{"id":192973,"date":"2025-03-13T10:29:42","date_gmt":"2025-03-13T10:29:42","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=192973"},"modified":"2025-03-13T23:00:07","modified_gmt":"2025-03-13T23:00:07","slug":"ico-fee-small-businesses","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/ico-fee-small-businesses\/","title":{"rendered":"How Much is the ICO Fee? A Guide for Small Businesses"},"content":{"rendered":"\n

If your business processes personal data as a controller, you must register with the Information Commissioner’s Office (ICO<\/strong>) <\/a>and pay a data protection fee unless an exemption applies. This fee funds the ICO’s regulatory work to ensure it can oversee and enforce data protection laws in the UK. Businesses obliged to pay the fee should budget accordingly to meet their legal requirements. This article will explore the criteria for paying the data protection fee and how much it costs so that small businesses acting as data controllers can better understand their obligations. <\/p>\n\n\n\n

Who Needs to Pay the Data Protection Fee?<\/h2>\n\n\n\n

A business is a controller<\/a> if it decides how to process personal data. Most businesses determining how and why personal data is processed must register and pay the fee unless an exemption applies.  Suppose a business only processes data on behalf of another organisation and follows instructions without making decisions about its use. In that case, it acts as a processor and does not need to register. However, businesses operating as controllers and processors may still need to register.<\/p>\n\n\n\n

Exemptions apply to specific organisations, but assuming your business qualifies without checking could create compliance risks. The best way to determine whether your company must register is to complete the ICO’s self-assessment tool<\/a>. If you claim an exemption, keeping records explaining why you do not need to register is essential. <\/p>\n\n\n\n

How Much Does An Organisation Need to Pay?<\/h2>\n\n\n\n

Parliament sets the ICO fee structure<\/a>. Businesses are placed into tiers based on their annual turnover, number of staff, and organisation type.<\/p>\n\n\n\n

Following a consultation, the government increased the fee levels by 29.8 per cent on 17 February 2025. The fees are based on what is appropriate given the risks posed by the relevant data processing. Businesses must now check whether they are paying the correct amount under the updated structure and plan for future costs.<\/p>\n\n\n\n

As of 17 February 2025, micro-businesses and small organisations must pay \u00a352 annually. This applies to businesses with a turnover under \u00a3632,000 or fewer than 10 staff. Medium-sized organisations must pay \u00a378 per year. This applies to companies with a turnover under \u00a336 million or fewer than 250 staff. Large organisations must pay \u00a33,763 per year. This applies to businesses not meeting the above Tier 1 and Tier 2 thresholds. <\/p>\n\n\n

\n \"Front\n
\n
GDPR Essentials Factsheet<\/div>\n
\n

This factsheet sets out how your business can become GDPR compliant.<\/p>\n <\/div>\n \n\nDownload Now<\/a> <\/section>\n <\/div>\n\n\n\n\n

However, businesses that pay by Direct Debit will be entitled to a \u00a35 discount. Full information is available on the ICO’s website<\/a>. <\/p>\n\n\n\n

If unsure which fee applies to your business, you can complete the ICO’s fee self-assessment tool<\/a>. It is essential to check your fee status where necessary, as changes in your business’s structure or financial position may affect how much you need to pay.<\/p>\n\n\n\n\n\n Continue reading this article below the form\n <\/i>\n<\/a>\n

\n
\n Need legal advice?\n
\n \n Call 0808 196 8584<\/a> for urgent assistance.\n
\n Otherwise, complete this form, and we will contact you within one business day.\n <\/span>\n <\/div>\n\n \n\n
\n