HR Training: Programs Every Business Must Provide
What HR training do your employees need? Required programs by state, recommended training, how to deliver without HR staff, and compliance documentation.
HR Training
Which programs are legally required, which are recommended, and how to deliver them without an HR department
At one of my companies, a new manager made a hiring decision that violated state anti-discrimination law. Not because he was discriminatory. Because nobody had ever told him what he could and could not ask during an interview. He asked about a candidate's plans to have children, the candidate filed a complaint, and we spent $15,000 on legal fees resolving a situation that a 90-minute training on employment law basics would have prevented entirely.
HR training for employees is not an HR program. It is a legal obligation, a risk reduction tool, and the foundation of a functional workplace. Certain training programs are required by law depending on your state and industry. Others are not legally mandated but strongly recommended to prevent the kinds of expensive mistakes that happen when people manage other people without knowing the rules.
This guide covers HR training from the employer's perspective: which programs are legally required, which are recommended, how to deliver them without an HR department, how to track and document completion for compliance, what it costs, and the mistakes that create legal exposure. This article covers the specific HR training programs your employees need and how to deliver them at a growing business.
What Is HR Training for Employees?
HR training for employees is workplace training that employers provide to meet legal requirements, reduce risk, and build workplace competence. It answers the question every employer must address: what do my employees need to know to work here legally, safely, and effectively?
The distinction matters because the term "HR training" is ambiguous. When an HR professional searches "HR training," they typically want certification courses for themselves. When an employer searches "HR training for employees," they want to know what training they must provide to their team. This guide covers the employer side. The EEOC identifies training as a core component of workplace harassment prevention, recommending that employers provide training to all employees and additional training to managers.
5 Legally Required HR Training Programs
These training programs are required by federal and state law. The specific requirements (format, duration, frequency, content) vary by state and industry. Failing to provide them creates legal liability and potential fines.
The OSHA requires employers to provide safety training in a language and vocabulary workers understand, tailored to workplace-specific hazards. State harassment training mandates vary significantly: California requires interactive training with supervisor-specific content, New York requires annual training covering specific protected classes, and Illinois requires annual training for all employees. Check your state's specific requirements before implementing compliance training.
State Harassment Training Requirements: Thresholds, Hours, and Deadlines
A list of state abbreviations tells you to worry but not what to do. The mandates differ on four dimensions, and all four have to be right for you to be compliant: how many employees trigger coverage, how many hours each group needs, how quickly a new hire has to be trained, and how often the training repeats. The table below is the current shape of the major requirements. Treat it as a starting point rather than an authority, because legislatures amend these rules most sessions and the enforcing agencies publish their own FAQs that fill in the gaps.
| Jurisdiction | Who it covers | What is required | Deadline for new hires | Frequency |
|---|---|---|---|---|
| California | Employers with 5 or more employees | 2 hours for supervisors, 1 hour for everyone else, interactive format | Within 6 months of hire or of promotion into a supervisory role | Every 2 years |
| California (seasonal/temporary) | Staff hired to work fewer than 6 months | Same 1-hour requirement | Within 30 calendar days or 100 hours worked, whichever comes first | Every 2 years |
| New York State | All employers, no size threshold | Interactive training meeting or exceeding the state model program | State guidance urges training as soon as possible after hire | Annually |
| New York City | Employers with 15 or more, counting interns | Annual training for employees who work more than 80 hours in a calendar year and at least 90 days | Once the hours and days thresholds are met | Annually |
| Illinois | All employers | Training meeting the IDHR model program minimums; restaurants and bars owe a supplemental program | Within the training year | Annually |
| Chicago | Employers with employees working in Chicago | 1 hour of harassment prevention for all employees, 2 hours for supervisors, plus 1 hour of bystander intervention for everyone | Within the training year | Annually |
| Connecticut | 3 or more employees: all employees. Fewer than 3: supervisors only | 2 hours | Within 6 months of hire or of promotion to supervisor | Supplemental training at least every 10 years |
| Delaware | 50 or more employees | Interactive training for employees, with additional content for supervisors | Within 1 year of start date | Every 2 years |
| Maine | 15 or more employees | Training for all employees, additional content for supervisors, plus individual written notice about harassment | Within 1 year of hire | One-time per employee under state law |
| Washington | Hotel, motel, retail, security guard, and property services employers | Harassment and assault prevention training, plus policy and panic button requirements for isolated workers | Per statute | Per statute |
Two counting rules cause most of the accidental non-compliance. First, several of these thresholds count every employee you have anywhere, not just the ones in that state. California's regulator takes exactly this position: employees working outside California still count toward the five-employee threshold, even though only the people working in California have to be trained. A distributed twelve-person company with two employees in California is over the line. Second, the definition of "employee" is set by the statute, not by your payroll report. Some of these rules cover part-time, seasonal, and temporary staff, and New York City explicitly counts unpaid interns. Count your people the way the specific law counts them.
