Register of Data Controllers

Under the Data Protection Act 1998 every organisation that processes personal information about individuals and organisations is classed as a data controller and must notify the Information Commissioner’s Office (ICO) unless they are exempt from doing so. Notification is a statutory requirement and failure to notify the ICO is a criminal offence.

Notification is the process in which a data controller gives the ICO details about their processing of personal information. This is usually undertaken by filling in an online registration form or can be done by way of post. The ICO then publishes certain details from the registration data in the register of data controllers which is available to the public for inspection.

The register contains the name and address of data controllers and a description of the kind of processing they do. Inspections can be carried out online free of charge quite quickly or can be done by way of telephone on 0303 123 1113. Alternatively you can contact the ICO at:

The Information Commissioner’s Office
Wycliffe House
Water Lane


We have provided the link below that will take you straight to the register in order to carry out a check.


You can use the ICO database to verify whether a charity publishing firm(s) you have received communications from is trading in accordance with their legal obligations by searching their details on to the register.

If you have any concerns that a charity publishing firm cannot be found on the register, you should contact the ICO on the above telephone number in order to carry out further checks and make any necessary complaints. Alternatively, if you have instructed TAPA to represent you, please contact us for further assistance.