Action we've taken

In November 2018, we issued our first monetary penalties to organisations that have not paid the data protection fee. Most organisations that process personal data must pay a fee and we can take action against those that don't. We issue a monetary penalty based on the fee the organisation should have paid. We issued:

103 monetary penalties for non-payment in 2018


85 organisations a monetary penalty of £400

2  organisations a monetary penalty of £600

16 organisations a monetary penalty of £4,000

 Advice from the ICO