Why this matters.
Most UK organisations that process personal data must pay an annual data protection fee to the Information Commissioner’s Office under the Data Protection (Charges and Information) Regulations 2018. It applies to limited companies, sole traders, partnerships and charities alike, and personal data includes customer details, employee records and CCTV footage. The fee has three tiers based on staff numbers and turnover, from £52 for micro-organisations up to £3,763 for large ones, with a £5 discount for paying by direct debit. Failing to pay, or paying the wrong tier, is one of the ICO’s most common enforcement actions. The ICO can issue a monetary penalty of up to £4,350 for non-payment, and it regularly publishes its enforcement against small businesses that ignore reminders. Many firms assume they are exempt when they are not, or let their registration lapse after a change of company details. A quick check protects you from avoidable fines and shows customers and partners that your data protection basics are in order.