For remote and multi-state teams, the rule that applies generally follows where the employee actually works, not where the company is incorporated or where the handbook was written. A New York company with one employee working in Chicago owes that person the Chicago package, including the bystander intervention hour, not New York's. At small scale, the cheapest way to run this is to train everyone to the strictest standard that applies to anyone on your team, usually two interactive hours delivered annually. Administering five different schedules and renewal dates costs more in founder time than the extra content costs in payroll.
Work that out once and write it down, because the answer changes every time you hire somebody in a new place. One row per state, a separate row for any city with its own ordinance, and a dated note of where you read the rule.
| A | B | C | D | E | F | G | H | I | J | K | L | M | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Jurisdiction | People working there | Does it reach us? | How the threshold counts people | Hours for supervisors | Hours for everyone else | Format required | Deadline for a new hire | How often it repeats | Where the training comes from | Owner | Next due | Source checked on |
| 2 | [State where someone works] | ||||||||||||
| 3 | [City with its own rule] | ||||||||||||
| 4 | |||||||||||||
| 5 | |||||||||||||
| 6 | |||||||||||||
| 7 | |||||||||||||
| 8 | |||||||||||||
| 9 | |||||||||||||
| 10 | Strictest standard on this sheet | ||||||||||||
| 11 | What we will train everyone to |
The last two rows of the first tab are the ones that save you money. Once you can see the strictest standard on the sheet, training everyone to it is usually cheaper than administering four different renewal schedules.
What "Interactive" Means, and Where to Get Training Free
Interactive is a defined term, not a preference for engaging content. California's regulations expect participants to be able to ask questions and receive answers from a qualified subject-matter expert within a set timeframe, along with skill-building exercises and knowledge checks rather than a video that plays start to finish. The regulations also specify who is qualified to deliver the training, which is why a well-meaning founder narrating a slide deck usually does not satisfy the requirement even when the content is accurate.
Before you buy anything, check whether your state gives it away. California's civil rights agency, New York State, the Illinois Department of Human Rights, the Connecticut Commission on Human Rights and Opportunities, and the New York City Commission on Human Rights all publish free online training or model programs built to satisfy their own mandates. For a company under 25 employees operating in one of those jurisdictions, the compliance training line in your budget can legitimately be zero dollars. What you still own is the delivery and the record: assigning it, confirming completion, and keeping the documentation described later in this guide.
8 Recommended HR Training Programs
These programs are not legally mandated in most states but are strongly recommended to reduce risk, improve performance, and build workplace effectiveness.
