^ Data Protection Act 1998. Office of Public Sector Information. [2009-11-18].
^ Register of data controllers. UK Information Commissioner's Office. [2015-07-16]. We publish the name and address of these data controllers, as well as a description of the kind of processing they do.
^ Register of Data Controllers. The Advertising Protection Agency. [22 March 2012]. （原始内容存档于2011年1月7日）. The ICO then publishes certain details from the registration data in the register of data controllers which is available to the public for inspection.
^ Notifying the Information Commissioner's Office about personal information. Business Link. [22 March 2012]. The Data Protection Act 1998 requires businesses to give details about the way they process personal information to the Information Commissioner's Office (ICO) for inclusion in a public register, unless they are exempt. This is called notification.
^ Register (notify) under the Data Protection Act. UK Information Commissioner's Office. [2015-07-16]. The Data Protection Act 1998 requires every data controller (eg organisation, sole trader) who is processing personal information to register with the ICO, unless they are exempt.
^ In brief – are there any exemptions from the Data Protection Act?. UK Information Commissioner's Office. [2015-07-16]. ... there are some exemptions from the Act to accommodate special circumstances.
^ Register of Data Controllers - University of Strathclyde. University of Strathclyde. [22 March 2012]. Every organisation that processes, i.e. holds and uses, personal information must be registered with the UK Information Commissioner's Office (ICO), unless they are exempt. This registration is a statutory requirement under the Data Protection Act and failure to notify the ICO is a criminal offence.