Insights / Compliance and legal
Which training records does a California employer need to keep, and for how long?
The record is the proof. Here are the retention periods I could confirm at the source and the fields I would put on a training record.
By McKinley Malbrough III, J.D., MS-HRM. Published October 25, 2026. Last reviewed October 25, 2026.
Short answer
California sets at least one year for injury and illness prevention and workplace violence training records, two years for webinar harassment training records and three years for payroll and personnel records. Keep the longest applicable period for each record, and capture the attendee, date, topic, trainer, material version, language and format for each session.
Who this is for: Owners, HR leads and trainers at California employers with 10 to 150 employees who run required training.
Why do training records matter more than the training itself?
When a regulator, a claimant or an insurer asks what you did, the answer is the record. A session that happened and left no trace is, for practical purposes, a session you cannot show. I would rather an employer run one fewer session and keep a clean record than run it twice and be unable to prove either.
From a corporate training seat, the record is also the quality control. If you cannot say who attended, what version of the material they saw and who delivered it, you cannot improve the next session or find the people who missed this one.
This page covers the retention periods I could confirm at the source. It is not legal advice, and I am not an attorney. Where a rule has a floor, keep the record longer than the floor if storage is cheap.
Which California rules set a retention period for training records?
| Rule | What it covers | Retention or access |
|---|---|---|
| 8 CCR 3203(b)(2) | Documentation of injury and illness prevention training | At least 1 year |
| Lab. Code 6401.9(f)(2) | Workplace violence prevention training records, including the contents of the training | 1 year; employees can request access within 15 calendar days (f)(6) |
| Lab. Code 1198.5 | Personnel records, including training records, as updated January 1, 2026 | Employee may inspect on request within 30 calendar days; keep 3 years after separation |
| Lab. Code 1174(d) | Payroll records, which include the hours people spent in training if they were paid for it | 3 years |
| 2 CCR 11024 | Records of harassment prevention training delivered by webinar | 2 years |
The longest of the applicable periods wins for any one record. A paid training hour is a payroll record for 3 years, so the sign-in sheet that supports it should be kept at least that long.
What fields should a training record carry?
Use one record per session and one line per attendee. Here is the field set I would use at an employer of 10 to 150 people. The first four are named in the rules above. The rest are my recommendations.
| Field | Why it is there |
|---|---|
| Attendee name or identifier | Named in 3203(b)(2) |
| Date of the session | Named in 3203(b)(2) |
| Type or topic of training | Named in 3203(b)(2) |
| Name and qualifications of the trainer | Named in 3203(b)(2); 6401.9 asks for a person knowledgeable about the plan |
| Material and version | Shows what people actually saw; 6401.9(f)(2) asks for the contents |
| Language of delivery and interpreter used | Links to Part 4 |
| Format (live, webinar, recorded) | Webinar records carry their own period |
| Minutes in attendance and whether the time was paid | Supports the payroll record |
| Attendee confirmation | A signature, a typed acknowledgment or a platform log |
| Site and shift | Shows who a make-up session was for |
Where should the records live?
In one place, with one owner, and not in the trainer’s inbox. A shared folder with a fixed naming pattern is enough: year, topic, session date. Put the roster export, the sign-in sheet and the deck in the same folder, and lock editing once the session closes.
If your learning platform produces the log, export it after each session. Platforms change, vendors close accounts and a log you can only reach through a login is a log you may not have when you need it.
Give someone the job of checking the folder monthly. A five-minute check that each session has its three files is the cheapest control in the whole system.
What about people who missed the session?
Record the absence as an absence. A blank line for a person who did not attend is better than no line, because the gap is the thing you will be asked about. Then record the make-up session on its own line with its own date.
Part 3 of this series covers scheduling around commutes and shifts, and the practical effect here is that the roster should show who still owes a session and by when. The scheduling page covers how commutes and shifts affect that make-up slot.
Can an employee ask to see their training record?
