A controller whose surveillance system processes personal data of identifiable people outside purely personal or household use is required to register and pay the data protection fee to the ICO under the 2018 charges regulations made under the DPA 2018, unless exempt.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.