A straightforward way to organise Google Drive at work

A person sitting at a desk with a laptop open in a tidy office, with neatly arranged papers and a coffee cup nearby
TL;DR

A well-organised Google Drive uses five or six shared drives named for business functions, numbered for consistent sort order, and filed by purpose rather than file type. UK data protection rules require role-based access controls on any Drive storing personal data. The full setup takes one focused day and a short team training session to make it stick.

Key takeaways

- Organise Google Drive by business function using numbered top-level shared drives, not by file type. - Shared Drives owned by the organisation protect you against losing files when a team member leaves. - Three levels of folder depth is the practical limit; beyond that, staff revert to search rather than browsing. - UK GDPR requires role-based access controls and a retention policy for personal data stored in Drive, including HR and client records. - A single 30-minute team training session is usually enough to shift behaviour in an owner-managed firm under 50 people.

A client I spoke with last year ran a 12-person consultancy. Good work, repeat clients, steady margins. Every Monday morning, before she could raise the previous month’s invoice, she spent 20 minutes looking for the signed contract. The file was in Drive. It was always in Drive. The problem was that Drive covered about 40 folders spread across three people’s personal My Drive accounts, and nobody had agreed on where anything belonged.

That kind of chaos is the default in owner-managed firms that grew without a plan for Drive. And it is entirely fixable.

What does a well-organised Google Drive actually look like?

A well-organised Drive has five or six top-level folders named for business functions, numbered to force a consistent sort order, and housed inside Shared Drives rather than anyone’s personal My Drive. Content sits in the folder that matches the purpose of the work, not the file type. A three-level hierarchy is about as deep as it needs to go. Naming conventions handle the rest.

For an owner-managed services firm with 5 to 50 people, a practical starting structure is:

  • 01_Clients for client work and delivery materials
  • 02_Operations for internal processes, templates, and how-to guides
  • 03_Marketing_Sales for content, collateral, and pipeline materials
  • 04_Finance_Legal for accounts, contracts, and legal documents
  • 05_People_HR for employment records and policies
  • 99_Archive for completed work that is no longer active

The numeric prefixes force alphabetical sort to follow business priority. Organising by purpose rather than by file type (all spreadsheets together, all PDFs together) is what makes the structure intuitive over time. Practitioners who specialise in owner-managed business operations, including Tanesha Pittman and Mariela Ibarra, both recommend this departmental model as the baseline for a small business Drive.

Shared Drives solve a problem that personal My Drive accounts create. When a team member leaves, files in their My Drive disappear or require a manual transfer. Shared Drives are owned by the organisation, not the individual. Google’s own admin guidance recommends them for any content that belongs to a team rather than a specific person.

Why does Drive structure matter for your business?

Knowledge workers spend around 19 per cent of their working week searching for and gathering information, according to McKinsey research. For a 20-person firm, that is roughly the equivalent of one full-time person doing nothing but looking for stuff. The UK’s National Productivity Institute found that owner-managed businesses with better information management report labour productivity around 10 to 15 per cent higher than comparable sector peers.

There is also a regulatory angle that catches many business owners off guard. The ICO has fined organisations where poor records management led to unlawful disclosure of personal data. If your Drive holds client contact details, employee records, or any other personal data, and access to those files is uncontrolled, you are likely out of line with UK GDPR expectations. That is the default state of a Drive that grew without a plan.

A clear folder structure also shortens onboarding. Knowledge management research in professional services suggests that consistent file structures reduce the time a new joiner spends finding past work by up to 25 to 30 per cent, because they do not have to learn a system invented by each individual colleague.

How do you set one up without breaking everything?

The sequence matters as much as the structure. Start by deciding the folder taxonomy, writing it down, and sharing it before moving a single file. Then create your Shared Drives, migrate only the current-year active content first, standardise your naming conventions, and run a 30 to 60 minute team session on where things live and what not to do. That order is what makes the change stick.

Migrate current-year client folders, active finance materials, and key policies first. Everything else can wait. Move completed client folders into your Archive folder rather than deleting them; the archive keeps the live area clean without losing history or evidence you might need later.

For naming conventions, a format of ISO date, client name, then description works well. 20260101_AcmeLtd_ProposalV2 tells you the date, the client, and what the document is before you open it. Sorting by name then becomes sorting by date automatically. Apply the same numbered-prefix logic to sub-folders to keep frequently used folders at the top.

Lock down who can create new top-level folders. In Shared Drives, only administrators and designated content managers should be able to add folders at the root level. If anyone can create a top-level folder, the structure degenerates within weeks regardless of how clearly the original plan was documented.

Training matters more than many owners expect. UK government research found that owner-managed businesses investing at least 8 hours of structured digital skills training per employee annually were around 25 percentage points more likely to report productivity gains from cloud tools. A single 30-minute Drive session covering where things live and what not to do is usually enough to shift behaviour in a team under 50 people.

What about sharing, access, and UK data rules?

The ICO’s guidance on cloud computing confirms that organisations remain responsible for personal data stored with cloud providers, including Google. That responsibility includes implementing appropriate access controls, having a retention policy, and ensuring that personal data in Drive is limited to those who need to see it. For any UK services firm that stores client or staff data in Drive, this is not optional.

