A state-by-state guide to state-mandated harassment prevention training certificates: who must be trained, how often, and how long to keep the records.

Nothing about state-mandated harassment prevention training certificates is standardized across states, which is exactly why employers get caught out. One state sets an hour count, the next sets none. One tells you to keep records for two years, another for three, and several do not name a period at all.

The figures below come from each state's own agency or statute rather than from a vendor summary, because the vendor summaries contradict each other constantly. Where a state genuinely does not publish a number, this guide says so instead of filling the gap with a guess. If you need the underlying document first, you can build a printable training completion certificate with the name, date, course title, and duration fields these states care about.

Six jurisdictions are covered in detail: California, New York State, New York City, Illinois, Connecticut, Delaware, and Maine. Every other state is addressed at the end, briefly and honestly.

Why the Certificate Is the Part That Gets Audited

Training is the obligation. The certificate is the evidence, and evidence is what an agency asks for.

Proof that training happened

When a state agency inspects, it does not observe the training — it reads the record. A per-employee document showing name, date, course, and duration answers the question in one pass, which is why several states name certificates of completion explicitly in their recordkeeping rules.

California's regulations, for instance, list "a copy of all certificates of attendance or completion (if issued)" among the items an employer must retain. The certificate is not merely traditional there; it is enumerated.

The affirmative defense

Federal case law gives employers a partial defense to supervisor harassment claims, and documented prevention efforts sit at its center. The EEOC's guidance on vicarious liability describes the defense as having two necessary elements: the employer exercised reasonable care to prevent and promptly correct harassing behavior, and the employee unreasonably failed to use the preventive or corrective opportunities available.

Training records speak to the first element. A completion rate you can prove is materially different from a policy you can only describe.

Record retention as a separate duty

Delivering training and retaining proof of it are two obligations, and states set them independently. An employer can be fully trained and still out of compliance because the file was thrown away, which is the failure mode that shows up most often in multi-state operations. Retention periods across employment and safety standards rarely align, so it helps to understand how long to keep employee training records as a general discipline rather than state by state.

Federal Law Sets the Floor, Not the Training Mandate

The federal layer is often misdescribed, so it is worth separating what Title VII does from what it does not.

What Title VII covers, and what it does not require

Title VII of the Civil Rights Act of 1964 prohibits employment discrimination based on race, color, religion, sex, and national origin, and it generally applies to employers with 15 or more employees. Sexual harassment was established as a form of sex discrimination under Title VII through decades of litigation rather than by explicit statutory text.

What Title VII does not do is require periodic harassment prevention training for all employees. There is no federal training mandate and no federal certificate; the EEOC recommends training as a practice, and states filled the gap.

Why the Faragher and Ellerth defense matters here

In Burlington Industries v. Ellerth and Faragher v. City of Boca Raton, both decided in 1998, the Supreme Court held that employers are vicariously liable for supervisor harassment. Where the harassment culminated in a tangible employment action, liability is automatic and no defense is available.

Where it did not, the employer may avoid liability or limit damages by establishing the two-element affirmative defense described above. This is the legal mechanism that turns a filing cabinet of certificates into something worth maintaining.

California

California's rules are the most prescriptive in the country, and the only ones that specify both hour counts and a retention period.

Coverage, hours, and deadlines

Under Government Code section 12950.1, employers with five or more employees must provide harassment and abusive conduct prevention training every two years. Supervisory employees receive two hours; non-supervisory employees receive one hour. The Civil Rights Department (CRD) states that the next statewide training deadline is January 1, 2027.

New supervisory employees must be trained within six months of assuming the supervisory position, and new non-supervisory employees within six months of hire. For employees hired for less than six months — seasonal and temporary staff — training is due within 30 calendar days after the hire date or within 100 hours worked, whichever comes first. Employees working fewer than 30 calendar days and fewer than 100 hours do not need to be trained.

