Australian law requires every business to provide the information, training, instruction and supervision its workers need to stay safe. For employee training records in Australia, that duty is the starting point. A handful of regulations go further and refer to specific training records. Everything else comes down to one question: can you prove the duty was met?
That question rarely arrives at a good time. An auditor asks for evidence, or something goes wrong on site, and “did we train them?” turns into “show us.”
That’s when the cracks show. The spreadsheet has three versions. The sign-off sheet is in a supervisor’s inbox. A first aid certificate expired in March, and nobody noticed. The person who knew where everything lived resigned, and their folder went with them.
This guide is for HR and compliance leads in Australian organisations with 50 to 500 staff. It gives you:
- The legal basics in plain English, including where the law refers to training records and how to think about retention
- A copy/paste-ready five-tab template, including a training matrix
- A simple system that keeps employee training records in Australia accurate without relying on one person’s memory
Managing teams across the Tasman? See our guide to employee training records in New Zealand.
At a glance: what good employee training records include
Good employee training records capture four things:
- Training delivered: what was trained, when, to whom, and to which version
- Competency verified: who confirmed the person can do the task, and how
- Evidence retained: where the proof lives (not in someone’s inbox)
- Refreshers managed: the expiry rule, the next due date and the reminder
The minimum fields to track:
- Worker, worker type (employee, contractor or volunteer) and role
- Site and state or territory
- Training item and version or policy reference
- Completion date and verifier
- Evidence link
- Expiry date and retain-until date
Why training records matter in Australia (even when no law names them)
Training records matter because the duty to train is tested after the fact: after an incident, during an audit or when a contract is on the line.
The real risk isn’t “no training”. It’s “can’t prove it”.
Most Australian organisations do train their people. The exposure sits elsewhere: training varies between sites, it isn’t linked to a role or hazard, competency is assumed once a module is ticked off, and refreshers lapse unnoticed.
When you can’t produce the record, the training may as well not have happened.
The general duty doesn’t mention records. Your defence still depends on them.
Here’s the assumption worth retiring: “We did the training, so we’re covered.”
A completion date isn’t cover. The WHS duty asks whether training was suitable and adequate for the work, the risks and the controls in place. A tick in a spreadsheet can’t answer that. A record showing the version trained, the competency check, the evidence and the refresher date can.
Where Australian law touches training records
The compliance requirements for employee training in Australia come from three places: WHS law, sector rules, and the record-keeping and privacy laws that shape how you store what you collect. This section points you to the rules most likely to apply. It isn’t a checklist: regulations differ between states and change over time, so confirm the current version for your jurisdiction. For a regulator’s-eye view, see what regulators expect from your training records.
The WHS duty to train and supervise (model WHS Act s19)
Section 19(3)(f) of the model WHS Act requires a person conducting a business or undertaking (PCBU) to provide, so far as is reasonably practicable, any information, training, instruction or supervision necessary to protect all persons from health and safety risks arising from the work.
Regulation 39 adds that training must be suitable and adequate for the nature of the work, the risks and the control measures in place, and readily understandable to the person receiving it.
Neither provision says “keep a record.” But when a regulator asks how you met the duty, the record is your answer.
Some training is also a precondition for the work. Safe Work Australia’s guidance on training workers for their specific tasks lists training the model WHS laws require before certain work, including construction induction, high-risk work and asbestos training.
Some WHS regulations refer to training records
A small number of WHS regulations go further than the general duty and refer to training records directly. In the model WHS Regulations, these include confined space work, asbestos-related work and licensed asbestos removal. Construction work also requires general construction induction training (the white card) before a worker starts.
Regulation numbers and retention periods vary between jurisdictions, and NSW remade its WHS Regulation in 2025. Check your own state’s current regulations, or ask your regulator, before setting record rules for this work. If you work in manufacturing, what SafeWork audits check shows how inspectors look at this in practice.
State differences: Victoria and WA
Every state and territory except Victoria now runs on the model WHS laws. Western Australia adopted them most recently, with its separately legislated Work Health and Safety Act 2020 commencing on 31 March 2022.
