UK ICO Data Protection Registration Checker

Check if you must register with the UK ICO and estimate your data protection fee tier

Ad placeholder (leaderboard)

The UK Information Commissioner’s Office (ICO) requires most organisations that process personal data to pay an annual data protection fee under the Data Protection (Charges and Information) Regulations 2018. This checker walks through the exemption rules and the tier thresholds so you can see whether you must pay and roughly how much.

How it works

The decision runs in two stages. First, an exemption test: if you do not process personal data at all, or you only process it for one of the narrow exempt purposes (staff administration, advertising/marketing your own goods, keeping accounts, or a not-for-profit’s own membership records) with no other processing and no automated decision-making, you may not need to pay.

If you are not exempt, the tier is set by size:

Charity (any size)                         -> Tier 1 (£40)
Public authority   <=10 staff              -> Tier 1
                   <=250 staff             -> Tier 2 (£60)
                   >250 staff              -> Tier 3 (£2,900)
Other org  <=10 staff  AND <£632k turnover -> Tier 1
           <=250 staff AND <£36m turnover  -> Tier 2
           otherwise                       -> Tier 3

A £5 discount applies to Tier 1 and Tier 2 if you pay by direct debit.

Notes and example

A 6-person marketing agency with £400,000 turnover that holds client and prospect contact data is not exempt (it processes data beyond the narrow purposes) and falls into Tier 1 at £40, or £35 by direct debit. A 40-person manufacturer with £5m turnover lands in Tier 2 at £60. Always confirm against the ICO’s official self-assessment before relying on the result, because edge cases such as CCTV use or processing on behalf of others can change the answer.

Ad placeholder (rectangle)