Requirements finder
The training, written policies and notices the law requires, with who's covered, how often, the proof to keep and the official source for each.
Based on Chicago. Add headcount and your type of workplace above to narrow this down.
There's no federal requirement for private employers to provide harassment prevention training; the rules below come from the states and cities you chose, plus federal workplace safety and privacy rules where they apply.
Harassment policy and yearly training, including bystander training
Upload your ownEvery employer, for employees who work in Chicago
Policy in the first week; each year (July 1 to June 30) 1 hour of harassment training, 2 hours for supervisors, and 1 hour of bystander training. Ethica's Illinois course covers the employee hour. Training records kept 5 years.
Chicago Commission on Human Relations · checked October 2026
Sexual harassment prevention training
Ready in EthicaEvery employer with employees working in Illinois
Every employee, every calendar year (by December 31). A record of each training.
775 ILCS 5/2-109 · checked October 2026
Employee rights notice in the workplace and handbook
Upload your ownEvery employer
Post the Department of Human Rights notice and include it in any employee handbook; menopause accommodation wording from January 1, 2027. The posted notice and handbook text.
Public Act 103-0804 · checked October 2026
Restaurant and bar harassment policy and supplemental training
Upload your ownRestaurants and bars
A written policy in English and Spanish in the first week of employment, and supplemental training every year. Policy acknowledgments and training records.
775 ILCS 5/2-110 · checked October 2026
Human trafficking recognition training
Upload your ownHotels, restaurants and truck stops, for employees who deal with the public
At least 20 minutes within 6 months of starting, then every 2 years. Enforced since October 1, 2026. Dated completion records.
Public Act 104-0099 · checked October 2026
Mandated reporter training
Ready in EthicaMandated reporters, such as health care, school, day care, social services and recreation staff Applies if your people work with children (for example health care, child care, schools or youth programs).
Within 3 months of starting the role, then at least every 3 years (medical staff who work with children: every 6 years). The reporter keeps records of completion and reports completion to the employer.
325 ILCS 5/4(j) · DCFS Mandated Reporter Portal · checked October 2026
Biometric information notice and written release
Upload your ownPrivate employers that collect fingerprints, face or hand scans (including time clocks) Applies if you use fingerprint or face scans (for example a time clock).
Written notice and a signed release (an electronic signature counts) before collecting; a public retention policy. Each employee's signed release.
740 ILCS 14/15 · checked October 2026
Hazard communication training
Upload your ownEmployers whose employees work with hazardous chemicals (federal OSHA, and the state plans that adopt it)
At initial assignment and whenever a new chemical hazard is introduced, covering the chemicals in your workplace. A written hazard communication program, chemical list and safety data sheets the employees can reach. A training record is good practice.
29 CFR 1910.1200 · OSHA hazard communication · checked October 2026
Bloodborne pathogens training
Upload your ownEmployers whose employees can reasonably expect contact with blood or other potentially infectious materials
At initial assignment and every year, with a chance to ask a qualified trainer questions during the session. Training records kept 3 years: dates, a summary of content, the trainer's name and qualifications, and attendees.
29 CFR 1910.1030 · checked October 2026
Powered industrial truck (forklift) operator training
Track the certificateEmployers whose employees operate forklifts or other powered industrial trucks
Formal instruction, hands-on training and a workplace evaluation before operating; evaluation at least every 3 years. A certification with the operator's name, training and evaluation dates, and the evaluator's name.
29 CFR 1910.178(l) · checked October 2026
HIPAA privacy and security training
Upload your ownHealth care providers, health plans and clearinghouses, and their business associates Applies if you handle patient or health information.
For new staff within a reasonable time, and when policies change; periodic security reminders. Documentation that training was given, kept 6 years.
45 CFR 164.530(b) · 45 CFR 164.308(a)(5) · checked October 2026
Security awareness training (FTC Safeguards Rule)
Upload your ownNon-bank financial institutions such as tax preparers, mortgage brokers, lenders and finance companies. The small-business exemption does not cover training
Security awareness training for staff, kept up to date with the written information security program. The written information security program and a record of training.
16 CFR 314.4(e) · checked October 2026
Drug-free workplace statement and awareness program
Upload your ownFederal grantees of any size, and federal contractors above the contract threshold Applies if you hold US federal contracts or grants.
Give each employee working on the grant or contract the drug-free workplace statement, and run an awareness program. The published statement and evidence each employee received it.
41 U.S.C. 8102 · checked October 2026
This list covers what you give each person: training, written policies and notices. Most places also require posters displayed at the workplace, and those aren't included.
Send the ready ones in a few clicks, and keep the dated record for every employee.
Start free trialGeneral information, not legal advice. Thresholds are simplified where noted, and laws change: confirm each requirement with the official source linked in its row, and with a lawyer for your situation. Each rule shows when we last checked it.