If your drivers still carry paper run sheets, your service is carrying a risk. That risk does not sit with the driver. It sits with your board, your trustees and your managers. This is not a technology preference. It is a data protection duty.
The good news is that going paperless is now simple.
Key Takeaways
- Your organisation is the data controller for passenger information. Under UK GDPR and the Data Protection Act 2018, that duty cannot be handed to a volunteer.
- A lost or seen run sheet can be a reportable data breach. You may need to tell the ICO within 72 hours where people are put at risk.
- Run sheets often hold special category data, such as health or mobility needs. This is the most protected class of data the law recognises.
- Paper is also a safeguarding risk. Passenger names, addresses and travel times should not travel through volunteer homes on paper.
- The Road XS driver portal is now live. It keeps every record inside a secure system, so paper is no longer needed.
Who is legally responsible for passenger data?
If your organisation decides how passenger data is collected and used, you are a data controller. This holds under UK GDPR and the Data Protection Act 2018. The rule is the same for charities, community interest companies, councils, NHS teams and commercial operators. Not for profit status does not lower the bar.
Your board or senior team carries this duty together. That includes the paper your drivers keep in their cars. You can share out the work. You cannot share out the legal responsibility. It stays with the organisation. In a charity, it sits squarely with the trustees and the board.
The same logic reaches every kind of scheme. It covers SEND and home to school transport, patient transport and demand responsive transport. If your council, trust or company holds the data, your council, trust or company answers for it. The rules on how personal data is handled apply in full.
What counts as sensitive passenger data?
A run sheet holds far more than names. It often carries home addresses, phone numbers, mobility needs and medical notes. Names and addresses are personal data. Health and disability details are special category data. That is the most protected class the law recognises, and the ICO expects it to be handled with real care.
Why does this matter for a run sheet? Because the more sensitive the data, the greater the harm if it is lost. A note about a passenger's condition, seen by the wrong person, is not a small slip. It is the kind of exposure that regulators, funders and families all take seriously.
What happens when a run sheet goes missing?
Picture a run sheet left on a car seat. Or dropped at a petrol station. Or placed in a home recycling bin. Each one can be a personal data breach. The ICO treats a breach as any loss, exposure or unauthorised access to personal data.
Where a breach is likely to put people at risk, you must tell the ICO within 72 hours of finding out. Where the risk is high, you must also warn the people affected. Fines can reach 17.5 million pounds, or 4% of global annual turnover, under UK GDPR. The clock starts fast.
Paper makes this worse in a quiet way. With a lost sheet, you often cannot say who saw it or when. That makes the breach harder to judge and harder to report well. As we explain in our piece on the most common data breach in Britain, a piece of paper is often the weak point.
Why is this a safeguarding issue too?
Many passengers in volunteer and community transport are vulnerable. They may be older people, disabled people, or people receiving care. Their run sheet shows where they live, when they are out, and what support they need. On paper, that information travels through many homes. The safeguarding risk here is very real.
This is not about trusting your volunteers. Of course you trust them. It is about building systems that hold up even when an honest mistake happens. A lost bag. A car break in. A page left on a kitchen table. Good systems protect passengers and staff when a person slips.
Paper run sheets vs the driver portal
The difference is easiest to see side by side. The table below shows how a paper run sheet compares with a secure digital portal for the same daily task.
| Daily reality | Paper run sheet | Road XS driver portal |
|---|---|---|
| Where the data lives | In cars, bags and homes | Inside one secure, access controlled system |
| If it goes missing | Possible reportable breach | Data stays locked to the assigned driver |
| Who can see it | Anyone who finds the paper | Only the allocated driver, on their login |
| Record of access | None | Every action logged and time stamped |
| Updates to the day | Reprint or rewrite by hand | Changes reach the driver in real time |
| Mileage and forms | Paper claim forms | Claimed in the app in a tap |
What does the Road XS driver portal do?
The Road XS driver portal gives each driver a secure login, kept separate from the admin area. It works on any phone, tablet or desktop, with apps for Apple and Android devices. Passenger and driver data stays inside the platform, encrypted and access controlled.
