13 training duties across 8 instruments binding Pharma & Life Sciences, plus 10 that bind you whatever your sector — statute, rulebook, statutory guidance and licence conditions. Every one traced to its clause, its date and its published source, and each one labelled with what makes it a training duty.
These obligations have barely moved in a decade. That is the point, and it is a strength rather than a reassurance.
GMP Chapter 2 came into operation in February 2014 and its training paragraphs have not changed since. Annex 11 dates from 2011, the GDP Guidelines from 2013.
So the risk is not that the rule moved. It is that a stable rule has been in force long enough for the population around it — contractors, IT, cleaning and maintenance staff, third-party providers — to drift, while the duty to evidence effectiveness stayed exactly where it was.
Each clause carries a label saying why it is a training duty. Where the instrument does not use the word, we cite the guidance or the case that makes training the way you discharge it. Where we cannot cite anyone, it is not listed as a training duty at all.
| Clause | Who must be trained or assessed | What is required | Interval | Evidence required |
|---|---|---|---|---|
| EU GMP Chapter 2 — Personnel | ||||
| Paragraph 2.10 says train | defined population, drawn very wide — quoted: "all the personnel whose duties take them into production and storage areas or into control laboratories (including the technical, maintenance and cleaning personnel), and for other personnel whose activities could affect the quality of the product" | The manufacturer should provide training for all personnel whose duties take them into production and storage areas or control laboratories, expressly including technical, maintenance and cleaning personnel, and for any other personnel whose activities could affect product quality. | none specified | see paragraph 2.11 — training records should be kept |
| Paragraph 2.11 says train | all staff in scope of 2.10, plus newly recruited personnel specifically | Besides basic training on the theory and practice of the quality management system and GMP, newly recruited personnel should receive training appropriate to the duties assigned to them. Continuing training should also be given, and its practical effectiveness should be periodically assessed. Training programmes should be available, approved by either the head of Production or the head of Quality Control as appropriate. | "continuing" training, effectiveness assessed "periodically" — no interval stated | Quoted: "Training records should be kept." Training programmes must also exist, be available, and carry named approval by the head of Production or head of Quality Control. |
| Paragraph 2.12 says train | named population — quoted: "Personnel working in areas where contamination is a hazard, e.g. clean areas or areas where highly active, toxic, infectious or sensitising materials are handled" | Those personnel should be given specific training, additional to the general GMP training required by 2.10 and 2.11. | none specified | see 2.11 |
| EU GMP Annex 11 — Computerised Systems | ||||
| Paragraph 2 (Personnel), with paragraph 3.1 (Suppliers and Service Providers) competence | defined population — quoted: "all relevant personnel such as Process Owner, System Owner, Qualified Persons and IT" | There should be close cooperation between all relevant personnel such as the Process Owner, System Owner, Qualified Persons and IT. All personnel should have appropriate qualifications, level of access and defined responsibilities to carry out their assigned duties. Where third parties are used to provide, install, configure, integrate, validate, maintain, modify or retain a computerised system or related service, or for data processing, formal agreements must exist and should include clear statements of the third party's responsibilities. | none specified | Defined responsibilities and access levels; formal agreements with third parties |
| EU GDP Guidelines 2013/C 343/01 | ||||
| Paragraphs 2.10 and 2.11 says train | defined population — quoted: "All personnel involved in wholesale distribution activities" | All personnel involved in wholesale distribution activities should be qualified in GDP requirements by training and should have the appropriate competence and experience PRIOR TO COMMENCING THEIR TASKS. Training should in addition include aspects of product identification and the avoidance of falsified medicines entering the supply chain. | before commencing tasks — a precondition, not a cycle | see 2.12/2.13 — a written training programme |
| Paragraph 2.12/2.13, with paragraph 2.5(iii) and paragraph 2.3 says train | all personnel involved in distribution activities, AND the Responsible Person in their own right | Personnel should receive initial and continuing training relevant to their tasks, based on written standard operating procedures and in accordance with a WRITTEN TRAINING PROGRAMME. The Responsible Person should also maintain his or her own competence in GDP through regular training. Approving the initial and continuous training programme for all personnel involved in distribution activities is an express responsibility of the Responsible Person (2.5(iii)), who should themselves have appropriate competence, experience, knowledge and training on GDP (2.3). | "initial and continuing"; the Responsible Person's own training is "regular" — no interval stated | A written training programme, tied to written SOPs, approved by the Responsible Person |
