Data controllers, unlike data processors, are required to pay the data protection fee as of 2018 Regulations. This fee can range from £40 to £2,900, generally depending on the size of the organisation and the number of hands your data might fall into within a company.
Not every data controller has to pay this fee, though. If your personal data is only collected and processed for the below uses, organisations are not required to pay: Advertising, marketing, or public relations; Not-for-profit ;Staff administration; Accounts and records. Personal, family, or household uses; Maintaining public registers; Judicial uses; Processing personal information without an automated system.