All news
Regulation September 8, 2026 5 min

Sixteen hours by 24 May 2027: the training every employer must complete

Italy's State-Regions Agreement of 17 April 2025 introduces mandatory training for all employers, not only those who take on the prevention-head role. It is the deadline missing from almost every training tracker

TL;DR

Sixteen hours for every employer, two modules, by 24 May 2027. Six-hour refresher every five years. The supervisor course goes from eight to twelve hours and must be taken in person.

Why this is a new row, not an update

Until now the employer appeared in training under two conditions: if they personally took on the duties of the prevention service — the Art. 34 course, which concerns a minority of undertakings — or as a worker, where they effectively were one. An employer who had appointed an external prevention head had no path of their own. The Agreement of 17 April 2025, published in Official Gazette no. 119 of 24 May 2025, introduces one for all: sixteen hours, two modules, one legal and one on organising and managing safety.

A date, not a periodicity

This is the distinction that breaks the maths. Every other row in a tracker starts from the certificate date and counts months: five years from job-specific training, two from the supervisor course. Not this one: it is a single deadline, 24 May 2027, the same for everyone and independent of when you start. Setting the expiry by counting back from the last certificate produces a date that means nothing. After the first course, however, the refresher becomes a periodicity again: six hours every five years.

  • Sixteen hours, deliverable in person, by videoconference or e-learning.
  • Six-hour refresher on a five-year cycle.
  • The supervisor course rises from eight to twelve hours and must be in person, with a two-year refresher.
  • The 24 May 2027 deadline runs from publication in the Official Gazette, not from taking office.

Where the mistake hides

In many systems the role «employer» is wired to the Art. 34 course. It was an understandable shortcut — those were the only employers with a training duty — and it has become a false negative: the employer who is not the prevention head shows as compliant because nothing is asked of them. They appear in no gap, in no expiry, and the dashboard reads green exactly where the most urgent item sits.

Worth checking across every client now rather than in 2027: sixteen hours for one person can be arranged in a week, sixteen hours for twenty employers all in March 2027 cannot. It is the kind of deadline that produces no symptom until it is too late.

Looking for a workspace for your DPO work?

DPO Workspace is built by a certified DPO. 30-day free trial.

Start free

Related articles

Regulation
nullathe decision on a worker taken by the algorithm alone, from 23 October

A dismissal decided by the algorithm is void: from 23 October in Italy

Published in Official Gazette no. 234 of 8 October 2026 and in force since 23 October, decree no. 179/2026 provides that final decisions on the employment relationship cannot be based solely on automated processing, that the worker may request an understandable explanation, and that decisions taken in breach are void. In parallel, AI systems affecting work organisation enter the risk assessment under Article 28 of decree 81/2008. For a DPO this is the rare case where the consequence is not economic but civil, and it changes how the check is framed.

Oct 08, 2026New 8 min
Regulation
3signals that make notification due

Poland's UODO: not every breach must be notified. Public-register data on one side, PESEL, health and financial data on the other

If an invoicing system leaks only a sole trader's name, business name, tax number and registered address, already public in the business register, risk is normally unlikely. If it also leaks the national ID number, purchase details revealing health, or financial data, notification is due. Either way, the decision goes into the internal register.

Oct 05, 2026New 5 min
Regulation
120days to charge you, not to fine you

The 120 days are not the deadline to fine you: they are the deadline to charge you

Anyone who built an appeal on the authority's delay should re-read the calendar. The Court clarifies three things: the complaint procedure and the sanctioning procedure are autonomous, so overrunning the nine-to-twelve months on the complaint does not extinguish the power to fine; the 120 days are for notifying the charge, not for imposing the fine; and they run from the «definitive finding», which is not the first notice but the moment the authority can assess every element — including the hearing of your side. After the charge, only the five-year limitation period remains.

Sep 20, 2026 7 min