| Paragraph 2.13/2.12 says train | named population — quoted: personnel dealing with products "requiring more stringent handling such as hazardous products, radioactive materials as well as products presenting special risks of abuse, narcotics or psychotropic substances, or temperature sensitive products" | Those personnel should receive specific training, additional to the general GDP training. | none specified | see 2.12/2.13 |
| EudraLex Volume 4 — EU Guidelines for Good Manufacturing Practice, Part 1, Chapter 1: Pharmaceutical Quality System | ||||
| Chapter 1 — Principle, and the Good Manufacturing Practice for Medicinal Products section says train | all staff whose work bears on product quality, plus named key personnel — the Qualified Person(s) | The pharmaceutical quality system must be adequately resourced with competent personnel. Good Manufacturing Practice requires appropriately qualified and trained personnel; that procedures are carried out correctly and operators are trained to do so; and that adequate facilities, trained personnel and approved procedures are in place. Sampling of starting materials, intermediate, bulk and finished products is to be carried out by approved personnel. | none specified | none specified in this chapter; see Chapter 2 paragraph 2.11 for training records |
| The Human Medicines Regulations 2012 | ||||
| Regulation 45 (Requirement as to responsible persons) competence | named role — the responsible person | The licence holder must ensure the availability of at least one responsible person who has knowledge of the activities to be carried out and of the procedures to be performed under the licence which is adequate to carry out the specified functions, and who has adequate experience relating to those activities and procedures. That person must ensure the licence conditions have been and are being complied with, and that product quality is maintained. | none specified — continuous availability of a qualifying person | none specified in this regulation |
| EudraLex Volume 4 — EU Guidelines for Good Manufacturing Practice, Annex 1: Manufacture of Sterile Medicinal Products | ||||
| Paragraph 7.3, with 7.1 says train | all staff with cleanroom access — quoted: "All personnel including those performing cleaning, maintenance, monitoring and those that access cleanrooms" | All such personnel should receive regular training, gowning qualification and assessment in disciplines relevant to the correct manufacture of sterile products. The training should include the basic elements of microbiology and hygiene, with specific focus on cleanroom practices, contamination control, aseptic techniques and the protection of sterile products, and the potential safety implications to the patient if the product is not sterile. The manufacturer should ensure sufficient appropriate personnel, suitably qualified, trained and experienced in the manufacture and testing of sterile products. | "regular" training — no interval stated here; see 7.4 for the annual reassessment | Gowning qualification and assessment records |
| Paragraph 7.4 says train | named population — personnel accessing grade A and grade B areas | Personnel accessing grade A and B areas should be trained for aseptic gowning and aseptic behaviours. Compliance with aseptic gowning procedures should be confirmed by assessment and PERIODIC REASSESSMENT AT LEAST ANNUALLY, involving both visual and microbial assessment using monitoring locations such as gloved fingers, forearms, chest and hood. Unsupervised access to grade A and B areas where aseptic operations are or will be conducted should be restricted to appropriately qualified personnel who have passed the gowning assessment and participated in a successful aseptic process simulation. | at least annually | Visual and microbial assessment results per person; evidence of participation in a successful APS for unsupervised access |
| Paragraph 7.6, with 7.5 competence | named population — operators working in or with unsupervised entry to cleanrooms | There should be systems in place for the DISQUALIFICATION of personnel from working in, or being given unsupervised entry into, cleanrooms — based on ongoing assessment, identification of an adverse trend from the personnel monitoring programme, or having been implicated in a failed aseptic process simulation. Once disqualified, retraining and requalification should be completed before the operator has any further involvement in aseptic practices, and for grade B or grade A intervention that requalification should include consideration of participation in a successful APS. Unqualified personnel should not enter grade B cleanrooms or grade A in operation; where exceptionally needed, written procedures, supervision by an authorised person, and assessment and recording of access in accordance with the quality system are required. | trigger-based — on adverse trend, failed APS, or ongoing assessment | A disqualification system; records of access by unqualified personnel and the assessment of its impact |
| Commission Directive (EU) 2017/1572 supplementing Directive 2001/83/EC as regards the principles and guidelines of good manufacturing practice for medicinal products for human use | ||||
