ICO Data Protection Fee Registration
Most UK organisations that process personal data must register with the ICO and pay an annual data protection fee. We handle the registration on your behalf — you stay on the ICO register, stay compliant with UK GDPR, and avoid fines. No card surcharge.
ICO data protection fee tiers
The ICO sets three fee tiers based on your organisation's size and type. We register you, confirm your tier, and pay the ICO fee at cost — no markup.
| Tier | Annual fee | Direct Debit |
|---|---|---|
| Tier 1 Micro organisation | £52 /yr | £47/yr |
| Tier 2 SME | £78 /yr | £73/yr |
| Tier 3 Large organisation | £3,763 /yr | £3,758/yr |
ICO fees are set by the Information Commissioner's Office and are subject to change. A £5 Direct Debit discount applies to all tiers. We pay the ICO fee at cost with no markup.
Our registration service
We register your organisation with the ICO, confirm the correct fee tier, and ensure your entry on the ICO register is accurate. You provide your details once — we handle the rest.
- ✓ We complete your ICO registration
- ✓ Correct fee tier confirmed
- ✓ ICO fee passed through at cost
- ✓ Confirmation of ICO register entry
Example totals
All prices in GBP. No card surcharge applied (prohibited under UK PSD2).
Why ICO registration matters
Under the Data Protection (Charges and Information) Regulations 2018, most organisations processing personal data must register and pay the annual data protection fee.
Legal requirement
Most UK organisations processing personal data must be on the ICO register and pay the annual fee — even if you don't store much data.
Fines for non-registration
The ICO can issue fixed monetary penalties to organisations that process personal data without registering. The ICO actively pursues organisations that should be registered but are not.
UK GDPR compliance
Being on the ICO register demonstrates accountability and is a core part of UK GDPR compliance for any organisation handling personal data.
Ready to register with the ICO?
We handle your ICO registration for £79 + the ICO fee at cost. No card surcharge.
Frequently asked questions
Common questions about ICO registration and the data protection fee.
Do I need to register with the ICO? ▾
Most UK organisations that process personal data must register with the ICO and pay the annual data protection fee. This applies regardless of whether you process data on paper or electronically. There are some exemptions (see below), but if you handle customer details, employee records, supplier information, or CCTV footage, you almost certainly need to register.
How much is the data protection fee? ▾
The ICO fee depends on your organisation's size: Tier 1 (£52/yr) for micro organisations, Tier 2 (£78/yr) for SMEs, and Tier 3 (£3,763/yr) for large organisations. A £5 annual discount applies if you pay by Direct Debit. Our registration service is a flat £79 on top of the ICO fee at cost.
What happens if I don't register? ▾
If you are required to register but fail to do so, the ICO can issue a fixed monetary penalty. The exact amount varies, but penalties can be significant — particularly for persistent non-payment. The ICO actively pursues organisations that should be registered but are not.
Are there exemptions? ▾
Yes. Some organisations are exempt from paying the fee, including: organisations that process personal data only for staff administration, accounts and records, advertising/marketing, or non-profit-making activities; members' clubs with no external processing; and certain public bodies already covered by other arrangements. However, exemptions are narrow — if in doubt, it's safest to register. We can help you determine whether an exemption applies.
Important disclaimer: Performance West Ltd is not the ICO. We are a paid compliance service. We register your organisation with the Information Commissioner's Office on your behalf and pay the ICO data protection fee at cost. You can also register directly with the ICO yourself at ico.org.uk. Government fees are passed through at cost with no markup. Card surcharges are not applied (prohibited under UK PSD2).