What the record must contain, and for how long

CRD states that the law requires employers to keep documentation of the training provided for a minimum of two years. That documentation includes the names of employees trained, the date of training, the sign-in sheet if one was used, a copy of any certificates of attendance or completion issued, the type of training, a copy of the written or recorded training materials, and the training provider's name.

The documentation is not filed with CRD. It is kept on the employer's premises and produced if CRD requests it, which means the organizing work is entirely yours.

New York State

New York's mandate has the broadest coverage of any state and, unusually, sets no minimum duration.

Coverage and frequency

All employers in New York State must adopt a prevention policy and provide annual training to all employees, regardless of employer size. The state's guidance is explicit that this reaches households employing a single nanny or housekeeper. "Employee" includes exempt and non-exempt staff, part-time, seasonal, and temporary workers, regardless of immigration status.

The annual cycle can run on the calendar year, each employee's hire anniversary, or any other date the employer picks. Only employees who work or will work in New York State need training, though someone based elsewhere who works part of their time in the state is covered.

No minimum hours, and no prescribed record format

Asked directly whether there is a minimum number of training hours, the state answers no — training simply has to meet or exceed the published minimum standards. Any hour figure attributed to New York State should be treated as a vendor's own design choice rather than a legal requirement.

On records, the state says employers are encouraged to keep a signed acknowledgment and a copy of training records, and notes that no signed acknowledgment of having read the policy is required. New York State does not publish a retention period, so the sensible approach is to keep records at least as long as any claim could plausibly arise and confirm current expectations with the state.

New York City

City law sits on top of the state mandate, and an employer in the five boroughs can owe both at once.

Coverage under the Stop Sexual Harassment Act

Employers who had 15 or more employees, or one or more domestic worker, at any point in the previous calendar year must train every employee each calendar year. Independent contractors count toward the 15-employee threshold regardless of how much they work, and employees based outside the city count toward it too.

Short-term employees, part-time employees, interns, and independent contractors must be trained if they worked more than 80 hours in a calendar year and for at least 90 days. Below either threshold, training is not required for that individual.

The three-year record rule

Local Law 96 of 2018 requires employers to keep a record of all trainings for at least three years, and those records must be available for Commission inspection on request. The Commission accepts either a certificate or a signed employee acknowledgment, in paper or electronic form.

One practical trap: the Commission's own free training issues exactly one certificate per session. If several employees take it together on one device, the employer has to keep an independent record of who was trained and when.

Illinois

Illinois requires annual training for nearly every employer in the state, with an extra layer for hospitality.

Annual training and the four required topics

The Illinois Department of Human Rights (IDHR) states that the requirements apply to all companies with more than one employee operating in Illinois, and that those employers must provide sexual harassment prevention training to all employees once a year. Employers may use IDHR's free training or build their own.

A self-built program has to cover four areas: what sexual harassment is under Illinois law, real examples of unlawful conduct, the legal protections and remedies available under state and federal law, and the employer's own responsibilities to prevent, investigate, and address harassment. Illinois does not set a minimum number of hours.

Bars, restaurants, and the record you have to produce

Restaurants and bars carry supplemental requirements beyond the general training, along with a written policy that must reach employees early in their employment. IDHR publishes separate standards for that sector.

Employers must keep a record of training and make it available for IDHR inspection on request. IDHR's compliance page does not state a retention period, so treat "how long" as an open question, keep records well beyond the current cycle, and confirm the expectation with IDHR directly before you dispose of anything.

Need the document itself?

Build a clean, printable completion record with employee name, course title, duration, date and signature line — then download it in a couple of minutes.

Create a Training Certificate

Connecticut

Connecticut sets an hour count like California but a far longer refresher cycle, which surprises employers moving between the two.

Two hours, and who receives them

Public Acts 19-16 and 19-93, together known as the Time's Up Act, require employers with three or more employees to provide two hours of training and education covering federal and state statutory provisions on sexual harassment and the remedies available to victims. Any individual working for such an employer must receive the two hours.

Where an employer has fewer than three employees, all supervisors must receive the two hours instead. Employees hired after October 1, 2019 must be trained within six months of their hire date. The training must be interactive, meaning participants can ask questions and get answers, though it need not be delivered live.