- Secure driver login: each driver sees only their own journeys, on their own device.
- Availability their way: drivers set when they can drive, in slots as small as 15 minutes.
- Live navigation: turn by turn routing through Google Maps, Waze or TomTom to every stop.
- Real time updates: any change to the day reaches the driver at once, with live pickup and drop off confirmations.
- Mileage in a tap: drivers claim extra miles from a detour the moment a journey ends.
- Records that never lapse: automatic reminders for MOT, insurance and DBS keep driver records current.
- Vehicle checks: daily walkaround checks and damage photos, logged with GPS and a time stamp.
- No paper required: journeys, allocations and records all live in the software.
Offline working is on the way too, so drivers can keep going through signal black spots. For now, the portal already removes the biggest risk on your books. It takes sensitive passenger data off paper and puts it inside a system you control. That is the heart of going digital properly.
What about a volunteer without a smartphone?
This is the question managers ask most, and it deserves a straight answer. Start by splitting your drivers into two groups. There are drivers who could use the portal but have not been shown it yet. And there are drivers who truly cannot. In practice, the first group is far larger than most teams expect.
Many older volunteers find the portal simple once a patient coordinator walks them through it. For the rare driver who cannot use any device, the choice sits with your board or management team. You might brief them by phone and keep their records inside the system rather than on paper.
What you should not do is keep paper for everyone because of a few exceptions. Record the exceptional cases and the steps you take to protect that data. Then move the rest of your service to the portal. That is how you show a clear, defensible position if anyone ever asks.
What should trustees and managers do next?
Going paperless is not a leap. It is a series of small, clear steps. Put it on your next agenda. Set a date to move drivers across. Update your policy to reflect digital run sheets. Then support your team through the change, as we cover in overcoming the fear of change.
- Raise the move to the driver portal at your next board or management meeting.
- Ask a coordinator to flag any drivers who need extra help getting started.
- Update your data protection policy to reflect digital only run sheets.
- Run a short volunteer session so drivers can see the portal for themselves.
- Record your position on any exceptional paper arrangements that remain.
The legal case is clear. The safeguarding case is clear. And the tool that makes paperless simple is already here. Moving off paper protects your passengers, your volunteers and your organisation. It is one of the most useful governance decisions your team can make this year.
Frequently Asked Questions
Are paper run sheets against the law?
Not automatically. The law does not ban paper. It does require you to protect personal data with suitable measures. Paper that leaves a controlled setting, and travels in private cars, is hard to protect. That is why it creates real compliance and safeguarding risk for the organisation that holds the data.
Is my charity really the data controller?
Yes, if your charity decides how passenger data is collected and used. The same is true for councils, NHS teams and commercial operators. Under UK GDPR and the Data Protection Act 2018, the controller carries the legal duty. Being a charity or a not for profit does not reduce that duty at all.
Do I have to report a lost run sheet to the ICO?
Where the loss is likely to put people at risk, yes. You should report it to the ICO within 72 hours of becoming aware. Where the risk is high, you must also tell the people affected. Keep a record of every breach and your reasoning, even for those you decide not to report.
What is special category data on a run sheet?
It is the most sensitive personal data the law protects. On a run sheet, it usually means health, disability or medical notes. Names, addresses and phone numbers are ordinary personal data. Health details sit in a higher class and need stronger protection, which paper in a glovebox simply cannot give.
Is the Road XS driver portal available now?
Yes. The driver portal is live and in daily use. Each driver gets a secure login on their own device, with apps for Apple and Android. Journeys, allocations, mileage and records all stay inside the platform. Nothing sensitive needs to sit on paper in a car, a bag or a home.
What about volunteers without a smartphone?
Split your drivers into two groups. Most who seem unable have simply not been shown the portal, and find it simple once they are. For the rare driver who truly cannot use any device, brief them by phone and keep their records in the system. Do not keep paper for everyone because of a few cases.
Does the driver portal work offline?
Offline working is coming soon, so drivers will be able to keep going through signal black spots. Live run sheets and confirmations will then sync as soon as the connection returns. Even now, journeys and passenger data stay secure inside the platform rather than on paper the moment a driver logs in.
