AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
Probably, if you use personal data in your work beyond your own accounts, staff records and marketing. The ICO says organisations including sole traders that use personal information need to pay unless exempt. Most freelancers fall in Tier 1, which is £52, or £5 less by direct debit, under the 2018 charges regulations as amended in February 2025. You are exempt only if all your processing falls within the listed exemptions.
Freelancers often hear that the ICO fee is "for companies". The ICO's own page says otherwise: under the Data Protection (Charges and Information) Regulations 2018, organisations, including sole traders, that use personal information need to pay a data protection fee unless they are exempt. This guide sets out the tiers, the exemptions, and how they apply to a freelancer working with Nigerian clients.
The tiers
Regulation 3 sets the fee. The current amounts took effect on 17 February 2025.
| Tier | Who | Fee |
|---|---|---|
| Tier 1 (micro) | Turnover of £632,000 or less, or 10 or fewer staff, or a charity, or a small occupational pension scheme | £52 |
| Tier 2 (small and medium) | Not Tier 1, and turnover of £36 million or less, or 250 or fewer staff | £78 |
| Tier 3 (large) | Everyone else | £3,763 |
The fee is £5 less if you pay by direct debit (reg 3(5)), so £47 for Tier 1. Turnover and staff numbers are measured on the first day of the charge period. Almost every freelancer is in Tier 1.
The exemptions
The Schedule to the regulations lists processing that is exempt. You are exempt from the fee only if everything you do with personal data falls within these:
- Data not processed by automated means, or recorded with the intention that it will be (paper only, in practice rare).
- Personal, family or household affairs.
- Maintaining a public register.
- Administering your own staff and volunteers, and people working for you under service contracts.
- Advertising, marketing and public relations for your own business.
- Keeping accounts and records of purchases and sales, deciding whether to take on a customer or supplier, and financial forecasts.
- Not-for-profit bodies processing for their membership or activities.
- Judicial functions.
The trap is the word "only". A bookkeeper keeps accounts for clients, not just for themselves. A marketer runs campaigns for other businesses, not just its own. A coach keeps notes about clients' wellbeing. Each of those goes beyond the exemptions.
Freelance examples
| Freelancer (example) | Fee likely? | Why |
|---|---|---|
| Graphic designer with client contact details and own invoices only | May be exempt | Customer records and own marketing are exempt purposes |
| Graphic designer who also uses CCTV at a home studio | Likely pay | CCTV is not in the exempt list |
| Virtual assistant managing a Lagos client's customer emails | Likely pay | Processing client data goes beyond the exemptions |
| Data analyst cleaning a Nigerian retailer's customer database | Likely pay | Same |
| Tutor keeping pupils' progress notes | Likely pay | Records about pupils go beyond accounts and marketing |
The regulations frame the fee around data controllers. If you act purely as a processor for a client, the client is the controller for that data, but most freelancers are also controllers for some data of their own, so check your whole picture. The ICO's fee pages have a contact point for questions. Note also that wording in regulation 2 is due to be substituted under a 2026 statutory instrument (SI 2026/386); check the ICO's page for the current position before relying on any exemption.
Sole trader or limited company
If you trade through your own limited company, the company is the organisation using the personal data, so the fee question is the company's, measured on its turnover and staff. Moving from sole trader to a company does not carry a fee across automatically; check the registration is in the name of whoever is now the controller. The same exemptions apply, and most one-person companies still sit in Tier 1.
The Nigerian angle
Paying the ICO fee covers your UK obligation only. It does nothing for Nigeria's Data Protection Act, which can apply to you separately if you process personal data of people in Nigeria; see whether the NDPA applies to a UK freelancer. Nigerian clients may ask for your ICO registration number as evidence that you take data protection seriously. The ICO publishes a register of fee payers, so a client can check it.
Steps
- List every kind of personal data you hold: clients, clients' customers, staff, CCTV, mailing lists.
- Check each against the exemptions. If any falls outside, you probably need to pay.
- Work out your tier: for most freelancers Tier 1.
- Pay on the ICO website, by direct debit if you want the £5 reduction.
- Pay again when each charge period ends, and keep the registration number for client contracts.
For transfers and contracts with Nigerian clients, see UK GDPR and the NDPA for client data.
Where Pryme fits
Small recurring costs like this are easy to miss. With a Pryme Business Account you can set a reminder through the Finance agent and keep the receipt with your other business records, ready for your tax return. See how it works.
Questions people ask
How much is the ICO fee for a sole trader?
Tier 1 is £52, or £47 by direct debit, under regulation 3 as amended in February 2025. It applies if turnover is £632,000 or less or you have 10 or fewer staff.
Are freelancers exempt from the ICO fee?
Not automatically. You are exempt only if all your processing is within the listed exemptions, such as your own accounts, staff administration and marketing.
Do I need to pay the ICO fee if I handle Nigerian clients' customer data?
Very likely, because processing client data goes beyond the exemptions. The NDPA may also apply separately.
Does paying the ICO fee cover the NDPA?
No. The ICO fee is a UK requirement. Nigeria's Data Protection Act has its own rules and regulator.
Sources
- ICO: Data protection fee (page dated 22 Sep 2026) · accessed Oct 2026
- legislation.gov.uk: Data Protection (Charges and Information) Regulations 2018, regulation 3 (as amended Feb 2025) · accessed Oct 2026
- legislation.gov.uk: Data Protection (Charges and Information) Regulations 2018, Schedule (exemptions) · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.