The Information Commissioner’s Office (ICO) has released details of the fees agents will have to pay as data controllers, and they’re significantly higher than the current cost of ICO registration.
Under the new data protection regime, which comes into force through the EU-wide General Data Protection Regulation (GDPR) and the Data Protection (Charges and Information) Regulations on May 25, data controllers must pay the ICO a data protection fee.
The fee, which the ICO says will fund its data protection work, replaces the requirement to ‘notify’ (or register), which is in the Data Protection Act 1998.
There are three different tiers of fee that controllers are expected to pay, based on turnover and members of staff:
1) Tier 1: Micro organisations with a maximum annual turnover of £632,000 or no more than ten members of staff will pay £40.
2) Tier 2: Small and medium organisations with a maximum turnover of £36m or no more than 250 members of staff will pay £60
3) Tier 3: Large organisations that do not meet the criteria for tiers 1 or 2 have to pay £2,900
The ICO added: “We regard all controllers as eligible to pay a fee in tier 3 unless they tell us otherwise.”
Currently, ICO registration is £35 for businesses up to 249 staff and £24.9m turnover and £500 for those businesses above that level.
More details on the new fees can be found here.