Google Workspace supports role-based permissions in Shared Drives: Viewer, Commenter, Contributor, Content manager, and Manager. This maps cleanly to the ICO’s recommended approach of granting access based on job role rather than ad hoc decisions. A practical arrangement for a services firm: delivery staff as Contributors on the Clients shared drive, directors only as Managers on Finance and Legal, and HR records accessible only to the people lead and directors.

If you are using or planning to use Google’s Gemini AI features within Workspace, apply the same care. Google’s product terms state that customer content is not used to train its foundation models, but the ICO’s guidance on generative AI makes clear that where AI tools are used on personal data, organisations must assess data protection risks and document a lawful basis. Review your Workspace admin settings before enabling AI features over HR or legal folders.

When is a tidy Drive not the full answer?

A well-organised Drive is a meaningful improvement for owner-managed services businesses, but it has limits. If your firm operates across Microsoft 365 and Google Drive simultaneously, a Drive-only playbook covers only part of the problem. If you are in a sector with formal records management requirements, such as law, regulated financial services, or healthcare, a folder taxonomy is not sufficient and you will need specialist records management advice.

The most common failure mode is leadership. If the senior people in the business continue creating ad hoc folders and sharing files from personal My Drive accounts, the structure degenerates within weeks. A clean Drive architecture requires someone to hold the line, which means the business owner making it explicit that the agreed structure is how the business works now, not just a recommendation.

Drive also works best as a document store, not a system of record. Task management, project tracking, and client relationship management belong in dedicated tools. Keeping Drive focused on documents, within a clear structure, is what makes it genuinely useful over time.


The principle is simple: treat Drive like a shared filing cabinet, not a dumping ground for individual links. A bit of structure upfront saves hours every month and makes handovers, onboarding, and audits considerably easier. Start with the six top-level Shared Drives. Everything else follows from there.

Sources

- McKinsey Global Institute (2012). The social economy: Unlocking value and productivity through social technologies. Research estimating knowledge workers spend around 19% of their working week searching for information. https://www.mckinsey.com/industries/technology-media-and-telecommunications/our-insights/the-social-economy - The Productivity Institute (2023). Productivity in UK Services Sector. Research finding owner-managed businesses with better information management report 10-15% higher labour productivity than sector peers. https://www.theproductivityinstitute.org/wp-content/uploads/2023/03/TPIDP044_Productivity_in_UK_Services_Sector.pdf - UK Information Commissioner's Office. Security of personal data. ICO guidance on access controls, risk management, and records management obligations for personal data in cloud and on-premise systems. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/security-of-personal-data/ - UK Information Commissioner's Office. Cloud computing guidance. Confirms organisations remain responsible for personal data stored with cloud providers and must implement appropriate controls and audit trails. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/cloud-computing/ - UK Information Commissioner's Office (2023). Generative AI guidance for organisations. ICO advice on data protection obligations when using AI features on personal data stored in cloud tools. https://ico.org.uk/media/for-organisations/advice-for-small-organisations/4023121/generative-ai-guidance-for-organisations.pdf - UK Information Commissioner's Office. Records management and retention. ICO expectations for retention policies and review schedules on documents containing personal data. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/records-management-and-security/records-management-and-retention/ - UK Department for Business, Energy and Industrial Strategy. Productivity, technology adoption and digital skills. Research finding businesses investing 8+ hours structured digital skills training per employee annually were 25 percentage points more likely to report productivity gains from cloud tools. https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/807280/productivity-insights-digital-skills-and-productivity.pdf - Nielsen Norman Group. Deep hierarchies in navigation. Usability research on why users struggle to navigate folder hierarchies beyond three to four levels and revert to search. https://www.nngroup.com/articles/deep-hierarchies/ - CIPS Supply Management (2018). How knowledge management can drive productivity. Research suggesting consistent file structures reduce time to first billable work for new joiners in professional services. https://www.cips.org/supply-management/analysis/2018/june/how-knowledge-management-can-drive-productivity/ - Google Workspace Admin Help. Shared drives: Set up and manage. Google guidance on using Shared Drives for team-owned content and the role-based permission levels available. https://support.google.com/a/answer/9310272

Frequently asked questions

How many folders should I have at the top level of Google Drive?

Five or six shared drives aligned to business functions works well for an owner-managed services firm. A practical set is Clients, Operations, Marketing and Sales, Finance and Legal, People and HR, and Archive. More than six at the top level becomes difficult to enforce consistently, and staff tend to create ad hoc folders outside the structure.

What is the difference between My Drive and Shared Drives in Google Workspace?

My Drive is personal storage tied to an individual account. When that person leaves, the files leave with them unless someone manually transfers them. Shared Drives are owned by the organisation, so files persist regardless of staff changes. For any content that belongs to the business rather than a specific person, Shared Drives are the right home.

Does storing files in Google Drive create UK GDPR obligations?

Yes. The ICO confirms that organisations remain responsible for personal data stored with cloud providers. If your Drive contains client contact details, employee records, or any other personal data, you need role-based access controls, a retention policy, and a lawful basis for storing the data. A free-for-all Drive is likely out of line with those expectations.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation