Data Protection Act 2018 (c. 12) – Section 12 – Limits on fees that may be charged by controllers

Sections

Section 12Limits on fees that may be charged by controllers

(1) The Secretary of State may by regulations specify limits on the fees that a controller may charge in reliance on—

(a)
Article 12(5) of the [^F1UK GDPR] (reasonable fees when responding to manifestly unfounded or excessive requests), or
(b)
Article 15(3) of the [^F2UK GDPR] (reasonable fees for provision of further copies).

(2) The Secretary of State may by regulations—

(a)
require controllers of a description specified in the regulations to produce and publish guidance about the fees that they charge in reliance on those provisions, and
(b)
specify what the guidance must include.

(3) Regulations under this section are subject to the negative resolution procedure.

Annotations

Textual Amendments

F1 Words in s. 12(1)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 15 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F2 Words in s. 12(1)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 15 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Commencement Information

I1 S. 12 in force at Royal Assent for specified purposes, see s. 212(2)(f)
I2 S. 12 in force at 25.5.2018 in so far as not already in force by S.I. 2018/625, reg. 2(1)(b)

https://dpa2018.digiphile.law/article/article-12.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.