Ensuring Compliance in 2026: A Practical Guide for Startups

Launching a company in the UK requires more than incorporation—it demands continuous compliance and structured governance. Under the Companies Act 2006 and the enhanced transparency regime introduced by the Economic Crime and Corporate Transparency Act, regulators now expect companies to maintain accurate, real-time records and verifiable data.

For startups and emerging businesses, this creates both a challenge and an opportunity: those who get compliance right early build stronger, more credible businesses.

Keeping Pace with UK Legislation

UK company law is not static. Directors must comply with ongoing obligations, including:

• Filing confirmation statements and accounts
• Maintaining accurate ownership and control records
• Ensuring all filings align with the public register at Companies House

A professional company secretary ensures these requirements are met accurately and on time, reducing the risk of errors, penalties, or regulatory queries.

From Record-Keeping to Real-Time Governance

In 2026, compliance has shifted from periodic reporting to continuous accuracy.

Key responsibilities now include:

• Maintaining the register of members (shareholders) internally
• Ensuring all director and PSC data filed is correct and verified
• Updating changes promptly (typically within 14 days)
• Keeping internal records aligned with Companies House

A company secretary acts as the control point, ensuring your company’s legal data remains consistent across all systems.

Mitigating Risk Through Proactive Compliance

Non-compliance is no longer a minor administrative issue. It can lead to:

• Filing rejections or “Query Notices”
• Financial penalties or enforcement action
• Reputational damage with banks and investors

A company secretary reduces these risks by:

• Monitoring deadlines and obligations
• Reviewing filings before submission
• Identifying discrepancies early
• Implementing corrective actions proactively

This transforms compliance from reactive to preventative risk management.

Supporting Growth and Investor Readiness

As your business grows, governance becomes a key factor in attracting investment and partnerships. Investors and financial institutions expect:

• Clean and consistent company records
• Documented board decisions and resolutions
• Accurate Companies House filings

A professional secretary ensures your company is “due diligence ready” at all times—removing friction during funding rounds or transactions.

Strategic Value Beyond Compliance

Beyond filings, a company secretary contributes to:

• Governance structure and best practices
• Risk oversight and internal controls
• Board efficiency and documentation standards
• Awareness of upcoming regulatory changes

This guidance is particularly valuable for startups without in-house legal or compliance teams.

Conclusion
In today’s UK regulatory environment, compliance is not a one-time task—it is an ongoing operational discipline.

By working with a professional provider such as Coddan CPM, startups gain a structured, expert-led approach to governance—ensuring accuracy, reducing risk, and building long-term credibility.

Strong compliance doesn’t slow your business down—it enables it to grow with confidence.

The “4/5 Rule” Explained: Identity Verification Under ECCTA

The Economic Crime and Corporate Transparency Act has fundamentally reshaped UK corporate compliance, particularly through mandatory identity verification (IDV) for directors and Persons with Significant Control (PSCs).

However, it’s important to clarify a critical point:

• The so-called “4/5 rule” is not an official legal requirement under UK company law or ECCTA.

Instead, the UK framework operates on a “verification-first” model, where individuals must complete identity verification through approved methods before they can act as directors or PSCs.

What the Law Actually Requires in 2026

Under ECCTA, all individuals involved in UK companies must:

• Verify their identity before appointment or registration
• Obtain a unique 11-character Personal Code
• Ensure their identity is linked to all Companies House filings

This applies to:

• Directors
• People with Significant Control (PSCs)
• Individuals filing on behalf of companies

All verified data is maintained centrally by Companies House.

How Identity Verification Works

Identity verification can be completed via:

1. GOV.UK One Login (Automated Route)
   • Biometric passport or ID
   • Facial recognition and liveness checks
   • Direct digital verification
2. ACSP Verification (Professional Route)
   Through an Authorised Corporate Service Provider (ACSP), such as Coddan CPM. This involves:
   • Manual review of identity documents
   • Anti-Money Laundering (AML) checks
   • Submission of verified identity to Companies House
   This route is especially useful for:
   
   • Overseas directors
   • Individuals with mismatched records (“data drift”)
   • Failed or rejected GOV.UK verifications

Why the “4/5 Rule” Concept Appears

The “4/5 rule” is often used informally to describe multi-layered identity assurance, similar to AML/KYC practices (e.g., combining ID, address, database checks).

