Statutory Instruments
2025 No. 63
DATA PROTECTION
The Data Protection (Charges and Information) (Amendment) Regulations 2025
Made
22nd January 2025
Laid before Parliament
27th January 2025
Coming into force
17th February 2025
The Secretary of State makes these Regulations in exercise of the powers conferred by sections 137(1) and 182(5) of the Data Protection Act 2018( 1 ).
The Secretary of State makes these Regulations—
having regard to the matters specified in section 137(4) of that Act, and
after consultation in accordance with sections 138(1) and 182(2) of that Act.
Citation, commencement, extent and interpretation
1. —(1) These Regulations may be cited as the Data Protection (Charges and Information) (Amendment) Regulations 2025 and come into force on 17th February 2025.
(2) These Regulations extend to England and Wales, Scotland and Northern Ireland.
(3) In these Regulations, “ the 2018 Regulations ” means the Data Protection (Charges and Information) Regulations 2018( 2 ).
Amendment of the Data Protection (Charges and Information) Regulations 2018
2. Regulation 3(1) of the 2018 Regulations is amended as follows—
(a) in sub-paragraph (a), for “£40” substitute “£52” ;
(b) in sub-paragraph (b), for “£60” substitute “£78” ;
(c) in sub-paragraph (c), for “£2,900” substitute “£3,763” .
Transitional and saving provision
3. —(1) Regulation 3(1) of the 2018 Regulations continues to have effect for a charge period without the amendments made by regulation 2 of these Regulations where—
(a) the charge period began within the period beginning with 18th February 2024 and ending immediately before these Regulations come into force, and
(b) the data controller has paid the charge to the Information Commissioner for that charge period.
(2) In paragraph (1), “ charge period ” and “ data controller ” have the same meanings as in the 2018 Regulations.
Chris Bryant
Minister of State
Department for Science, Innovation and Technology
22nd January 2025
S.I. 2018/480 , amended by paragraph 421 of Schedule 19 to the Data Protection Act 2018 and S.I. 2019/478 . The 2018 Regulations were made under sections 108(1) and (5) and 110(6) of the Digital Economy Act 2017 (c. 30) . Those sections were subsequently repealed by paragraph 224 of Schedule 19 to the Data Protection Act 2018. The 2018 Regulations now have effect as if they were made under section 137 of the Data Protection Act 2018 (see paragraph 26 of Schedule 20 to that Act).