Pseudonymising Board Minutes Containing Personal-Data References – UK GDPR-compliant anonymisation per UK GDPR Art. 5(1)(c)
Board minutes are the formal record of a company board meeting, recording attending directors, the company secretary, and named advisers. Under Companies Act 2006, boards of over 5.3 million UK companies hold formal minutes; sharing named director data without lawful basis risks UK GDPR fines up to £17.5 million or 4% of global turnover. anonym.legal pseudonymises those individuals while preserving resolution text and commercial decisions.
When this applies
This task applies when board minutes are shared with auditors, M&A advisers, or regulatory bodies who need to verify that specific resolutions were properly passed, but who have no legitimate need to know the identities of all attending directors or third parties named in the minutes. According to the Economic Crime and Corporate Transparency Act 2023 (ECCTA 2023), from November 2023 onwards Companies House has enhanced powers to query company information — making accurate record-keeping with real identities essential in the minute book, while pseudonymised copies are appropriate for external review.
How anonym.legal handles it
- Upload the board minutes (PDF or DOCX).
- The engine identifies named directors, the company secretary, named advisers in attendance, and any third-party individuals referenced in the minutes.
- Each natural person is pseudonymised consistently; resolution text, quorum records, and voting outcomes are preserved.
- Any personal-data references embedded in agenda items (e.g. named employees in HR decisions, named data subjects in breach discussions) are pseudonymised.
- A mapping table is produced with UK/EU data residency.
- Release the pseudonymised minutes for external review; the originals remain in the company's minute book.
What you provide
- Board minutes document
- Any board papers or management reports annexed to the minutes and naming individuals
Limitations & cautions
- The executed minutes in the company's minute book must retain the real names of attending directors — the pseudonymised version is for external-review purposes only. Directors of large companies (not qualifying as small under the Companies Act 2006 thresholds effective from 6 April 2025: turnover ≤ £15m, balance sheet ≤ £7.5m, ≤ 50 employees) must ensure the strategic report under s.414C accurately reflects decisions recorded in the minutes.
- Minutes approved and signed by the chairman should be re-identified before any formal production in legal proceedings.
- The tool does not assess whether the board properly constituted a quorum or followed procedural requirements — obtain company-secretarial or legal advice.
- ECCTA 2023 introduced an identification doctrine reform under which offences committed by a 'senior manager' acting within scope of authority can be attributed to the company — board minutes evidencing such decisions should be retained in identified form.
FAQ
Will pseudonymising director names affect the validity of a board resolution?
Only the pseudonymised review copy is affected. The executed minute in the company's minute book retains all original names. Never replace the minute-book copy with a pseudonymised version.
Can I pseudonymise minutes that discuss a named employee's disciplinary matter?
Yes. Named employees referenced in HR agenda items are pseudonymised consistently with their appearances elsewhere in the minutes or annexed papers.
Does the tool handle minutes from multiple board meetings in one batch?
Yes. Upload multiple sets of minutes in a batch; directors who attend across multiple meetings receive consistent pseudonyms throughout.
What does ECCTA 2023 mean for board minutes involving senior managers?
According to ECCTA 2023, the identification doctrine was reformed so that criminal liability can attach to a company for acts of senior managers. Board minutes that record decisions by senior managers should be retained in identified form — the pseudonymised copy is for preliminary review only; original minutes must be preserved for any regulatory inquiry.