May I manage the status of mandatory legal training completion by linking it to the HR system?

Hello, the HR team is running in-house training.
Currently, I am managing completion records for each mandatory legal training course separately in Excel, but omissions occur, and I constantly have to manually update the records for departing employees and new hires.
Therefore, we are considering linking employee training completion status and dates to the HR system to manage them all at once.
It is planned to include only employee ID, name, department, training name, completion status, and completion date.
I am wondering if it is permissible to manage this information without separate consent, considering it to be necessary for HR operations.
I am also wondering whether team leaders or department managers should be allowed to view whether their department's employees have not completed the course, or if this should be restricted to only the training manager.
If I automatically integrate with external training providers using something like an API, are there any additional points I need to check?
I would like to know how you set the permissions and retention periods for training history in your HR systems.