ICO Data Protection Fee & Registration Check

Why this matters

Most UK organisations that process personal data must pay an annual data protection fee to the Information Commissioner’s Office under the Data Protection (Charges and Information) Regulations 2018. It applies to limited companies, sole traders, partnerships and charities alike, and personal data includes customer details, employee records and CCTV footage. The fee has three tiers based on staff numbers and turnover, from £52 for micro-organisations up to £3,763 for large ones, with a £5 discount for paying by direct debit. Failing to pay, or paying the wrong tier, is one of the ICO’s most common enforcement actions. The ICO can issue a monetary penalty of up to £4,350 for non-payment, and it regularly publishes its enforcement against small businesses that ignore reminders. Many firms assume they are exempt when they are not, or let their registration lapse after a change of company details. A quick check protects you from avoidable fines and shows customers and partners that your data protection basics are in order.

What you'll need

• Whether your business processes personal data electronically, including customer, supplier, employee or CCTV data
• Your current number of staff and annual turnover, to determine the fee tier
• Whether you already hold an ICO registration and know its renewal date
• Whether any exemption such as personal or household use, or certain not-for-profit activity, might apply

What you'll get

A personalised compliance report covering: a score out of 100, an executive summary, a list of findings ranked by severity, and a prioritised action plan with timeframes.