An independent review commissioned after a serious sexual assault at a Travelodge hotel in Maidenhead in 2022 has recommended that the chain embed its security training more deeply, with all 12,000 frontline staff now trained but operational compliance still lagging.

The review, led by Paul Greaney KC, examined how a member of staff at the Maidenhead hotel handed the perpetrator a copy of the victim's room key. Greaney attributed the failures to the organisation rather than any individual employee, stating the failings were "extremely serious and rest principally with the organisation, rather than with any individual."

Travelodge's chief executive resigned in August, and the interim leadership has since rolled out a new key security policy and an e-learning programme. By March 2026, all 12,000 customer-facing employees had completed the training, according to the report.

Where does the training fall short?

Despite the universal completion rate, Greaney flagged a "major issue" with how the training is embedded on the ground. E-learning carries known disadvantages around retention, and managers were not consistently validating staff knowledge after modules were completed.

A mystery shopping exercise of five hotels turned up concrete evidence of non-compliance:

• Room numbers were spoken aloud in 17% of transactions.
• Additional guests were not entered into the system in many cases.
• Audits of staff security knowledge were identified as needing improvement.

How did siloed working compound the risk?

At the time of the incident, and during the period it was reported in 2023, the business "operated in silos with very little collaborative working," Greaney found. The victim's complaint landed with the customer services team but never reached other departments, meaning security lessons went unlearned across the organisation.

Travelodge's response to media coverage in 2026 marked a "marked improvement" on its historical approach, Greaney noted. But he added that "a number of problems remain," particularly around lone-worker safety and the embedding of revised policies.

What new obligations does the review place on the employer?

Greaney's recommendations set out a clear agenda for Travelodge's HR, operations and risk functions:

• Establish a dedicated policy on violence against women and girls (VAWG) and embed it through training.
• Address lone-worker safety; staff reported feeling "exposed when dealing with aggressive, intoxicated or unpredictable guests" without immediate support.
• Prioritise aggression and violence response within personal security training, particularly for female night-shift workers.
• Issue body-worn video cameras to reception staff.
• Strengthen incident-reporting audits and cross-team learning.

What has Travelodge's leadership said?

Interim chief executive Ray Reidy apologised on behalf of the company. "I apologise unreservedly on behalf of Travelodge to all guests where we have failed, and particularly to Lily," he said, using the pseudonym given to the victim of the 2022 attack.

He added: "We will continue to improve so customers get the right level of support and empathy when they need it most. That is why we are dedicating significant resources as well as implementing governance changes needed to drive the ongoing improvements."

The company is working with UKHospitality to develop new guidance on guest security that, Reidy said, should "elevate standards both within Travelodge and across the wider sector."

What should HR leaders in hospitality take from this?

The review is an early test of how a major UK employer handles a duty-of-care crisis that crosses HR, security and customer service. Greaney's central finding — that completion of training is not the same as embedded competence — applies to any large, multi-site operation rolling out compliance or safeguarding programmes.

The next milestone to watch is whether Travelodge's VAWG policy, lone-worker safeguards and body-camera rollout land before the company's wider HR audit cycle. With UKHospitality now co-producing guidance for the sector, the report's framework may shape how other chains document their own training-validation and cross-team escalation protocols.