| Program | What It Covers | When to Provide | Why It Matters |
|---|---|---|---|
| Onboarding orientation | Company overview, culture, tools, team structure, communication norms, first-week logistics | Every new hire, day 1-7 | Gets new hires productive faster and reduces the confusion that creates errors and frustration |
| Employee handbook acknowledgment | All company policies: PTO, remote work, expenses, code of conduct, disciplinary process | At hire + annually when policies update | Establishes that every employee received and understood company policies. Critical during disputes. |
| Code of conduct training | Expected workplace behavior, ethics, reporting procedures, consequences of violations | At hire + when updated | Sets behavioral standards and creates documentation that expectations were communicated |
| Manager training | Employment law basics, documentation, handling complaints, accommodations, preventing retaliation | When promoted to management + annually | Managers create the most legal liability. Training prevents the most expensive mistakes. |
| Communication skills | Giving feedback, active listening, written communication, meeting effectiveness, conflict resolution | Ongoing, quarterly | Poor communication is the most common source of workplace conflict and operational inefficiency |
| Cybersecurity awareness | Password practices, phishing recognition, data handling, device security, incident reporting | At hire + annually | One employee clicking a phishing link can compromise the entire company. Training prevents the click. |
| Diversity and inclusion | Unconscious bias, inclusive language, cultural competence, equitable practices | At hire + annually | Reduces bias in hiring and management decisions. Demonstrates good-faith commitment to equity. |
| Emergency procedures | Evacuation routes, emergency contacts, first aid locations, active threat response, weather protocols | At hire + annually | Employees must know what to do in an emergency before the emergency happens |
Prioritize these in order: onboarding and handbook acknowledgment first (every hire), then manager training (every promotion), then communication skills and cybersecurity (ongoing). The remaining programs add depth as the company matures.
Role-Based Training Framework for Growing Businesses
Different roles need different training beyond the shared compliance and recommended programs. Here is what each role category typically requires.
| Role Category | Additional Training Needed | Priority |
|---|---|---|
| All employees | Harassment prevention, safety basics, handbook acknowledgment, code of conduct, cybersecurity | Required (compliance) |
| New hires (first 90 days) | Onboarding orientation, product/service knowledge, tool training, role-specific processes, buddy/mentor pairing | High (onboarding) |
| Managers and supervisors | Employment law basics, documentation practices, handling complaints, accommodation requests, performance conversations, preventing retaliation | High (liability reduction) |
| Customer-facing roles | Product knowledge, customer interaction standards, complaint handling, de-escalation, CRM/tool proficiency | Medium (performance) |
| Technical roles | Tool-specific certification, security practices, code review standards, deployment procedures | Medium (performance) |
| Administrative and operations | Process documentation, vendor management, compliance tracking, reporting workflows | Medium (efficiency) |
| Remote employees | Remote work policy, communication norms, cybersecurity for remote work, time management, virtual collaboration tools | Medium (effectiveness) |
The framework is additive: every role gets the shared training (compliance + recommended), then adds role-specific training on top. A new manager gets all-employee training plus manager-specific training. A new customer service rep gets all-employee training plus customer-facing role training.
How to Deliver HR Training Without an HR Department
Most growing businesses with 5-50 employees do not have an HR department, an L&D team, or a training budget beyond the founder's time. This five-step process works without any of those resources.
The key principle: automate assignment and tracking so training happens reliably without the founder remembering to do it for every hire and every annual renewal. An HR platform with training modules handles auto-assignment, completion tracking, e-signature acknowledgment, and renewal reminders in one system. The Office of Personnel Management structures federal workforce training around the same principle: required training is assigned systematically and tracked automatically, not left to individual manager initiative.
Training for the Person Running HR
At most small companies the person delivering all of this has no HR background. Closing that gap is worth doing before it costs you a bad hiring decision or a mishandled complaint, and the useful curriculum is narrow: employment law basics, how to take a complaint, what to document, and which state rules reach your team.
Start with the free official sources rather than a certificate. The Department of Labor publishes interactive advisors that walk an employer through federal wage, leave, and safety questions one at a time. The EEOC runs a small business resource center covering hiring, discipline, accommodations, and termination.
For safety, ask for help before an inspector arrives. The OSHA On-Site Consultation Program gives smaller employers a no-cost, confidential hazard review that is kept separate from enforcement, so the visit finds problems instead of writing citations. A morning with a consultant teaches you more about your own hazards than a generic safety course does.
