ICO data protection fee renewal
The ICO data protection fee is payable every year, not once.
The ICO data protection fee is payable every year, not once. You renew online using your registration reference, and the ICO checks its public register against active businesses rather than chasing every account individually.
Letting the registration lapse and continuing to process personal data — CCTV, bookings, staff records, a mailing list — is a criminal offence the ICO can and does pursue, with penalties well above the fee itself.
You'll need your registration reference and order reference from the original registration.
Who this is for
Almost every venue — anyone already registered for processing customer or staff personal data.
What you’ll hold
- ICO renewal confirmation
Watch out for
- Losing the original registration reference and order reference — without them, renewal takes longer than it should.
- Assuming the ICO will write a reminder in good time. Penalty notices for lapsed registrations are handed out; polite warnings are not guaranteed.
- Not re-checking the fee tier when the business grows — a change in staff numbers or turnover can move you into a higher band at renewal.
Sources
- ICO — Renew your data protection fee checked 2026-09-02
- ICO — Guide to the data protection fee checked 2026-09-02
See also
- Pay the ICO data protection fee— this becomes part of getting open →
This is item 28 of 60 in the free UK Compliance Calendar. See the whole list →