Background The ICO's guidance on the UK GDPR explains: 'On 25 May 2018, the Data Protection (Charges and Information) Regulations 2018 (the 2018 Regulations) came into force, changing the way we fund our data protection work. Under the 2018 Regulations, organisations that determine the purpose for which personal data is processed (controllers) must pay a data protection fee unless they are exempt. The new data protection fee replaces the requirement to ‘notify’ (or register), which was in the Data Protection Act 1998.' Data protection fee The Data Protection (Charges and Information) Regulations 2018 (DP(CI) Regs 2018), SI 2018/480 set out the key details of this obligation. DP(CI) Regs 2018, SI 2018/480, reg 2(1) states: 'A data controller must comply with the requirements of this regulation unless all of the processing of personal data they undertake is exempt