ICO Registration Renewal: What You Need to Know

If your business needs to pay the ICO data protection fee, you must renew it every year. Your renewal follows your ICO registration, rather than your company’s financial year or confirmation statement date.

Here’s what to check before it expires.

When is your ICO renewal due?

Check the expiry date on your registration certificate or the ICO’s register of fee payers. The ICO sends renewal correspondence to your registered address, but keep your own reminder and make sure its contact details are current.

If you’re unsure whether the fee still applies, read ICO Registration: Do You Need to Register with the ICO?.

How do you renew?

Use the ICO’s renewal service.

For online card payment or setting up a Direct Debit, you’ll need:

• Your registration reference

• Your order reference

Both appear in application or renewal correspondence. If you already pay by Direct Debit, the ICO takes annual payments automatically. Check that the bank details remain correct and funds are available. Direct Debit gives a £5 reduction in the fee.

Renew your existing registration rather than creating a duplicate.

What should you check before renewing?

Review whether your business still needs to pay and whether its fee tier is correct.

Also check:

• Organisation address and trading names

• The nominated contact’s email and other details

• Data Protection Officer details, where applicable

• Staff numbers and turnover

Use the ICO’s update service for supported changes. Organisation name changes and Direct Debit bank changes have separate instructions on that page. A new legal entity, such as moving from sole trader to limited company, may need its own registration.

What if you miss renewal?

If the fee remains payable, failing to renew can lead to a penalty of up to £4,000, on top of the fee. Contact the ICO promptly if your registration has expired or payment has failed. Don’t assume a missed reminder removes the obligation.

Can you cancel your registration?

Yes, if you no longer need to pay. Confirm your position using the ICO’s assessment before cancelling. Stopping trading does not necessarily end the requirement: you may still hold personal information electronically.

Use the ICO’s cancellation service. If you pay by Direct Debit, also cancel it with your bank.

Keep renewal part of your annual review

Save your registration reference and certificate with your company records, and assign responsibility for renewal.

Use the same review to check your privacy information and data handling.