complete, what is legally required, how often should training be refreshed, and what happens if people do not complete it?
In this blog, Dr Richard Dune answers the most frequently asked questions about statutory and mandatory training with concise, plain-English responses and links to relevant resources across The Mandatory Training Group website.
The terms statutory training and mandatory training are often used interchangeably, but they are not the same. That distinction matters because it affects how organisations define training requirements, justify decisions, manage risk, evidence compliance, and build a workforce that is safe, competent and inspection-ready.
Organisations should avoid copying generic training lists without thinking through the role, risk and service context. The strongest approach is to use a role-based, risk-led training matrix to connect training to induction and competence, maintain reliable records, and align learning with wider governance, policies, and workforce oversight.
For a broader view of available course categories, visit online CPD courses and online statutory and mandatory training packages.
Below are the most frequently asked questions and answers about statutory and mandatory training.
Statutory training is driven by law, while mandatory training is driven by organisational requirements. In practice, many employers manage both together using a single training matrix. For a fuller explanation, see the differences between statutory and mandatory training.
There is no single universal list for all employers, but many training duties arise from health and safety law, sector regulations and local risk assessments. See the key health and social care legislation and regulations.
In practice, yes. If training is required to help the organisation meet legal duties and control risk, it should be treated as required.
No. Some mandatory training is organisation-led rather than directly prescribed by legislation, although it may still be linked to regulatory expectations, policy or service risk.
Not always. Something can be mandatory because the employer requires it, even if it is not directly prescribed in legislation.
The employer or provider decides based on legislation, regulations, risk, job role, and local policy.
No. There are common topics, but the final training matrix should always reflect the sector, role, service model and level of risk.
Because both involve required training, and many organisations use umbrella terms such as essential, compulsory or mandatory without clearly separating the legal driver from the organisational driver.
Use a role-based, risk-led training needs analysis rather than applying a generic list to every member of staff. See our guidance on how to improve statutory and mandatory training.
Common subjects include health and safety, fire safety, safeguarding, moving and handling, infection prevention and control, information governance, equality and diversity, and first aid or basic life support, where relevant.
A training matrix is a structured record that shows what training each role requires, how often it is refreshed, which level it applies to, and sometimes how competence is assessed.
It helps organisations avoid under-training, over-training and duplication, while making training decisions easier to justify.
It should usually include the course topic, the rationale or driver, the roles that require it, the level needed, how it is delivered, refresher intervals and, where relevant, how competence is assessed.
Organisations sometimes use terms such as essential training, compulsory training, core training or required training.
Mandatory training is any training the organisation requires staff to complete because it is essential for the role or service.
Examples often include health and safety, fire safety, safeguarding, moving and handling, information governance, infection prevention and control, equality and diversity, and, where relevant, first aid or basic life support.
It is training provided to help employers meet duties under health and safety law by ensuring staff know how to work safely, understand risks and follow required controls and procedures.
In practice, it is the training framework that an organisation uses to ensure staff understand key risks, legal duties, workplace procedures, and role-specific expectations.
No. Induction introduces the organisation and role, while statutory and mandatory training covers the ongoing learning needed for safe and compliant practice.
Induction usually covers local procedures, key risks, expected standards, reporting arrangements and priority training requirements.
It is the part of induction where new starters complete or are assigned the training they need at the start of employment.
No. The Care Certificate supports induction and baseline capability, but it does not replace wider statutory, mandatory or role-specific training. See our guidance on the difference between the Care Certificate and statutory/mandatory training.
Not exactly. The Care Certificate is best understood as part of induction and baseline workforce development for eligible new care staff.
It is mainly relevant to new healthcare support workers and adult social care workers who are new to care. See our guide on who needs the Care Certificate and when.
There is no one-size-fits-all answer. Refresher cycles should be risk-based, achievable and responsive to incidents, audits, policy changes and service developments.
No. Some subjects require annual updates, but others may need different review cycles depending on risk, competence and regulation.
Not always. Some roles also require observation, supervised practice, practical assessment or local sign-off.
They should keep completion records, induction records, expiry dates, attendance logs, and, where relevant, competency evidence. A system such as ComplyPlus™ LMS can help manage this.
Risks include unsafe practice, weak governance, poor inspection evidence, restricted duties or disciplinary action. See the consequences of not completing the statutory and mandatory training guide.
