Compliance & Legal

UK Business Compliance: GDPR, Companies House & HMRC Requirements

TS

Tenable Support Team

Business Compliance Experts

10 min read
Updated Regularly
Legal documents and gavel hammer icon. Lawyer reviewing and preparing legal documents for court cases. Hands typing on laptop computer keyboard at desk in office.

Navigating UK business compliance can feel overwhelming, but understanding your obligations is crucial for avoiding costly penalties and maintaining your company's reputation. This comprehensive guide covers the three pillars of UK business compliance: GDPR data protection, Companies House filing requirements, and HMRC tax obligations.

Key Takeaway: UK businesses face multiple compliance requirements across different regulatory bodies. Failure to comply can result in significant fines, director disqualification, and reputational damage. This guide will help you understand what's required and how to stay compliant.

GDPR Data Protection Compliance

The General Data Protection Regulation (GDPR) applies to all UK businesses that process personal data, even after Brexit. UK GDPR maintains the same standards as the EU version, ensuring robust data protection for customers and employees.

Core GDPR Requirements

Lawful Basis for Processing

You must have a lawful basis (consent, contract, legal obligation, vital interests, public task, or legitimate interests) before collecting or processing personal data.

Privacy Notices

Provide clear, concise privacy notices explaining what data you collect, why you collect it, how it's used, and individuals' rights regarding their data.

Data Security Measures

Implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction.

Data Subject Rights

Respect individuals' rights including access to their data, correction, erasure, restriction of processing, data portability, and objection to processing.

Data Breach Reporting

Report data breaches to the ICO within 72 hours if the breach poses a risk to individuals' rights and freedoms. Notify affected individuals without undue delay in high-risk situations.

GDPR Penalties

The Information Commissioner's Office (ICO) can impose fines up to:

  • £17.5 million or 4% of annual global turnover (whichever is higher) for serious violations
  • £8.7 million or 2% of annual global turnover for less severe breaches

Do You Need a DPO?

You must appoint a Data Protection Officer if you:

  • • Process large-scale personal data
  • • Regularly monitor individuals
  • • Process special category data
  • • Are a public authority

Documentation Required

  • • Data processing records
  • • Privacy policies
  • • Data protection impact assessments
  • • Data breach logs
  • • Consent records (where applicable)

Companies House Filing Requirements

All UK limited companies must file specific documents with Companies House on time. These filings are publicly accessible and form part of your company's permanent record.

Annual Filing Obligations

Confirmation Statement (CS01)

Annual

Filed at least once every 12 months, confirming your company details are correct.

Includes:

  • • Company officers
  • • Registered office address
  • • Business activities (SIC codes)
  • • Share capital information
  • • Shareholder details
  • • PSC register information

Late filing penalty: £150+

Annual Accounts

Annual

Must be filed within 9 months of your financial year end (6 months for public companies).

Required Documents:

  • • Balance sheet
  • • Profit and loss account
  • • Director's report
  • • Auditor's report (if applicable)
  • • Notes to the accounts

Late Filing Penalties:

  • • Up to 1 month late: £150
  • • 1-3 months late: £375
  • • 3-6 months late: £750
  • • Over 6 months late: £1,500

Change Notifications

As Required

Certain company changes must be reported to Companies House within 14 days.

  • • Director appointments/resignations
  • • Changes to registered office address
  • • Share allotments or transfers
  • • Changes to company officers
  • • Changes to PSC register
  • • Changes to company name

Failure to notify: Up to £5,000 fine and potential director disqualification

PSC Register

All companies must maintain a register of People with Significant Control (PSC) - anyone who:

  • • Holds more than 25% of shares
  • • Holds more than 25% of voting rights
  • • Has significant influence or control

Filing Deadlines

Missing deadlines can result in:

  • • Automatic financial penalties
  • • Company strike-off proceedings
  • • Director disqualification
  • • Criminal prosecution
  • • Damage to credit rating

Pro Tip: Stay Compliant

Set up automated reminders 3 months before your filing deadlines. Consider using accounting software that integrates with Companies House or hire a professional accountant to manage your filings.

Get Professional Help

HMRC Tax Compliance Requirements

HM Revenue & Customs (HMRC) is the UK's tax authority. Businesses must comply with various tax obligations, and HMRC has significant enforcement powers including the ability to issue winding-up petitions for unpaid tax debts.

Key Tax Obligations

Corporation Tax

Annual

Tax on company profits - currently 19% for most companies (25% for profits over £250,000 from April 2023).

