ICO stepping up plans to fine data controllers who've not registered or paid the correct fee
Are you a data controller? Have you registered and paid the correct fee?
27.08.2019
One aspect of data protection compliance in the UK that is often overlooked is registration with the ICO. All Controllers need to register themselves with the ICO and pay a fee (unless they are exempt). The ICO has set up a tiered system so that smaller organisations pay lower fees than larger ones. The tiers and the fees are as follows:
Tier 1 (£40 per year) – For organisations smaller than 250 employees.
Tier 2 (£60 per year) – For organisation larger than 250 employees, and less than £36 million annual turnover.
Tier 3 (£2,900 per year) – For organisations larger than 250 employees, and more than £36 million annual turnover.
If you are not sure which tier you fall into, the ICO has provided a useful tool to lead you through the process and let you know which fee is payable. If you fail to register and pay the fee, you can be fined up to £4,350.
Many organisations have not yet paid the fee – something that has not gone unnoticed by the ICO which has issued more than 900 notices of an intent to fine and has already fined over 100 unregistered Controllers.
In certain limited circumstances an exemption may apply, e.g. you are only processing personal data for not-for-profit purposes and/or staff administration. If you want to know whether you are exempt, the easiest way is to work through the self-assessment tool on the ICO website which can be found here.
Our data protection specialist Joanne Bone comments
“Registering with the ICO is a key part of an organisation’s compliance with the new data protection laws. We often see that whilst businesses have put together policies and procedures for their staff they have not dealt with other compliance issues such as this. Policies, procedures and privacy notices relating to people other than employees are also often overlooked. Data protection laws apply to the use of all personal data in an organisation and an organisation wide approach needs to be taken to avoid potentially large fines.”
Key Contacts
Related Articles
Expert CommentUnderpaying holiday pay? State enforcement is on its wayNext year, the Fair Work Agency will be able to take action against employers who aren't paying their staff correctly when they go on holiday.
Expert CommentApril–March holiday years: the hidden bank holiday problemAll workers are entitled to at least 5.6 weeks holiday a year under the Working Time Regulations. Some employers include bank holidays within that allowance, others don't.
Expert CommentWhat are the risks of using fixed-term contracts once six month unfair dismissal rights come into force?Many businesses engage staff on fixed or limited-term contracts to provide cover for staff on family-related leave, absent due to long-term ill-health, or to complete a specific project or task. Some contracts set out the date they are due to end, other set out the specific circumstances that will bring them to an end.