| Article 7(4), with Article 7(1)-(3) and Article 6 says train | all personnel, plus managerial and supervisory staff including qualified persons | Quoted, Article 7(4): "The personnel shall receive initial and ongoing training, the effectiveness of which shall be verified, covering in particular the theory and application of the concept of quality assurance and good manufacturing practice." Article 7(1) requires a sufficient number of competent and appropriately qualified personnel at each site. Article 7(2) requires the duties of managerial and supervisory staff, including qualified persons, to be defined in JOB DESCRIPTIONS, with hierarchical relationships defined in an ORGANISATION CHART, both approved under the manufacturer's internal procedures. Article 7(3) requires those staff to be given sufficient authority to discharge their responsibility. Article 6 requires the pharmaceutical quality system to involve the active participation of senior management and personnel across departments. | "initial and ongoing" — no interval stated | The effectiveness of training SHALL BE VERIFIED. Approved job descriptions and organisation chart. |
10 further obligations sit outside Pharma & Life Sciences regulation and bind you as an employer or as a deployer of AI. They are the ones a sector-by-sector review misses, because nobody who reads only their own rulebook ever reaches them.
| Clause | Who must be trained or assessed | What is required | Interval | Evidence required |
|---|---|---|---|---|
| EU AI Act (Reg (EU) 2024/1689) | ||||
| Article 4 (AI literacy) says train | defined population — quoted from the pre-amendment text: "their staff and other persons dealing with the operation and use of AI systems on their behalf" | AS ENACTED: providers and deployers were to take measures to ensure, to their best extent, a sufficient level of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account technical knowledge, experience, education and training, the context of use, and the persons on whom the systems are used. AS AMENDED from 2026-07-27 by the Digital Omnibus on AI: AI literacy remains an obligation on providers and deployers, but no specific or 'sufficient' level is mandated; the Commission and Member States take a stronger role in promoting AI literacy. The obligation on deployers of HIGH-RISK AI systems to ensure staff are trained for human oversight remains in place. | none specified | none specified |
| Article 26(2) says train | named population — the natural persons assigned to exercise human oversight | Quoted: "Deployers shall assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support." | none specified | none specified in this paragraph |
| Employment Rights Act 2025 | ||||
| Whole Act — training provisions at s.65 and related says train | named role — trade union equality representatives, not the general workforce | The Act's training provisions concern whether a trade union equality representative has undergone sufficient training to carry on those activities, with notice requirements on the union and reference to a relevant ACAS or Secretary of State Code of Practice. It is not a mandatory workforce training duty of the kind the rest of this map records. | none specified | Written notice from the trade union to the employer |
| Equality Act 2010 | ||||
| Section 109(4), with section 109(1) case law Allay (UK) Ltd v Gehlen [2021] UKEAT/0031/20 — stale or inadequate training defeats the s.109(4) 'all reasonable steps' defence, making training the operative discharge. | all staff — the defence turns on steps taken to prevent employees doing discriminatory acts | An employer is liable for anything done by a person in the course of their employment. Quoted from 109(4): "In proceedings against A's employer (B) in respect of anything alleged to have been done by A in the course of A's employment it is a defence for B to show that B took all reasonable steps to prevent A—(a) from doing that thing, or (b) from doing anything of that description." | none specified | The employer must SHOW the steps taken. The burden sits with the employer. |
| UK GDPR | ||||
| Article 24, read with Article 5(2) guidance UK GDPR Article 39(1)(b) — read at source 2026-08-12 — names staff training as an element of compliance with the Regulation: the data protection officer must "monitor compliance with this Regulation... including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits". LIMIT OF THIS CITATION, stated plainly: Article 39 applies only where Article 37 requires a DPO to be appointed, so it does not by itself establish a training duty for every controller. It establishes that the Regulation treats staff training as part of compliance. The unconditional citation would be the ICO Accountability Framework, which has NOT been read — see not_yet_searched. | not specified — training is not expressly named in Article 24 | Quoted: "the controller shall implement appropriate technical and organisational measures to ensure and to be able to demonstrate that processing is performed in accordance with this Regulation." Those measures must be reviewed and updated where necessary, and are to include appropriate data protection policies where proportionate to the processing activities. Article 5(2) supplies the accountability principle itself: "The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1" — that is, with all six data protection principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality. | measures to be reviewed and updated where necessary — no interval | The controller must be able to DEMONSTRATE compliance. This is the accountability limb. |
