Do Fleet Operators Have To Pay An ICO Data Protection Fee For Vehicle Cameras?
The Short Answer
If your business uses dashcams or other vehicle cameras that record personal information, you are likely to need to register with the Information Commissioner’s Office (ICO) and pay an annual data protection fee, unless an exemption applies.
This isn’t simply good practice. Where an organisation is required to pay the data protection fee, it is a legal requirement.
The ICO specifically advises businesses with dashcams or CCTV cameras in work vehicles to check their liability for the fee.
Paying the fee, however, is only one part of a fleet operator’s wider data protection responsibilities when using recording cameras.
Why Do Vehicle Cameras Create A Data Protection Issue?
Vehicle cameras have become commonplace across commercial fleets.
They can provide evidence following collisions, help investigate incidents, support driver training and give fleet operators a clearer understanding of what happened when something goes wrong.
But a recording camera may also capture people.
That could include drivers, passengers, pedestrians, cyclists or other road users. Registration plates and other information captured by a camera may also constitute personal information where it can be linked to an identifiable person.
Once a business is recording and processing personal information, data protection law needs to be considered.
Not sure what counts as personal information or data? Read the ICO’s guidance here.
This is an important distinction when talking about vehicle camera systems.
A visibility camera, used simply to provide the driver with a live view around the vehicle without recording footage, is not necessarily doing the same thing as a recording camera connected to a DVR, MDVR or other recording device.
Fleet operators therefore need to understand what their particular system actually does rather than assuming that every vehicle camera creates exactly the same data protection obligations.
Is The ICO Data Protection Fee A Legal Requirement?
If your organisation is required to pay the ICO data protection fee, yes.
The ICO states that under the Data Protection (Charges and Information) Regulations 2018, organisations, including sole traders, that use personal information must pay a data protection fee unless they are exempt.
This means the fee should not be confused with voluntary registration, accreditation or a piece of recommended best practice.
There are exemptions, however, which is why it is better to establish whether your particular organisation needs to pay rather than simply assuming that every business falls into exactly the same category.
The ICO provides an online self-assessment specifically for this purpose. It asks organisations about the way they use personal information and determines whether a fee is required and, if so, how much it should be. ICO data protection fee self-assessment
Do Work Vehicle Dashcams And Recording Cameras Count?
This is particularly relevant to fleet operators because the ICO specifically addresses dashcams and CCTV cameras used in work vehicles in its guidance.
A camera installed in a commercial vehicle may record identifiable people as the vehicle travels, whilst parked or during loading, deliveries and other operations.
The fact that the camera is mounted on a vehicle rather than a building does not automatically take that processing outside data protection law.
Businesses should therefore establish:
- whether their vehicle cameras actually record footage;
- what is being recorded;
- why the footage is being recorded;
- who controls and can access it;
- how long recordings are retained; and
- whether their use of personal information means they are required to pay the ICO data protection fee.
The responsibility sits with the organisation using the personal information, rather than individual employees simply because they happen to be driving the vehicles.
How Much Is The ICO Data Protection Fee?
The amount an organisation pays depends on factors including its size and turnover.
At the time of writing, the ICO operates different fee tiers, with smaller organisations generally paying considerably less than large organisations.
The ICO’s current small-business guidance states that most small businesses pay £52 per year.
However, fleet operators shouldn’t simply assume that £52 is the correct amount for their organisation. The ICO’s self-assessment establishes both whether a fee is required and how much should be paid.
Because fees and regulations can change, it is worth checking the current amount directly with the ICO rather than relying on an old registration or article.
Does Paying The ICO Fee Make A Vehicle Camera System GDPR Compliant?
No.
This is probably the most important distinction to make.
Paying the data protection fee fulfils one particular obligation where that fee applies. It does not automatically mean that the way an organisation is using its cameras complies with UK data protection law.
A fleet operator using recording cameras also needs to consider questions such as:
Why are we recording?
