Open at the publisher →
In force since 2025-02-17, as the publisher states.
Copy read on 2026-11-10. The page it was read from
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.
sha256 64963d10e11ad2140a74f5d6d690627c53fb99edc766e1e26a3490ee9d540322
4 provisions
Title and introductory text
2025 No. 63
DATA PROTECTION
The Data Protection (Charges and Information) (Amendment) Regulations 2025
Made
22nd January 2025
Laid before Parliament
27th January 2025
Coming into force
17th February 2025
The Secretary of State makes these Regulations in exercise of the powers conferred by sections 137(1) and 182(5) of the Data Protection Act 2018.
The Secretary of State makes these Regulations—
having regard to the matters specified in section 137(4) of that Act, and
after consultation in accordance with sections 138(1) and 182(2) of that Act.
Propose a change1 Citation, commencement, extent and interpretation
(1) These Regulations may be cited as the Data Protection (Charges and Information) (Amendment) Regulations 2025 and come into force on 17th February 2025.
(2) These Regulations extend to England and Wales, Scotland and Northern Ireland.
(3) In these Regulations, “the 2018 Regulations” means the Data Protection (Charges and Information) Regulations 2018.
Propose a change2 Amendment of the Data Protection (Charges and Information) Regulations 2018
Regulation 3(1) of the 2018 Regulations is amended as follows—
(a) in sub-paragraph (a), for “£40” substitute “£52”;
(b) in sub-paragraph (b), for “£60” substitute “£78”;
(c) in sub-paragraph (c), for “£2,900” substitute “£3,763”.
Propose a change3 Transitional and saving provision
(1) Regulation 3(1) of the 2018 Regulations continues to have effect for a charge period without the amendments made by regulation 2 of these Regulations where—
(a) the charge period began within the period beginning with 18th February 2024 and ending immediately before these Regulations come into force, and
(b) the data controller has paid the charge to the Information Commissioner for that charge period.
(2) In paragraph (1), “charge period” and “data controller” have the same meanings as in the 2018 Regulations.
Propose a change