Milestone 7 of 13 Start a retail business - compliance essentials

Protect customer and staff data

If you use personal information, including CCTV footage or a mailing list, you must pay the data protection fee to the Commission unless you are exempt.

Customer names and addresses, loyalty schemes, marketing lists, CCTV footage and staff records are all personal information. Organisations that use personal information, including sole traders, must pay a data protection fee to the Commission unless they are exempt.

Data protection for retail businesses

Lawful bases, privacy notices, marketing consent and CCTV in shops.

Pay the data protection fee to the Information Commission

Who must pay, the fee tiers and the exemptions.