Remedy
Start free

Section 12: Limits on fees that may be charged by controllers

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 2: General processing — CHAPTER 2: The UK GDPR

The Secretary of State may by regulations specify limits on the fees that a controller may charge in reliance on—

Article 12(5) of the UK GDPR (reasonable fees when responding to manifestly unfounded or excessive requests), or
Article 15(3) of the UK GDPR (reasonable fees for provision of further copies).

The Secretary of State may by regulations—

require controllers of a description specified in the regulations to produce and publish guidance about the fees that they charge in reliance on those provisions, and
specify what the guidance must include.

Regulations under this section are subject to the negative resolution procedure.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.