If you run a sports academy, you hold information about people: children's names and ages, parents' phone numbers, who came to which session, allergies and medical notes, photos from training. In the UK, almost every organisation that uses personal information like this has to register with the Information Commissioner's Office (ICO).

Many academy owners have never heard of it. They are not deliberately skipping it; nobody told them. This guide explains what registering means, why it almost certainly applies to your academy, the few cases where it is not a hard requirement, and how to get it done without fuss.

Important: This article is general guidance, not legal advice. The ICO's own self-assessment at ico.org.uk tells you for certain whether your organisation must register. You can also call the ICO helpline on 0303 123 1113.

What the ICO is, and what registering means

The ICO is the UK's independent regulator for data protection. Under the Data Protection (Charges and Information) Regulations 2018, organisations that use personal information, sole traders included, must register with the ICO unless they are exempt.

When you register, your academy is added to the ICO's public register and you get a registration number. Anyone, including a parent, can look you up on that register.

Registering is separate from your other data protection duties. Having a privacy notice, keeping information secure and answering parents' requests are all required whether or not you have to register.

Why most academies must register

The law lists a small number of exempt purposes. If you only use personal information for these, you do not have to register:

Staff administration: managing your own staff, volunteers and contractors
Advertising, marketing and public relations for your own business
Accounts and records: keeping accounts and records of purchases, sales and other transactions

The ICO's rule is simple: if you use personal information for any other purpose, you must register.

Now think about what an academy does every week:

taking registers and recording attendance
writing coaching notes, assessments and progress
keeping health and safety information: allergies, medical conditions, emergency contacts
taking photos and videos in sessions
messaging parents about sessions, changes and cancellations

None of these is staff administration, marketing or accounts. They are the everyday work of running sessions and keeping children safe. That is why almost every academy that runs sessions for children or adults has to register.

The rule covers small academies and solo coaches too. The ICO is clear that sole traders are included. Being a one-person coaching business does not take you out of it.

The ICO puts it plainly: an organisation that should be registered and isn't is breaking the law.

When it is not a hard requirement

There are cases where registering is not required. Check them carefully, because they are narrower than they sound.

Not-for-profit clubs

A club or association that is not set up or run for profit can be exempt. The condition is that it only uses personal information to:

run its membership or support, or
provide or run activities for its members, or for people in regular contact with it.

A volunteer-run community club that keeps members' details to organise training may fall into this.

It does not apply if:

the club is run as a business, even a small one;
the club uses information for other purposes beyond membership and members' activities;
the club operates CCTV for crime prevention. The ICO treats this as outside every exemption, so a club with CCTV must register.

Paper-only records

Information kept only on paper, never on a computer, phone or app, is exempt. In practice this almost never applies to an academy today. A spreadsheet, an email list, a WhatsApp group or a booking system all count as processing on a computer.

If you are exempt

If the ICO's self-assessment confirms you are exempt, the ICO asks you to let them know why, using the short form it points you to. Remember that being exempt from registering does not exempt you from the rest of data protection law.

Why it is worth having even when you don't have to

Exempt organisations can still register voluntarily, and the ICO allows this so you can appear on the public register and point people to it. For an academy working with children, that is worth a lot.

Parents trust it. Parents hand over their child's details, health information and photos. A registration number they can check shows you take that seriously.
Partners may ask for it. Schools, councils, venues and governing bodies working with children may ask for your ICO registration before working with you. Having it ready saves a delay when an opportunity comes up.
It belongs on your privacy notice. A privacy notice that shows your ICO registration number looks complete and professional. One without it raises questions.
You are ready to grow. If your club starts charging commercially, adds CCTV or takes on new activities, you may lose the exemption. Already being registered means nothing changes.

How AcademyApp helps you get it done in no time

Registering with the ICO is done on the ICO's website, by you, for your academy. AcademyApp makes sure everything around it is already in place, so it takes no time to finish.

Your privacy notice is ready. Every academy website on AcademyApp comes with a privacy notice written for academies, a short version for children, terms and a cookie policy. The privacy notice already sets out what you collect, why, who it is shared with and how long it is kept.
Add your registration number once. Enter your ICO registration number and your data protection contact in your website's Data protection settings. They appear in your privacy notice automatically.
Your business details are in one place. Your legal name and company details live in AcademyApp's Business information settings, ready when you need them.
You won't forget it. When you set up your academy, AcademyApp asks about your ICO registration. In your first sign-in you can mark it as understood or choose "Review later" and come back to it when you are ready.
Your data is handled properly from day one. Personal information is encrypted, coaches see only the sessions and participants they need, and parents' consents are recorded with each child's details.

Registering with the ICO is one of those jobs that is easy to put off and simple to finish. If your academy keeps details about children and families, it almost certainly applies to you. Even where it doesn't, it is a clear signal to parents that their information is in safe hands.

If you are still running your academy from spreadsheets and WhatsApp groups, creating an AcademyApp account gets your privacy notice, your data protection settings and your set-up checklist in place from the start.