While these checks are common in compliance workflows, they are:

• Not mandated as a fixed “4 out of 5” test
• Not defined in UK legislation

Instead, the law requires sufficient, reliable verification—not a checklist threshold.

Why IDV Matters in 2026

Identity verification is now the gateway to corporate activity. Without it:

• Directors cannot be legally appointed
• Filings (AP01, CS01, etc.) may be rejected
• Companies may receive compliance flags or “Notice of Inconsistency”
• Banks may delay or refuse account opening

Compliance Responsibilities for Companies

To remain compliant, companies must:

• Ensure all directors and PSCs are verified
• Maintain accurate and aligned records
• Confirm IDV status in filings (e.g., confirmation statements)
• Avoid mismatches between internal records and Companies House

The Practical Reality
In 2026, identity verification is not just a formality—it is your company’s digital identity anchor.

Professional providers like Coddan CPM act as a compliance bridge, ensuring:

• Successful identity verification
• Issuance of Personal Codes
• Accurate filings without rejection risk

The Bottom Line
There is no formal “4/5 rule” in UK company law.

What exists instead is a strict, verification-first system where identity must be proven and digitally anchored before any corporate action can proceed.

In 2026, if your identity isn’t verified—you effectively don’t exist on the register.

The Importance of a UK Company Secretary in 2026

In today’s regulatory environment, the role of a company secretary has evolved from administrative support to a core governance function. Under the Companies Act 2006 and the enhanced compliance regime introduced by the Economic Crime and Corporate Transparency Act, companies are expected to maintain accurate, real-time records and meet strict filing obligations. A company secretary sits at the centre of this framework.

Guardian of Compliance

A company secretary ensures that your business meets all statutory obligations, particularly those enforced by Companies House. This includes:

• Maintaining key records such as the register of members (shareholders)
• Ensuring timely filing of confirmation statements and accounts
• Monitoring identity verification requirements for directors and PSCs
• Aligning internal records with the public register

Failure to meet these obligations can result in fines, regulatory queries, or even director liability. A professional secretary mitigates this risk through structured oversight.

Enabling Effective Board Governance

Board decisions must be properly documented and legally sound. A company secretary:

• Prepares board agendas and supporting documents
• Records accurate minutes and resolutions
• Advises on directors’ duties and legal implications

This ensures that decisions are not only efficient but also defensible in audits, disputes, or due diligence processes.

Strengthening Communication and Transparency

Clear communication between directors and shareholders is essential for trust and stability. A company secretary facilitates this by:

• Managing shareholder communications and resolutions
• Ensuring proper notice and documentation of meetings
• Maintaining transparency in governance processes

This is particularly important for private companies where ownership and management often overlap.

Strategic Governance Advisor

Beyond compliance, a company secretary provides ongoing guidance on:

• Corporate governance best practices
• Risk management and internal controls
• Regulatory changes and their impact

This advisory role helps businesses stay ahead of legal developments and maintain operational resilience.

A Competitive Advantage for Modern Businesses

In 2026, governance quality directly impacts:

• Bank account approvals and KYC processes
• Investor confidence and due diligence outcomes
• Overall business credibility

Companies with structured secretarial support are viewed as lower risk and better managed.

Conclusion
A company secretary is no longer optional in practice—it is a strategic asset that underpins compliance, governance, and growth.

By working with a professional provider such as Coddan CPM, businesses gain expert oversight, reduced risk, and a governance framework that supports long-term success.

In a high-transparency environment, strong governance is your competitive edge—and the company secretary is the professional who makes it happen.

Company Secretary Responsibilities in 2026 – Compliance, Control, and Governance

In 2026, the role of the Company Secretary has shifted from administrative support to a core governance and risk function. With stricter oversight from Companies House and evolving obligations under the Companies Act 2006, accuracy, timing, and control are critical.

Coddan CPM provides structured company secretarial support that ensures your company remains compliant, organised, and audit-ready.