Refusing mandatory training can become a conduct, capability or compliance issue if the training is genuinely required for your role.
Both the employer and the employee have responsibilities. Employers must set and monitor requirements, while staff must engage with required training. See the guidance on employee and employer statutory and mandatory training responsibilities.
Employers are responsible for defining training requirements, providing access, monitoring completion and linking training to safe practice. Employees are responsible for engaging with required learning and maintaining competence.
That depends on your contract, workplace policy and how the employer organises training.
An employer may expect training to be completed by a deadline, but they should still consider whether that time counts as working time and whether it should be paid.
In many cases, yes. If the training is required for your role, employers should consider pay rights and minimum wage protections.
Usually, mandatory training required for your job should be treated seriously as part of your employment arrangements.
For NHS staff, local policies and contract arrangements matter, but statutory and mandatory training is generally treated as part of workforce development and safe-practice expectations.
Some employers use written repayment agreements for training costs, especially if someone leaves soon after completing training, but this should be handled carefully and lawfully.
That depends on the employment arrangement and policy, but employers usually need to ensure that required training is available to staff performing regulated or safety-critical work. See our guidance on who pays for statutory and mandatory training.
Mandatory training is training that an employer or organisation requires staff to complete because it is essential for safe working, service quality, compliance or role performance.
In the workplace, "mandatory" means required rather than optional.
Sometimes directly, sometimes indirectly. Not every mandatory course is named in law, but employers often make training mandatory to meet broader duties.
The purpose is to help staff work safely, consistently and competently, while helping the organisation reduce risk, support compliance, and maintain service standards.
It supports safer practice, improves consistency, strengthens governance and helps organisations demonstrate that staff are properly prepared for their roles.
The benefits include better risk control, stronger workforce competence, clearer expectations, improved inspection readiness, more consistent service delivery and better evidence of compliance.
In adult social care, mandatory training is the training that a provider requires staff to complete to deliver safe, person-centred and compliant care.
It is the employer-defined training required to support safe care, workforce competence, legal compliance and good governance.
It usually includes a role-based mix of subjects, such as safeguarding, infection prevention and control, moving and handling, equality and diversity, information governance, and emergency response, where relevant. Browse health and social care e-learning courses.
It is usually shaped by lone working, safeguarding, moving and handling, medicines support, infection prevention and control, information governance and the needs of people being supported at home. See accredited domiciliary care courses.
It typically reflects resident safety, safeguarding, infection prevention and control, moving and handling, dementia awareness (where relevant), fire safety, emergency response, and workforce competence. See our guidance on statutory and mandatory training for care homes.
General practice training requirements depend on role, patient safety risks, local systems and regulatory expectations. See mandatory training requirements for general practice.
It should reflect both core workplace requirements and the risks associated with the specific role, setting, patient group, and regulatory environment. See eLearning for NHS providers.
It is usually employer-led and role-specific. It may include safeguarding, information governance, infection prevention and control, resuscitation or basic life support where relevant, equality and diversity, and other local requirements.
It is usually shaped by employer policy, service risks, patient safety, regulatory expectations and local governance requirements. See our guidance on NMC revalidation.
Dental practice staff usually need a role-appropriate mix of training in patient safety, infection prevention and control, safeguarding, data protection, basic life support, complaints handling, and workplace safety. Browse enhanced dental CPD eLearning courses.
Hospice training requirements should reflect palliative and end-of-life care risks, safeguarding, medicines safety, infection prevention and control, data handling, dignity, communication and emergency response where relevant.
It usually refers to the employer-required training NHS staff must complete to support safe working, patient safety, legal compliance and local policy.
There is no single national policy that applies identically to every NHS organisation in every operational detail. NHS organisations usually set local mandatory training policies within wider national frameworks and workforce governance arrangements.
The Core Skills Training Framework is used mainly in healthcare to standardise key statutory and mandatory training subjects. See our guidance on the Core Skills Training Framework.
It refers to statutory and mandatory training structured around the Core Skills Training Framework, which standardises a range of core subjects commonly used in healthcare settings.
Not necessarily. CSTF is especially relevant in the NHS and other healthcare environments, but providers should determine alignment based on contracts, roles, and service needs.
