UK data controllers to pay ICO up to £2.4k more a year when GDPR kicks in The UK government has revealed plans to increase the top tier of annual fees for data controllers from £500 to £2,900 in an attempt to ensure the Brit privacy watchdog has enough cash to function. The new payment regime comes into effect with the European Union’s General Data Protection Regulation on 25 May 2018. At the …
The government acknowledged that most data controllers that paid £500 would now pay £2,900, which is an above-inflation increase ("an inflationary increase would have seen the £500 fee rising to £623.61 in 2017", it said).
Seeing as the increase is over 19 times inflation, just calling the increase "above-inflation" rather understates the severity.
Here is the guidance currently for a charity.
"Some not-for-profit organisations are exempt and based on the information you have provided you do not have to register with the ICO."
Now its £40. Not a lot and to be fair I see no reason why the likes of the RSPCA, OXFAM, and other giants have to pay so little, especially given their track records with abusing the DPA.
... the Treasury's Consolidated Fund decides to give them more of the proceeds of their enforcement effort. The ICO doesn't keep the fine money. It goes directly to the Treasury Consolidated Fund.
The ICO must also apply the fines with more gusto. Too many organisations see a DPA/GDPR fine as a cost of doing business. That has to change, with one or two big take downs using the GDPR limits.
Are you listening Carphone Warehouse? Are you listening TalkTalk?
That's because a) they don't get fine income and b) its not their job to collect it. Income from MPNs go to the Treasury.
This is in comparison to the notification income that actually keeps the DP side of the ICO operating which is collected directly and which they are quite efficient at collecting.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