Statutory Compliance & Filings
A Company Secretary ensures all mandatory filings are accurate and submitted on time. This includes Confirmation Statements (CS01), which verify company structure and ownership, and annual accounts, prepared in coordination with accountants. They also manage updates to directors and Persons with Significant Control (PSC), ensuring all changes are reflected promptly and correctly.

Corporate Governance & Board Support
Beyond filings, the Company Secretary supports governance by preparing board agendas, coordinating meetings, and producing accurate minutes. They advise directors on statutory duties, conflicts of interest, and governance best practice—ensuring decisions are properly documented and defensible.

Risk Management & Record Integrity
A key responsibility is identifying compliance risks before they escalate. This includes reviewing statutory registers, aligning internal records with filings, and preventing discrepancies that could lead to rejected submissions or regulatory queries.

Stakeholder Communication
The Company Secretary acts as a central point of coordination between the board, shareholders, and regulators—ensuring clear, accurate communication and transparency.

This is not a passive role—it is a control function embedded in your business.

Maintain accuracy. Strengthen governance. Operate with confidence in 2026.

Company Secretary Responsibilities in 2026: A Compliance-Critical Role

In 2026, the company secretary is no longer a back-office administrator—it is a central governance and compliance function. Under the Companies Act 2006 and the enhanced transparency regime introduced by the Economic Crime and Corporate Transparency Act, companies must maintain accurate, real-time records and meet strict filing standards.

A company secretary ensures that your business operates within this framework while remaining efficient and growth-focused.

Statutory Compliance & Filings
A primary responsibility is ensuring all obligations with Companies House are met accurately and on time.

Confirmation Statements (CS01)
The company secretary ensures the annual confirmation statement reflects accurate data on directors, shareholders, and control. Errors or delays can trigger penalties or regulatory queries.

Annual Accounts
They coordinate the preparation and submission of financial statements, working with accountants to ensure compliance with applicable standards and deadlines.

Director & PSC Changes
Any changes to directors or Persons with Significant Control must be filed promptly (typically within 14 days). The secretary ensures all updates are correctly recorded and aligned with identity verification requirements.

Corporate Governance Oversight

A company secretary supports the board by maintaining structured governance processes:

• Preparing board agendas and documentation
• Recording legally robust minutes and resolutions
• Advising directors on their statutory duties
• Ensuring decisions are properly authorised and documented

This creates a clear audit trail and protects the company during due diligence or disputes.

Risk Management and Compliance Control
In 2026, compliance failures can lead to:

• Filing rejections or “Query Notices”
• Financial penalties
• Reputational damage

A company secretary mitigates these risks by:

• Monitoring deadlines and regulatory changes
• Reviewing filings before submission
• Identifying inconsistencies (“data drift”) early
• Implementing corrective actions proactively

Stakeholder Communication & Liaison
The company secretary acts as a key communication bridge between:

• Directors and shareholders
• The company and regulators
• The business and external stakeholders

They ensure transparency, proper notification of changes, and accurate dissemination of corporate information.

Strategic Support for Growth
Beyond compliance, the role extends into:

• Governance structuring for scaling businesses
• Preparing companies for investment or sale
• Supporting share restructures and board changes
• Ensuring “due diligence readiness” at all times

Conclusion
In 2026, the company secretary is a compliance controller, governance advisor, and operational safeguard.

By working with a professional provider such as Coddan CPM, businesses ensure their filings, records, and governance framework are accurate, aligned, and fully compliant.

Strong governance is no longer optional—it is the foundation of a resilient and investable company.

Corporate Governance Advisor – Strengthening Board Effectiveness and Control

In 2026, governance is not a formality—it is a measurable indicator of business quality. Investors, lenders, and regulators increasingly assess how well a company is governed, not just how it performs. For private companies limited by shares, adopting structured governance practices aligned with the UK Corporate Governance Code strengthens credibility and reduces operational risk.

Coddan CPM provides Corporate Governance Advisory support designed to enhance board effectiveness, improve decision-making, and ensure your governance framework is fit for purpose.