In many settings, yes. Safeguarding is often a core requirement, especially in health and social care, early years, schools and children's services. Browse safeguarding mandatory courses.
In many workplaces, yes, because fire safety responsibilities form part of the employer's wider legal duties. Browse fire safety mandatory training courses.
Where staff move people or objects as part of their role, moving and handling training is often essential. Browse moving and handling mandatory training courses.
No. It depends on workplace risk, role requirements and whether designated first aiders are needed. See the responsibilities of a workplace first aider and browse first aid courses.
It is mandatory for some roles and settings, especially where clinical or care staff may need to respond to emergencies. Browse basic life support and resuscitation courses.
In many organisations, yes. Data protection, information governance, and confidentiality training are often mandatory due to compliance and risk management obligations. See data protection (information governance and data security) courses.
In many sectors, yes. It is often required to support lawful, fair, inclusive and respectful practice. See the equality, diversity and human rights mandatory courses.
In healthcare, social care, childcare and other relevant environments, it is often a core mandatory subject. See infection prevention and control mandatory training courses.
It can be especially where staff face behavioural risks, lone-working concerns, or challenging situations. Browse managing violence and aggression courses.
Training supports compliance with expectations for safe staffing, competence, supervision, and governance. See our guidance for the training required for CQC compliance.
It is the framework CQC uses to assess providers, quality statements and evidence of safe, effective, caring, responsive and well-led services. See our guidance on the CQC assessment framework.
Training helps demonstrate workforce competence, leadership oversight, compliance and risk management. See our resources on CQC inspection readiness.
They usually want to see a clear rationale for training requirements, role-appropriate completion, evidence of competence where necessary, and systems that link training to wider governance and quality assurance.
It includes clear requirements, role-based assignment, reliable records, refresher monitoring, leadership oversight and links to wider governance systems. See clinical governance resources.
Training supports workforce capability, performance, confidence and safe service delivery. See workforce development resources.
They should use a clear matrix, assign ownership, monitor overdue items, link training to competence and review risks regularly. See guidance on how to improve statutory and mandatory training.
Start by reviewing each topic against role, risk, legal driver and service needs. Remove duplication, clarify the rationale, prioritise safety-critical areas and rebuild the matrix into something staff can realistically complete.
A learning management system or the wider compliance platform can help manage assignments, records, reminders and reporting. See ComplyPlus™ LMS.
Yes. Strong organisations align training with policies, procedures, competency expectations and evidence requirements. See ComplyPlus™ policies and procedures.
ComplyPlus™ Software is MTG's compliance platform, designed to connect training, policies, governance and evidence.
Yes. Many knowledge-based subjects can be completed online. Browse CPD-accredited e-Learning courses.
Sometimes, but not always. E-learning works well for many knowledge-based topics, but some higher-risk areas may also require practical demonstration, supervised practice, observation or local sign-off.
Yes. MTG also offers face-to-face options in some areas. See the classroom statutory and mandatory training calendar.
Many MTG courses are CPD-accredited. See MTG's CPD Certification Service provider profile.
Yes. MTG provides training for health and social care, early years, education, primary care and other sectors. See eLearning for health and social care, online CPD courses for schools and colleges, and primary care courses.
Bank and agency workers still need role-appropriate training and competence assurance. Organisations should check training evidence and provide local induction.
They are broadly similar to those for other temporary workers: appropriate training, local induction, role-specific assurance and clear limits on duties where competence has not yet been confirmed.
A good starting point is online statutory and mandatory training courses or our full CPD courses catalogue.
You can use MTG's category pages, relevant blogs and sector pages depending on your needs. Good starting points include MTG Blogs, eLearning for Health and Social Care, and Primary Care Courses, Training and Qualifications.
Below is a high-impact table focusing on the core elements of statutory and mandatory training guidance. It reflects the key message of the attached blog: organisations should avoid generic training lists and instead use a role-based, risk-led training matrix linked to induction, competence, records, governance, policies and workforce oversight.
