What statutory training must all school staff complete?

At minimum: safeguarding and child protection training at induction and refreshed regularly under Keeping Children Safe in Education, Prevent duty awareness, health and safety training appropriate to the role, and data protection training covering UK GDPR responsibilities. Designated safeguarding leads, site staff and anyone handling sensitive data typically need more on top of this baseline.

How often does statutory training need to be renewed?

Intervals vary by course. Whole-staff safeguarding training is typically refreshed annually, with designated safeguarding leads renewing their more detailed training roughly every two years. Health and safety, fire safety and data protection training should be refreshed regularly and whenever role, equipment or guidance changes, even where no fixed interval is set in law.

Do school governors and trustees need statutory training too?

Yes. Statutory guidance expects governors and trustees to complete safeguarding training appropriate to their role and to understand the school's safeguarding policy, even though they are not employees. This is one of the most commonly missed items on a statutory training checklist.

What happens if a school cannot evidence completed statutory training?

It weakens the school's position in an inspection, an audit or, in the worst case, an investigation following an incident. Evidence needs to show not just that a course was assigned, but who completed it, when, whether it is still current, and what the school did about anyone who fell behind.

28 September 2026

Statutory Training for Schools: The Full Checklist

Ask five school leaders what counts as "statutory training" and you will often get five slightly different answers. Some of it is set out explicitly in law. Some comes from statutory guidance schools must follow unless they have good reason not to. Some is best practice that has become so expected it feels compulsory even though no single document names it. Getting the list right matters, because the consequences of missing something are not abstract: an inspection finding, a claim that is harder to defend, or a genuine safeguarding gap.

This is a working checklist of the training most UK schools need to have in place, who needs it, and how to keep the evidence in a state you would be happy to show an inspector with a day's notice.

What actually counts as statutory

Statutory training falls into two groups. The first is training required by specific legislation, such as health and safety training under the Health and Safety at Work etc. Act 1974, which applies to every employer including schools. The second is training required by statutory guidance — a document schools and colleges must follow unless they can show a good reason not to. The clearest example is safeguarding: Keeping Children Safe in Education requires all staff to receive safeguarding and child protection training at induction and to have it refreshed regularly.

Beyond those two categories sits a wider band of training that is not always named in a single Act or document but is expected as part of running a safe school: fire safety and evacuation procedures, first aid appropriate to the setting, and data protection under UK GDPR and the Data Protection Act 2018. Treat all of it as non-negotiable, whatever the technical label.

The core checklist

Safeguarding and child protection, at induction and refreshed regularly, per Keeping Children Safe in Education
Prevent duty awareness, covering how to recognise and respond to signs of radicalisation
Health and safety appropriate to role, including fire safety, evacuation procedures and any manual handling relevant to the job
First aid, with enough paediatric first aiders on site at all times to meet statutory ratios, particularly in early years settings
Data protection and information security under UK GDPR, covering how personal data is handled, stored and reported if something goes wrong
Health and safety induction for any staff working with higher-risk equipment, such as science, design and technology or PE departments
Role-specific safeguarding training for designated safeguarding leads and deputies, going well beyond the whole-staff course

Who needs what

Statutory training obligations are not one-size-fits-all. All staff, including supply staff, volunteers and governors, need safeguarding training pitched to their level of contact with children. Designated safeguarding leads need substantially more: a deeper course, usually refreshed every two years, on top of the annual whole-staff update. Site staff and those running practical lessons need health and safety training specific to their equipment and environment. Anyone handling pupil or staff data — which, in practice, is most of the school office and leadership team — needs data protection training that reflects their actual responsibilities, not a generic module written for a different industry.

Governors and trustees are easy to overlook because they are not employees, but statutory guidance is clear that they need safeguarding training too, along with a working understanding of the school's policies. A checklist that only covers paid staff has a gap.

Keeping records that hold up to scrutiny

A completed course is only half the job. What an inspector, auditor or investigator actually wants to see is a record that answers four questions without a search: who has done this training, when, is it still current, and what happens when someone falls behind. A spreadsheet updated by hand can answer all four in theory, but in practice it drifts out of date the moment more than one person is responsible for keeping it current, or a member of staff changes role partway through the year.

A compliance dashboard that breaks completion down by team, role and site — with an export a school business manager can hand over as evidence without reformatting it first — turns this from an annual scramble into something that is simply true, all the time.

Training that is done once and never checked again

The harder problem statutory training checklists rarely address is retention. A course marked "complete" tells you someone opened the material and finished it. It does not tell you whether they would recognise a data breach in the moment, or remember the evacuation procedure for a part of the building they rarely use. This is where reinforcement knowledge checks earn their place: a short follow-up sent automatically a few weeks after the original course, scored, with any gaps flagged straight to the relevant manager. It turns a training record from a list of dates into a genuine signal of whether the knowledge is still there.

Bringing it together

None of this needs to be complicated, but it does need to be deliberate. Start from the checklist above, map it against your current staff list by role, and be honest about where the gaps are — a governor who has never done safeguarding training, a science technician who missed the last health and safety refresher, a spreadsheet nobody has updated since the summer term. Fixing the list is the easy part. Building a routine that keeps it accurate, and shows whether training actually stuck, is what separates a school that can produce evidence on demand from one that has to go looking for it.

If you want to see how TotaleLearning Hub tracks statutory training by role and site, chases overdue staff automatically, and checks what staff actually retained, get in touch and we'll walk you through it.