UK Data Protection (Charges and Information) Regulations 2018

The Regulations, laid before Parliament on 20 February 2018 and still in draft form, set out the circumstances in which data controllers are required to pay a charge and provide information to the Information Commissioner from 25th May 2018. There are three different tiers of fee and controllers are expected to pay between £40 and £2,900. The fees are set by Parliament to reflect what it believes is appropriate based on the risks posed by the processing of personal data by controllers. The Regulations will replace the previous regime under the Data Protection (Notification and Notification Fees) Regulations 2000 (S.I. 2000/188). In addition, the ICO has issued Data Protection Fee – A Guide for Controllers. This guidance deals specifically with the requirements of the 2018 Regulations.