Charity trustees carry the ultimate legal accountability for transport safety, and that responsibility does not disappear when tasks are handed to drivers or staff.
The Trustee Act 2000 requires trustees to exercise reasonable care and skill, which means putting proper systems in place rather than assuming things are handled at the operational level.
Without a reliable audit trail covering driver records, vehicle checks and journey logs, demonstrating responsible governance during an incident, investigation or insurance claim becomes very difficult. And here is the part that catches boards out: a service that runs on paper because that is what the drivers prefer is a service whose compliance risk sits squarely with the trustees, not the drivers.
Running a transport service is one of the higher-risk things a charity can do.
You are moving vulnerable people, often elderly, disabled or medically dependent, in vehicles driven by volunteers or staff. When something goes wrong, the question of who is responsible does not stay with the driver. It travels all the way up to the board.
Key Takeaways
- Responsibility does not stop with the driver. When something goes wrong in transport, accountability travels up to the board, and the duty of care does not disappear just because tasks are delegated.
- The Trustee Act 2000 demands "reasonable care and skill", which means having proper systems in place, not simply assuming things are handled operationally.
- The risk can get personal. For unincorporated charities especially, third-party claims can fall on trustees directly, and regulators can treat safeguarding failures as misconduct.
- Paper is a compliance liability, not just an inconvenience. Run sheets can be lost, amended or never filed, and a missing record is itself the problem in a dispute or claim.
- "I will only use paper" is a driver preference with a trustee consequence. The volunteer states the preference; the board carries the legal exposure if it goes wrong.
What trustees are actually responsible for
Charity trustees are ultimately responsible for making sure measures are in place to protect everyone who comes into contact with the charity from harm, including beneficiaries, staff, volunteers and members of the public. This is known as the duty of care. (NCVO: Legal duties of charities)
That duty does not disappear when the work is delegated. Trustees hold collective responsibility for safeguarding even where day-to-day tasks are carried out by staff or volunteers, and they remain accountable for everything that happens within the charity. Delegating a task is not the same as delegating the responsibility for it. (NCVO: Legal duties of charities)
The Trustee Act 2000 sets the standard. It requires trustees to "exercise such care and skill as is reasonable in the circumstances", which the Charity Commission interprets as putting appropriate procedures and safeguards in place and taking reasonable steps to make sure they are followed. It is not enough to assume things are being handled properly on the ground. (GOV.UK: The Essential Trustee, CC3)
It is worth being fair about this. The Charity Commission recognises that most trustees are volunteers who sometimes make honest mistakes, and the law generally protects trustees who have acted honestly and reasonably. Trustees are not expected to be perfect. They are expected to do their best to comply with their duties, and crucially, to be able to show that they did. (GOV.UK: The Essential Trustee, CC3)
"But the drivers handle all that"
This is the assumption that quietly exposes a board. A volunteer driver might say, in good faith, "I will only use paper", or "I do not want an app, I have always written it on a run sheet. That is an understandable human preference, and many long-serving volunteers feel it strongly. But it is worth being clear about what that preference actually means in governance terms.
If a driver's licence quietly lapses into the wrong category, if a vehicle goes out without a current MOT, if a run sheet listing passengers' names, addresses and medical needs is left on a passenger seat or never makes it back to the office, the driver is not the person a regulator, insurer or court holds to account for the system that allowed it. The board is. The driver owns the journey. The trustees own the framework the journey runs inside.
So when a board allows the whole operation to run on paper because that is what the drivers are comfortable with, it is, in effect, accepting the compliance risk on the drivers' behalf.
The preference belongs to the volunteer. The liability belongs to the trustees.
That is not an argument for overruling drivers without thought, but it is a reason for trustees to understand exactly what they are signing up to when they let "we have always done it on paper" set the standard.
What happens when something goes wrong
If trustees do not follow safeguarding guidance, the consequences can fall on both the trustees and the charity, for example a statutory inquiry or other regulatory action by the Charity Commission.
A failure to manage safeguarding risks adequately can be treated as a failure of trustee duty and, in serious cases, as misconduct or mismanagement in the administration of the charity. (NCVO: Legal duties of charities)
Beyond regulatory consequences, there is the question of personal financial exposure. If a charity is unincorporated, it does not exist as a separate legal entity. The trustees themselves enter into contracts and hold property in their personal capacity, so a claim by a third party can fall on the trustees personally.
Incorporated charities offer more protection, but even then liability is not eliminated: trustees can still be exposed where they are found to have acted negligently, recklessly or dishonestly and have caused loss or damage.
Where a breach of trust causes a loss to the charity, trustees can be required to make good that loss, and such claims may be brought by the Charity Commission or the Attorney General. (Godfrey Wilson: A guide to the role of a charity trustee)
The specific risks in transport
Transport charities carry a distinctive set of obligations that make governance systems particularly important. If your service charges for transport, even indirectly through a membership or subscription, it is likely operating for "hire or reward", and most community transport operators run minibuses under a Section 19 or Section 22 permit to do so without a full PSV operator's licence.
The permit comes with strings attached. As the permit holder, the organisation, and therefore its trustees, is responsible for making sure vehicles are properly maintained, that maintenance and inspection records are kept, and that drivers hold the correct licence entitlement for the vehicle they are driving. (GOV.UK: Section 19 and 22 permits)
Insurance adds another layer. For insurance purposes, charities are generally advised to treat volunteers the same way as employees and to make sure they are covered by employers' liability or public liability cover, applying the same health and safety standards to voluntary workers as to paid staff exposed to the same risks. (GOV.UK: Charities and insurance, CC49)
Where volunteers, staff or trustees use their own cars for charity business, the charity needs to make sure the owner's motor insurance actually covers that use. (Deva Risk Group: Charity insurance)
Every one of these obligations has the same thing in common: in a dispute, the question is not only "did you do the right thing?" but "can you prove you did?".
