Ask three operators what training the law requires and you'll get three different answers, usually delivered with total confidence. The confusion is understandable: hospitality sits at the intersection of health and safety law, food law, fire law and licensing law, and almost none of it is written in a single place aimed at people running venues.
It's also expensive to get wrong in both directions. Train nothing and you're exposed. Train everything the sales emails suggest and you're paying for certificates you don't need while missing duties you do have.
Here's the honest version — what's actually a legal duty, what's strongly expected without being written into statute, and where the two get mixed up.
A general overview of the position in England and Wales, not legal advice. Some rules differ in Scotland and Northern Ireland, and your local authority environmental health team and fire authority are the authorities on your specific premises.
The duty that sits underneath everything
Before any hospitality-specific rule, there's the general one. The Health and Safety at Work etc. Act 1974 requires employers to provide the information, instruction, training and supervision needed to keep employees safe. The Management of Health and Safety at Work Regulations 1999 add that training must happen when someone is recruited and again when they're exposed to new or increased risks.
Two things follow from that, and they matter more than any specific certificate:
- Training is tied to risk, not to job titles. What your team needs depends on what your risk assessment says they're exposed to. There is no universal checklist that applies identically to a wet-led pub and a 200-cover hotel kitchen.
- You need to be able to show it happened. Not because a law says "keep records" in those words, but because when an inspector or an insurer asks how you met the duty, an undocumented verbal briefing is very hard to evidence.
Food hygiene: the most misunderstood one
This is where most operators are confidently wrong.
Retained EU food hygiene law requires that food handlers are supervised and instructed and/or trained in food hygiene matters appropriate to what they actually do. That is the legal duty.
What the law does not say is that every food handler must hold a Level 2 Food Safety certificate. There is no statutory requirement for a specific qualification. A well-run in-house training programme with proper records can satisfy the duty.
So why does everyone do Level 2 anyway? Because it's the path of least resistance. It's a recognised way to demonstrate compliance to an environmental health officer, it feeds directly into your Food Hygiene Rating Scheme score under the confidence-in-management component, and it's cheaper than building and documenting your own equivalent. It's the sensible commercial choice — just don't mistake it for the legal minimum.
Supervisors and managers with responsibility for food safety procedures are generally expected to hold Level 3, again by convention and inspector expectation rather than by a line in a statute.
Allergens: a duty to inform, not a duty to certify
The Food Information Regulations require you to provide accurate information about the 14 named allergens. Since Natasha's Law took effect in October 2021, food that's prepacked for direct sale needs full ingredient labelling with allergens emphasised.
Note the shape of that duty: it's about the information reaching the customer accurately. There is no statutory requirement that staff hold an allergen training certificate.
But this is a case where the letter of the law understates the exposure. Someone has to answer the question at the table, and a wrong answer is potentially fatal and criminally serious. If your team can't reliably say what's in a dish and how cross-contamination is controlled, you have not met the duty regardless of what certificates are in the drawer. The Food Standards Agency publishes free allergen training, which makes this one of the cheapest risks to close.
Fire safety training: a genuine, specific duty
This one is unambiguous. Under the Regulatory Reform (Fire Safety) Order 2005 the responsible person must ensure employees are given adequate fire safety training — at induction, and repeated periodically. It has to cover the risks identified in your fire risk assessment, what to do on discovering a fire, evacuation procedures and their own role in them.
For hospitality this is more than a formality. You are responsible not just for staff but for members of the public who don't know your building, sometimes in the dark, sometimes after several drinks. Fire training and evacuation drills are among the duties inspectors are least forgiving about.
First aid: adequate, not a fixed number
The Health and Safety (First-Aid) Regulations 1981 require adequate and appropriate first aid equipment, facilities and people. What "adequate" means comes out of a first-aid needs assessment — headcount, layout, hazards, shift patterns, distance from emergency services.
There's no legally fixed ratio of first aiders to staff, which surprises people. What there is, in a kitchen full of knives, hot surfaces and wet floors, is a risk profile that makes a thin assessment hard to defend.
Licensing: qualification-based, and non-negotiable
If you sell alcohol, every sale must be made or authorised by a personal licence holder, and a personal licence requires an accredited qualification. Your premises licence also names a Designated Premises Supervisor.
This is one of the few genuinely qualification-based requirements in hospitality. It's also the one with the sharpest consequences — licensing breaches threaten the ability to trade at all.
The ones that depend on your operation
Several duties bite only if the risk is present, which in most venues it is:
- COSHH. Cleaning chemicals, oven products and sanitisers are hazardous substances. Staff using them need training on safe handling.
- Manual handling. Kegs, deliveries, stockroom work.
- Young workers. If you employ under-18s, there are specific assessment duties around their inexperience and immaturity.
How to work out what you actually need
Stop starting from a list of courses. Start from your risk assessments, which you're required to have anyway, and let them tell you what your team is exposed to. Then check the small number of hard requirements — fire training, licensing qualifications, food hygiene instruction — and record what you've delivered and when.
Where operators waste money is buying broad training bundles without checking them against their own risk profile, and then still failing an inspection because the paperwork trail is missing. The records are half the compliance.
For the online compliance side of this — the courses, the tracking and the audit trail that goes with them — we recommend iHASCO for workplace training, who cover the hospitality-relevant modules and, more usefully, keep the evidence of completion in one place.
Worth separating in your head, though: compliance training keeps you legal. It doesn't make anyone a better manager, and it won't touch your turnover. That's a different kind of development — the kind covered in our hospitality workshops — and confusing the two is how businesses end up fully certificated and still losing their best people.