A Corporate Governance Advisor delivers independent, impartial guidance. We assess your existing governance structure—board composition, decision-making processes, and internal controls—and identify gaps that may expose the company to risk or inefficiency. This is followed by practical recommendations aligned with UK best practice.

We support board effectiveness by structuring agendas, improving information flow, and ensuring accurate Board Minutes are maintained. This creates a clear audit trail and supports defensible decision-making.

We also focus on risk management, identifying governance and compliance risks early and implementing controls to mitigate them. This includes aligning statutory records with filings at Companies House and ensuring internal processes support regulatory expectations.

Beyond compliance, we help embed a governance culture—supporting stakeholder communication, transparency, and accountability across the business.

Our approach is practical and transparent, with clearly defined scope and no unnecessary complexity.

Strengthen governance. Improve board performance. Build a company that stands up to scrutiny.

Corporate Governance Advisor in 2026: Driving Board Effectiveness and Trust

In today’s high-transparency environment, corporate governance is no longer a theoretical framework—it is a practical system that directly impacts risk, valuation, and operational stability. For private companies limited by shares, adopting structured governance aligned with the UK Corporate Governance Code is increasingly expected by investors, banks, and regulators.

A Corporate Governance Advisor provides the independent oversight and expertise needed to elevate board performance and ensure governance is both compliant and commercially effective.

Embedding Governance Best Practice

A Corporate Governance Advisor works with boards to design and implement governance structures that are clear, consistent, and defensible.

This includes:

• Reviewing board composition and decision-making processes
• Defining roles, responsibilities, and authority levels
• Strengthening internal policies and governance frameworks

The objective is not just compliance—but structured, high-quality decision-making.

Independent, Unbiased Board Support

One of the most valuable aspects of a governance advisor is independence.

In private companies—especially founder-led or family-owned businesses—decision-making can be influenced by internal dynamics. An external advisor provides:

• Objective assessments of governance practices
• Impartial recommendations aligned with best practice
• A neutral perspective during complex or sensitive decisions

This ensures the board acts in the best interests of the company as a whole.

Enhancing Board Performance

Effective boards require more than compliance—they require capability and clarity.

A governance advisor supports:

• Structured board meetings and clear agendas
• Improved quality of board discussions
• Training on directors’ duties and governance standards
• Development of governance policies and frameworks

This leads to more informed, accountable, and efficient decision-making.

Risk Management and Forward Planning

Modern governance is closely tied to risk oversight. A Corporate Governance Advisor helps boards:

• Identify governance and compliance risks early
• Implement controls to mitigate exposure
• Anticipate regulatory changes and adapt proactively

This reduces the likelihood of regulatory issues, disputes, or operational disruption.

Leveraging Technology for Governance

In 2026, governance is increasingly digital. Advisors guide boards in adopting tools that improve:

• Document management and accessibility
• Real-time collaboration across directors
• Secure storage of board records and resolutions

This enhances transparency and ensures records are always audit-ready.

Strengthening Stakeholder Confidence

Strong governance directly influences how a company is perceived externally. Investors, lenders, and partners assess:

• Quality of board oversight
• Transparency of decision-making
• Consistency of governance practices

A Corporate Governance Advisor helps ensure the company meets these expectations—building trust, credibility, and long-term value.

Integration with Compliance and Filings

Governance does not exist in isolation. It must align with regulatory obligations managed through Companies House and statutory frameworks such as the Companies Act 2006.

Professional providers like Coddan CPM integrate governance advisory with secretarial execution—ensuring:

• Board decisions are properly documented
• Filings reflect accurate governance actions
• Records remain consistent and compliant

Conclusion
In 2026, governance is a strategic asset, not a compliance burden.

A Corporate Governance Advisor enables boards to operate with clarity, independence, and structure—reducing risk while improving performance and credibility.

For companies aiming to scale, attract investment, or operate confidently in a regulated environment, strong governance is no longer optional—it is essential.

GDPR & Data Protection for UK Limited Companies – Compliance That Builds Trust

In a data-driven economy, handling personal data correctly is a legal requirement and a commercial necessity. For private companies limited by shares, compliance with the General Data Protection Regulation (GDPR) and UK data protection rules is essential to avoid regulatory action and maintain stakeholder confidence.

