Information Commissioner's Office

Government97% confidence

The Information Commissioner’s Office (ICO) is the UK’s independent authority set up to uphold information rights, including data protection and privacy, and to promote openness by public bodies and data privacy for individuals.

Wilmslow, Cheshire, United Kingdom
ico.org.uk

About Information Commissioner's Office

The Information Commissioner’s Office (ICO) is the UK’s independent regulator for data protection and information rights. Based in Wilmslow, Cheshire, the ICO oversees compliance with UK data protection law (including UK GDPR and the Data Protection Act 2018), privacy and electronic communications rules, and freedom of information legislation. It provides guidance to organisations, handles complaints from the public, maintains the public data protection register, and has powers to investigate and take enforcement action where laws are breached.

Charges from the ICO most commonly relate to the statutory data protection fee that many UK organisations must pay to lawfully process personal data. This is usually an annual fee for registering or renewing an entry on the ICO’s data protection register, and it may appear on your bank or card statement around the same time each year. Typical amounts for most small and medium organisations range from about £35–£60 (often shown as £40 or £60 before any direct debit discount), while large organisations may see a charge of £2,900. In most cases this is a single annual payment rather than a monthly subscription, although it will recur each year on or around the renewal date.

If you’re unsure about an ICO charge, first confirm internally who manages data protection or regulatory registrations in your organisation, as they may have recently completed or renewed your data protection fee. Check for recent emails or letters from the ICO regarding “data protection fee” or “registration renewal,” and you can search your organisation’s details on the public register at ico.org.uk to confirm your status and renewal date. For specific billing questions or to dispute or correct a payment, contact the ICO via their helpline on 0303 123 1113 (UK), through the contact forms at ico.org.uk, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Have your organisation name, registration number (if known), and transaction details ready to help them resolve your query quickly.

Bank Statement Variations

1 known variations

These are the raw merchant codes that appear on bank and credit card statements that we've identified as belonging to Information Commissioner's Office.

  1. WWW.ICO.ORG.UK WILMSLOW GBR

Frequently Asked Questions

Why has my organisation been charged by the Information Commissioner’s Office?

Most ICO charges on bank or card statements relate to the mandatory annual data protection fee that many UK organisations must pay. This fee is a legal requirement for most businesses, charities, and public bodies that process personal data, and it covers your registration (or renewal) on the ICO’s public data protection register. The charge is usually taken once per year on or around your renewal date.

What amounts does the ICO typically charge for the data protection fee?

The ICO operates three main fee tiers based on your organisation’s size and turnover. For most small organisations, the annual fee is typically around £40 (or £35 with a direct debit discount), and for medium-sized organisations it is usually around £60 (or £55 by direct debit). Large organisations in the highest tier may be charged £2,900 per year. Your exact amount depends on your number of staff, turnover, and whether you qualify for any exemptions or discounts.

Is the ICO data protection fee a subscription or a one-off payment?

The ICO data protection fee is an annual statutory charge rather than a monthly subscription. While it is a one-off payment each year, it will recur annually on or around your renewal date for as long as your organisation is required to pay the fee. If you pay by direct debit, the payment will usually be taken automatically each year unless you cancel or your circumstances change.

How can I cancel future ICO charges if my organisation is exempt or no longer trading?

If your organisation has ceased trading, merged, or become exempt from paying the data protection fee, you should inform the ICO so they can update or remove your registration. Contact the ICO via ico.org.uk or by calling 0303 123 1113 and provide your organisation name, address, and (if available) your registration number. Do not simply cancel a direct debit without confirming your status, as you may continue to receive statutory reminders or enforcement notices if they still believe the fee is due.

How do I query or request a refund for an ICO payment taken in error?

If you believe you were charged by the ICO in error—for example, if you paid twice, paid when exempt, or were charged under the wrong tier—contact the ICO’s registration/fee team as soon as possible. You can use the contact forms at ico.org.uk or call 0303 123 1113 with your payment date, amount, last four digits of the card or account used, and any invoice or reference number. The ICO will review your circumstances and, where appropriate, arrange a correction or refund in line with their policies.

How do ICO charges appear on my bank or card statement?

ICO payments often show on statements with descriptors such as “INFORMATION COMMISSIONER’S OFFICE,” “ICO WILMSLOW,” or similar wording. The reference may also include an internal payment ID or invoice number. Comparing the transaction date and amount with your ICO renewal notice or email receipt can help you confirm that the charge matches your data protection fee payment.

Does the ICO place temporary or pending charges on my account?

The ICO generally takes a single confirmed payment when you pay your data protection fee online or set up a direct debit, rather than using £0 or £1 authorisation holds like some commercial services. However, your bank may show the payment initially as “pending” on the day you submit it before it settles fully. If you see multiple pending entries or a charge you do not recognise, contact your bank and then the ICO with the details for clarification.

How can I get proof of payment or a receipt for my ICO data protection fee?

When you pay the data protection fee online, the ICO normally sends a confirmation email and receipt to the email address you provide, and you may also receive a certificate of registration. If you need a copy of your receipt or invoice, you can request one via the contact forms at ico.org.uk or by calling 0303 123 1113 and quoting your organisation details and the payment date. You can also check your registration status and reference details on the ICO’s public register, which can be useful for internal records and audits.

This merchant is in the Government category

Browse all

Related Merchants

North Sydney Council
Brisbane City Council
Australian Securities and Investments Commission
VicRoads
City of Parramatta Council

Compare Information Commissioner's Office

vsNorth Sydney CouncilvsBrisbane City CouncilvsAustralian Securities and Investments Commission

Got more mystery charges?

Paste your bank statement codes and we'll tell you exactly who charged you.

Find out who charged you