Why 2026 is different for cofounders
2026 is not just “a few tweaks to HR law”. It is a convergence of legal changes that interact badly with a misaligned founding team, especially when one person quietly owns all the admin.
Companies House is gaining teeth on identity verification and filing accuracy. Employment law is tightening with longer time limits and a stronger duty to prevent harassment. Tech, AI and data enforcement is ramping up, and regulators are increasingly willing to fine small businesses, not just big brands.
“If you’re the only one taking this seriously, you’re now carrying everyone’s legal risk on your back.”
In a single‑founder business, one person either acts or does not. In a cofounder business, the risk comes from one founder doing their duty while another delays, ignores or actively resists – and the law does not distinguish between them when it looks at company‑level compliance.
Companies House: when a cofounder won’t verify
From late 2025 into 2026, every UK company director and every person with significant control (PSC) must verify their identity with Companies House, and continuing to act as a director without verification becomes an offence. Persistent non‑compliance can trigger financial penalties for individuals and the company, referrals to the Insolvency Service, and even strike‑off.
If just one cofounder refuses or “forgets” to verify, you can end up with:
- Blocked or queried filings, causing delays in raising money, restructuring or completing transactions.
- Personal exposure for that cofounder – including fines reportedly up to around £5,000 for persistent non‑compliance, and potential director disqualification.
- A company that appears opaque or non‑compliant to investors, banks and future acquirers.
“It is unlawful for a director to act as a director without completing identity verification.” – Companies House guidance
If you are the cofounder who does verify, files on time and responds to Companies House letters, this is infuriating. You still share responsibility for the company’s filings, but you cannot force another founder to comply. That misalignment becomes a structural risk for the business and for your own directorship record.
Employment changes: misaligned founders, aligned claims
The 2026 Employment Rights changes extend protection for workers and raise expectations on employers to be proactive, not reactive. Longer tribunal time limits and a higher duty to prevent harassment mean that inconsistent founder behaviour is more likely to turn into formal claims.
Longer window for unfair dismissal
Tribunal time limits for many employment claims are expected to extend from three months to six months, giving employees more time to decide whether to bring a case. In a cofounder‑led organisation where one founder “fires from the hip” and another tries to follow process, this extended window magnifies the damage.
- Off‑the‑record threats, sudden dismissals or “we’re done here” conversations can become evidence in a claim months later.
- The company is judged on whether a fair process was followed, not on which founder’s approach you personally preferred.
You will be the person asked to reconstruct emails, notes and policies around a decision you did not make, while the impulsive cofounder insists they were just “being commercial”.
Stronger duty to prevent harassment
From late 2026, employers will need to show they took all reasonable steps to prevent sexual harassment, including by third parties such as clients and customers. This goes beyond having a policy in a handbook; it is about training, culture and how leaders behave.
Tribunal awards for discrimination and harassment are already uncapped, with injury‑to‑feelings awards alone often running to five‑figure sums for SMEs, plus legal fees and management time. If one cofounder is the “boundary‑pusher” – jokes, drinking, blurred lines – their behaviour can expose the business, regardless of how careful you are.
“The addition of the word ‘all’ could have far‑reaching implications for employers.” – employment law commentary on the new harassment duty
You can have flawless policies; if founder behaviour contradicts them, the tribunal will look at reality, not paperwork. For the admin‑minded founder, the gap between what you document and what your partners do becomes evidence against the company.
Data, AI and cybersecurity: the hidden fines in “just using a tool”
Data protection and cybersecurity enforcement is no longer reserved for corporates. SMEs now account for a growing share of enforcement actions, and regulators are watching how businesses use AI and cloud tools.
Under UK GDPR, maximum fines remain up to 4% of global annual turnover or £17.5–20 million, depending on the tier of breach, and recent analysis shows that SME fines often fall in the tens of thousands, with averages around £80–90k. For a smaller founder‑led business, that is enough to wipe out a year’s profit or more.
