ICO issues final warning to care homes failing to pay data protection fee

The Information Commissioner’s Office (ICO) has begun enforcement action against care homes that have failed to pay the data protection fee.

Notices of intent have been sent to fine businesses up to £600 unless they make their payments.

Paul Arnold, Deputy Chief Executive Officer at the ICO, said: ”We expect the notices we have issued to serve as a final demand to these businesses and that they will pay before we proceed to a fine. But we will not hesitate to use our powers if necessary.

Story continues below

Advertisement

“All organisations that are required to pay the data protection fee must prioritise payment or risk getting a formal letter from us outlining enforcement action.”

All organisations that process personal data are required to pay a fee to the ICO and are then listed on its register of data controllers.

Fees range from up to £35 for smaller organisations to £2,900 for larger ones.

Further information and the ICO’s fee calculator tool are available here. The ICO’s Guide to the Data Protection Fee can be found here.

Organisations that have a current registration (or notification) under the 1998 Act – prior to 25 May 2018 – do not have to pay the new fee until that registration has expired.

Organisations have 21 days to respond to the notices.