Skip to content

Compliance

Training records and Canadian compliance

What regulators expect a training record to contain, how long to keep it, and how to prove it later. These pages explain general obligations. They are not legal advice.

  • What does Canadian data residency mean for a training system?

    Residency says where data physically sits. It does not answer who can compel access. Here is the difference, and the three things to ask a vendor.

    Residency:
    A statement about where data physically sits at rest.
    Sovereignty:
    A question about which jurisdiction can compel access to it.
  • What does Quebec's Law 25 require for employee training records?

    The duties Quebec's privacy act places on training records: who is responsible, how long to keep them, and what hosting outside Quebec requires.

    The statute:
    The Act respecting the protection of personal information in the private sector, CQLR c. P-39.1, as rewritten by S.Q. 2021, chapter 25.
    Who oversees it:
    The Commission d'accès à l'information (CAI).
  • How do you migrate an LMS without losing completion history?

    A migration that resets completion dates destroys your audit trail. What to preserve, what to ask the outgoing vendor, and how to verify it afterwards.

    The field that matters:
    Original completion date, not the import date.
    Why it matters:
    Recertification cycles and audit evidence are both calculated from it.
  • What makes a training record audit ready?

    An auditable training record identifies the person, the content, the date and the evidence. Here are the fields to keep and the ones people forget.

    Minimum fields:
    Who, what, when, how it was assessed, and who attests to it.
    The field most often missing:
    The original completion date, preserved across system changes.