Letter from Information Commissioner's Office

[mje]

Today we received a letter from the ICO advising us to use their website to check to see if we need to pay a fee between £40 and £60, discounted for direct debit

Says the Data Protection Regulations 2018 require any business processing personal information and or uses CCTV needs to comply - goes on to say they didn't contact us before due to impact of Covid-19

The letter is very impersonal, but I believe genuine - the ICO of course have a website to check etc.

Anyway, seems they are sending these to Ltd companies, I just wondered if anyone else has been contacted, we have Sellerdeck of course and CCTV, so best pay up as don't want any trouble !

ico.org.uk/fee-checker

[Buzby]

You should be registered with the ICO and paying that fee yearly.

[mje]

You should be registered with the ICO and paying that fee yearly.

Indeed, all done - £40, knew nothing about it prior to the letter, as indeed I suspect many don't.

[Phil H]

Its quick to do the self assessment and they collect via direct debit. Their webinars are also good although you might need to watch them twice to take it in.

[Mike Hughes]

But see question 8 in the fee assessment questionnaire

Do you only process personal data for:

• Staff administration (including payroll);

You only hold the personal information of the people you need to for your staff administration.

• accounts or records (ie invoices and payments):

You only hold the personal information of the people you need to for your own accounts and records – for example information about past, existing or present customers or suppliers.

The information is restricted to what is necessary for your accounts and records – for example name, address and credit card details. However, this doesn't include information processed by or obtained from credit reference agencies.

• advertising, marketing and public relations (in connection with your own business activity).

You only hold the personal information of the people you need to for your own advertising, marketing and public relations – for example information about past, existing or present customers or suppliers.

The information is restricted to what is necessary for your advertising, marketing and public relations – for example, names, addresses and other identifiers.

You only advertise and market your own goods and services.

If you only process data for those purposes then you don’t need to register and pay the fee (unless you use CCTV for the purposes of crime prevention).