The ten-year supplemental cycle, and records

Periodic supplemental training must be provided not less than every ten years. That is a long interval by national standards, and many employers train more frequently to keep the affirmative defense credible rather than because Connecticut compels it.

CHRO issues a certificate of completion by email within 24 hours of its free training, and states plainly that its certificates are not required to prove completion — an employer may track compliance by its own methods. CHRO's guidance does not publish a retention period, so keep records for as long as you would need them in litigation and check with CHRO before purging.

Delaware

Delaware's mandate is the narrowest of the six, applying only to larger employers.

The fifty-employee threshold and the two-year cycle

Under 19 Del. C. § 711A(g), an employer with 50 or more employees in Delaware must provide interactive training and education to employees on the prevention of sexual harassment. New employees must be trained within one year of the commencement of employment and every two years thereafter; existing employees were due by January 1, 2020 and every two years after that.

The statute lists the required content: the illegality of sexual harassment, the definition with examples, the legal remedies and complaint process available, and how to contact the Delaware Department of Labor. Supervisors receive additional content on their own responsibilities. No minimum hour count is specified.

Records under Delaware law

Section 711A also makes clear that compliance with the training subsection does not by itself insulate an employer from liability for harassment. Training is a floor, not a shield.

The statute sets the training cadence but does not name a document retention period, so Delaware employers should keep completion records long enough to prove each two-year cycle and confirm current expectations with the Delaware Department of Labor.

Maine

Maine was an early mover, and its rules combine a one-time training duty with an annual notice duty that employers often miss.

Training within one year of hire

Under 26 M.R.S. § 807(3), workplaces with 15 or more employees must conduct an education and training program for all new employees within one year of the commencement of employment. Supervisory and managerial employees receive additional training within one year of commencement, covering their specific responsibilities and the methods for taking immediate corrective action on complaints.

Maine does not mandate recurring training for existing employees on a fixed cycle. It does, however, require something separate under § 807(2): every employer must provide all employees with individual written notice annually, covering the illegality and definition of sexual harassment, examples, the internal complaint process, recourse through the Maine Human Rights Commission, and protection against retaliation.

Three-year record retention

Section 807(4) is unusually direct. Employers must use the state's compliance checklist to develop a training program, must keep a record of the training including a record of which employees received it, and training records must be maintained for at least three years and made available for Department of Labor inspection on request.

Penalties are set out in the statute: violations of the notification, education, or training requirements draw $1,000 for a first violation, $2,500 for a second, and $5,000 for a third or subsequent one.

State Mandates at a Glance

Each row below traces to that state's own agency guidance or statute. Blank figures are blank because the state does not publish one, not because they were omitted for space.

Every Other State

Roughly a dozen other states and several cities have adopted mandates, recommendations, or sector-specific rules, and the list moves nearly every legislative session. Publishing a fifty-state table would mean publishing numbers this guide has not verified.

If your state is not covered above, go to its civil rights commission, human rights department, or labor department rather than to a training vendor's comparison chart. The agency page is the only source that updates when the law does.

What Belongs on the Record

Fields that satisfy the widest set of states

Build one certificate format that carries every field any covered state asks for, and you stop maintaining separate templates. That means employee full legal name, employer name, exact course title, completion date, duration in hours, the training provider or instructor name, and a signature or acknowledgment line.

Add a unique certificate number if you are tracking hundreds of these. It makes the audit conversation faster and makes duplicates obvious.

Duration and version details

Duration matters specifically in California and Connecticut, where an hour count is part of the legal requirement, and a certificate that omits it cannot prove compliance on its own. Recording "2 hours" costs nothing and answers the question before it is asked.

Naming the course version and jurisdiction — "Connecticut, Time's Up Act, 2026 edition" — does the same job for content requirements. If you want a walkthrough of how these documents are normally structured, the guide to what goes on a training certificate covers the layout in more detail.

