UK Statutory Instrument 2018 United Kingdom

Data Protection (Charges and Information) Regulations 2018

What this means for your business

2 obligations
1 penalties
3 guides
Enforced by
ICO
Applies to
United Kingdom
On this page
2 compliance obligations, 3 practical guides
Read full text on legislation.gov.uk

What you must do

2 compliance obligations under this legislation.

Registration and licensing 2

Register partnership as a data controller with the ICO

If your business is a partnership and the partners act as data controllers, you can satisfy the data‑protection registration requirements by registering the partnership in its own name. Use the partnership’s principal address and report the turnover and staff numbers for the whole firm, not each partner individually.

Data Controller s.4 ICO Your business is a partnership where two or more partners are data …

Register school data controller and pay any required fee in the school’s name

Fine up to £17,500,000

If your school’s governing body and head teacher are both acting as data controllers, you must satisfy the data‑protection registration and fee requirements using the school’s name and address. This means treating the school itself as the single controller for the purposes of the charge and information rules.

Data Controller s.5 ICO Both the governing body and the head teacher are data controllers for …

Penalties for non-compliance

1 penalty under this legislation.

Significant fine

Register school data controller and pay any required fee in the school’s name

Fine up to £17,500,000

s.5 Penalises: Register school data controller and pay any required …

Practical guidance

Our guides explain how to comply with the requirements above.

Register with the ICO and pay the data protection fee

How to register with the Information Commissioner's Office and pay the annual data protection fee. Covers who must register, the …

Data protection for businesses

How to comply with UK GDPR and the Data Protection Act 2018. Covers ICO registration, lawful bases for processing, data …

Data protection annual compliance checklist

Annual checklist for verifying your data protection compliance. Covers ICO fee renewal, privacy notices, records of processing, breach procedures, staff …

Sections and provisions

7 classified provisions from this legislation.

2 Duties 3 Definitions 2 Exemptions

Duties 2

  • s.4 Requirements in respect of partnerships
  • s.5 Requirements in respect of the governing body of, and head teacher at, any school reference

Definitions 3

  • s.1 Citation, commencement and interpretation data controller data controller's financial year member of staff
  • s.3 Amount of charge payable under regulation 2 small occupational pension scheme
  • EXEMPT PROCESSING EXEMPT PROCESSING public register elected representative

Exemptions 2

  • s.2 Requirements on data controllers
  • s.6 Crown application