GDPR: 160% rise in UK organisations registered as personal data processors

1,183,158 entities are now registered with the Information Commissioners Office, a three-fold increase in the past six years.

First introduced in 2016, General Data Protection Regulation [GDPR] is a requirement for any organisation which deals with, retains, and processes personal information.

Within the first six months of the regime coming into effect, just 457,846 entities had registered. The number has been creeping up since, with some key dates triggering spikes. For example, when the law began being applied in practice, circa 2018, and a year later when the ICO launched a campaign to remind registered organisations they need to pay a data protection fee. 

‘Under the Data Protection (Charges and Information) Regulations 2018, individuals and organisations that process personal data need to register and pay a data protection fee to the Information Commissioner’s Office, unless they are exempt,’ said outgoing Minister for Data and Digital Infrastructure) and Minister of State for Media, Tourism and Creative Industries, Julia Lopez. 

While GDPR legislation sparked widespread criticism at the time it was initially announced – particularly from small and medium sized enterprises concerned with a lack of resources to comply – these latest figures show how widespread engagement now is. For organisations with either 250 employees or fewer, or a turnover below £36million, registration costs £60 annually. Larger companies and public bodies exceeding those figures must pay a yearly fee of £2,900. 

Since data protection laws were introduced, there has been a significant rise in data crimes against organisations, driven by the sheer volume of information now being stored by public sector entities and private businesses. In April, InfoTec News spoke to a cybersecurity expert to gain an insight into recent hacks and ransomware incidents affecting Leicester City Council, a number of MPs and the UK Electoral Commission. 

Image: Claudio Schwarz