Controlling what is and what is not recorded suggests some sort of control over your data collection devices. These devices may be forms or databases.
The records themselves need only be controlled as retrievable files or archives.
The training records themselves will include evaluations of competence (the ability to do the job well). You should decide who has the authority to see and change these records