18 November Is Coming: The ECCTA Identity Verification Deadline That Will Catch Secretarial Firms Unprepared

18 November 2026. Mark it in red.

Not amber. Not the kind of date you circle and then quietly move to next quarter when something more urgent arrives. Companies House has drawn an explicit line: the twelve-month transition period for identity verification of existing directors and Persons of Significant Control closes on 18 November 2026. After that, compliance and enforcement activity against those who have failed to verify their identity will begin in earnest.

For company secretarial practices, accountants, and formation agents, the arithmetic is unforgiving. Companies House estimates that six to seven million individuals across the UK fall into the director and PSC categories alone. Your clients are among them. The question is not whether you knew this was coming, but whether you have worked through the client roster systematically or merely glanced at it and assumed it would sort itself out.

It will not sort itself out.

What the ECCTA actually requires, and from whom

The Economic Crime and Corporate Transparency Act 2023 introduced mandatory identity verification under a phased timetable. From 18 November 2025, IDV became compulsory for every new director appointment and every new incorporation. Existing directors and PSCs were given a twelve-month grace period. That grace period closes in eleven weeks.

Three groups are formally in scope. Directors and PSCs are the headline, but the third group is the one most directly relevant to professional services firms: company secretaries, accountants, and formation agents who file documents on behalf of companies. Mandatory IDV for these presenters and agents, alongside mandatory registration as an Authorised Corporate Service Provider (ACSP), was originally scheduled for Spring 2026. Companies House subsequently revised its timetable, pushing both requirements to "no earlier than November 2026." The presenter deadline and the director/PSC deadline are now effectively concurrent. Two trains arriving at the same platform.

The ACSP registration requirement is not trivial. Law firms, accountants, and formation agents filing on behalf of companies must be registered as an Authorised Corporate Service Provider to continue doing so. Organisations in scope need to be subject to the UK's anti-money laundering regime. If your firm has not begun the registration process, starting it in late October is cutting things extremely fine.

What this means for your Monday morning

Step one: pull a complete client list and cross-reference it against the Companies House register. Identify every director and PSC attached to your managed entities who does not yet show a verified status. That is your work queue.

Step two: communicate now. Clients have a well-established talent for missing deadline communications sent during August, particularly if those communications resemble any other compliance email they have ever received. A letter from a named senior contact, explaining in plain English that Companies House will begin enforcement after 18 November, tends to produce a different response than a newsletter footer.

Step three: establish your ACSP registration status. If your firm is not already registered or mid-registration, the window is closing. The verification itself, whether done directly through Companies House or via an authorised agent, requires government-issued photo ID and proof of address. For large corporate groups with inaccurate or inconsistent records, this is more than a five-minute exercise.

Step four: document everything. Companies House now operates with considerably sharper powers to query and reject information than it did pre-ECCTA. Filings need to be accurate on first submission, and the paper trail demonstrating due diligence in your IDV process will matter if questions arise later.

The EU AI Act arrives simultaneously, and nobody is quite sure what it means for Class 45

If the ECCTA calendar were not sufficiently entertaining on its own, 2 August 2026 saw the broad application date of the EU AI Act arrive. The regulation is, technically, not UK law. The practical question, as one commentator put it, is whether your business touches the EU market in ways that bring you within its scope. For most UK legal services and secretarial firms with any EU client base, the answer is likely yes.

For legal AI tools specifically, the picture is nuanced. Standard law firm applications, such as document review, contract analysis, and research assistance, are unlikely to qualify as high-risk under Annex III classification. But AI systems used for client risk scoring, litigation outcome prediction with direct effect on client decisions, or AI deployed in the administration of justice attract a different analysis. Point 8 of Annex III classifies AI systems used in the administration of justice and democratic processes as high-risk. Obligations include conformity assessment, a quality management system, technical documentation, post-market monitoring, and EU database registration. Non-compliance carries penalties up to EUR 15 million or 3% of global annual turnover.

The SRA, the ICO, and the FCA are each applying their existing frameworks to AI rather than waiting for a single UK statute. Five overlapping regulatory regimes, namely UK GDPR, FCA Consumer Duty, the EU AI Act's extraterritorial reach, the UK's cross-sector AI principles, and sector-specific rules, now constitute the effective compliance surface for any UK legal or secretarial firm using AI in client-facing processes. There is no single checklist that covers all five. There is only a governance framework assembled from the intersection of them, updated quarterly by someone who has been given both the authority and the time to do it properly.

Good luck finding that person.

Class 45 filings: the quiet signal

Against this backdrop, the trademark filing data carries an instructive subtext. AIBD analysis of IPO Trade Mark Database records shows 1,145 Class 45 filings in Q3 2026, a fall of 28.1% against the prior period. Class 45 covers legal services, security services for the physical protection of individuals, and personal and social services. A near-30% reduction in the quarter in which both the ECCTA timetable tightened and the EU AI Act came into general application is not, one suspects, a coincidence.

The 13th edition of the Nice Classification, which came into force on 1 January 2026, added express recognition of notarial services within Class 45 and introduced "Artificial Intelligence as a Service" under Class 42. Firms building AI-adjacent legal service brands had, in theory, clearer classification options from the start of the year. The filing numbers suggest they have been otherwise occupied. Or that they are waiting to see how the regulatory ground settles before committing to a brand strategy. Both are understandable. Neither is a plan.

The next deadline on the horizon

Beyond 18 November, Companies House has signalled that additional filing requirements for limited partnerships will arrive before year-end. The ONS's SIC 2026 framework, which explicitly recognises AI-related activities as distinct categories for the first time, separating general-purpose AI software from broader software classifications, is not yet in operational use, with earliest planned implementation in the 2031 Blue Book. Companies House will mandate SIC 2026 codes via Confirmation Statement updates when it does, which means firms have time to prepare but not infinite time to ignore it.

The next twelve weeks are the ones that will determine whether your practice's ECCTA record looks competent or chaotic. Enforcement begins when the transition period closes. The register does not grade on a curve.