Identity verification and other company law aspects of the Economic Crime and Corporate Transparency Act 2023 (ECCTA)

Companies House has announced that its mandatory identity verification and company register reforms under ECCTA will come into force on 18 November 2025. We provide an overview of these changes and ECCTA's other significant reforms.

 

Identity verification

Timing

 

From 18 November 2025, ECCTA will introduce mandatory identity verification requirements for all new individual company directors and people with significant control (PSCs). There will also be a 12-month transition period for existing individual directors and PSCs to verify their identity as part of the annual confirmation statement filing.

 

To help prepare for these requirements, since 8 April 2025, individuals have been able to voluntarily verify their identity either directly with Companies House or indirectly through an authorised corporate service provider (ACSP).

 

Direct identity verification at Companies House

 

There are three options for direct identity verification with Companies House:

• an app (the GOV.UK One Login ID Check app) – this involves digital facial verification and the submission of a photo of an approved photo ID (eg biometric passport/UK driving licence) and a photo of the individual's face. For people with a biometric passport/UK driving licence, this option is likely to be the easiest way to verify their identity.
• a website (the GOV.UK One Login web channel) – this involves the applicant answering a series of online security questions.
• a face-to-face option (the GOV.UK One Login face-to-face service) – this involves the applicant attending a post office for a face-to-face appointment booked via the GOV.UK website

All three options require applicants to provide certain personal details (eg name, date of birth, email and home address) and evidence to support their application which, depending on the option used, includes a passport, a UK/EU photocard driving licence, a UK residence permit or an EEA national identity photocard. Note, however, that the app and website options are only available for people with certain UK forms of ID or a biometric passport and the face-to-face option is only available to those who can provide a UK home address. Direct verification may not therefore be suitable for some non-UK directors and PSCs.

Indirect verification through an ACSP

People who are unable to use the Companies House options or who may require assistance with the process can verify their identity using an ACSP. ACSPs must be supervised by one of the relevant UK anti-money laundering supervisory bodies (eg lawyers, accountants, company formation agents) and registered as an ACSP with Companies House.

To verify with an ACSP, applicants will need to provide the same personal details as are required for direct verification through Companies House. Two forms of evidence may be required to support their application: photographic ID and a form of supporting documentation. Passports without a biometric chip and certain non-UK documents will be accepted as evidence.

Unique identifiers/personal codes

In general, identity verification is a one-off exercise. Once someone is verified, they will obtain a "verified status" account at Companies House and a unique identifier (ie a personal code) for all their roles (whether as a director, a PSC etc) that require verification. From 18 November 2025, they will be required to provide their personal code to Companies House on confirmation statements and company incorporation, director appointment and PSC filings, as confirmation that they have completed the identity verification process.

Failure to verify

Once identity verification becomes mandatory, directors and PSCs who fail to verify their identity will commit a criminal offence and/or incur a civil penalty. Companies that are directed by an unverified director will also commit an offence.

Other affected entities

 

Mandatory identity verification requirements for individual directors of overseas companies with a UK establishment and for individual members and PSCs of limited liability partnerships (LLPs) are also expected to come into force on 18 November 2025, but they won't be introduced for corporate directors, corporate members of LLPs, officers of corporate PSCs and for limited partnerships until later in 2026 or 2027.

 

Company registers

 

From 18 November 2025, ECCTA will remove the requirement for companies to keep a register of directors, register of directors' residential addresses, register of secretaries and a PSC register. Instead, all relevant information will simply be provided to, and maintained at, Companies House.

 

Companies will still be required to keep their own register of members, but private companies will no longer be able to keep the register at Companies House.

 

Directors

 

Further changes affecting company directors are also expected to come into force on 18 November 2025. These include a new offence for individuals to act as a director without their appointment having been notified to Companies House before the 14-day statutory deadline.

 

New grounds for director disqualification are also expected to apply from 18 November, including persistent failure to comply with identity verification requirements and filing obligations. Companies will also be required to confirm, at incorporation and on director appointments, that the new directors aren't disqualified.

 

What action should I take now to prepare for these November changes?

• Draw up a list of existing directors and PSCs who will need to be verified and their identity verification deadlines (ie existing directors must verify their identity and provide their personal code in the company's first confirmation statement after 18 November, existing PSCs (who are also a director of the company) must submit their personal code (using a separate online service) within 14 days of that confirmation statement date and other PSCs will need to complete the process within the first 14 days of their birth month). Individuals' identity verification due dates for all their roles will be available on Companies House from 18 November.
• Make existing directors and PSCs aware that they will need to be ready to verify their identity by the relevant deadline.
• Consider whether new and existing directors and PSCs should voluntarily verify their identity ahead of the mandatory requirements coming into force (particularly those with verification deadlines which fall shortly after 18 November). If they do, ensure their personal code is kept safely and is ready to be provided on relevant Companies House filings from 18 November 2025.
• Put processes in place for identity verification. For example, ensure new directors' identities are verified, and their personal codes are stored safely and are provided, on or before appointment and put systems in place to inform new PSCs about, and assist them with, their identity verification obligations.
• Ensure all director, secretary and PSC filings are up to date in advance of the abolition of the statutory registers and consider what internal records you want to keep following the abolition.
• If you're currently keeping your register of members at Companies House, take steps to recreate it and maintain it going forward.
• Review your procedures for appointing new directors to ensure they avoid committing an offence (ie ensure their identity is verified and their appointment is notified to Companies House before the statutory deadline) and update onboarding documents to include disqualification checks and confirmations.

 

Other key measures to come into force

 

Other company law reforms will be rolled out in stages during 2026 and 2027, including:

 

Company filings

From spring 2026, ECCTA will restrict the range of individuals who can file documents at Companies House on behalf of a company. This will be limited to an officer or employee of the relevant company (whose identity has been verified) or an ACSP (or its officers or employees).

Corporate directors

 

ECCTA will introduce the long-anticipated ban on corporate directors, with powers to make exceptions to the general prohibition, already contained in the Companies Act 2006 (CA 2006).

 

Only UK registered corporate directors, whose directors are all natural persons and have had their identities verified, will be permitted and there will be a 12-month transition period for existing corporate directors to comply.

 

Shareholder information

 

ECCTA will require a company's register of members to contain standardised information on each shareholder (eg their forename (no initials), surname and service address).

All companies (other than traded companies which are subject to DTR 5) will also be required to provide a one-off list of shareholders in their first confirmation statement after the relevant provision comes into force. For traded companies (which aren't subject to DTR 5), the statement will only include those shareholders holding at least 5% of any class of shares.

Accounts

 

From 1 April 2027, ECCTA will introduce changes relating to company accounts including, new requirements for companies to file their accounts using commercial software (web-based and paper filing options will no longer be available) and streamlining the accounts filing options for small companies and micro-entities (abridged accounts will no longer be permitted).

 

How should I prepare for these other key measures?

• Consider compiling a list of individuals (in addition to directors) who file documents at Companies House on the company's behalf (eg company secretaries) and make them aware that they may need to verify their identity in due course.
• Check if there are any corporate directors in office and if they will meet the exceptions to the general prohibition on corporate directors or if they will need to be removed or replaced.
• Review your existing register of members to determine if any additional information may be required from members to meet the new standardised information requirements and to ensure you will be able to provide the one-off shareholder list.
• If you don't currently file your accounts in digital form, start to find a suitable software product.

 

Other changes that have already come into force

 

As a reminder, Companies House introduced the following key changes in 2024:

 

 

Further guidance

For further guidance on the matters covered in this publication, please get in touch with your usual Corporate contact at DLA Piper.