Victoria operates under its own Occupational Health and Safety Act 2004. Section 21(2)(e) requires employers to provide the information, instruction, training or supervision employees need to work safely and without risks to health. The duty is similar in substance, but the legislation, regulations and regulator (WorkSafe Victoria) differ. If you operate in Victoria, record the jurisdiction against each training record and check Victoria’s OHS Regulations for hazard-specific obligations.
Fair Work record-keeping: the 7-year rule (and what it doesn’t cover)
Section 535 of the Fair Work Act 2009 requires employers to keep employee records for seven years. The Fair Work Regulations list what those records contain: pay, hours, leave, superannuation and termination details. Training isn’t one of them.
So Fair Work doesn’t require training records. Many organisations still adopt seven years as their default, because one retention rule is simpler to run.
The Privacy Act: who your training records actually belong to
The OAIC’s guidance on the employee records exemption explains that a private sector employer’s handling of employee records, where it relates directly to a current or former employment relationship, is exempt from the Australian Privacy Principles (APPs). The definition of an employee record expressly includes information about an employee’s training.
The exemption has clear edges:
- Volunteers aren’t covered. The OAIC says volunteers aren’t in an employment relationship for this purpose.
- Contractors aren’t employees. An independent contractor’s training record sits outside the exemption.
- Outsourced providers aren’t covered. A training or HR provider handling your employees’ information under contract must comply with the APPs itself.
Most businesses with annual turnover of $3 million or less sit outside the Privacy Act altogether, with some exceptions. Privacy reform is also in progress, so check the OAIC for current guidance.
The practical takeaway: your volunteer and contractor training records may carry privacy obligations your employee records don’t. Keep them in a system with access controls and a clear retention rule, not a shared drive.
Sector notes: aged care and early learning
Two sectors add training record expectations on top of WHS. They have different regulators, so check each one’s current guidance.
Aged care
The strengthened Aged Care Quality Standards have applied since 1 November 2025, alongside the Aged Care Act 2024. Outcome 2.9 (Human resource management) covers training and supervision for aged care workers, including volunteers.
The Aged Care Quality and Safety Commission’s guidance on Outcome 2.9 advises providers to keep training records for all workers, including contractors, showing both the training completed and the competency needed for the role. The emphasis is on competency, not just completion, which is what Tab 2 below is for.
Early learning (NQF)
Early learning services have some of the most specific training record rules in Australia:
- The staff record. The Education and Care Services National Regulations set out what the staff record contains, including first aid, anaphylaxis management and emergency asthma management training, and how long it’s kept after someone leaves.
- Child safety training. National child safety training is now mandatory for people working or volunteering in NQF-regulated services, and the foundation deadline for existing staff has passed.
- Child protection training. Requirements apply to certain roles and vary by state.
For most services, the job now is evidence: a completion certificate on file for every staff member, volunteer and student, and a process for new starters. ACECQA’s child safety and child protection training page sets out who needs which course and when. For assessment and rating, see our guide to ACECQA training requirements.
How long should you keep training records in Australia?
It depends on the work and the state you operate in. Most training has no legislated retention period. Where a period does exist, it comes from a specific regulation or sector rule, and those vary between jurisdictions.
| Where a period may apply | What to check |
|---|---|
| Confined space work | Your state’s WHS regulations on confined space training records |
| Asbestos work and licensed asbestos removal | Your state’s WHS regulations on asbestos training records, which can run for years after the worker leaves |
| Early learning staff records | The Education and Care Services National Regulations on staff record retention |
| Fair Work employee records | Fair Work Act s535 (7 years), which doesn’t list training records |
| Everything else | Your own retention policy |
Many organisations set one default, such as 7 years after the person leaves, so training records line up with their other employee records. Whatever you choose, write it down and apply it consistently.
What good training records look like (the Australian version)
Training ≠ competency (your record must show both)
A completion tick isn’t the same as “this person can do the task safely, to standard, at this site.” Good records keep two things apart:
- Training completion: the course, module, toolbox talk or event
- Competency verification: the observation, checklist, practical assessment, licence or supervisor sign-off
The minimum fields, plus three Australian additions
The core fields work anywhere: person and unique ID, role, site, training item, version, completion date, verifier, evidence link, expiry date and notes. Australian organisations should add three more:
- Jurisdiction: the state or territory, so you know whether WHS or Victorian OHS law applies
- Regulatory driver: the regulation number or sector standard behind the training
- Worker type: employee, contractor or volunteer, because privacy treatment differs
Then add a retain-until date. It turns your retention policy into something you can act on.