If a board cannot demonstrate that vehicle records were checked, that driver entitlements were current at the time of the journey, and that journey information was logged, it becomes very hard to show that reasonable care and skill were exercised.
A run sheet that can be lost, altered or simply never filed provides no reliable audit trail. In an investigation or an insurance claim, the absence of a record is not a neutral gap. It is the problem.
What compliance on paper actually requires
It is tempting to think of paper as the simple, low-cost option and digital as the expensive upgrade. In compliance terms it is closer to the opposite. Paper is not automatically non-compliant, but staying compliant on paper means carrying out, by hand and without fail, a long list of steps that software does automatically.
To meet the standard a regulator or insurer would expect, a paper-based operation would need to:
- Manually verify, before each journey, that the assigned driver's licence is valid and the correct category, and that their MOT, insurance, tax and any DBS check are current, then record that the check was done and when.
- Record the booking, route, vehicle allocation and who authorised it before the journey takes place, not reconstructed afterwards from memory.
- Keep run sheets containing passengers' names, addresses and mobility or medical needs physically secure, under lock and key, with access limited to those who genuinely need it.
- Make sure every paper run sheet is returned, filed, retained for the required period and then securely destroyed, with nothing left in a glovebox, a kitchen drawer or a volunteer's home.
- Maintain vehicle maintenance and inspection records that satisfy the conditions of your permit.
- Be able to retrieve any of the above on demand for an insurer, the Charity Commission, the DVSA or the Information Commissioner's Office, often at short notice and sometimes years later.
- Spot, log and act on any sheet that goes missing, because a lost record of vulnerable people's data is a reportable matter, not just an administrative slip.
None of this is impossible on paper.
The difficulty is that every single step depends on a person remembering to do it, doing it correctly, and the result physically surviving and being findable later.
Each manual step is a point where compliance can quietly fail: an unsigned sheet, an expired licence nobody re-checked, a folder left in the wrong car. And every one of those gaps, if it surfaces in a claim or an inquiry, lands on the trustees.
Paper is also a data protection risk
It is easy to think of data breaches as something that happens to computers. In practice, some of the most common breaches in the voluntary sector are very low-tech: a run sheet left behind, a folder lost, a clipboard photographed.
The information on a transport run sheet, names, addresses and details of someone's disability or medical needs, is exactly the kind of sensitive personal data the law treats most seriously.
Under the UK GDPR, the accountability principle means an organisation is not only responsible for protecting personal data but must also be able to demonstrate that it does so.
A charity that cannot say where its records are, who can see them or how they are kept secure cannot demonstrate compliance, which is itself a failing regardless of whether anything has yet gone wrong. (ICO: Guide to accountability and governance)
And if a paper record is lost in a way that is likely to put people's rights and freedoms at risk, that is a personal data breach which must be reported to the ICO without undue delay and, where feasible, within 72 hours.
A pile of run sheets is far easier to lose, and far harder to account for, than an access-controlled digital record. (ICO: Reporting a personal data breach)
What "reasonable systems" look like in practice
Regulators and insurers are not looking for perfection. They are looking for evidence that a board took its responsibilities seriously and put proportionate systems in place.
In practice, that means being able to answer questions like these, with records, not recollection:
- Were all drivers' records current and verified at the time of the journey?
- Was the route and vehicle allocation logged before the journey took place?
- Can you show where the vehicle was at any given time?
- Were passengers notified of their journey in a way that can be evidenced?
- Is there a clear record of who authorised what, and when?
- If a record were requested today, could you produce it within minutes rather than days?
How digital changes the picture
This is where the contrast with paper becomes a governance argument rather than a sales pitch. The whole point of a system like Road XS is that the compliance steps above stop depending on whether a volunteer remembered, and start happening automatically.
Driver records are kept up to date, and drivers with out-of-date records are automatically removed from journey lookups, so they cannot be assigned. The system stops vehicles travelling without a current MOT. Every booking, route and journey is logged in the cloud with a full, time-stamped audit trail accessible from anywhere, and that data is held securely and access-controlled rather than sitting in a folder on a passenger seat.
The difference is not really paper versus screen. It is whether your compliance depends on memory and good intentions, or whether it is built into the way the service runs. With paper, the trustees are trusting that every check was done and every sheet survived. With a proper system, the evidence creates itself.
The bottom line for trustees
Volunteering as a trustee of a transport charity is a generous act. It should not carry hidden personal risk. But the protection the law offers trustees depends on being able to show they acted responsibly, and that means having systems in place, not just good intentions, and not just the systems your drivers happen to prefer.
A paper run sheet cannot demonstrate that. A modern transport management system can. If your service still runs on paper because that is what people are used to, the question for the board is not "is anyone complaining?" It is "if we were asked to prove we did everything right, could we?"
Please note: The degree of personal financial exposure for trustees varies significantly depending on whether the charity is incorporated or unincorporated. If you are a trustee and unsure of your charity's legal structure and what it means for your personal liability, it is worth seeking advice from a solicitor who specialises in charity law. This piece is intended to inform, not to constitute legal advice.