Do You Have to Pay Employees for Training Time?
Almost always yes, and this is the training cost that never appears in a vendor quote. Under the FLSA, time spent in lectures, meetings, and training programs is compensable working time for nonexempt employees unless all four of the following are true: the training happens outside normal working hours, attendance is genuinely voluntary, the content is not directly related to the employee's current job, and the employee performs no productive work during it. Mandatory compliance training fails the second condition the moment you require it. If you require it, you pay for it, and you pay for it at the employee's regular rate.
The consequence people miss is overtime. Because that hour is hours worked, it counts toward the 40-hour threshold in the workweek. Scheduling an hour of harassment training on a Friday afternoon for someone who has already worked 40 hours means you owe time and a half for it. The fix is scheduling, not accounting: put required training in a week with room in it, or reduce other hours in the same workweek. Run the arithmetic before you book the session. For a 20-person team where 14 people are nonexempt at an average $20 an hour, one required training hour is about $280 in wages plus employer payroll taxes on top, and a two-hour supervisor session for four managers adds its own line.
A few states raise the cost above the federal baseline. California requires daily overtime beyond eight hours in a day, so a training session tacked onto a full shift triggers premium pay even in a week under 40 hours, and California's reporting time pay rules can require a minimum amount of pay when you bring someone in on a day they were not scheduled, which makes a standalone one-hour Saturday session cost more than one hour of wages. Meal and rest period rules also apply to longer training blocks in the states that have them. Check your state's wage and hour rules while you are building the training calendar rather than after payroll runs.
Two genuine exceptions are worth knowing. Training that is voluntary, outside working hours, and aimed at general education rather than the employee's current job, such as an evening course toward a degree, is generally not compensable. And exempt salaried employees are paid the same regardless, so the payroll cost of training them is already sunk; what you are spending there is their time, not additional wages. Everything in between, including the annual compliance renewal that everyone treats as an administrative formality, is paid working time.
The check takes about five minutes if you run it before you pick a date. One row per attendee, their scheduled hours in that workweek, the mandated session added on top, and whether the total crosses a threshold that costs you a premium. It is a scheduling decision, not a budgeting one: the point is to find the week that does not trigger the premium, not to price the one that does.
| A | B | C | D | E | F | G | H | I | J | K | L | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Required session | Date | Start | Length in hours | Employee | Exempt or nonexempt | Hours already scheduled that week | Hours on the training day before it | Week total with training | Over 40 in the week? | Over 8 on the day? | Fix applied |
| 2 | [Required session name] | [Add employee] | ||||||||||
| 3 | ||||||||||||
| 4 | ||||||||||||
| 5 | ||||||||||||
| 6 | ||||||||||||
| 7 | ||||||||||||
| 8 | ||||||||||||
| 9 | ||||||||||||
| 10 | ||||||||||||
| 11 | ||||||||||||
| 12 | Fixes | Move the session to a lighter week | Reduce other hours in the same workweek | Split a long session across two weeks |
A yes in either of the two threshold columns is not a reason to cancel the training. It is a reason to move it, and the fix column is where you record which of those you did.
Training Tracking and Compliance Documentation
HR training without documentation is HR training that cannot be proven. For compliance purposes, the documentation is as important as the training itself.
| What to Track | Why | How |
|---|---|---|
| Completion status per employee per training | Proves each employee received each required training | HR platform dashboard showing completed/pending by employee and by program |
| Completion date | Proves training was provided within required timeframes (at hire, annually) | Timestamp recorded automatically when employee completes the module |
| E-signature acknowledgment | Proves the employee confirmed they received and understood the content | E-signature captured at end of compliance training, stored in employee profile |
| Training content version | Proves the training content met requirements at the time it was delivered | Version tracking on training modules with dates of last update |
| Renewal dates | Prevents compliance gaps when annual training expires | Automated reminders 30 and 7 days before expiration |
The audit readiness test: can you produce proof that Employee X completed Training Y within 60 seconds? If the answer is no, your tracking system is broken. The Bureau of Labor Statistics projects continued growth in training and development roles through 2034, reflecting increasing employer focus on structured training delivery and compliance documentation.
