Organisations across the business services, construction and finance sectors are among the first to be fined by the ICO for not paying the data protection fee. All organisations, companies and sole traders that process personal data must pay an annual fee to the ICO unless they are exempt. Fines for not paying can be up to a maximum of £4,350.