Charity trustees carry the ultimate legal accountability for transport safety, and that responsibility does not disappear when tasks are handed to drivers or staff. The Trustee Act 2000 requires trustees to exercise reasonable care and skill, which means putting proper systems in place rather than assuming things are handled operationally.
Without a reliable audit trail covering driver records, vehicle checks and journey logs, demonstrating responsible governance during an incident, investigation or insurance claim becomes very difficult. Here is the part that catches boards out. A service that runs on paper because that is what the drivers prefer is a service whose compliance risk sits with the trustees.
Running a transport service is one of the higher-risk things a charity can do.
You are moving vulnerable people, often elderly, disabled or medically dependent, in vehicles driven by volunteers or staff. When something goes wrong, the question of who is responsible does not stay with the driver. It travels all the way up to the board.
Key Takeaways
- Responsibility does not stop with the driver. When something goes wrong in transport, accountability travels up to the board, and the duty of care does not disappear just because tasks are delegated.
- The Trustee Act 2000 demands reasonable care and skill, which means having proper systems in place, not simply assuming things are handled operationally.
- The risk can get personal. For unincorporated charities especially, third party claims can fall on trustees directly, and regulators can treat safeguarding failures as misconduct.
- Paper is a compliance liability, not just an inconvenience. Run sheets can be lost, amended or never filed, and a missing record is itself the problem in a dispute or claim.
- A driver preference can carry a trustee consequence. The volunteer states the preference. The board carries the legal exposure if it goes wrong.
What are charity trustees actually responsible for?
As the NCVO sets out, charity trustees are ultimately responsible for making sure measures are in place to protect everyone who comes into contact with the charity from harm, including beneficiaries, staff, volunteers and members of the public. This is known as the duty of care.
That duty does not disappear when the work is delegated. Trustees hold collective responsibility for safeguarding even where day to day tasks are carried out by staff or volunteers, and they remain accountable for everything that happens within the charity. Delegating a task is not the same as delegating the responsibility for it.
The Trustee Act 2000 sets the standard. It requires trustees to "exercise such care and skill as is reasonable in the circumstances", which the Charity Commission interprets as putting appropriate procedures and safeguards in place and taking reasonable steps to make sure they are followed. It is not enough to assume things are being handled on the ground.
It is worth being fair about this. The Charity Commission recognises that most trustees are volunteers who sometimes make honest mistakes, and the law generally protects trustees who have acted honestly and reasonably.
As the Charity Commission makes clear in The Essential Trustee, trustees are not expected to be perfect. They are expected to do their best to comply with their duties, and to be able to show that they did.
Can trustees hand transport responsibility to their drivers?
This is the assumption that quietly exposes a board. A volunteer driver might say, in good faith, "I will only use paper", or "I do not want an app, I have always written it on a run sheet".
That is an understandable human preference, and many long serving volunteers feel it strongly. But it is worth being clear about what that preference actually means in governance terms.
If a driver's licence lapses into the wrong category, a vehicle goes out without a current MOT, or a run sheet of passengers' names, addresses and medical needs is left on a seat, the driver is not the person a court, regulator or insurer holds to account for the system that allowed it.
The board is. The driver owns the journey. The trustees own the framework the journey runs inside.
So when a board allows the whole operation to run on paper because that is what the drivers are comfortable with, it is, in effect, accepting the compliance risk on the drivers' behalf.
The preference belongs to the volunteer. The liability belongs to the trustees.
That is not an argument for overruling drivers without thought, but it is a reason for trustees to understand exactly what they are signing up to when they let "we have always done it on paper" set the standard.
What happens to trustees when something goes wrong?
If trustees do not follow safeguarding guidance, the consequences can fall on both the trustees and the charity, for example a statutory inquiry or other regulatory action by the Charity Commission.
The NCVO notes that a failure to manage safeguarding risks adequately can be treated as a failure of trustee duty and, in serious cases, as misconduct or mismanagement in the administration of the charity.
Beyond regulatory consequences, there is the question of personal financial exposure. If a charity is unincorporated, it does not exist as a separate legal entity. The trustees themselves enter into contracts and hold property in their personal capacity, so a claim by a third party can fall on the trustees personally.
