Draft Data Protection (Charges and Information) Regulations 2018 published


Share

The draft Data Protection (Charges and Information) Regulations 2018 have been published, and it is intended that the final version will come into force on 25 May 2018 in line with the General Data Protection Regulation.

The draft regulations replace the Data Protection (Notification and Notification Fees) Regulations 2000 and:

  • Set out when data controllers will be required to provide information to the Information Commissioners Office (ICO) and pay a charge associated with the processing of personal data
  • Require the payment of an annual charge to the ICO unless all processing by the data controller is exempt
  • Specific information, including the name and address of the controller, must be provided to the ICO in order to determine the correct charge
  • Special provision must be made where there is more than one data controller in respect of personal data, e.g. in the case of a governing body and the head teacher of a school.

The ICO has published a guide to the draft regulations and how controllers can ascertain whether they are required to pay a fee. The ICO intends to publish an online exemption assessment tool before 25 May 2018.

This article is taken from HR Law March 2018.

Insight

Landlord's Certificates under the Building Safety Act 2022 – what do landlords need to do?

Explore
Insight

Webinar: The Public Sector Equality Duty

Explore
Insight

Trowers' property litigation weekly update

Explore
Insight

Thinking Business - Issue 12

Explore
Insight

Data Privacy Webinar series: Spotlight on regulatory and enforcement updates – where do your risks lie?

Explore
Insight

Webinar: Subsidy Control – are you ready? Count down to the 4th January

Explore