Under the act every data controller processing personal data are expected to abide by the 8 "Data Protection Principles". These state that personal data must be:
If you are processing personal data for the following purposes you must register under the Data Protection Act:
The notification fee payable to the Information Commissioner is not included and is payable direct to him upon receiving the completed Notification form.
In order to maintain the registration, companies with fewer than 250 staffs pay £35 per annum and companies with 250 or more staff and a turnover of £25.9 million pay £500 per annum to the Commissioner.
Every organisation that processes personal information must notify the Information Commissioner's Office and complete a Notification Form, unless they are exempt. Failure to notify is a criminal offence and carries a fine of up to £5,000.