Do I Need to Register with the ICO?
Under UK data protection law, most organisations that process personal data must register with the ICO and pay an annual fee to the Information Commissioner’s Office (ICO). This fee helps fund the ICO’s work enforcing data protection regulations.
Did you know? Registration and payment of the data protection fee are separate from general UK GDPR compliance. An organisation can be exempt from the fee but still have data protection obligations.
Who needs to register with the ICO?
If you process personal data for purposes other than those covered by an exemption, you will likely need to register and pay the fee.
Common exemptions include processing solely for:
- Staff administration
- Marketing your own business
- Accounts and records
- Not-for-profit purposes
- Personal, family or household affairs
- Maintaining a public register
- Judicial functions
- Processing without using an automated system such as a computer
How to Check Your Tier
The ICO provides an online self-assessment tool to help you confirm:
- If you need to pay the fee
- Which tier your organisation falls into
You can access it here: ICO Registration Self-Assessment
Written by Clara Westbrook, solicitor and founder.
Speak to our team
Fee Structure
The amount you pay depends on the size and turnover of your organisation:
Most organisations are considered Tier 3 by default unless they notify the ICO otherwise.
Authority | Staff Numbers | Turnover | Annual Fee |
Tier 1 | No more than 10 staff | Turnover of no more than £632,000 | £52 |
Tier 2 | No more than 250 staff | Turnover of no more than £36 million | £78 |
Tier 3 | Organisations that do not qualify for Tier 1 or Tier 2 | Over £36 million | £3,763 |
Exempt | – | – | – |
You can pay the fee here.
Penalties for Non-Payment
Failing to pay the ICO fee when required can result in a fine of up to £4,350
Need help with ICO registration?
We can help you determine whether the data protection fee applies, identify the appropriate tier and complete the registration process.
Contact our data protection team →
Explore More Data Protection & Privacy Services
Our team have a deep understanding of the following areas of law and continue to add value to our clients’ businesses.
Latest Insights
- The GDPR Accountability Principle: From Paper to Practice
Accountability principle As a new consultant at Westbrook Data Protection Services, one of the first […] - Changes to employment law and the rise in Data Subject Access Requests
Changes to employment law and the rise in Data Subject Access Requests Employment Rights Act […]