From 25 May 2018, the Data Protection (Charges and Information) Regulations 2018 requires every organisation or sole trader who processes personal information to pay a data protection fee to the ICO, unless they are exempt.

Please note that we publish some of the information you provide to us on the register of controllers. If you use a domestic address in the course of your business and do not wish for this to be included on the public register which is available and downloadable from our website, please provide a PO Box or alternative address instead.

If you’ve recently received a letter from the ICO about paying your data protection fee, we hope you’ll find our website useful in helping you comply with your other GDPR obligations. If you’ve paid in the last 14 days, please ignore the letter you’ve received from us – you don’t need to pay again until next year.

Read our guidance on the data protection fee to find out more.

Pay now

First time payment      

Please only click Pay once, and don't refresh your page while your payment is being processed, as you may pay twice

(Elected representatives – please read the information below before making a payment)


For information about what we do with personal data see our privacy notice.

A Welsh language registration form (pdf) is also available.

NB: From 25 May 2018, people who use CCTV for domestic purposes, ie to monitor their property, even if it films beyond the boundaries of their property will be exempt from paying a fee under data protection law.

From 1 April 2019, the Data Protection (Charges and Information) (Amendment) Regulations 2019 exempted the processing of personal data by members of the House of Lords, elected representatives and prospective representatives.

‘Elected representatives’ is defined by the Data Protection Act 2018 and includes, but is not limited to, MPs, MSPs, AMs in Wales, MEPs, elected councillors in county councils, district councils, London boroughs, parish councils, elected mayors and police and crime commissioners.

‘Prospective representative’ refers to anyone seeking to become an elected representative as defined above.

Not sure if you need to pay a fee to the ICO?

Take our quick self-assessment to find out.


We will publish details of all controllers who pay the data protection fee on the data protection register, which will be available from our website. However, we won’t publish all the information you give us. The information we publish on the register will be limited to the following:

  • the name and address of the controller, but not details about individuals nominated as contact points for us;
  • the data protection registration number we give you;
  • the level of fee you have paid (tier 1, tier 2 or tier 3);
  • the date you paid the fee and when it is due to expire;
  • any other trading names you have;
  • contact details for your data protection officer, if you have told us you have one; and
  • the name of your data protection officer, if you have told us you have one and if they consent to this.

Not sure if you need to appoint a data protection officer?

Take our quick self-assessment to find out. 

Add a Data Protection Officer

Add a DPO

Do you have a number of organisations that are required to pay a data protection fee?

Contact our data protection fees helpline on 0303 123 1113 to discuss how we can help.

How much does it cost?

The cost of your data protection fee depends on your size and turnover. There are three tiers of fee ranging from £40 and £2,900, but for most organisations it will be £40 or £60. The payment is always VAT:nil

Some organisations only pay £40 regardless of their size and turnover. These are:

  • Charities;
  • small occupational pension schemes.

You can use our fee-assessment tool to find out how much you will need to pay.

Change my details

Need to change the details we hold?

Got a question?

We might have the answer - read our FAQs.

I've just paid. What next?

See our practical advice, toolkits, checklists and more to help you meet your data protection obligations.