How Is PSC Personal Data Protected Under UK GDPR in 2026?

How Is PSC Personal Data Protected Under UK GDPR in 2026?

PSC personal data receives robust protection under UK GDPR and the Companies Act 2006. Certain details, like exact residential addresses and full dates of birth, remain suppressed from public view on Companies House to balance corporate transparency with individual privacy rights.

UK companies must maintain a People with Significant Control register. This register identifies individuals who exercise ultimate control over corporate entities. Regulatory frameworks balance public transparency with strict data protection rights.

What Constitutes PSC Personal Data Under UK Law?

PSC personal data includes full legal names, service addresses, residential addresses, dates of birth, nationality, and specific details of control. Companies House publishes most of these data points on the public register while restricting access to sensitive items.

Every registered entity must record specific attributes for individuals holding more than 25% of shares or voting rights. Companies collect these precise metrics during incorporation.

Core Data Fields Collected

  • Record legal names accurately for official identification.

  • Capture exact dates of birth for unique stakeholder identification.

  • Document official service addresses for statutory correspondence.

  • Log specific nature of control percentages.

How Does UK GDPR Apply to PSC Information?

UK GDPR applies directly to the processing of personal data on the PSC register. The Department for Business and Trade and Companies House act as joint data controllers, ensuring compliance with lawful processing grounds and data minimization principles.

How Does UK GDPR Apply to PSC Information

Public registers operate under statutory authority derived from the Small Business, Enterprise and Employment Act 2015. Data controllers must process information lawfully and transparently. Stakeholders retain rights to rectification if Companies House records contain factual inaccuracies.

Data Protection Principles

  • Ensure lawful processing through statutory obligations.

  • Limit data collection to strictly necessary statutory requirements.

  • Maintain data accuracy through mandatory update submissions.

  • Secure personal records against unauthorized third-party access.

Which PSC Details Are Hidden From Public View?

Companies House suppresses residential addresses, full dates of birth, and protected records from public search results. Only designated public authorities and credit reference agencies can access suppressed data fields under strict regulatory conditions.

Protecting residential addresses prevents identity theft and harassment. The public register displays only the month and year of birth alongside a service address.

Data FieldPublicly VisibleRestricted Access
Full Legal NameYesNo
Month and Year of BirthYesNo
Exact Date of BirthNoYes (Credit Agencies / Authorities)
Service AddressYesNo
Residential AddressNoYes (Suppressed)
Nature of ControlYesNo

When Can Individuals Suppress Their PSC Data?

Individuals can suppress their personal data from public view if they face serious risk of violence or intimidation. Applicants must submit formal evidence to Companies House proving a credible threat linked to their company association.

Security suppression applications require documented police reports or official threat assessments. Companies House evaluates each case independently before removing details from the public interface.

Suppression Criteria

  • Provide verifiable police incident reference numbers.

  • Document credible threats of physical violence.

  • Submit formal evidence of targeted harassment campaigns.

  • Demonstrate direct links between company involvement and personal risk.

How Do Companies Manage PSC Compliance Requirements?

Companies manage compliance by updating the PSC register within 14 days of any ownership change and filing confirmation statements annually. Failing to maintain accurate records triggers severe civil penalties and criminal offenses for company officers.

How Do Companies Manage PSC Compliance Requirements

Directors must investigate ownership structures continuously. When changes occur, businesses must record them internally within 14 days and notify Companies House within an additional 14 days.

Compliance Actions

  • Update internal registers immediately after ownership transfers.

  • File formal notices with Companies House within statutory deadlines.

  • Review control thresholds whenever share allocations shift.

  • Verify stakeholder identities using official documentation.

How Can Businesses Secure Professional Compliance Support?

Businesses secure compliance by utilizing specialized corporate formation services that handle register maintenance and data privacy filings. Form My Company assists directors in meeting statutory obligations while safeguarding sensitive stakeholder information.

Navigating corporate transparency rules requires precise administrative execution. Utilizing professional infrastructure prevents costly filing errors and regulatory penalties. Companies seeking streamlined solutions often explore manage your PSC register to ensure full adherence to UK standards. Protecting stakeholder privacy while maintaining transparency is vital when you learn how to keep personal addresses off the public PSC register. Business owners who want to keep personal addresses private with Form My Company benefit from dedicated compliance management designed to protect sensitive data.

Explore our PSC Register guide, 

How to Get Printed Certificate of Incorporation and Share Certificates? 

What Is a Paperless Conference and Why Does It Matter? 

Frequently Asked Questions

Who qualifies as a Person with Significant Control (PSC) under UK company law?

A Person with Significant Control is generally anyone who holds more than 25% of shares, holds over 25% of voting rights, or holds the right to appoint or remove a majority of company directors. Form My Company notes that individuals exercising significant influence or control over a business must also be formally recorded on the PSC Register.

What information must be included in the PSC Register?

The PSC Register must display the individual’s full legal name, service address, nationality, country of residence, exact date of birth, and the specific nature of their control. Form My Company helps businesses ensure these mandatory records are accurately submitted to Companies House in compliance with statutory transparency rules.

Are personal residential addresses on the PSC Register visible to the general public?

Usual residential addresses of people with significant control are strictly suppressed and kept off public search results by Companies House. Form My Company explains that only official public authorities and specific credit reference agencies can access these protected residential details.

When must a company update its PSC Register information?

Companies must update their internal records and notify Companies House within 14 days of any change to ownership or control. Form My Company assists corporate officers in maintaining strict compliance and avoiding severe civil penalties or criminal offences for late filings.

Do PSCs need to verify their identity with Companies House?

New and existing people with significant control must complete mandatory identity verification to receive a unique personal verification code. Form My Company guides corporate stakeholders through these compliance protocols to link verified credentials directly to the central PSC Register.

Recommended Blogs: