Two charities are among over 100 organisations that have been issued with fines by the Information Commissioner’s Office because they have not paid their annual fee.
All organisations which process personal data must pay an annual data protection fee to the ICO as part of regulations that came into force with the Data Protection Act on 25 May 2018.
The ICO said it issued over 900 notices of intent to fine in September and has now issued over 100 final monetary penalty notices.
It is not naming organisations at this stage.
Fees pay for the ICO’s work investigating data breaches and complaints, its advice line and other guidance.
Paul Arnold, Deputy Chief Executive Officer at the ICO, said: “Following numerous attempts to collect the fees via our robust collection process, we are now left with no option but to issue fines to these organisations. They must now pay these fines within 28 days or risk further legal action.
“You are breaking the law if you process personal data or are responsible for processing it and do not pay the data protection fee to the ICO. We produce lots of guidance for organisations on our website to help them decide whether they need to pay and how they can do this.”
The size of the fine depends on the size of the organisation and range between £400 and £4,000.
All charities are charged an annual fee on the lowest of the ICO’s three income tiers of £40, meaning their fine will be £400.
|
Related articles