Incorporated charities offer more protection, but even then liability is not eliminated. Trustees can still be exposed where they are found to have acted negligently, recklessly or dishonestly and have caused loss or damage.
As charity law specialists Godfrey Wilson explain, where a breach of trust causes a loss to the charity, trustees can be required to make good that loss, and such claims may be brought by the Charity Commission or the Attorney General.
Why is community transport a higher risk for trustees?
Transport charities carry a distinctive set of obligations that make governance systems particularly important. If your service charges for transport, even indirectly through a membership or subscription, it is likely operating for "hire or reward", and most operators run minibuses under a Section 19 or Section 22 permit to do so without a full PSV operator's licence.
The permit comes with strings attached. Government guidance on Section 19 and 22 permits makes the permit holder, and therefore its trustees, responsible for making sure vehicles are properly maintained, that maintenance and inspection records are kept, and that drivers hold the correct licence entitlement for the vehicle they drive.
Insurance adds another layer. The Charity Commission's guidance on charities and insurance advises treating volunteers the same way as employees and making sure they are covered by employers' liability or public liability cover, applying the same health and safety standards to voluntary workers as to paid staff exposed to the same risks.
As insurance broker Deva Risk Group points out, where volunteers, staff or trustees use their own cars for charity business, the charity needs to make sure the owner's motor insurance actually covers that use.
Every one of these obligations has the same thing in common. In a dispute, the question is not only "did you do the right thing?" but "can you prove you did?".
If a board cannot demonstrate that vehicle records were checked, that driver entitlements were current at the time of the journey, and that journey information was logged, it becomes very hard to show that reasonable care and skill were exercised.
A run sheet that can be lost, altered or simply never filed provides no reliable audit trail. In an investigation or an insurance claim, the absence of a record is not a neutral gap. It is the problem.
What does staying compliant on paper actually require?
It is tempting to think of paper as the simple, low cost option and digital as the expensive upgrade. In compliance terms it is closer to the opposite. Paper is not automatically non-compliant, but staying compliant on paper means carrying out, by hand and without fail, a long list of steps that software does automatically.
To meet the standard a regulator or insurer would expect, a paper based operation would need to:
- Manually verify, before each journey, that the assigned driver's licence is valid and the correct category, and that their MOT, insurance, tax and any DBS check are current, then record that the check was done and when.
- Record the booking, route, vehicle allocation and who authorised it before the journey takes place, not reconstructed afterwards from memory.
- Keep run sheets containing passengers' names, addresses and mobility or medical needs physically secure, under lock and key, with access limited to those who genuinely need it.
- Make sure every paper run sheet is returned, filed, retained for the required period and then securely destroyed, with nothing left in a glovebox, a kitchen drawer or a volunteer's home.
- Maintain vehicle maintenance and inspection records that satisfy the conditions of your permit.
- Be able to retrieve any of the above on demand for an insurer, the Charity Commission, the DVSA or the Information Commissioner's Office, often at short notice and sometimes years later.
- Spot, log and act on any sheet that goes missing, because a lost record of vulnerable people's data is a reportable matter, not just an administrative slip.
None of this is impossible on paper.
The difficulty is that every single step depends on a person remembering to do it, doing it correctly, and the result physically surviving and being findable later.
Each manual step is a point where compliance can quietly fail: an unsigned sheet, an expired licence nobody re-checked, a folder left in the wrong car. And every one of those gaps, if it surfaces in a claim or an inquiry, lands on the trustees.
Is paper also a data protection risk?
It is easy to think of data breaches as something that happens to computers. In practice, some of the most common breaches in the voluntary sector are very low tech: a run sheet left behind, a folder lost, a clipboard photographed.
The information on a transport run sheet, names, addresses and details of someone's disability or medical needs, is exactly the kind of sensitive personal data the law treats most seriously.
The UK GDPR accountability principle, explained in the ICO's guidance, means an organisation is not only responsible for protecting personal data but must also be able to demonstrate that it does so.
A charity that cannot say where its records are, who can see them or how they are kept secure cannot demonstrate compliance. That is itself a failing, regardless of whether anything has yet gone wrong.