Typical cofounder‑driven risks include:
- Uploading large customer or employee datasets into unvetted AI tools “to see what insights we get”.
- Allowing each department to adopt its own SaaS and AI stack with no central record of where data flows.
- Signing client contracts with strict data and security clauses without checking if you can actually comply.
“SMEs now make up a significant proportion of GDPR enforcement actions, and average fines in the tens of thousands are becoming common.”
As the founder who thinks about risk, you might draft an AI policy, put a DPIA template in place, and train staff. But if another cofounder keeps pushing “move fast and plug in tools”, the board as a whole may still be seen as having tolerated bad practice.
The personal cost of being the only adult in the room
Every cofounder group has one person who quietly owns Companies House, HR files, contracts, data protection and insurance. In 2026, that role becomes both more important and more emotionally expensive.
You lie awake worrying about:
- Whether the next confirmation statement will be rejected because a cofounder never verified.
- Whether a badly handled dismissal will turn into a claim months later.
- Whether that new AI‑powered workflow is quietly leaking personal data in the background.
“The law is moving faster than founder behaviour – and the gap is where fines, claims and burned‑out ‘responsible’ cofounders live.”
Without shared ownership, you also risk being blamed when things go wrong: “Why didn’t you insist we did this earlier?” or “Where was the policy?” – even when you did insist and did write the policy. Alignment is no longer a “nice to have” between cofounders; it is your best personal protection.
What to do if you are the admin‑minded cofounder
The goal is not to turn you into a lawyer. It is to give you leverage, language and a simple framework so you are no longer carrying this alone.
1. Put hard numbers on the risk
Abstract warnings rarely change behaviour. Use concrete figures in your next founders’ meeting:
- Companies House non‑compliance can lead to financial penalties at company or director level, referrals to the Insolvency Service and strike‑off.
- Harassment and discrimination claims can mean uncapped tribunal awards plus legal fees and reputational damage.
- GDPR and data fines for SMEs are increasingly common, often in the tens of thousands, with averages around £85,000.
Then ask the question as a board: “Which of these risks are we currently comfortable taking as a founder team – and on what basis?”
2. Make alignment a board decision
Stop trying to fix this one‑to‑one with a reluctant cofounder. Move the conversation into the boardroom.
- Present a short summary of the 2026 changes and where you believe you are exposed.
- Use a simple self‑assessment, like the 2026 Co‑Founder Legal Readiness Checklist, to score your current position together.
- Agree a 90‑day plan to raise your lowest scores – for example, identity verification, harassment prevention steps, and AI/data governance basics.
Once the minutes record that you have agreed actions at founder level, ongoing non‑compliance is much harder to ignore.
3. Separate governance homework from firefighting
Sales and delivery will always feel more urgent. To make progress, you need dedicated time for governance, not just occasional emails.
- Schedule a half‑day “2026 risk summit” with cofounders and your legal/HR advisers.
- Use that session to decide where you need updated contracts and policies, and what behaviours must change at founder level.
- For the deeper mechanics – deadlock, exits, leavers, board powers – point your founders to your separate article on cofounder governance, Shareholders’ Agreements and board design, and work through that together.
You do not need to explain every clause in this piece. Instead, this blog should make clear that not having the right structures in place is now a far more expensive choice than it used to be.
Call to action: don’t carry this alone
If you recognise yourself as the founder who keeps the company out of trouble while others race ahead, 2026 is your nudge to stop doing that in isolation. The legal environment is changing faster than many founder teams – and the gap between the two is where fines, claims and burnout happen.
“The moment you put a number on the risk, you stop being ‘the fussy one’ and start being the only person looking at the full picture.”
Next step:
- Download the 2026 UK Co‑Founder Legal Readiness Checklist and score your business honestly.
- Bring the scores to your next founders’ meeting and use them to decide – together – which risks you are willing to live with.