Coddan CPM supports businesses in embedding practical data protection controls that align with governance and compliance obligations.

GDPR is built on clear principles: lawful and transparent processing, purpose limitation, data minimisation, accuracy, storage limitation, and data security. In practice, this means your company must know what data it holds, why it holds it, and ensure it is accurate, secure, and not retained longer than necessary.

For private companies, this is closely linked to governance. A company secretary or governance advisor ensures that data protection policies are documented, reviewed, and implemented consistently. This includes maintaining internal records, aligning data handling processes with statutory obligations, and ensuring that disclosures and filings do not expose personal data unnecessarily.

They also coordinate responses to data subject requests and support breach management—ensuring any incident is assessed and, where required, reported to the Information Commissioner's Office within regulatory timeframes.

This is not just compliance—it is risk control and reputation management. Protect data. Meet regulatory standards. Build trust through structured governance.

Data Protection in 2026: A Governance Priority for UK Companies

In today’s digital economy, data protection is no longer just an IT concern—it is a core governance and compliance obligation. For private companies limited by shares, understanding and applying the General Data Protection Regulation (and its UK equivalent, UK GDPR) is essential to operating legally and maintaining stakeholder trust.

Even companies based outside the UK or EU must comply if they process personal data of UK/EU individuals.

The Core GDPR Principles
The GDPR framework is built on six key principles that define how personal data must be handled:

Lawfulness, Fairness, and Transparency
Data must be processed legally and with clear communication to individuals about how it is used.

Purpose Limitation
Data can only be collected for specific, legitimate purposes and not reused incompatibly.

Data Minimisation
Only necessary data should be collected—no excess or irrelevant information.

Accuracy
Companies must ensure personal data is correct and updated promptly when needed.

Storage Limitation
Data should not be retained longer than required; regular reviews are expected.

Integrity and Confidentiality
Appropriate technical and organisational safeguards must protect data from breaches or misuse.

Why GDPR Compliance Matters

Non-compliance can lead to:

• Significant financial penalties
• Regulatory investigations
• Reputational damage
• Loss of customer and investor trust

For growing businesses, GDPR compliance is also a commercial advantage, demonstrating professionalism and accountability.

The Role of Governance and the Company Secretary

While GDPR is often associated with IT or legal teams, it is fundamentally a governance issue.

A company secretary (or governance professional) plays a key role by:

• Embedding data protection into company policies
• Ensuring records and processes align with compliance standards
• Coordinating internal audits and risk reviews
• Supporting incident response procedures
• Maintaining oversight of regulatory obligations

They also help ensure alignment between internal practices and filings with regulators such as the Information Commissioner's Office.

Managing Data Subject Rights

Companies must be able to respond to requests from individuals, including:

• Access to their personal data
• Correction of inaccurate information
• Erasure (“right to be forgotten”)
• Restriction or objection to processing

Failure to respond appropriately can trigger regulatory action.

Preparing for Data Breaches

If a data breach occurs, companies must:

• Assess the risk immediately
• Report qualifying breaches to the Information Commissioner's Office within 72 hours
• Notify affected individuals where required

Having structured governance and clear procedures is critical to managing this risk.

A Practical Approach for SMEs

For startups and SMEs, the challenge is balancing compliance with limited resources. Key steps include:

• Maintaining a clear data inventory
• Implementing basic security controls
• Training staff on data handling
• Regularly reviewing data retention policies
• Seeking professional guidance where needed

Conclusion
In 2026, data protection is not optional—it is a legal, operational, and reputational necessity.

By integrating GDPR into your governance framework—and working with professional providers such as Coddan CPM—your business can ensure compliance, reduce risk, and build lasting trust with customers and stakeholders.

Strong data governance is no longer a compliance burden—it is a competitive advantage.

Company Secretary & Tax Compliance – Keeping Your Obligations on Track

In 2026, tax compliance is closely linked to governance. Errors in filings, missed deadlines, or inconsistent records can trigger penalties and scrutiny from HM Revenue & Customs and Companies House. A Company Secretary plays a key coordination role—ensuring that financial, statutory, and tax processes remain aligned.

