Paper Run Sheets Are No Longer Good Enough

Published on May 31, 2026

Written by Road XS

  • Reading Time: 4 minutes

Charity trustees are legally responsible for protecting passenger data under UK GDPR, yet many volunteer transport services still rely on paper run sheets carrying sensitive personal and special category data. This article explains the compliance and safeguarding risks paper creates, outlines trustee obligations, and introduces the new Road XS driver portal arriving this summer to make digital-only operations genuinely achievable.

In This Article

If your volunteer drivers are still carrying paper run sheets, your charity is carrying a risk that your trustees are personally responsible for managing. This is not a technology preference. It is a data protection obligation — and the good news is that Road XS has spent the past year making compliance genuinely straightforward.

This article is written directly for trustees, management committee members, and those with governance responsibility for organisations using volunteer transport. We want to be honest with you about what the law requires, where the risks lie, and how the new Road XS driver portal — arriving this summer — removes the friction that has kept paper in circulation for too long.

The Trustee’s Legal Position

Under UK GDPR and the Data Protection Act 2018, your charity is a data controller. That means your board is collectively responsible for how personal data is collected, stored, used, and protected across every part of your operations — including the paper your volunteer drivers carry in their cars.

A standard run sheet contains exactly the kind of information that the legislation treats as requiring active protection: passenger names, home addresses, phone numbers, and often details about mobility needs, medical conditions, or the reason for a journey. This is, in many cases, special category data under UK GDPR — the most sensitive classification the law recognises.

Legal ContextThe ICO (Information Commissioner’s Office) has been clear in its guidance: organisations must implement appropriate technical and organisational measures to protect personal data. Paper documents that leave a controlled environment — entering volunteer drivers’ personal vehicles — represent a significant compliance gap that your trustees are accountable for closing.

What happens when a run sheet is left on a car seat, photographed by accident, lost at a petrol station, or taken home and placed in a recycling bin? The answer is a reportable data breach. Depending on the nature of the data involved — and in volunteer transport it is often highly sensitive — you may be required to notify the ICO within 72 hours, and potentially the affected individuals.

Recommended:
EV Charging Explained: A Beginner's Guide

Safeguarding Is Part of This Too

For many charities operating volunteer transport, the passengers are not just members of the public — they are vulnerable adults: elderly individuals, people with disabilities, or those receiving care. This brings safeguarding responsibilities into the picture alongside data protection.

When passenger information — including where someone lives, when they travel, and what their needs are — circulates on paper through multiple volunteer households, the safeguarding risk is real. Information security and safeguarding are not separate concerns here. They are the same concern.

The question for trustees is not whether your volunteers are trustworthy. Of course they are. The question is whether your systems are robust enough that you could demonstrate compliance if asked to.

A trustee’s duty is not simply to trust the people involved. It is to put systems in place that would protect passengers and the organisation even in the event of an honest mistake — a lost bag, a car break-in, a document inadvertently shared. Digital systems controlled by your organisation and accessed only by authorised drivers are how you demonstrate that duty.

Why Paper Has Persisted — And Why That Changes Now

We understand why paper has stayed in use. Previous digital tools were not always easy for volunteer drivers, many of whom are older and unfamiliar with apps. Coordinators have been reluctant to create barriers that might lose valued volunteers. These are legitimate, human concerns — and they have meant that compliance has quietly been deferred.

The new Road XS driver portal has been rebuilt from the ground up specifically to remove those barriers. The ICO’s preference — that passenger data remain within a controlled digital system rather than leaving on paper — is now achievable without asking elderly or less tech-confident volunteers to navigate complex software.

What the New Driver Portal Delivers

  • Simplified LayoutRebuilt from scratch for clarity and ease of use at every level of tech confidence
  • Works Offline, No internet connection needed during journeys — data stays secure within the system
  • No Paper Required
  • All passenger information accessed only within the app by the assigned driver
  • Dark Mode Designed for comfortable use in all conditions, including night driving
  • Live NavigationBuilt-in mapping and routing so drivers always know where they’re going
  • Vehicle Checks Digital pre-drive checks and damage reports — all logged and time-stamped
Recommended:
From Paper to Cloud: Transforming Community Transport Management

The Volunteer Without a Smartphone

This is the question trustees most often raise, and it deserves a direct answer. Some valued, long-serving volunteers do not own a smartphone, or will not use one. What is the right response?

First, it is worth separating two groups: volunteers who could use the portal but haven’t been properly introduced to it, and volunteers who genuinely cannot. The first group is far larger than most coordinators expect. Many older volunteers, once shown the new portal’s simplified design, find it straightforward — particularly with the support of a patient coordinator walkthrough.

For the genuinely exceptional case — a volunteer without any smartphone capability — the decision falls to your trustees, not to Road XS. You may choose to have a coordinator manage that driver’s information entirely within the portal, providing verbal briefings rather than paper copies. You may decide to retire that specific paper workflow while documenting the exceptional circumstances. What you should not do is allow a blanket continuation of paper for all drivers because of a small minority of exceptions.

Recommended Trustee Action

Review your current run sheet practices at your next board or management meeting. Confirm a transition timeline to the new portal. Document any exceptional individual cases and the mitigating measures in place. Ensure your coordinators understand that the legal responsibility for compliance rests with the organisation, and that Road XS has provided the tools to achieve it.

What This Means for Your Organisation

Road XS is not asking your volunteers to do more. We are asking your organisation to use the tools that already exist to do things properly. The new portal arrives this summer and replaces a paper process that has always been a legal vulnerability with one that is designed for the real conditions of volunteer transport — including patchy connectivity, older users, and last-minute changes.

Your trustees bear responsibility for governance. That includes the data your drivers carry. The systems are now in place to meet that responsibility without losing your volunteers or your flexibility.

  • Raise the transition to the new driver portal at your next trustee meeting
  • Ask your coordinator to identify any drivers who may need additional support with onboarding
  • Review your data protection policy to ensure it reflects digital-only run sheet practices
  • Consider a brief volunteer information session when the new portal launches
  • Document your organisation’s position on any exceptional paper-based arrangements
Recommended:
Amplify Your Efficiency with Volunteer Driver Scheduling Software

The transition is not difficult. The legal case for making it is clear. And the tool that makes it possible is almost here.

New Guide

Paper Run Sheets & Data Compliance

This plain English guide explains the UK GDPR risks hiding in paper run sheets, helping trustees and transport managers understand what the law demands in 2026 and how to keep their transport schemes compliant.

Send this to a friend