If you’re a company director or small business owner, you may have been surprised recently by a letter from the Information Commissioner’s Office (ICO), requiring you to pay an annual ‘data protection registration fee’.

You may have wondered if the fee request was genuine. Could it be a scam? Do you have to pay? Does the data protection registration fee signal another needless layer of bureaucracy? And what are the consequences if you ignore the letter?