Quick decision guide: low, medium and high risk
Match the weight of the record to the risk of the work.
| Risk level | What to record | Evidence | Refreshers |
|---|---|---|---|
| Low (office procedures, general policies) | Completion | Usually not needed | On policy change, or every 2–3 years |
| Medium (customer, privacy or regulatory exposure) | Completion and version training | Recommended: quiz result, attendance or sign-off | Due dates and reminders |
| High (serious harm potential or regulated work, such as confined spaces or asbestos) | Completion and competency verification | Required: checklist, licence or certificate | Managed before expiry, never after |
The training records template (copy/paste-ready)
This five-tab template works in Excel or Google Sheets. It’s built to stay clean and survive one person going on leave. If you need a compliance training plan template to sit above it, start with our compliance training framework checklist.
Tab 1: Training Records Register
Purpose: track completions with enough context to defend them.
Columns: Worker ID · Full name · Worker type · Role · Site · Jurisdiction · Training item · Training type (online, toolbox, workshop, external, on-the-job) · Training owner · Version or policy reference · Regulatory driver · Assigned date · Due date · Completion date · Status · Evidence link · Refresher interval · Next due date · Retain until · Notes
Example rows:
| Worker | Role and site | Training item | Regulatory driver | Retain until |
|---|---|---|---|---|
| R. Santos | Personal care assistant, Parramatta NSW | Manual handling and safe transfers | Aged Care Quality Standards, Outcome 2.9 | Exit + 7 years |
| L. Nguyen | Early childhood educator, Geelong VIC | National child safety foundation training | National child safety training (NQF) | Per NQF retention rule |
| D. Walker | Maintenance fitter, Townsville QLD | Confined space entry | WHS Regs: confined spaces | Exit + 7 years (check state WHS Regs) |
| K. Morgan (contractor) | Electrician, Perth WA | Site induction, white card sighted | WHS Regs: construction induction | Engagement end + 7 years |
Tip: use ISO dates (YYYY-MM-DD) so the sheet sorts correctly, and a dropdown for training items so names stay consistent.
Tab 2: Competency and Verification Log (VOC)
Purpose: prove someone can do the task, not just that they sat the training.
Columns: Worker ID · Name · Role · Site · Task or competency · Standard or checklist reference · Verification method (observation, practical, assessment) · Verified by (name and role) · Verified date · Evidence link · Result (competent, not yet competent, restricted) · Review interval · Notes
Use it for any task where completion isn’t enough. Your compliance evidence pack should draw straight from this tab.
Tab 3: Licence and Certification Tracker
Purpose: keep every ticket and external certificate in one place, with its real expiry date.
Columns: Worker ID · Name · Role · Licence or certificate type · Issuer · Number · Issue date · Expiry date · Renewal requirement · Evidence link · Status (valid, due, expired) · Notes
Track at least: high-risk work licences (forklift, EWP, crane), first aid and CPR, Working With Children Checks, NDIS Worker Screening clearances, and construction induction (white card). Add conditional formatting for anything expiring within 30, 60 or 90 days.
Tab 4: Refresher Schedule
Purpose: set refresher rules once, by risk, so nobody has to remember them.
Columns: Training item · Risk tier · Applies to (role group) · Refresher interval · Reminder timing (for example 30, 14 and 7 days) · Content owner · Evidence required (Y/N) · Verification required (Y/N) · Regulatory driver · Notes
Example tiers: high risk every 12 months or as the regulation requires; medium risk every 24 months; low risk every 36 months or on policy change. This is the tab that helps you stop compliance drift before an audit finds it.
Training matrix template: see every gap on one screen
A training matrix is Tab 5 of the template. It shows, in seconds, who is missing what.
What a training matrix is (and how it differs from a register)
A register is a list of completions. It answers “when did this person do this training?” A matrix is a grid of what each role requires against what each person holds. It answers “where are the gaps right now?”
You need both. The register is your evidence. The matrix is your control panel.
How to build one
Build the matrix in two layers.
