11/06/2026
Most UK businesses that handle personal data are legally required to register with the Information Commissioner’s Office (ICO) and pay an annual data protection fee. A surprising number don’t, often without realising. Here’s who needs to register, what it costs, and how to do it properly.
If your business holds names, email addresses, phone numbers, employee records, customer lists, supplier contacts, CCTV footage, or pretty much any information that identifies a living person, you almost certainly need to be registered with the ICO. The legal duty applies to organisations of all sizes, from sole traders working from home to large enterprises.
The fee starts at £40 a year. The penalty for not paying it can run into thousands of pounds. The whole registration process takes about ten minutes online. And yet, walking through any UK high street or business park, you can identify dozens of small businesses that are not on the ICO’s register. Some have never heard of the requirement.