Shadow Directors and the People the Register Doesn't Name: How ECCTA's Identity Regime Reframes Section 250

Companies House holds the names that are filed with it. It does not hold the names of the people who actually control UK companies, and it never has. The statutory architecture of UK director regulation rests on three categories: the formally appointed director, the de facto director, and the shadow director. Only one of those is on the register. Only one is being identity-verified under the Economic Crime and Corporate Transparency Act 2023 (ECCTA). The other two are exactly where they have always sat — in the case law, in the insolvency files, and in the disqualification orders made after the company has already failed.

Two years into the ECCTA reforms, that gap is the most under-discussed problem in the corporate transparency project. The Act has done a great deal to tighten what the register says about the people on it. It has done almost nothing about the people who are not.

The three names for one job

Section 250 of the Companies Act 2006 defines a director as "any person occupying the position of director, by whatever name called". The wording is deliberate. Parliament has never wanted to let a person off the duty hook merely because the company chose to call them a "manager", a "consultant", or — a perennial favourite — a "strategic adviser". The statutory test is functional, not titular.

Section 251 then defines the shadow director: a person in accordance with whose directions or instructions the directors of a company are accustomed to act. Professional advisers giving advice in that professional capacity are explicitly carved out by section 251(2). Parent companies are usually carved out of the shadow director concept for the purposes of the general duties under section 251(3), although they remain on the hook for the disqualification regime.

The three categories sit roughly as follows, and the gap that ECCTA does not close is in the right-hand columns.

The register only sees the top row. The Insolvency Service, when it actually goes looking, finds plenty in the bottom two.

The case-law test the register does not run

The modern de facto director test was set out by Millett J in Re Hydrodam (Corby) Ltd [1994] 2 BCLC 180 and worked back over by the Supreme Court in Holland v Revenue and Customs Commissioners [2010] UKSC 51. Smithton Ltd v Naggar [2014] EWCA Civ 939 then gave the Court of Appeal's modern reformulation: the question is whether the individual has assumed a role in the company sufficient to impose on them the fiduciary duties of a director, judged on cumulative factors — the corporate governance structure, what role the person actually performed, whether they were held out as a director, and whether they took part in decision-making on an equal footing with formally appointed directors.

For shadow directors the leading case remains Secretary of State for Trade and Industry v Deverell [2001] Ch 340. The Court of Appeal there held that the formal board need not be "subservient" to the alleged shadow director; "real influence" over corporate decision-making is enough. Vivendi SA v Richards [2013] EWHC 3006 (Ch) then confirmed that shadow directors owe fiduciary duties to the company in their own right.

None of this is new law in 2026. What is new is the contrast with the level of formal scrutiny now applied to the people on the AP01s. A de jure director who is appointed on Monday must complete identity verification with Companies House or through an Authorised Corporate Service Provider, or face a criminal offence and an unverified marker on the public record. A shadow director who tells that de jure director what to do every Tuesday faces neither.

Why ECCTA widens the gap before it can narrow it

The ECCTA identity verification regime, which moved to mandatory operation in April 2026, hooks off the act of formal appointment. The verified identity attaches to the person who signs the AP01, the IN01 on incorporation, or the corresponding LL forms for an LLP. The new appropriate-address rule, in force since March 2024, attaches to the registered office of the entity and to the service address of the appointed director. PSC declarations attach to people who meet the significant control conditions in Schedule 1A of the 2006 Act — a separate regime with its own threshold tests, and one which a sufficiently structured shadow influencer can still side-step.

The practical consequence is that ECCTA has raised the cost of being a registered director, but not the cost of being an unregistered one. Where a controller would once have accepted nominal directorship to retain operational control — because the register was not very policed and the downside was modest — the rational response after April 2026 is to step further back from the formal appointment and direct through a verified nominee. The nominee is now a small, costly headache. The shadow director, by contrast, remains exactly where they were before ECCTA was passed.

The enforcement track record

It would be wrong to pretend the shadow and de facto categories are dead letter. The Insolvency Service's published statistics for 2024–25 show 932 director disqualifications, with disqualification undertakings (the negotiated route under section 7 CDDA) making up roughly four in five. A meaningful minority of those cases — the Service does not publish a precise breakdown — are imposed on persons who were not on the register at the date of misconduct. Two patterns dominate:

1. Bounce Back Loan misuse, where the Service has pursued people who controlled the company without being appointed, often the spouse or family member of a formal director.
2. Phoenix arrangements, where the same controller passes the trading business through serial corporate vehicles while keeping their own name off the register; section 216 of the Insolvency Act 1986 already catches them, but the enforcement evidence is typically that they were the de facto director of both companies.

High-profile civil claims have made the point at scale. The BHS litigation (Wright and Rowley v Chappell [2024] EWHC 1417 (Ch)) saw the High Court make findings of de facto and shadow directorship against parties who were not on the register, contributing to the largest reported wrongful trading award in English legal history. The Carillion misfeasance proceedings and the Patisserie Valerie disciplinary actions have raised the same questions in their own ways. The point is not that the law is broken; the point is that the register tells you almost nothing about who is at risk under it.

Where the next reform sits

The Law Commission's 2024 consultation on corporate criminal liability acknowledged the issue without resolving it: the project's terms of reference were drawn around the attribution of liability to a company, not the identification of the human controllers behind it. Within ECCTA itself the Secretary of State has reserved powers under section 1098A of the 2006 Act (inserted by ECCTA) to make further regulations on the information collected at incorporation and on appointment, including powers that could in principle be extended to declared controllers below the PSC threshold. None of those powers have been exercised.

The more realistic short-term lever is the PSC regime itself. The PSC threshold (more than 25% of shares or voting rights, or the right to appoint or remove a majority of the board, or otherwise exercising significant influence or control) already maps imperfectly but recognisably onto the Deverell shadow director test. ECCTA has extended the registrar's powers to query and reject PSC filings that look implausible. A registrar willing to use those powers against companies that declare no PSC but file accounts showing single-controller revenue concentration would do more to surface de facto controllers than any new statute.

The plain-English takeaway

If you are doing due diligence on a UK company in 2026, the AP01 list is the start of the work, not the end. Identity verification under ECCTA confirms that the named director is who they say they are. It does not confirm that they are who is making the decisions. For most small private companies, those two things are the same person. For a meaningful slice of the register — and a disproportionate slice of the failures, the disqualifications, and the misfeasance awards — they are not.

The statutory architecture has known this since the Companies Act 2006 was drafted, and since Hydrodam was decided more than thirty years ago. ECCTA, for all its real achievements on the formal layer of the register, leaves the architecture intact. The shadow director and the de facto director remain exactly where section 250 placed them: in the substance of the company's affairs, and not necessarily in the filings.