A Practical Guide for UK Boards Migrating from Paper Board Packs

Many UK boards still print and store hundreds of pages of board papers before every meeting. This may not be the best way to stay in line with the Companies Act 2006 and with the data security and governance code expectations now placed on UK boards. This guide sets out, as of 2026, how governance professionals can plan a move to a secure digital alternative.

Why are UK boards moving away from paper board packs?

Paper is harder to secure and at odds with regulatory expectations. Packs must be printed and given to each director days before a meeting. UK office workers use around 10,000 sheets of paper a year, much of it wasted, according to research covered by Zero Waste Week, and the printing and courier costs add up quickly across a busy board calendar.

What are the legal requirements for board papers and minutes in the UK?

UK law does not require board minutes on paper. Section 248 of the Companies Act 2006 requires every company to keep minutes of directors’ meetings and retain them for at least ten years. Part 37 of the Act allows records to be kept electronically, if they can be reproduced in hard copy and the company guards against falsification.

Can board minutes be kept electronically under the Companies Act 2006?

Yes, provided the company can still produce a hard copy on request and has safeguards against tampering. Section 249 confirms that minutes authenticated by the chair stand as evidence of what took place, whether stored digitally or on paper. Separately, the FRC’s UK Corporate Governance Code 2024 requires boards to declare on the effectiveness of material internal controls from 1 January 2026, which is easier to evidence from a searchable digital pack.

What are the data security risks of paper board packs?

Once a physical document leaves the office, the company loses control over who sees it, unlike a digital file with access controls. The government’s Cyber Security Breaches Survey 2025/2026, run by the Department for Science, Innovation and Technology and the Home Office, found that 43% of UK businesses identified a breach in the past year, and only 25% had a formal incident response plan.

How should boards handle confidential papers under UK GDPR?

Every board pack should be treated as a document that may contain personal data. The Information Commissioner’s Office published guidance in 2025 on disclosing documents securely, warning that hidden personal information is a common cause of accidental breaches, so access should be restricted and logged.

What are the cost and environmental benefits of digital board packs?

Paper and cardboard are among the largest categories of UK business waste, and Defra’s Simpler Recycling reforms require businesses with ten or more employees to collect paper and card separately, in force from 31 March 2025. Cutting printed packs reduces this burden and supports ESG reporting, while printing and storage costs largely disappear once papers go digital.

How should a UK board plan a migration from paper to digital board packs?

A migration works best when it is owned by a small project team rather than left to drift. Pair the company secretary with someone from IT or information security, and agree a single decision maker, usually the chair or the audit committee chair, who can sign off scope and timing. Start by auditing what already goes out on paper, covering the main board and each committee, since audit and remuneration papers are often the thickest and the most sensitive. Set a realistic timeline of two to three board cycles from kick off to full cutover, long enough for directors to adjust without letting the project lose momentum.

What steps should be in a board pack migration plan?

A migration plan should cover four steps, each with a clear owner and deadline.

First, agree retention and access rules before anything else moves online. Records still need to meet the ten year minimum under the Companies Act 2006, so define who can view archived packs, whether that is every director or only the company secretariat and auditors on request, and build these tiers into the platform from day one rather than retrofitting them later.

Second, run a parallel period covering one to two full board cycles, where papers are issued digitally as the default and printed only if a director specifically asks. This surfaces problems, such as a director who cannot access papers while travelling, while the paper fallback still exists as a safety net.

Third, split training into two tracks. The secretariat needs to understand version control and audit trails, since they are responsible for demonstrating compliance with the Companies Act 2006 falsification safeguard. They also need to set access permissions correctly for each meeting. Directors mainly need a short, hands on session covering the reader app and annotation tools, plus guidance on what to do if a device is lost.

Fourth, set a firm cutover date and communicate it well in advance, ideally agreed formally by the board itself. After this date, stop producing paper copies entirely rather than allowing a small number of directors to opt out indefinitely, since a mixed process is harder to secure and audit than either a fully paper or fully digital one.

Pilot the migration with one committee first, typically audit or remuneration, since these carry the most sensitive content and benefit soonest from tighter, auditable access controls. Once that committee has run a full cycle successfully, extend the same process to the main board and remaining committees.

How do you get director buy-in for digital board packs?

Director buy-in tends to follow from addressing practical concerns directly rather than presenting the change as a cost saving exercise. A short demonstration covering annotation tools, offline reading, remote wipe capability and searchable records usually resolves most worries about reading on screen and device security. It also helps to involve one or two directors as informal testers during the parallel period, since reassurance from a fellow board member tends to carry more weight than reassurance from the company secretary.

What features should a digital board pack solution have?

A UK board’s digital board pack solution should support version control and granular access permissions. It also needs an audit trail meeting the Companies Act 2006 falsification safeguard, plus the ability to export records in hard copy. Papers should be updateable right up until a meeting starts, with directors notified automatically.

Conclusion

Moving away from paper board packs is not only for efficiency. It involves the legal duty to keep proper minutes and the board’s responsibility for data security. A staged migration plan, built around clear retention rules and genuine director buy-in, allows a board to make this change with confidence and less expense than a paper-based equivalent.

How Convene helps UK boards migrate from paper to digital board packs

Convene gives UK company secretaries and boards a secure way to prepare and distribute board papers without relying on printed packs. Directors can annotate documents and access papers offline, while the secretariat retains full version control and an audit trail.

If your board is planning a move away from paper, book a demo to see how Convene supports the transition.

Frequently Asked Questions

Can UK companies keep board minutes electronically instead of on paper?

Yes, the Companies Act 2006 allows minutes to be kept electronically if they can be reproduced in hard copy and the company guards against falsification.

How long do UK companies need to keep board minutes?

Section 248 of the Companies Act 2006 requires companies to retain board minutes for at least ten years from the date of the meeting.

What are the data protection risks of paper board packs?

Paper packs cannot be remotely revoked if lost, and often contain personal data, which is why the ICO recommends the same checks used for formal disclosures.