Core elements of statutory and mandatory training guidance
|
Core element |
What it means |
Why it matters |
What employers should do |
Evidence to keep |
|
Statutory training |
Training driven by law, regulation or enforceable duties. |
Helps organisations meet legal responsibilities and control workplace risks. |
Identify legal and regulatory drivers relevant to the organisation, role and setting. |
Training matrix, legal rationale, completion records and refresher dates. |
|
Mandatory training |
Training required by the employer because it is essential for safe, effective and consistent practice. |
Not all mandatory training is directly named in law, but it may still be necessary for compliance, safety and service quality. |
Define mandatory requirements through local policy, service risk, professional expectations and governance needs. |
Policy documents, role profiles, completion reports and supervision records. |
|
Clear distinction between statutory and mandatory |
Statutory training is law-driven; mandatory training is organisation-driven. |
Confusion can lead to poor decisions, weak evidence and inappropriate generic training lists. |
Explain the distinction internally while managing both through a single practical training system. |
Training policy, staff guidance and rationale for required courses. |
|
Role-based training needs analysis |
Training is decided by role, responsibility, risk and service context. |
Prevents under-training, over-training and duplication. |
Review what each staff group actually does and what risks they manage. |
Training needs analysis, role mapping and matrix sign-off. |
|
Training matrix |
A structured record showing which roles need which training, at what level and how often. |
Gives managers a defensible way to assign, monitor and review training. |
Include topic, rationale, role, level, delivery method, refresher cycle and competence requirements. |
Current matrix, version history, review dates and governance approval. |
|
Induction requirements |
Initial training for new starters is linked to local procedures, role expectations and priority risks. |
New staff need safe onboarding before working independently or taking on higher-risk duties. |
Build mandatory training into induction and local orientation. |
Induction checklist, starter training records and local sign-off. |
|
Refresher training |
Periodic updates to maintain current knowledge, skills and confidence. |
Requirements change, risks evolve, and staff competence can fade over time. |
Set risk-based refresher cycles rather than applying annual updates to every topic. |
Expiry reports, refresher schedules and overdue training actions. |
|
Competence assurance |
Evidence that staff can apply learning safely in practice, not just complete a course. |
Course completion alone may not prove competence for higher-risk tasks. |
Use observation, supervised practice, practical assessment or local sign-off where needed. |
Competency assessments, supervision notes and practical sign-off records. |
|
Training records and evidence |
Reliable records showing completion, expiry, attendance and competence evidence. |
Supports governance, audits, inspection readiness and defensible decision-making. |
Keep records accurate, accessible and linked to staff roles. |
Certificates, attendance logs, expiry dates, training reports and audit trails. |
|
Employer responsibilities |
Employers must define, provide access to, monitor and act on required training. |
Training is part of safe staffing, risk control and workforce governance. |
Assign ownership, monitor completion and escalate gaps. |
Training policy, manager reports, escalation records and action plans. |
|
Employee responsibilities |
Staff must engage with required learning and maintain competence for their role. |
Non-completion can create safety, conduct, capability and compliance issues. |
Make expectations clear and support staff to complete training. |
Staff acknowledgements, completion records and supervision discussions. |
|
Training time and payment |
Required training may raise questions about paid time, minimum wage and employer funding. |
Poor handling can create disputes, unfairness, and wage compliance risks. |
Clarify who pays, whether time is paid and how training is scheduled. |
Contracts, written particulars, training policy and pay arrangements. |
|
Sector-specific requirements |
Training varies by sector, including adult social care, general practice, domiciliary care, care homes, NHS settings, dentistry, schools, and childcare. |
One generic list will not fit every regulated setting. |
Adapt training requirements to the service model, regulator expectations and staff duties. |
Sector training matrix, local policies and risk assessment evidence. |
|
Common training subjects |
Typical topics include safeguarding, health and safety, fire safety, moving and handling, infection prevention and control, information governance, equality and emergency response. |
These subjects often sit at the heart of safe, compliant practice. |
Select subjects based on role, risk, law, regulator expectations and local policy. |
Course assignment records, completion reports and role-based rationale. |
|
Core Skills Training Framework (CSTF) |
A recognised framework used mainly in healthcare to standardise common statutory and mandatory training subjects. |
Helps healthcare organisations align core training expectations and reduce duplication. |
Use CSTF where relevant to contracts, NHS alignment, healthcare roles or workforce mobility. |
