September 2026
Data controllers to pay more from February
Author: John Tay
Key contact: Declan Goodwin
The UK government has announced a rise in the ICO data protection fees from February 2025.
Data controllers must pay this fee to the Information Commissioner's Office (ICO) to fund its work providing advice and guidance on data protection compliance, under the Data Protection (Charges and Information) (Amendment) Regulations 2025.
The new fee structure explained
The amendment introduces higher charges across all three tiers of data controllers, which are categorised based on the organisation's size and turnover. The new fees are as follows:
- Tier 1 (micro organisations): an increase from £40 to £52.
- Tier 2 (small and medium organisations): an increase from £60 to £78
- Tier 3 (large organisations): an increase from £2,900 to £3,763.
These adjustments are designed to reflect changes in the Retail Price Index since the original regulations were implemented. However, the increases are reportedly less than the overall rise in the index.
Reasons for the rise in ICO data protection fees
The government has cited the need to align the fees with inflationary pressures as a primary reason for the increase. This adjustment therefore ensures that the ICO can continue to effectively oversee data protection compliance without imposing a significant financial burden on data controllers.
Implications for data controllers
For data controllers, the new fee structure means a modest increase in operational costs. However, the regulations provide a transitional provision for those who have already paid their fees for the current charge period. If a data controller has paid the charge before the new regulations come into force, the previous fee structure will still apply for that period.
How we can help!
If you’re unsure whether your business or organisation needs to register with the ICO, you can read our guide "Should My Business Register With The ICO?".
Alternatively, we offer a complimentary service to determine whether your business or organisation is required to register with the ICO.
If your business or organisation is required to register with the ICO, you can find out more about our ICO Registration service here.
For advice on data protection compliance, contact our Commercial & Technology team.