Coddan CPM supports companies by integrating company secretarial control with tax compliance oversight, ensuring obligations are met accurately and on time.

Corporation Tax Compliance
The Company Secretary ensures that accurate records are maintained to support annual accounts and Corporation Tax returns (CT600). They track key deadlines—filing within 12 months of the accounting period and payment typically due 9 months and 1 day after period end—helping prevent penalties and interest. Coordination with accountants ensures submissions are consistent with statutory filings.

VAT Registration & Ongoing Returns
Where turnover meets or approaches the VAT threshold, the Company Secretary supports registration with HMRC and ensures VAT records are properly maintained. They coordinate the preparation and submission of VAT returns, ensuring input and output tax are correctly reported and deadlines are met.

Record Alignment & Risk Control
A critical function is ensuring that financial data, statutory registers, and filings are consistent. Misalignment between records can lead to queries, delays, or compliance risk.

This is not tax advice—it is structured oversight. Maintain accurate records. Meet tax deadlines. Keep your company compliant and controlled.

The Company Secretary & Tax Compliance in 2026

In the modern UK regulatory environment, tax compliance is tightly linked to corporate governance. While accountants typically prepare calculations and filings, the company secretary plays a critical coordination and oversight role—ensuring that financial, statutory, and tax records are aligned and compliant with UK law.

For private companies limited by shares, especially those with international ownership, this function is essential.

Corporation Tax: Governance Meets Financial Accuracy

Corporation tax obligations fall under the broader framework of the Companies Act 2006 and UK tax law administered by HM Revenue and Customs.

A company secretary supports compliance by ensuring:

Accurate Record-Keeping
All financial activity is properly documented and aligned with statutory records. This is crucial for preparing annual accounts and supporting tax filings.

Timely Filing (CT600)
The corporation tax return must be filed within 12 months of the accounting period end. The secretary tracks deadlines and ensures coordination with accountants.

Payment Monitoring
Corporation tax is typically due 9 months and 1 day after the accounting period ends. Missed deadlines lead to interest and penalties—something the secretary helps prevent through structured compliance tracking.

VAT Registration & Ongoing Compliance

VAT introduces an additional layer of regulatory responsibility.

Threshold Monitoring
The company secretary helps monitor turnover against the VAT threshold (currently £85,000), ensuring timely registration when required.

Registration Oversight
They coordinate the VAT registration process with HM Revenue and Customs, ensuring accurate submission of company data.

VAT Return Coordination
While accountants prepare VAT returns, the secretary ensures:

• Deadlines are met (usually quarterly)
• Records are complete and consistent
• Supporting documentation is maintained

The Real Risk: Misalignment Between Records

In 2026, compliance risk often arises not from calculation errors—but from data inconsistencies between:

• Financial records
• Statutory registers
• Companies House filings

This “data drift” can trigger:

• Regulatory queries
• Filing rejections
• Increased scrutiny from tax authorities and banks

A company secretary acts as the control layer, ensuring all records are aligned.

A Coordination Role, Not a Replacement for Accountants

It’s important to distinguish roles:

• Accountant → Prepares tax calculations and returns
• Company Secretary → Ensures governance, deadlines, and record alignment

Together, they create a complete compliance system.

Strategic Value for Businesses

Strong tax compliance supported by governance leads to:

• Reduced risk of penalties and investigations
• Faster bank onboarding and financial approvals
• Improved credibility with investors and stakeholders
• Readiness for audits or due diligence

Professional Oversight in Practice

Providers such as Coddan CPM integrate secretarial and compliance support to ensure:

• Deadlines are tracked and met
• Records are accurate and synchronised
• Filings align with both Companies House and HMRC expectations

Conclusion
In 2026, tax compliance is not just about filing returns—it is about maintaining a fully aligned compliance ecosystem.

A company secretary ensures that your financial data, statutory records, and regulatory filings work together seamlessly—reducing risk and supporting long-term business stability.

When governance and tax compliance are aligned, your company operates with confidence, credibility, and control.