What This Site Produces, and What It Does Not

An internal record, not an accredited credential

This site produces the internal training record — the completion certificate an employer issues to document that a named person completed a named course on a named date. It is not an accredited credential, a state-issued document, or a certification, and generating it does not validate the content of your training program.

That distinction is the whole point in this subject area. The employer's duty is to deliver compliant training and retain proof of it; whether a certificate carries any external authority is a separate question, and the difference between a certificate of completion, participation, and certification is worth being precise about before you word the document.

Where states issue their own certificates

Several states run free training and hand out their own completion certificate at the end: California's CRD, New York City's Commission, Connecticut's CHRO, and Illinois's IDHR all do. Those documents come from the agency, not from a generator.

Notably, none of those agencies certify third-party trainers. CRD states it does not approve training providers and cannot recommend them; New York State says it does not currently certify or license providers; New York City's Commission says it will not certify third-party trainings. If a vendor claims state certification, that claim is worth checking.

Managing Multi-State Compliance

Different clocks, running at once

An employer with staff in California, New York, and Connecticut is running a two-year cycle, an annual cycle, and a ten-year supplemental cycle simultaneously, with different new-hire windows in each. Tracking that on a shared spreadsheet is how gaps appear.

The practical fix is to hold the strictest applicable standard as the default — annual training, two hours, records kept indefinitely — and treat the individual state minimums as the floor you are already clearing. It costs more training time and removes an entire category of error.

City ordinances on top of state law

New York City is the clearest example of a city adding to a state mandate, but it is not the only one, and city rules can differ in coverage thresholds and retention periods from the state rules they sit beside. An employer meeting the state requirement is not automatically meeting the city one.

Check the city as well as the state for every location where you have staff. Where the two conflict, satisfying the stricter of the two is normally the defensible path, though that is a question to put to counsel rather than to a checklist.

Frequently Asked Questions

Q: Does any state require a specific certificate template? A: None of the states covered here prescribe a layout. California enumerates certificates of completion among the records an employer must keep, and New York City accepts a certificate or a signed acknowledgment, but neither dictates a design.

Q: If an employee was trained by a previous employer, do they need retraining? A: It depends on the state. California allows an employee trained in compliance with its law within the prior two years to skip retraining, provided they acknowledge the new employer's anti-harassment policy within six months and are put on a tracking schedule based on their last training. New York State and New York City both allow an employer to accept training completed elsewhere in the same year, with the employer still responsible for proving it.

Q: Do employees have to be paid for training time? A: New York State's guidance says yes, pointing to the federal regulations that generally count employer-provided training time as work hours. New York City adds that if an employer requires training outside regular hours, the time must be paid. California's guidance states that the employer, not the employee, bears the responsibility and cost of providing the training.

Q: Are unpaid interns and independent contractors covered? A: This varies sharply. New York City requires training for interns and independent contractors who exceed 80 hours and 90 days. California does not require training for independent contractors, volunteers, or unpaid interns, but counts them when determining whether the employer hits the five-employee threshold.

This is general information, not legal or employment advice

Everything above is general information, not legal or employment advice, and reading it creates no attorney-client relationship. State harassment training mandates differ from one another and change frequently: coverage thresholds move, deadlines shift, and new states adopt mandates most legislative sessions.

City and county ordinances can add requirements on top of state law, as New York City does, so one employer can owe two overlapping obligations for the same employee. Before acting on any figure in this guide, confirm it against the current guidance from the relevant state agency, or ask an employment attorney licensed in that state. Where a figure above is described as not specified, that is a genuine gap in the published guidance and not an invitation to assume there is no obligation.

Where to Start

The fastest way out of confusion here is to list the states and cities where you actually have employees, pull each agency's own page, and write down four things per jurisdiction: who must be trained, how often, how many hours, and how long the record has to live. Four columns, one row per location.

Then build one certificate format that satisfies the strictest row, and issue it every time training is completed rather than reconstructing the file later. That habit — capture at the moment of completion, keep longer than the minimum — is what separates employers who can prove compliance from employers who merely achieved it.