What Records to Keep, and for How Long
"Documented" is a word every compliance article uses and almost none defines. A training record that will hold up under scrutiny contains six elements: the employee's name, the date the training happened, the training title or type, its duration, the name and qualifications of the trainer or provider, and either a copy of the materials or a version reference identifying the content that was delivered. A vendor completion certificate with a name and a date covers about half of that. Keep the sign-in sheet or system log, the signed acknowledgment, and the version of the content alongside it.
Retention periods are set by whichever rule required the training in the first place, so they vary. California requires employers to keep records of the training it mandates for a minimum of two years. New York City requires records of its annual training to be kept for at least three years. Individual OSHA standards carry their own periods: bloodborne pathogens training records, for example, must be kept for three years from the date of training, while certain employee exposure and medical records must be retained for decades. Where two rules reach the same record, keep it for the longer one. If you have no records policy at all, a practical default is the longest applicable period plus one year, because the claim that puts these records in play usually arrives near the end of a statute of limitations, not at the start.
Storage decides whether any of this is usable. Training records belong in your employee file system, not in the inbox of whoever ran the session. The 60-second audit test above fails most often for two mundane reasons: the person who delivered the training left the company, or the records live inside an external vendor's portal on a subscription that lapsed. Export completion data from every outside provider at least once a year and keep your own copy. Store training records separately from medical documentation and I-9 forms, both of which have their own storage and confidentiality rules.
Finally, document the people who did not complete the training. A record showing 18 of 20 completed, with dated reminders sent to the other two and a note explaining why (medical leave, started after the session, scheduled for the next cycle), is stronger evidence of reasonable care than a record showing 18 of 20 with no explanation attached. A gap with a documented follow-up is a process running. A gap with silence looks like a process nobody owns, which is precisely the inference you do not want an investigator or a plaintiff's attorney to draw.
What HR Training Costs for a Growing Business
| Component | Cost (20-person team) | Notes |
|---|---|---|
| Self-created training (onboarding, policies, role-specific) | Free (4-8 hours creation time) | Use AI to draft, then customize with your specifics |
| HR platform with training modules | $98-$198/month flat | Assignment, tracking, e-signature, renewal reminders included |
| External harassment prevention (state-compliant) | $400-$2,000/year | $20-$100/employee, varies by state requirements |
| External safety training (OSHA) | $200-$1,000/year | Depends on industry and hazard profile |
| External data privacy (HIPAA/other) | $200-$800/year | If applicable to your industry |
| Manager training (employment law, leadership) | $500-$2,000/year | $100-$500 per manager for quality courses |
| Total annual investment | $2,500-$6,000/year | Less than one employment lawsuit or OSHA citation |
The math is straightforward: one OSHA serious violation fine ($16,131) exceeds the entire annual training budget. One harassment lawsuit (average defense cost $75,000-$250,000 even when the employer wins) exceeds five years of training investment. HR training is not a cost. It is insurance, and it is cheaper than every alternative. The Department of Labor structures workforce development around the same cost-benefit logic: structured training investment produces measurable returns that exceed the investment cost within the first year.
Common Mistakes in HR Training
Six mistakes consistently create legal exposure and operational problems in HR training programs, especially at growing businesses without dedicated HR staff.
Frequently Asked Questions
What is HR training for employees?
HR training for employees is workplace training that employers provide to meet legal requirements, build workplace skills, and maintain compliance. It includes legally required programs (harassment prevention, workplace safety, data privacy), recommended programs (onboarding, code of conduct, communication skills), and role-based training (management skills for supervisors, technical training for specific roles). Distinguished from HR professional development (training for HR practitioners to earn certifications like SHRM-CP or PHR), HR training for employees is about what employers must teach their workers.
