Do I need to register with the ICO?

Question

I run a small online business and someone told me I have to register with the ICO and pay a fee. Is that true for a business as small as mine?

Mason Lewis · Accepted Answer

In most cases, yes. Organisations that process personal information generally have to pay a data protection fee to the Information Commissioner's Office unless they qualify for an exemption, and this applies to small businesses too, not just large ones. Processing personal data is broad and covers everyday activities like holding customer contact details, taking online orders, running marketing, or using CCTV. The fee itself is tiered and is modest for small organisations. There are some limited exemptions, for example for certain very small scale or purely personal activities, so it is worth checking rather than assuming. The ICO provides a short self assessment on its website that tells you whether you need to pay and, if so, which fee tier applies to you.

Ava Thompson · Answer

It is sensible to sort this out early, because failing to pay the fee when required can lead to a fine, and being registered is also a basic sign to customers that you take data protection seriously. Paying the fee is separate from your wider obligations under the data protection rules, such as having a privacy notice and keeping data secure, so treat registration as one part of getting compliant rather than the whole of it. Check the ICO self assessment for your specific situation. General information only.

Do I need to register with the ICO?

2 Answers

0 Comments

Related legal questions