CSTF mapping, course records and refresher evidence. |
|
Online learning and blended delivery |
Many knowledge-based topics can be delivered online, but some subjects need practical or local assessment. |
E-learning is efficient, but not always enough for practical competence. |
Decide whether each topic needs e-learning, classroom delivery, practical assessment or local sign-off. |
Delivery method records, assessment evidence and completion certificates. |
|
CQC and inspection readiness |
Training supports evidence of staffing, competence, supervision and governance. |
Inspectors and auditors often look for a clear rationale, evidence of completion, and assurance of competence. |
Link training records to governance, risk management and quality assurance. |
Training dashboards, audit findings, supervision notes and improvement actions. |
|
Governance oversight |
Training should be reviewed as part of leadership, quality and compliance systems. |
Training weakens when records are disconnected from policies, risk, and assurance. |
Include training performance in governance meetings and management reports. |
Meeting minutes, dashboards, action logs and risk register entries. |
|
Systems and technology |
Learning management systems can assign training, track completion, issue reminders and report compliance. |
Manual tracking can become unreliable, especially across larger or multi-site organisations. |
Use an appropriate system to manage assignments, refreshers, records and reporting. |
LMS reports, audit logs, certificates and compliance dashboards. |
|
Continuous improvement |
Training systems should be reviewed after incidents, audits, complaints, policy changes and service developments. |
Static training matrices quickly become outdated. |
Review the matrix regularly and update it when risks, roles or guidance change. |
Review logs, version control, updated matrix and improvement evidence. |
|
Question organisations should ask |
Strong answer |
|
Do we know the difference between statutory and mandatory training? |
Yes. We understand the legal driver and the employer-defined requirements, and we manage both clearly. |
|
Do we know who needs what training? |
Yes. Our training matrix is role-based, risk-led and linked to staff duties. |
|
Do we know how often training should be refreshed? |
Yes. Refresher cycles are justified by risk, regulation, policy, incidents and competence needs. |
|
Do we know whether completion equals competence? |
Yes. We identify where additional assessment, supervision or practical sign-off is required. |
|
Can we evidence training compliance? |
Yes. We hold current records, expiry dates, attendance logs, certificates and competence evidence. |
|
Do managers act on overdue training? |
Yes. Overdue training is monitored, escalated and recorded through governance processes. |
|
Is training linked to policies and procedures? |
Yes. Required training reflects the policies, procedures and risks staff must manage in practice. |
|
Can our system support inspection readiness? |
Yes. Training data is accessible, current and linked to workforce assurance and quality oversight. |
|
Core message |
Practical implication |
|
There is no single universal training list. |
Employers must decide requirements by role, risk, sector and service model. |
|
Statutory and mandatory training overlap but are not identical. |
Organisations should understand the difference but manage both coherently. |
|
A role-based matrix is essential. |
It prevents duplication, gaps and weak justification. |
|
Completion is not always competence. |
Some roles need observation, assessment or supervised practice. |
|
Training is part of governance. |
Records, refreshers, policy alignment and oversight matter as much as course assignment. |
|
Good systems make compliance easier to evidence. |
Learning management systems help track, remind, report and audit training requirements. |
Statutory and mandatory training sits at the intersection of safety, compliance, governance and workforce capability. The challenge for organisations is not simply to assign courses, but to build a training framework that is proportionate, role-based, evidence-led and practical to manage. When employers understand the difference between statutory and mandatory training, they are better placed to reduce confusion, improve oversight, and support safer and more consistent service delivery.
If you are reviewing your training matrix, induction structure or refresher model, explore MTG's Online Statutory and Mandatory Training Courses, browse Online CPD Courses, Training and Accredited E-Learning Courses, or visit eLearning for Health and Social Care.
You can also explore Learning Management System: ComplyPlus™ LMS, ComplyPlus™ Policies and Procedures, and ComplyPlus™ Regulatory Compliance Management Software for a more integrated approach to workforce assurance, governance and compliance.
For tailored support, please contact our team through the contact us form to discuss your organisation's statutory and mandatory training needs.
This revised version removes repeated and near-duplicate questions while keeping the core themes the original brief needed: Definitions, legal and governance context, induction and competence, sector-specific applications, training subjects, regulation and inspection, systems, delivery methods, accreditation, and access routes across the MTG site.
Complete the form below to start your ComplyPlusTM trial and
transform your regulatory compliance solutions.
← Older Post Newer Post →
0 comments