How Often Is Mandatory Training Actually Required? The Law Sets No Interval

Search for how often mandatory training must be refreshed and you will be told annually. Fire safety annually. Manual handling annually. Basic life support annually. Infection control annually.

Almost none of that is law. No UK statute sets a refresher interval for any of it.

Two mirror-image provisions govern refresher training across the whole field, and both say the same thing. The Management of Health and Safety at Work Regulations 1999, regulation 13(3)(a), require that training "shall — (a) be repeated periodically where appropriate." The Regulatory Reform (Fire Safety) Order 2005, article 21(2)(b), requires that training "be repeated periodically where appropriate."

Periodically where appropriate. That is the legal standard. Every number in this market — annual, two-yearly, three-yearly — comes from guidance, a sector framework or convention.

This matters commercially in both directions. If you are buying training because you believe the law compels an annual refresher, you may be buying more than you need. And if you are relying on an annual tick to demonstrate compliance, you may be evidencing the wrong thing entirely — because what the law actually asks is whether your people are competent, not whether they sat a course within twelve months.

Where the duty actually sits

The general duty is section 2(2)(c) of the Health and Safety at Work etc. Act 1974: "the provision of such information, instruction, training and supervision as is necessary to ensure, so far as is reasonably practicable, the health and safety at work of his employees."

"As is necessary." Not as is annual.

Regulation 13 of the Management Regulations 1999 then puts the structure on it: adequate health and safety training on recruitment, and on being exposed to new or increased risks — then repeated periodically where appropriate.

So the trigger for training is recruitment and change, and the trigger for refreshing it is appropriateness, which is a risk judgement you make and record.

Moving and handling: a correction worth making

The Manual Handling Operations Regulations 1992 are routinely cited for a training duty that is not in them.

Regulation 4(1) requires employers to avoid manual handling that risks injury so far as is reasonably practicable; and where that is not reasonably practicable, to make a suitable and sufficient assessment, take appropriate steps to reduce the risk to the lowest level reasonably practicable, and provide information on the weight of loads and the heaviest side of an off-centre load.

The word training does not appear in regulation 4(1)(b)(ii). Training enters the Regulations at regulation 4(3)(c), inserted in 2002, which requires that regard be had to the employee's "knowledge and training" when determining whether operations involve a risk of injury and what steps to take. That is a factor to consider, not a duty to deliver.

The duty to train for manual handling is in the 1974 Act and regulation 13 of the Management Regulations, with training treated as one of the "appropriate steps" under regulation 4(1)(b)(ii). If you are quoting "the regulation 4(1)(b)(ii) training requirement" in a policy, it will not survive scrutiny — and it is a common error in the market.

On frequency, the HSE nowhere prescribes a manual handling refresher interval. Its position is risk-based. We are not going to tell you what the priced guidance L23 says on this point, because it is a paid publication we did not read.

Resuscitation: read the modal verbs

The Resuscitation Council UK quality standards are the source everyone cites for annual CPR updates, and the Council is unusually explicit about its own language.

From its implementation section: "The term 'MUST' has been used when the consensus is that the standard promotes normal practice and is obligatory." And: "The term 'SHOULD' has been used when the consensus is that the standard promotes normal practice."

The annual-update statements are should. The acute care standard says "Clinical staff should have at least annual updates, depending on role." The primary care standard says "Clinical staff should have at least annual updates," and that non-clinical staff "generally should have annual updates also," with a local risk assessment determining how often.

The Council describes its standards as "guides that healthcare organisations can use," and claims no legal or regulatory status for them.

There is one place a hard interval genuinely exists, and it is worth separating: certificate validity. An RCUK Advanced Life Support provider certificate is valid for four years under the Council's own course regulations. That is a contractual term set by an awarding body, not a legal refresher duty — and conflating the two is how "my certificate expires" becomes "the law requires".

Our guide to resuscitation training for healthcare workers sets out the level structure and who sits where.

Infection prevention: the sentence nobody quotes

The Health and Social Care Act 2008 code of practice on the prevention and control of infections, last updated in December 2022, is statutory guidance. Its own description of its legal status is more useful than any summary:

The law requires that the code must be taken into account by CQC when it makes registration decisions, and that providers must have regard to it. Then comes the line the market never quotes: "However, they do not by law have to comply with the code. A registered provider may be able to demonstrate that it meets the registration requirement regulation in a different way (equivalent or better) from that described in the code."

The code adds, of its own compliance guidance, that it "is not mandatory but is considered to represent the basic steps that are required to ensure that the criteria can be met."

The hard duty underneath is Regulation 12(2)(h) of the 2014 Regulations: care and treatment must be provided in a safe way, and the things a registered person must do include "assessing the risk of, and preventing, detecting and controlling the spread of, infections, including those that are health care associated."

Note what that regulation does not do. It does not name a course, a level or an interval.

Fire safety: a triggered duty, not a calendar

Article 21 of the Fire Safety Order is the clearest drafting of the lot. The responsible person must ensure employees are provided with adequate safety training at the time they are first employed, and on being exposed to new or increased risks because of a transfer or change of responsibilities, new or changed work equipment, new technology, or a new or changed system of work. And then: repeated periodically where appropriate.

Two further provisions matter more than the annual question. Article 13(3)(b) requires the responsible person to nominate competent persons to implement fire-fighting measures and to ensure their number, training and equipment are adequate. Article 15(1)(b) requires a sufficient number of competent persons to implement evacuation procedures. In both cases article 13(4) and article 15(3) define competence as having "sufficient training and experience or knowledge and other qualities" to implement the measures properly.

So the Order asks you two questions: has everyone had adequate training at the right trigger points, and do you have enough competent people to fight a fire and run an evacuation. Neither is answered by a date on a certificate.

Why the convention exists anyway — and why you should probably keep it

None of this is an argument for training people less. It is an argument for knowing why you train them.

Annual refreshers became the convention for three defensible reasons. They are administratively simple, which matters when you are tracking several hundred staff across eleven subjects. They align with appraisal cycles. And "repeated periodically where appropriate" is a standard you have to defend after an incident, whereas an annual cycle is a standard you can show.

The problem is not the interval. It is that an interval is treated as the whole of the obligation. Three things the law actually looks for, which an annual tick does not deliver:

Training at the trigger points. Both regulation 13 and article 21 require training on recruitment and on change — new equipment, new system of work, change of responsibilities. A provider with a perfect annual record and no process for training people when the hoist changes is non-compliant in the way that matters.

Competence, not attendance. Regulation 18 of the 2014 Regulations requires that staff receive appropriate support, training, professional development, supervision and appraisal; Regulation 19 requires the qualifications, competence, skills and experience necessary for the work to be performed. Neither is satisfied by a completion record. Our guides to CQC Regulation 18 cover what that evidence looks like.

A recorded rationale for the interval you chose. If you train annually, say why. If you train some subjects every three years, say why. "Periodically where appropriate" is an invitation to make a judgement, and a judgement you have written down is worth considerably more at inspection than one you have assumed.

What to do with this

Audit your training matrix against the triggers rather than the calendar. For each subject, record the legal source of the duty, whether the interval you use is a legal requirement (almost never), statutory guidance, a sector framework, an awarding body's certificate validity, or your own risk decision — and in the last case, the reasoning.

That document is more useful than the matrix. It tells an inspector that you understand your obligations rather than that you have been meeting a number somebody told you about. And it tells your finance director which parts of the training budget are legally unavoidable and which are a choice you are making deliberately.

The distinction between what the law compels and what is merely expected runs through every regulated sector, and we unpack it in our guide to statutory versus mandatory training.