Protecting personal information on the Companies House register

Implementation status: Implemented in phases, commencing 27 January 2025

Overview

The Act introduces measures that significantly expand the circumstances in which individuals can have personal information contained in historical records at Companies House suppressed from public disclosure. Personal information includes the following:

  • usual residential address (URA) – in most instances where the address appears on the register;
  • signature;
  • business occupation; and
  • day of date of birth for documents filed before 10 October 2015.

The reforms will need secondary legislation before they are implemented, with the most significant changes expected to come into force on 21 July 2025.

The Government’s aim is to strike a balance between transparency over who is running companies and ensuring that the register does not become a tool for abuse.

Protecting usual residential address (URA) information

Under the previous regime, an individual (such as a director, secretary or PSC) could only apply to suppress their URA from public view if it was shown on the register as their service address. However, the first tranche of the Act’s reforms loosened this restriction, so that from 27 January 2025, individuals could also apply to protect their URA where it had historically been used as a registered office address. 

The circumstances in which an application to protect a URA can be made will increase again once the draft Protection and Disclosure of Personal Information (Amendment) Regulations 2025 (the 2025 Regulations) come into force – expected from 21 July 2025. Under the 2025 Regulations, any individual will be able to apply to suppress their URA from historical documents in most instances where it appears on the public register. 

There will be some exceptions to this, however. An individual will not be able to protect an address that a company is required to keep on the register, such as a live registered office address, unless that address also appears on the register as their own current address (e.g. a director’s service address). In that case, the individual will have to provide a replacement service address in the application to be included on the register. It will also not be possible to protect an address where it forms part of a company name.

Where an individual’s URA is also the registered office address of a dissolved company, the individual will need to wait six months following the company’s dissolution before applying to suppress the URA.

Protecting additional information: signature, occupation and date of birth

Once in force, the 2025 Regulations will allow any individual to apply to suppress the following additional information from historical records at Companies House:

  • signature
  • business occupation (for directors); and
  • day of date of birth for documents filed before 10 October 2015 (after this date only month and year of birth are shown on the public register).

Individuals will not be required to justify why their information should be suppressed, nor will they need to meet any additional conditions. 

Protection of personal information because of risk of harm

Individuals who are at personal risk of physical harm or violence as a result of their personal information being on a Companies House public register (for example, domestic abuse survivors) will be able to apply to have additional information protected from public view. The information that can be protected in these circumstances includes:

  • name (or previous name);
  • sensitive addresses where evidence is provided that public disclosure puts its residents at risk (for example, a women’s domestic abuse refuge); and
  • in the most serious cases, all other details may be protected, for example, service address and partial date of birth.

Again, these measures will need secondary legislation before they are implemented and draft regulations have yet to be published.

Access to suppressed information 

Companies House will continue to retain all protected information to share with law enforcement agencies and other public authorities when required to. The registrar will also have greater powers to share data with these groups and will, therefore, be able to share any suppressed or protected information if deemed necessary.

Regulations will also be introduced which provide exceptions to the restrictions on the registrar disclosing suppressed information. These exceptions are expected to allow:

  • persons with current or prospective legal proceedings to apply to Companies House for access to a suppressed address used as a registered office address, or a signature, if they can provide evidence of the legal proceedings; and
  • other third parties to apply to the court for access to certain suppressed information. They will need to satisfy the court of their legitimate need to access this information.

Get in touch

To discuss any issues related to the Economic Crime and Corporate Transparency Act 2023 and its implications for companies, contact a member of our expert team here.