Ready Steady Rules

Pay the ICO data protection fee

If you hold any personal information electronically — a booking system, a till with customer accounts, a mailing list, CCTV, staff records, a Wi-Fi sign-up form — you almost certainly need to pay the ICO's annual data protection fee and appear on their public register.

If you hold any personal information electronically — a booking system, a till with customer accounts, a mailing list, CCTV, staff records, a Wi-Fi sign-up form — you almost certainly need to pay the ICO's annual data protection fee and appear on their public register. Run the self-assessment tool first; it takes a few minutes and tells you which tier applies and whether you're exempt.

Trading without paying the fee when you're required to is a criminal offence the ICO can and does pursue, including issuing penalty notices well above the fee itself. It also signals to customers and partners that you take data protection seriously.

WHEN
Same day online
COST
£52–£78 a year for most small and micro businesses
indicative, checked 2026-08
WHO DOES IT
You, online
A3
LEGAL BASIS
Data Protection (Charges and Information) Regulations 2018.
Run the fee self-assessment and pay

Free to check, then pay online if you're required to register. Most hospitality venues fall in the £52–£78 band.

Who this is for

Almost every venue — anyone processing customer or staff personal data electronically, including CCTV, bookings, loyalty schemes or a simple email list.

A small number of businesses are exempt (e.g. purely paper-based records with no electronic processing) — the self-assessment tool tells you which tier or exemption applies.

What you’ll hold

  • ICO registration confirmation and reference number

Watch out for

Sources

See also

This is item 41 of 66 in the free UK Launch Checklist. See the whole list →