Had a breach?Request a consultation
All free tools

NDPC registration tier estimator

Answer three questions to estimate whether your organisation is a data controller or processor of major importance, which tier you are likely to fall into, and what that means for registration and annual audit returns.

1. How many people's personal data do you process in any six month period?

Count customers, staff, students, patients, beneficiaries, website users and anyone else whose data you hold or use.

2. Which sector are you in?
3. Do you process sensitive personal data?

For example health, religion, ethnicity, biometrics or data about children.

Likely result

What this usually means

    An estimate based on the number bands most commonly cited for GAID 2025. The NDPC can designate organisations differently, for example by sector or type of processing, and sets the current fees on its portal. Confirm your category with the NDPC before relying on this.

    The monthly data protection and AI briefing

    NDPA updates, deadlines, practical tips and new free tools, once a month. No spam, unsubscribe any time.