There should be a clear reason for collecting the footage and an appropriate lawful basis for processing personal information.
Do people know recording is taking place?
Businesses need to consider how drivers and other people are informed about the use of cameras and how the required privacy information is provided.
How long do we keep recordings?
Footage shouldn’t simply be retained indefinitely because storage capacity allows it. Businesses should determine an appropriate retention period based on why the footage is being collected.
Who can see the footage?
Recorded data should be appropriately secured, with access controlled rather than automatically available to anybody within the organisation.
What happens if somebody asks for footage of themselves?
People have data protection rights, and organisations need processes for dealing with requests relating to personal information they hold.
In other words, registration and payment are not substitutes for managing recorded footage properly.
What About Driver-Facing Cameras And Audio Recording?
Fleet operators should take particular care where cameras monitor the inside of a vehicle or record drivers directly.
There is a significant difference between a forward-facing camera recording the road and technology continuously monitoring an employee inside their workplace.
The ICO’s guidance on surveillance in vehicles makes clear that organisations need to consider the privacy impact on drivers and passengers and whether the level of monitoring is justified.
Audio requires particular care because recording conversations can be considerably more intrusive than recording video alone. ICO guidance says audio recording should normally be switched off by default and only used where there is a justified need for it.
The important question is not just “Can our system record this?”
It is “Why do we need to record this?”
Do Fleet Operators Need A Data Protection Impact Assessment?
Potentially, and in some circumstances the ICO says a DPIA is required.
A Data Protection Impact Assessment, usually shortened to DPIA, is a process used to identify and reduce data protection risks before carrying out processing that is likely to result in a high risk to people’s rights and freedoms.
The type and extent of vehicle monitoring matters here.
Where cameras or other technology are being used to monitor drivers, driver behaviour or driving style, particularly where audio or analytics are involved, the ICO treats this as higher-risk processing and says organisations should carry out a DPIA before deployment.
A straightforward outward-facing recording camera and a system involving extensive employee monitoring, audio, artificial intelligence or analytics should not automatically be treated as equivalent.
Operators introducing new camera technology should therefore consider the data protection implications before deployment, rather than installing the system first and trying to address privacy questions afterwards.
What Should Fleet Operators Do?
If your fleet already uses recording cameras, there is no need to panic. But it is worth making sure the administrative and data protection arrangements surrounding them haven’t been overlooked.
Start by establishing exactly what the system records and whether features such as audio or driver-facing recording are enabled.
Then check whether your organisation is registered with the ICO and whether its data protection fee is up to date. If you’re unsure whether a fee is required, use the ICO’s self-assessment rather than guessing.
It is also worth reviewing why footage is being collected, how long it is retained, who has access to it, how it is protected and what information is provided to employees and other people who may be recorded.
For fleets with large numbers of vehicles, it is particularly important that these arrangements are applied consistently rather than being left to individual drivers, depots or managers.
The Bottom Line
Vehicle recording systems can provide valuable evidence and support safer, better-managed fleet operations, but recording footage also brings responsibilities.
For organisations that are required to pay it, the ICO data protection fee is a legal requirement, not simply a piece of good practice.
That fee is only one part of the picture.
Fleet operators also need to understand what their cameras record, why they are recording it, how footage is stored and used, who can access it and how the people whose personal information is being captured are informed.
If you have work vehicles fitted with dashcams or other recording cameras and you don’t know whether your organisation currently pays the data protection fee, the simplest starting point is the ICO’s own online assessment.
Check whether your organisation needs to pay the ICO data protection fee
This article provides general information based on ICO guidance available at the time of publication, including guidance following the Data (Use and Access) Act 2025. It is not legal advice. Data protection requirements depend on how particular systems and organisations process personal information, and ICO guidance may change.
For the latest and most accurate information and guidance on data protection fees, visit the Information Commissioner’s Office (ICO) website.