| The Regulatory Reform (Fire Safety) Order 2005 | ||||
| Article 21, with articles 3 and 6 says train | all staff — quoted: "his employees" | Quoted, 21(1): the responsible person "must ensure that his employees are provided with adequate safety training (a) at the time when they are first employed; and (b) on their being exposed to new or increased risks because of" transfer or change of responsibilities, new or changed work equipment, new technology, or a new or changed system of work. 21(2): that training must "(a) include suitable and sufficient instruction and training on the appropriate precautions and actions to be taken by the employee in order to safeguard himself and other relevant persons on the premises; (b) be repeated periodically where appropriate; (c) be adapted to take account of any new or changed risks; (d) be provided in a manner appropriate to the risk identified by the risk assessment; and (e) TAKE PLACE DURING WORKING HOURS." | Trigger-based, not periodic: on first employment AND on each of four listed changes. "Repeated periodically where appropriate" — no interval stated. | none specified in the article |
| The Management of Health and Safety at Work Regulations 1999 | ||||
| Regulation 13(2), with 13(1) and 13(3) says train | all staff — every employee, on recruitment and again on each triggering change | Quoted, 13(2): "Every employer shall ensure that his employees are provided with adequate health and safety training— (a) on their being recruited into the employer's undertaking; and (b) on their being exposed to new or increased risks because of— (i) their being transferred or given a change of responsibilities within the employer's undertaking, (ii) the introduction of new work equipment into or a change respecting work equipment already in use within the employer's undertaking, (iii) the introduction of new technology into the employer's undertaking, or (iv) the introduction of a new system of work into or a change respecting a system of work already in use within the employer's undertaking." 13(1) separately requires the employer, "in entrusting tasks to his employees, [to] take into account their capabilities as regards health and safety." | No fixed interval. The duty is TRIGGER-BASED — on recruitment, and on each of the four changes listed in 13(2)(b). | Not specified in the regulation itself. |
| Health and Safety at Work etc. Act 1974 | ||||
| Section 2(2)(c), with section 2(1) says train | all staff — scoped by what is 'necessary to ensure' their health and safety | Quoted, s.2(2)(c): the employer's general duty extends in particular to "the provision of such information, instruction, training and supervision as is necessary to ensure, so far as is reasonably practicable, the health and safety at work of his employees." This is the primary-legislation parent of the MHSWR reg 13 duty. Note the double qualifier: training is owed only so far as it is BOTH 'necessary to ensure' health and safety AND 'reasonably practicable'. | None. The measure is necessity, not interval. | Not specified in the section. |
| Council Directive 89/391/EEC (the Framework Directive) on the introduction of measures to encourage improvements in the safety and health of workers at work | ||||
| Article 12(1) and 12(4) says train | all staff — 'each worker' | Quoted, 12(1): "The employer shall ensure that each worker receives adequate safety and health training, in particular in the form of information and instructions specific to his workstation or job: — on recruitment, — in the event of a transfer or a change of job, — in the event of the introduction of new work equipment or a change in equipment, — in the event of the introduction of any new technology. The training shall be: — adapted to take account of new or changed risks, and — repeated periodically if necessary." Quoted, 12(4): "The training referred to in paragraphs 1 and 3 MAY NOT BE AT THE WORKERS' EXPENSE... The training referred to in paragraph 1 MUST TAKE PLACE DURING WORKING HOURS." | No fixed interval. Trigger-based on four named events, PLUS two standing qualities the UK implementation does not spell out as clearly: adapted to new or changed risks, and "repeated periodically if necessary". | Not specified in Article 12. |
| Article 12(2) says train | named population — workers from OUTSIDE undertakings and/or establishments engaged in work in your undertaking. Contractors, agency staff, visiting engineers, maintenance crews. | Quoted in full: "The employer shall ensure that workers from outside undertakings and/or establishments engaged in work in his undertaking and/or establishment HAVE IN FACT RECEIVED appropriate instructions regarding health and safety risks during their activities in his undertaking and/or establishment." | None — triggered by the outside workers being engaged in work in your undertaking. | Not specified, but note the wording: the employer must ensure they "have in fact received" the instructions. That is a verification duty, not a provision duty — it is not discharged by having issued something. |
1 provisions that sit alongside the duties above without themselves requiring training. They are here because they are the ones most often mistaken for training duties, or most often missed when scoping them. We separate them rather than pad the count.
