The ICO exists to empower you through information.

As the UK’s data protection regulator, we are contacting all registered companies in the UK to help them comply with the law by reminding them to check if they need to pay a data protection fee.

All businesses and other organisations that process personal information should pay the annual data protection fee, unless they are exempt. The fee applies no matter how big, or small, your business or organisation is, although not everyone has to pay the same amount.

If you have paid in the last 14 days, please ignore the letter asking you to pay. If you have paid by card or direct debit, it can take up to 24 hours to receive confirmation.

What is the data protection fee?

Under the Data Protection Act 2018, organisations or individuals processing personal data electronically are required to pay a data protection fee unless they are exempt.

It is the law to pay the fee, which funds the ICO’s work, but it also makes good business sense because whether or not you have paid could have an impact on your reputation.

Does data protection apply to me?

Yes, if you have information about people for any business or other non-household purpose.

What do I need to do?

If you have received a letter from us quoting your Companies House number, you must:

What is ‘personal data’?

Personal data is information about particular living individuals. This might be anyone, including customers, clients, employees, business partners, members, supporters, business contacts, public officials or members of the public.

It does not need to be 'private' information – information which is public knowledge or which is about someone's professional life can be personal data too.

Which sorts of companies are likely to need to pay?

The fee is payable by a range of companies, depending on your practices. The amount payable varies depending on the size of the organisation.

More information

We have put together frequently asked questions for specific sectors. Please see the links below and follow to your relevant nature of business.

Have we missed something?