Most reception desks still have one: a ruled book, a pen on a string, and a column for name, company, car registration, time in and time out. It feels harmless. But a paper visitor book is a record of personal data, and the way it's usually kept creates risks that a Data Protection Officer will spot straight away.
A visitor book holds personal data
Names, organisations, phone numbers, vehicle registrations and visit times are all personal data. A sign-in book that is organised by date is a structured record, so it is likely to fall under UK GDPR in the same way a spreadsheet would. That means the same principles apply: collect only what you need, keep it secure, keep it no longer than necessary, and tell people what you're doing with it.
Five common problems with paper sign-in books
1. Every visitor can read the visitors before them
The most obvious issue. Anyone signing in can see who visited before them, who they work for and when they arrived. At a school that might reveal which parents came in for a meeting. At a GP surgery or a council office it might reveal far more. UK GDPR requires personal data to be kept secure against unauthorised access (Article 5(1)(f)), and an open page is hard to square with that.
2. Free-text columns collect things you never meant to keep
A "reason for visit" or "visiting" column invites people to write whatever comes to mind: "meeting re my son's assessment", "appointment with the housing officer about eviction". That is often sensitive information about a third party. Collecting it breaks the data minimisation principle (Article 5(1)(c)), and it now sits on an open page.
3. Old books are kept forever
Full books tend to end up in a drawer or a cupboard, and nobody decides when to destroy them. Personal data must not be kept longer than you need it (Article 5(1)(e)). Without a retention period, you can't show that you're meeting that.
4. Visitors aren't told what happens to their details
People have the right to know who is collecting their data, why, on what lawful basis and for how long (Article 13). A blank book with no privacy notice beside it doesn't tell them any of that.
5. It doesn't work when you actually need it
Handwriting is hard to read, sign-out columns are often left blank, and in an evacuation the book is usually still on the desk. The record that exists to tell you who is in the building often can't.
Is an open visitor book a data breach?
Not automatically. There's no regulator rule that says "never use a paper book". UK GDPR asks you to assess the risk and take proportionate steps. But if the risk is obvious and easy to fix, leaving it unfixed is hard to defend, especially in settings with children, patients or vulnerable adults.
If you keep paper, reduce the risk
- Use single tear-off slips or a book with a cover that hides earlier entries.
- Replace an open "reason" column with a short list to tick: contractor, meeting, delivery, interview, other.
- Put a short privacy notice on the desk, separate from the form.
- Set a retention period, lock completed sheets away and shred them on schedule.
- Decide who takes the current sheet out in an evacuation.
What a digital sign-in changes
A digital visitor log fixes most of these problems by design. Each visitor sees a blank form, never someone else's details. Reasons come from a preset list, with a short, length-limited box only for "Other". The privacy notice is shown on screen and the record notes which version each visitor saw. Retention can be automatic, so old records are cleared without anyone remembering to do it.
Where the data goes matters too. Visitor Book writes each day's sign-ins to a CSV file and a photos folder you control, rather than to a database run by a third party. On the Local tier, nothing passes through us at all. See local or cloud visitor management for how to choose.
This article is general information, not legal advice. Your own DPO or adviser should confirm what applies to your organisation.