Data Protection Registration Rip-off Costing UK Employers Millions

The Information Commissioner's Office (ICO) is warning that there has been a dramatic increase in the number of businesses targeted by bogus data protection agencies in the last few weeks.

The ICO has taken calls from over 60,000 businesses across the UK, who received notices from these "agencies" over the past 18 months.

These notices use threatening language, are on official-looking headed notepaper and request sums of between £85 and £120 to register businesses under the Data Protection Act. The statutory fee for notification (or registration) is £35 a year.

The Information Commissioner is required to maintain a public register of those who have notified. A register entry includes a brief description of the purposes for which the particular data controller processes personal data. Most data controllers notify by themselves.

The Information Commissioner, Richard Thomas, said: "This issue is becoming a daily problem for businesses across the country and is something I take very seriously. Although I do not have the powers to take action against these 'agencies' myself, I am exploring possible legal action and continue to work with the relevant authorities."

If you are unsure whether you need to register under the Act, you can call the notification helpline, tel. 01625 545 740, or visit www.informationcommissioner.gov.uk for more information.
This document is for general guidance and research purposes only, and does not purport to give professional advice. Please check the date at the top of the article; the Workplace Law Network retains historic articles for general research.