Oliver Price’s Weekly GDPR Blog #20 – ICO’s New Fees Announced

This week the Government announced a new charging structure for data controllers. The fees are tiered based upon the financial size by turnover and number of staff and as follows:
1.Micro organisations with a maximum turnover of £632,000 or no more than 10 members of staff – fee £40 (or £35 if paid by direct debit); 
2.SME’s with a maximum turnover of £36,000,000 or no more than 250 members of staff - fee £60; and 
3.Large organisations i.e. which do not meet the criteria of tiers 1 & 2 above - fee £2,900.
It has been widely reported that the ICO receives funding from fines, but that is simply not the case. All fines are passed through to central Government coffers and that will continue. That said the expectation is that the GDPR will from the 25 May 2018 substantially increase the ICO’s work. Therefore in line with other areas where Government departments charge fees, for instance the Court service, I would expect these fees to rise during coming years.
The present fee regime will be maintained for any renewals of annual data notifications that take place between now and the 25 May 2018.
23 February 2018

Last updated 23/02/2018