What HR training is legally required?
Requirements vary by state and industry. Five common categories: (1) Harassment prevention: required in CA, NY, IL, CT, DE, ME, and other states with specific format and frequency mandates. (2) Workplace safety: OSHA requires hazard-specific training for all employers, with additional requirements for construction, healthcare, and manufacturing. (3) Data privacy: HIPAA training for health information handlers, state privacy law training in CA, CO, and others. (4) Anti-discrimination: recommended federally, required in some states. (5) Employment law basics for managers: strongly recommended to prevent legal liability.
What HR training programs should I provide?
Start with legally required training for your state and industry (harassment prevention, safety, data privacy). Add recommended programs: onboarding orientation (every new hire), employee handbook acknowledgment (every employee annually), code of conduct training (at hire), manager training (for anyone who supervises others), communication skills (ongoing), cybersecurity awareness (annually), and diversity and inclusion (annually). Prioritize: compliance first, onboarding second, skills development third.
How do I provide HR training without an HR department?
Five steps: (1) Identify required training by checking your state's mandates and industry requirements. (2) Build a training calendar mapping which training happens at hire, annually, and as needed. (3) Source content: self-create for company-specific topics (use AI to draft), purchase externally for state-mandated compliance. (4) Assign and track through your HR platform with auto-assignment at hire and annual renewal reminders. (5) Document everything with e-signature acknowledgments stored in employee profiles.
How much does HR training cost for a small business?
Costs range from free to $5,000+ per year depending on team size and requirements. Self-created training (onboarding, policies, tool training): free with 4-8 hours of creation time. HR platform with training features: $98-$198 per month flat. External compliance courses (harassment, safety, HIPAA): $20-$100 per employee per year. Manager training courses: $100-$500 per manager. Total for a 20-person company: approximately $2,500-$5,000 per year including the HR platform.
How often should HR training be renewed?
Depends on the training type. Harassment prevention: annually in most states that require it (CA, NY, IL mandate annual training). Workplace safety: annually for general safety, more frequently for high-hazard industries. Data privacy: annually or when policies change. Employee handbook acknowledgment: annually and when significant policy changes occur. Manager training: at promotion to management and annually thereafter. Code of conduct: at hire and when updated.
How do I track HR training completion?
Use your HR platform to track completion status by employee and by training program. For each required training, track: who completed it (with date), who has not completed it (and when it is due), signed acknowledgment (e-signature stored in employee profile), and renewal dates. Build a training matrix mapping every employee against every required training. The goal: produce proof that any employee completed any training within 60 seconds during an audit.
What happens if I do not provide required HR training?
Consequences vary by violation type and jurisdiction. Harassment prevention: failure to provide mandated training weakens your legal defense in harassment claims and may result in state fines ($500-$10,000+ per violation in some states). Safety training: OSHA citations range from $16,131 per serious violation to $161,323 per willful violation. Data privacy: HIPAA violations range from $137 to $68,928 per violation depending on severity. Beyond fines, the legal liability from an untrained workforce in a lawsuit or investigation far exceeds the cost of providing training.
What is the difference between HR training and compliance training?
Compliance training is a subset of HR training that covers legally mandated topics: harassment prevention, workplace safety, data privacy, anti-discrimination, and industry-specific requirements. HR training is broader: it includes compliance training plus recommended programs like onboarding, code of conduct, management skills, communication, and professional development. All compliance training is HR training, but not all HR training is compliance training. Start with compliance (legally required), then build recommended programs.
Do I need to train managers differently than other employees?
Yes. Managers face different legal obligations: they can create liability through hiring decisions, performance evaluations, accommodation denials, and retaliation. Manager-specific training should cover: employment law basics (at-will, documentation, protected classes), how to handle employee complaints (listen, document, escalate), accommodation requests (ADA interactive process), performance documentation (what to document and how), and preventing retaliation (the most common employment claim). This is separate from and in addition to general employee training.