Draft Data Protection (Charges and Information) Regulations 2018 published


Share

The draft Data Protection (Charges and Information) Regulations 2018 have been published, and it is intended that the final version will come into force on 25 May 2018 in line with the General Data Protection Regulation.

The draft regulations replace the Data Protection (Notification and Notification Fees) Regulations 2000 and:

  • Set out when data controllers will be required to provide information to the Information Commissioners Office (ICO) and pay a charge associated with the processing of personal data
  • Require the payment of an annual charge to the ICO unless all processing by the data controller is exempt
  • Specific information, including the name and address of the controller, must be provided to the ICO in order to determine the correct charge
  • Special provision must be made where there is more than one data controller in respect of personal data, e.g. in the case of a governing body and the head teacher of a school.

The ICO has published a guide to the draft regulations and how controllers can ascertain whether they are required to pay a fee. The ICO intends to publish an online exemption assessment tool before 25 May 2018.

This article is taken from HR Law March 2018.

Insight

Selling to Government: new guidance for SMEs

Explore
Insight

Revisions to the Prudential Code provide useful clarity on local authority commercial investments

Explore
Insight

Challenges to procurement decisions: Government Response to the Transforming Public Procurement consultation

Explore
Insight

Levelling Up: The Power and the Glory?

Explore
Insight

Key points for councils: Government Response to the Transforming Public Procurement consultation

Explore
Insight

Local Government Matters newsletter December 2021

Explore