Notification is a statutory requirement and every organisation that processes personal information must notify the Information Commissioner’s Office (ICO), unless they are exempt. Failure to notify is a criminal offence.
Notification is the process by which a data controller informs the Information Commissioner of certain details about their processing of personal information. These details are used by the Information Commissioner to make an entry describing the processing in the register of data controllers that is available to the public for inspection.
The principal purpose of having notification and the public register is transparency and openness. It is a basic principle of data protection that the public should know (or should be able to find out) who is carrying out the processing of personal information as well as other details about the processing (such as for what reason it is being carried out).
Notification, therefore, serves the interests of individuals in assisting them to understand how personal information is being processed by data controllers.
It is not, however, intended (nor is it practicable) that the register should contain very detailed information about a data controller’s processing. The aim is to keep the content at a general level, with sufficient detail to give an overall picture of the processing. More detail is only necessary to satisfy specific statutory requirements or where there is particular sensitivity.
Before making a new application, please check the register of data controllers to ensure you are not already registered.
To change an existing entry or to add a purpose, see keeping your register entry up to date. For further information, see the links at the right-hand side of this page.
There are three ways to make an application to notify.
On the internet
You can complete the notification form online, print it out and send it to us with the notification fee or your direct debit instruction. Payment forms and details can be found below. Our address is:
The Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Request for a notification form
You can complete the request for a notification form. This should be faxed or posted to us, marked for the attention of the Notification Department (Notification requests). Alternatively, the information can be emailed to us (notification@ico.gsi.gov.uk). The notification form will then be sent to you for further action.
By telephone
You can telephone the notification helpline on 01625 545740 between the hours of 9.00am and 5.00pm, Monday to Friday. You will be asked to provide your name, address and contact details, and to specify the nature of your business. A notification form will be sent to you.
If you request an application form via the telephone helpline or via the ‘Request for a notification form’ option, a partially completed notification form will be sent to you based on the nature of your business. When you receive your form you will need to check the details on the Part 1 form, complete the relevant sections of the Part 2 form and then return both forms to us with the notification fee or your completed direct debit instruction.
There is a fee for notification of £35 (VAT nil), and any change to this fee will be advised to you when you start the process of notification. We do not send invoices but we will acknowledge receipt of payment. The period of notification is one year, after which you will need to renew your notification. The renewal fee is £35 (VAT nil).
There are three ways to pay.
By direct debit
A direct debit form will be sent to you in your notification pack. Alternatively, you can print a direct debit instruction form yourself. We will acknowledge receipt of your direct debit instruction and advise you of the date on which the fee will be collected from your bank account.
By cheque or postal order
Cheques should be made payable to ‘The Information Commissioner’ and crossed ‘A/C Payee only’. Please write your registration number on the back of your cheque.
BACS
In order that we can identify your BACS payment, please quote your reference number on your BACS documentation to ensure that your reference number appears on our bank statement. If possible, remittance advice should be sent to us with the forms, quoting your reference number and the date of your payment. Please note that you have not made a valid notification until we have received your forms and your BACS payment. Our account details are:
Sort code: 16-34-24
Account number: 11663041
The name you provide must be the correct legal title of the individual or organisation. Examples are given below.
-
Sole traders - provide the full name of the individual, eg Anna Katherine Smith.
-
Partnerships - provide the trading name of the firm, eg Butterfield & Co. (you do not have to provide the name of the partners).
-
Limited or public limited companies - provide the full name of the company, eg ABC Limited (not your trading name).
-
Groups of companies - groups of companies cannot submit a single notification. Individual companies who are data controllers must notify separately.
-
Schools - provide the name of the school, eg Hazeldown School.
-
Others, eg voluntary bodies - provide the name by which you are known to the public.
If you are a limited company, you must provide your registered office address, and in all other cases, you must provide the address of your principal place of business. If there is no place of business (eg for a small local voluntary body), you should provide the address of the official who has completed the form.
Only one notification is required per legal entity. This will cover any number of different branches or addresses where the data is processed.
For full information about the notification process, please choose one of the following:
Notification handbook (HTML)
.