And if a paper record is lost in a way that is likely to put people's rights and freedoms at risk, that is a personal data breach. The ICO requires it to be reported without undue delay and, where feasible, within 72 hours.
A pile of run sheets is far easier to lose, and far harder to account for, than an access controlled digital record.
What do reasonable systems look like in practice?
Regulators and insurers are not looking for perfection. They are looking for evidence that a board took its responsibilities seriously and put proportionate systems in place.
In practice, that means being able to answer questions like these, with records, not recollection:
- Were all drivers' records current and verified at the time of the journey?
- Was the route and vehicle allocation logged before the journey took place?
- Can you show where the vehicle was at any given time?
- Were passengers notified of their journey in a way that can be evidenced?
- Is there a clear record of who authorised what, and when?
- If a record were requested today, could you produce it within minutes rather than days?
How does going digital reduce trustee liability?
This is where the contrast with paper becomes a governance argument rather than a sales pitch. The whole point of a system like Road XS is that the compliance steps above stop depending on whether a volunteer remembered, and start happening automatically.
Driver records are kept up to date, and drivers with out of date records are automatically removed from journey lookups, so they cannot be assigned. The system stops vehicles travelling without a current MOT.
Every booking, route and journey is logged in the cloud with a full, time stamped audit trail accessible from anywhere. That data is held securely and access controlled, rather than sitting in a folder on a passenger seat.
The difference is not really paper versus screen. It is whether your compliance depends on memory and good intentions, or whether it is built into the way the service runs. With paper, the trustees are trusting that every check was done and every sheet survived. With a proper system, the evidence creates itself.
The bottom line for trustees
Volunteering as a trustee of a transport charity is a generous act. It should not carry hidden personal risk. But the protection the law offers trustees depends on being able to show they acted responsibly, and that means having systems in place, not just good intentions, and not just the systems your drivers happen to prefer.
A paper run sheet cannot demonstrate that. A modern transport management system can. If your service still runs on paper because that is what people are used to, the question for the board is not "is anyone complaining?". It is "if we were asked to prove we did everything right, could we?".
Frequently asked questions
Are charity trustees personally liable for community transport accidents?
It depends on the charity's legal structure. For unincorporated charities, trustees can be held personally liable for third party claims because the charity is not a separate legal entity. Incorporated charities offer more protection, though trustees can still be exposed if they act negligently, recklessly or dishonestly.
Does the Trustee Act 2000 apply to transport services?
Yes. The Act requires trustees to exercise reasonable care and skill in the circumstances. For transport, that means putting proper procedures and safeguards in place and taking reasonable steps to make sure they are followed, rather than assuming drivers or staff have it covered.
Can trustees pass transport responsibility to their drivers?
No. Trustees can delegate the task, but not the responsibility. A driver owns the journey, but the board owns the framework the journey runs inside. Regulators, insurers and courts hold the trustees accountable for the systems that allowed a failure to happen.
Do community transport charities need a PSV operator's licence?
Most do not. Operators charging for transport usually run under a Section 19 or Section 22 permit, which exempts them from full PSV operator licensing. The permit holder, and therefore the trustees, must keep vehicles maintained, hold inspection records and check driver entitlements.
Is a paper run sheet a GDPR risk?
Yes. Run sheets hold names, addresses and details of someone's disability or medical needs, which UK GDPR treats as sensitive personal data. A lost or misplaced sheet can be a reportable personal data breach that must go to the ICO without undue delay, and where feasible within 72 hours.
What insurance do charity transport volunteers need?
Charities are generally advised to treat volunteers like employees for insurance, covering them under employers' liability or public liability cover. Where volunteers use their own cars for charity business, the charity should confirm the owner's motor insurance actually covers that use.
How can trustees prove they exercised reasonable care?
With records rather than recollection. That means showing driver entitlements were current at the time of each journey, that routes and vehicles were logged before travel, and that journey data can be produced on demand. A time-stamped digital audit trail does this far more reliably than paper.
Please note: The degree of personal financial exposure for trustees varies significantly depending on whether the charity is incorporated or unincorporated. If you are a trustee and unsure of your charity's legal structure and what it means for your personal liability, it is worth seeking advice from a solicitor who specialises in charity law. This piece is intended to inform, not to constitute legal advice.
