Requirements finder
The training, written policies and notices the law requires, with who's covered, how often, the proof to keep and the official source for each.
Based on Maryland. Add headcount and your type of workplace above to narrow this down.
There's no federal requirement for private employers to provide harassment prevention training; the rules below come from the states and cities you chose, plus federal workplace safety and privacy rules where they apply.
Heat stress prevention plan and training
Upload your ownEmployers whose employees work where the heat index reaches 80°F, indoors or outdoors Applies if some people work outdoors.
Training at hire, every year, and after a heat-related incident. Training records kept 1 year.
COMAR 09.12.32 · checked October 2026
Hazard communication training
Upload your ownEmployers whose employees work with hazardous chemicals (federal OSHA, and the state plans that adopt it)
At initial assignment and whenever a new chemical hazard is introduced, covering the chemicals in your workplace. A written hazard communication program, chemical list and safety data sheets the employees can reach. A training record is good practice.
29 CFR 1910.1200 · OSHA hazard communication · checked October 2026
Bloodborne pathogens training
Upload your ownEmployers whose employees can reasonably expect contact with blood or other potentially infectious materials
At initial assignment and every year, with a chance to ask a qualified trainer questions during the session. Training records kept 3 years: dates, a summary of content, the trainer's name and qualifications, and attendees.
29 CFR 1910.1030 · checked October 2026
Powered industrial truck (forklift) operator training
Track the certificateEmployers whose employees operate forklifts or other powered industrial trucks
Formal instruction, hands-on training and a workplace evaluation before operating; evaluation at least every 3 years. A certification with the operator's name, training and evaluation dates, and the evaluator's name.
29 CFR 1910.178(l) · checked October 2026
HIPAA privacy and security training
Upload your ownHealth care providers, health plans and clearinghouses, and their business associates Applies if you handle patient or health information.
For new staff within a reasonable time, and when policies change; periodic security reminders. Documentation that training was given, kept 6 years.
45 CFR 164.530(b) · 45 CFR 164.308(a)(5) · checked October 2026
Security awareness training (FTC Safeguards Rule)
Upload your ownNon-bank financial institutions such as tax preparers, mortgage brokers, lenders and finance companies. The small-business exemption does not cover training
Security awareness training for staff, kept up to date with the written information security program. The written information security program and a record of training.
16 CFR 314.4(e) · checked October 2026
Drug-free workplace statement and awareness program
Upload your ownFederal grantees of any size, and federal contractors above the contract threshold Applies if you hold US federal contracts or grants.
Give each employee working on the grant or contract the drug-free workplace statement, and run an awareness program. The published statement and evidence each employee received it.
41 U.S.C. 8102 · checked October 2026
This list covers what you give each person: training, written policies and notices. Most places also require posters displayed at the workplace, and those aren't included.
General information, not legal advice. Thresholds are simplified where noted, and laws change: confirm each requirement with the official source linked in its row, and with a lawyer for your situation. Each rule shows when we last checked it.