Legal
ICO Registration Renewal: What You Need to Know
Learn when to renew your ICO registration, how to pay the annual fee, update your details and cancel if your business no longer needs to pay.
ICO Registration: Do You Need to Register with the ICO?
Check whether your UK business needs to register with the ICO, which exemptions apply, how much the data protection fee costs and how to pay.
By Callum Sommerton28 September 20263 min read
Many UK businesses must register with the Information Commissioner’s Office (ICO) and pay an annual data protection fee. But forming a limited company does not automatically mean you need to pay.
The requirement depends on how your business uses personal information and whether an exemption applies.
Here’s how to check.
Who needs to pay the ICO fee?
You generally need to pay if your business processes personal data as a controller, unless exempt.
A controller decides why and how personal information is used. Personal data includes information about identifiable people, such as customer details, employee records and CCTV footage. Sole traders may also need to pay. Being small, working alone or having a low turnover does not automatically exempt you.
Which businesses are exempt?
You may be exempt if you only process personal information for specified purposes, including:
Staff administration
Your own advertising, marketing and public relations
Accounts and records
Other exemptions exist, with conditions attached.
The important word is only. If you also use personal information for a purpose outside the exemptions, you may need to pay. For example, business CCTV used for crime prevention normally requires payment.
Use the ICO’s fee self-assessment to check your activities. Don’t decide based on your industry or company size alone.
How much does ICO registration cost?
The current annual fees are:
Tier | Standard annual fee |
|---|---|
Tier 1: micro organisations | £52 |
Tier 2: small and medium organisations | £78 |
Tier 3: large organisations | £3,763 |
Tier 1 normally applies if your turnover is no more than £632,000 or you have no more than 10 staff. If you don’t qualify for Tier 1, Tier 2 normally applies if turnover is no more than £36 million or you have no more than 250 staff.
Special rules apply to some organisations. The ICO’s assessment helps identify the correct tier.
Paying by Direct Debit reduces the annual fee by £5.
How do you register?
If you need to pay, use the ICO’s official registration service.
Have your organisation’s name, address, staff numbers, turnover and payment details ready. Save your registration reference and record the renewal date.
Registration is annual. Our guide to ICO registration renewal explains what happens next.
Does paying the fee make you GDPR compliant?
No. Paying the fee meets one obligation; it does not certify your data handling.
You still need to use personal information lawfully, keep it secure and provide appropriate privacy information. These responsibilities also apply if you’re exempt from the fee.
What if you don’t pay when required?
The ICO can issue a penalty of up to £4,000, in addition to the fee owed.
Check your position early and reassess it when your activities change. ICO registration belongs alongside the other tasks covered in our guide