| Clause | Who it concerns | What is required | Interval | Evidence required |
|---|---|---|---|---|
| EudraLex Volume 4 — EU Guidelines for Good Manufacturing Practice, Part 1, Chapter 4: Documentation | ||||
| Chapter 4 — records to be maintained, personnel matters related Record itself declares this is not a training duty. | n/a — a documentation duty | Among the records that must be maintained, Chapter 4 expressly names: "Personnel matters including signature lists, training in GMP and technical matters, clothing and hygiene and VERIFICATION OF THE EFFECTIVENESS OF TRAINING." The chapter also governs retention of documents and requires the integrity of the record to be preserved throughout the retention period, noting that longer retention periods may be specified in legislation for particular product types such as advanced therapy medicinal products. | none specified | Records of training in GMP and technical matters, signature lists, and the verification of training effectiveness — retained with integrity preserved |
GMP paragraph 2.11 asks for the training; for a periodic assessment of its practical effectiveness; and for a training programme that exists, is available and is approved by the head of Production or the head of Quality Control.
Attendance shows presence. A score at the point of delivery shows recall. Neither is an assessment of whether the training changed what people do.
The GDP Guidelines mirror this: training must be based on written SOPs and delivered in accordance with a written programme, which the Responsible Person approves — and who must maintain their own competence through regular training.
GMP 2.10 covers everyone whose duties take them into production and storage areas or control laboratories, and expressly names technical, maintenance and cleaning personnel — the groups most likely to be contracted and least likely to appear in the quality team’s reporting.
GMP 2.12 then adds a layer defined by where people work; GDP 2.13 adds one defined by what they handle; and Annex 11 adds one defined by system access, naming IT among the relevant personnel. Four different ways of drawing a population, none of them the org chart.
Annex 1 paragraph 7.6 is unique in this series. It requires a system for the disqualification of personnel from cleanroom work — triggered by ongoing assessment, an adverse trend in the personnel monitoring programme, or involvement in a failed aseptic process simulation. Once disqualified, retraining and requalification must be completed before any further involvement in aseptic practices.
Almost every training system is built to record attainment. Very few have any concept of withdrawal — and the trigger here is monitoring data owned by a different team.
Paragraph 7.4 supplies the annual gate: gowning compliance confirmed by assessment and periodic reassessment at least annually, using both visual and microbial sampling of the gowned operator.
GDP 2.10 requires personnel to be qualified in GDP by training and to have appropriate competence and experience prior to commencing their tasks. Someone who starts on Monday and is booked onto the next quarterly session has already been working outside the guideline — and the training record, when it arrives, will look entirely compliant because it carries no reference to the start date.
This map states what it did not check as well as what it did. A map that quietly omits its own gaps is worth less than one that marks them.
13 obligations across 8 instruments, each read directly from the published source on 2026-08-10.
Their absence is not evidence that they contain no training duty.
Ten minutes on where your obligations actually sit. Fifteen watching a module built live from your own source documents. Five on whether there is a next step. Nothing to prepare and nothing to send beforehand.