Layer 1: role requirements. Roles as rows, training items as columns, each cell marked Required or left blank.
| Role | WHS induction | Forklift licence | First aid | Privacy and data handling | Fire warden |
|---|---|---|---|---|---|
| Warehouse operator | Required | Required | — | Required | — |
| Team leader | Required | — | Required | Required | Required |
| Office administrator | Required | — | — | Required | — |
Layer 2: people status. One row per person, grouped by role, with status and expiry in each cell.
| Person | Role | WHS induction | Forklift licence | First aid | Privacy and data handling | Fire warden |
|---|---|---|---|---|---|---|
| J. Kerr | Warehouse operator | Current (2027-02) | Expiring (2026-12) | — | Current | — |
| P. Singh | Team leader | Current | — | Expired (2026-09) | Current | Missing |
| A. Brooks | Office administrator | Current | — | — | Overdue | — |
Colour-code the cells: green for current, orange for expiring within 30 days, red for expired or overdue, grey for missing.
Where spreadsheet matrices break
Spreadsheet matrices work until the organisation moves:
- Role changes. Someone is promoted, their requirements change, and the grid doesn’t update itself.
- Multi-role staff. A team leader who also drives a forklift needs two sets of requirements merged by hand.
- Expiry maths. Every status depends on a formula someone wrote and nobody checks.
For more on the requirements layer, see role-based competency frameworks.
A system you can actually maintain (the 3-layer model)
Templates don’t fail. Maintenance fails. This model keeps records clean without heroic admin.
Layer 1: assign training by role, not by person. New starters inherit the role profile. Assigning one person at a time guarantees drift.
Layer 2: track completion automatically where you can. Manual data entry is where record quality dies. Aim for one source of truth and one owner per training item.
Layer 3: capture evidence for high-risk work. Sign-offs and licence copies belong in the workflow, not in a folder built the week before an audit.
Common failure points (and fixes)
Most training record systems fail in the same five places.
1. Spreadsheet drift. “Training Register FINAL v7.xlsx” and evidence links that die when a folder moves. Fix: one named owner, a locked structure and one evidence folder pattern.
2. Set-and-forget refreshers. Expiries discovered after the fact. Fix: rules live in Tab 4, reminders go out at 30, 14 and 7 days, and someone reviews expiries for 15 minutes a month.
3. Contractor and volunteer chaos. Contractors trained “somewhere else”, volunteers missing from the register entirely. Fix: treat them as role groups with their own profiles. Our guide to lost training records across depots and contractors covers this in detail.
4. Sites doing their own thing. Fix: core role profiles are fixed. Sites can add local training but can’t remove core items.
5. Records that walk out the door. Someone resigns, their file is archived or deleted, and two years later an asbestos record is needed and gone. Fix: never delete a leaver’s training record before its retain-until date. Deactivate, don’t delete.
Implementation checklist: a 1-week rollout
Day 1–2: Define roles and requirements – List every regulation or sector standard that names a training record for your work – List your top 10–20 roles and the training each requires, by site – Mark which items need verification or evidence
Day 3: Build the register and refresher rules – Create the five tabs, with dropdowns for roles, training items, worker types and jurisdictions – Set refresher tiers and retain-until rules
Day 4–5: Add verification for high-risk work – Define 5–10 high-risk competencies and a checklist for each – Decide what evidence counts
Day 6–7: Set the reporting rhythm – Book a monthly 15-minute review of overdues and expiring licences, and a quarterly review of roles and evidence quality – Name an owner for every training item
Moving off the spreadsheet: what to look for (and how Tribal Habits handles it)
A spreadsheet is a fine place to start. It becomes a liability at hundreds of people, several sites and real expiry dates. If you’re comparing training tracking software in Australia, these five capabilities matter most for records. Here’s what good looks like, and how Tribal Habits approaches each.
1. Expiry and renewal without calendar reminders. Expiries should calculate themselves. In Tribal Habits, a certified date on any topic or pathway stamps an expiry on each completion. Recertification re-enrols the learner a set number of days before it lapses and keeps the lapsed record in their history. The Certification Report shows five statuses (Certified, Renewing, Overdue, Expired and Uncertified), with dates in orange when they’re within 30 days of expiry.