Yes. Labor Code 1198.5 gives current and former employees a right to inspect and receive a copy of their personnel records, and the rule was updated effective January 1, 2026 to name training records among the items covered, with a 30 calendar day response period. The statute also carries a $750 penalty for failure to comply.
The workplace violence statute separately gives employees access to their training records within 15 calendar days. If you keep records in a form you can export per person, a request is a ten-minute job. If you keep them as scattered photos of sign-in sheets, it is a week.
How do records change for recorded or self-paced training?
A recorded course produces a completion log, and that log is your attendance record. Check three things in it: that it shows the person, the date and the course version, that it shows how long they spent, and that you can export it.
The workplace violence statute requires an opportunity for interactive questions and answers, so a recorded session alone does not complete that training. Record how you offered the Q&A, such as a live office hour, and who staffed it. Why recorded training does not finish explains the completion side of the problem.
What should you do if your past records are thin?
Start from today. Do not backfill signatures or reconstruct attendance you cannot support, because a record created after the fact and presented as contemporaneous creates a bigger problem than the gap. If you have partial evidence, such as calendar invitations or a platform log, keep it and label it as what it is.
Then close the gap going forward. Add the ten fields to your next session, assign the owner and run the monthly check. Within a year you will have a record that stands on its own.
If a past session matters, such as a mandatory training for supervisors, schedule the session again and record it properly. A fresh, documented session is worth more than a reconstructed one.
What is the lightest version a small team can run?
A one-page form for each session and one folder for the year. The form holds the topic, date, trainer, material version, language, format and a roster with a confirmation line. Scan or export it the same day, and save the deck as a PDF beside it.
That is the whole system. It takes about ten minutes per session, and it covers each field in the table above. Add a platform only when the volume of sessions makes the manual version slow.
Part 2 of this series lists the questions I ask before I design any session. The answers to them belong on the record too.
Training records FAQ
Is a sign-in sheet enough?
It can support the record, but it should be paired with the topic, the trainer, the material version and the language. A sheet with only names and a date answers only part of what the rules ask for.
How long do I keep records for someone who left?
I would keep them at least 3 years after separation, which matches the personnel record rule in Labor Code 1198.5 and the payroll record period.
Do the rules differ for a small employer?
The injury and illness regulation has an exception for employers with fewer than 10 employees, who may keep a log of instructions instead. Most employers in this series are above that line.
Do this week
Pick one required session you ran this year, build its record using the ten fields, and find the gaps. Then set up the shared folder and name an owner. If you want help with the setup, book a free consult or use the contact page.
This is part 5 of the Urban and Suburban Employer Series. The other six: Part 1: how training differs between urban and suburban employers, Part 2: the first questions I ask before I design training, Part 3: scheduling required training for transit riders, Part 4: training in the language your employees use, Part 6: what suburban employers need from training, Part 7: auditing training against your operating conditions.
Where these numbers come from
| 8 CCR 3203 (Injury and Illness Prevention Program) | Read October 25, 2026. Subsection (b)(2) on training documentation and its Exceptions. |
| California Labor Code 6401.9 | Read October 25, 2026. Subdivisions (f)(2) and (f)(6). |
| California Labor Code 1198.5 | Read October 25, 2026, as updated January 1, 2026. |
| California Labor Code 1174 | Read October 25, 2026. Subdivision (d) on payroll records. |
| 2 CCR 11024 (harassment training records) | Webinar record period of 2 years, as registered in the site claims file. |
All sources accessed October 25, 2026.
McKinley Malbrough provides education and is not an attorney. Contacting him creates no attorney-client relationship. If you have a legal question or need legal advice, contact an employment attorney.
Related reading: How to run workplace violence prevention training, Legal risks of mandatory employee training in California, How to get required training finished on schedule.
Keep going
Training in the language your employees use
Part 4 of this series.
Workplace violence prevention training requirements
What the annual training has to cover.
California harassment prevention training requirements
Hours, cycles and who is covered.
The Legal Side of Training
Two sessions on consent, mandates and exposure.


