Some data controllers do not need to notify. By working through questions 1-9 of the online self-assessment or by downloading the self-assessment guide you will be able to determine whether notification is required. The sequence of questions is such that if there is no possibility of an exemption for you, this will be made clear very quickly.
Exemptions are possible for the following.
- Data controllers who only process personal information for:
- staff administration (including payroll);
- advertising, marketing and public relations (in connection with their own business activity); and
- accounts and records.
- Some not-for-profit organisations.
- Processing personal information for personal, family or household affairs (including recreational purposes).
- Maintenance of a public register.
- Processing personal information without an automated system such as a computer.
Please note: data controllers who are exempt from notification must comply with the other provisions of the Act, and may choose to notify voluntarily. More detailed guidance about the notification exemptions can be found in Notification exemptions – A self-assessment guide.
We have produced specific guidance on notification for some data controllers:
The exemption from notification for 'not-for-profit' organisations
Notification of barristers’ chambers
Notification of pension scheme trustees
Manual records
There is no requirement to notify manual records which come within the scope of the Data Protection Act 1998. However, you can choose to notify them voluntarily. Further information about manual records can be found in our data protection legal guidance document.