For some organisations there is a requirement to register with the Information Commissioner (formerly Data Protection Commissioner).  You can do that on-line by using the link opposite.  You do not need to use a private agency to do this, and there are some companies which charge big money for what is straightforward form filling administration.

Not everyone has to notify – for example, if you only process personal
information for core business purposes such as your own marketing, staff Small Business administration and accounting, you may not need to notify, although you should check with the Information Commissioner.

You can find out if you are exempt online by checking their website or by calling their Notification Line on 01625 545740.

There is a standard annual fee of £35 for notification.  Beware of bogus agencies requesting payment for data protection registration. There is no connection between the Information Commissioner and such agencies. You are advised not to reply or make any payment but to
notify the local Trading Standards office instead. Remember the standard fee for notification is only £35.