  • Filing deadline: 12 months after accounting period ends
  • Payment deadline: 9 months and 1 day after accounting period ends
  • Late filing penalty: £100-£1,000+ depending on delay
  • Late payment: Interest charges and potential enforcement action

VAT (Value Added Tax)

Quarterly

Mandatory if turnover exceeds £85,000. Standard rate is 20%.

  • Return frequency: Quarterly (monthly or annually in some cases)
  • Filing & payment: Within 1 month and 7 days of period end
  • Default surcharge: 2%-15% of VAT due (increases with repeated defaults)
  • Late filing penalty: £400+ per missed return

PAYE & National Insurance

Monthly

Required if you employ staff. Deduct income tax and National Insurance from employee wages.

  • Payment deadline: 22nd of each month (19th for cheque/postal)
  • RTI submissions: On or before each payday
  • Annual P60s: Must be provided to employees by 31st May
  • Penalties: £100-£400 per month for late RTI submissions

Self Assessment (Directors)

Annual

Company directors must file personal tax returns even if they only receive a salary from the company.

  • Paper deadline: 31st October following tax year end
  • Online deadline: 31st January following tax year end
  • Payment deadline: 31st January (with second payment on account by 31st July)
  • Late filing penalty: £100 immediately, increasing to £1,600+ for extended delays

HMRC Enforcement Powers

HMRC is one of the most aggressive creditors and has extensive powers including:

  • Winding-up petitions for unpaid tax debts over £750
  • Distraint action - seizing business assets
  • County Court Judgments (CCJs)
  • Director personal liability for PAYE/NI debts
  • Criminal prosecution for tax evasion
  • Penalty charges and interest on late payments

Time to Pay Arrangement

If you're struggling to pay HMRC debts, you can request a Time to Pay arrangement to spread payments over time.

Learn More About HMRC Debt

Use Accounting Software

Making Tax Digital (MTD) requires VAT-registered businesses to keep digital records and submit returns using compatible software.

MTD for Income Tax starts April 2026 for self-employed and landlords earning over £50,000.

Annual Compliance Checklist

Use this checklist to ensure you're meeting all your UK business compliance obligations:

GDPR Compliance

Companies House

HMRC Tax Compliance

Download This Checklist

Save this compliance checklist and set reminders throughout the year to ensure you never miss a deadline.

Consequences of Non-Compliance

Financial Penalties

  • GDPR fines up to £17.5m or 4% turnover
  • Companies House late filing fees
  • HMRC penalties and interest charges
  • VAT default surcharges

Legal Action

  • Director disqualification (2-15 years)
  • Winding-up petitions from HMRC
  • Company strike-off proceedings
  • Criminal prosecution for serious breaches

Business Impact

  • Damaged business reputation
  • Loss of customer trust
  • Difficulty securing credit/funding
  • Negative publicity and media attention

Best Practices for Staying Compliant

1

Automate Where Possible

Use accounting software, payroll systems, and compliance management tools to automate filings and reduce human error.

2

Set Up Calendar Reminders

Create recurring reminders at least 30 days before all filing deadlines to allow time for preparation.

3

Hire Professional Advisors

Engage qualified accountants, tax advisors, and data protection specialists to ensure you're meeting all requirements.

4

Maintain Good Records

Keep organized, accessible records of all filings, payments, and compliance activities for at least 6 years.

5

Stay Informed of Changes

Subscribe to updates from HMRC, Companies House, and ICO to stay current with regulatory changes.

6

Conduct Regular Reviews

Quarterly compliance reviews help identify potential issues before they become serious problems.

Taking Control of Your Compliance Obligations

UK business compliance may seem daunting, but with proper systems and professional support, it becomes a manageable part of running your business. The key is to stay proactive rather than reactive – addressing compliance requirements before they become problems.

Remember that compliance isn't just about avoiding penalties. It's about building a trustworthy, sustainable business that customers, employees, and partners can rely on. Good compliance practices also make your business more attractive to investors and potential buyers.

Don't Wait Until It's Too Late

If you're behind on compliance filings or facing enforcement action from HMRC, Companies House, or the ICO, professional help can make all the difference. Early intervention can help you:

  • • Negotiate payment arrangements with HMRC
  • • Avoid director disqualification
  • • Prevent winding-up petitions
  • • Minimize penalties and interest charges
  • • Get back on track with compliance obligations

Need Help with UK Business Compliance?

Our expert team can help you navigate GDPR requirements, Companies House filings, HMRC obligations, and more. We'll ensure your business stays compliant and avoids costly penalties.

Compliance health check and gap analysis
HMRC debt resolution and Time to Pay arrangements
Late filing recovery and penalty mitigation
Ongoing compliance management support
Businessman signing a document on a round table, showcasing legal agreement and professional commitment. Perfect for business, contract, and legal concepts.

Share this article