2. One record per person, including external tickets. Internal courses, external training and licences belong in one history, with the evidence attached. In Tribal Habits, External Knowledge records hold licences, certificates and qualifications with expiry dates and attachments, and the Training History report brings internal and external training together for each person. For credentials like Working With Children Checks, first aid and white cards, the Requirement element collects the upload, supports assessor review and lets the credential’s real expiry date drive recertification.
3. Verification, not just completion. A practical check should be recorded item by item, not as a single tick. The Observation element builds checklist-based assessments with grading labels you define, such as “Competent” and “Not yet competent”, and assessors can attach photo, video or file evidence.
4. The training matrix, built in (Business 50+). A matrix should show role requirements against each person’s status without anyone maintaining formulas. On Business 50 plans and above, Roles, Competencies and Skills power the Skills Matrix report, showing each required skill as Missing, Current or Expired for every person.
5. History that comes with you, and stays. Moving platforms shouldn’t mean losing years of records, and leavers’ history needs to outlast their employment. Bulk Enrolment via CSV can backdate completion and certified dates, up to 1,500 rows per import. When someone leaves, you deactivate them: they can’t log in, and their full history is kept. Pricing is based on monthly active users, with unlimited stored users and training history on all plans, so keeping a leaver’s record for five or seven years costs nothing extra.
Underneath all five, Tribal Habits is Australian-owned, hosted on AWS in Sydney and ISO 27001:2022 certified, with a Timelines audit log.
If you’re weighing up training management software in Australia, the test is simple: can you show your matrix, your expiries and your evidence in one place, in minutes? Explore how Tribal Habits handles compliance training.
Frequently asked questions
Are employee training records a legal requirement in Australia?
Sometimes. The general WHS duty is to provide suitable and adequate training, not to keep a record of it, but some regulations, including those covering confined space and asbestos work, refer to training records directly. For most other compliance requirements for employee training in Australia, the record is how you show the duty was met. Check your state’s current regulations for the work you do.
How long should we keep training records in Australia?
It depends on the work and your jurisdiction. Some WHS regulations and the Education and Care Services National Regulations set retention periods for specific records, and most other training has none. Many organisations default to 7 years after the person leaves, to match their Fair Work employee records, which don’t themselves cover training.
Does the Privacy Act apply to employee training records?
For private sector employees, often not. The employee records exemption can cover training records that relate directly to a current or former employment relationship. The OAIC’s guidance says it doesn’t extend to volunteers or to providers handling your staff’s information under contract, and independent contractors aren’t employees, so those records can carry APP obligations.
What’s the difference between a training matrix and a training register?
A training register lists every completion, with dates and evidence. A training matrix shows what each role requires against what each person holds, so gaps and expiries are visible at a glance.
Do Victorian employers have different training obligations?
Victoria has its own Occupational Health and Safety Act 2004 rather than the model WHS Act. Section 21(2)(e) sets a similar duty to train and supervise, but the regulations and regulator differ, so record the jurisdiction against each training record.
What training records do aged care and early learning providers need?
Aged care providers should look to Outcome 2.9 of the strengthened Quality Standards, where the Commission’s guidance points to training and competency records for all workers, including contractors. Early learning services have specific staff record requirements under the National Regulations, plus evidence of mandatory child safety training. Check each regulator’s current guidance for the detail.
Can we keep training records in a spreadsheet?
Yes, and for a small team it’s a reasonable start. Spreadsheets break down with multiple sites, role changes, contractors and expiries, because every update depends on someone remembering it. Once you’re managing regulated work at scale, move to a system that calculates expiries and keeps history automatically.
This information is general in nature and doesn’t constitute legal or compliance advice. Requirements vary by state, sector and organisation, so we’d always recommend checking with your regulator or professional adviser before relying on it.
Training you can prove is training you own
Most organisations already do the training. The difference between passing the audit and scrambling isn’t effort. It’s whether the record exists, makes sense and survives a resignation.
The law sets the floor: train people properly, and keep specific records where the regulations say so. Everything above that floor is yours to decide. Build records by role, separate completion from competency, set retention rules once, and keep leavers’ history for as long as it might be needed.
That’s how training records stop being a panic and start being proof.
Book a demo and we’ll show you your training matrix, your expiries and your evidence in one place, using scenarios that match your Australian workforce.
