# The Data Protection (Charges and Information) (Amendment) Regulations 2025, Note: Explanatory note


(This note is not part of the Regulations)
The Data Protection (Charges and Information) Regulations 2018 (S.I. 2018/480) (“the 2018 Regulations”) set out the circumstances in which data controllers are required to pay a charge to the Information Commissioner. Regulation 2 of the 2018 Regulations requires a data controller to pay an annual charge to the Information Commissioner unless all of the processing by the data controller is exempt processing. Each annual period for which a charge must be paid is described as a “charge period”. Regulation 3 of the 2018 Regulations makes provision for the amount of the annual charge, prescribing three tiers of charges according to criteria relating to a data controller’s turnover and number of members of staff (or only members of staff, for a public authority). Charities and small occupational pension schemes are included in the lowest tier. The charge is reduced if a data controller pays the charge by direct debit.
These Regulations only make provision increasing the charges set out in the 2018 Regulations. The increases are less than the increase in the retail prices index since the 2018 Regulations were made.
Regulation 2 of these Regulations amends regulation 3(1) of the 2018 Regulations to increase the annual charges for each of the three tiers as described in regulation 3(2) of the 2018 Regulations. In particular—
(a) It increases the charge for tier 1 (micro organisations) from £40 to £52;
(b) It increases the charge for tier 2 (small and medium organisations) from £60 to £78;
(c) It increases the charge for tier 3 (large organisations) from £2,900 to £3,763.
Regulation 3 of these Regulations provides that the new charge does not apply for a charge period that is ongoing when these Regulations come into force if the data controller has already paid the fee for that charge period.
A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sector is foreseen.

---
Source: https://www.legislation.gov.uk/uksi/2025/63/note (the official version)
Page: https://openlegislation.uk/data-protection-charges-and-information-amendment-regulations-2025/note
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.