Do I need to register with the ICO as a sole trader electrician?

Yes. If you process personal data (which you do — customer names, addresses, phone numbers, emails, photos), you must register with the ICO and pay the annual data protection fee. For micro-organisations (fewer than 10 employees and turnover under £632,000), the fee is £40 per year. You can register online at ico.org.uk in about 10 minutes. Failure to register when required is a criminal offence — the ICO can issue fines of up to £4,350. The ICO does check and does prosecute unregistered businesses. Registration also demonstrates professionalism to commercial clients who may ask for your ICO registration number.

What customer data am I allowed to keep?

You can keep any data you have a legitimate reason to hold. For electricians, this typically includes: customer name, address, phone number, and email (needed to perform the work and provide aftercare); property details and installation records (needed for certification and Building Regulations); photos of the installation (needed for certification, records, and dispute resolution); payment records (needed for tax and accounting). You should NOT keep data you do not need — for example, if a customer enquires but does not proceed, delete their data after a reasonable period (3 to 6 months) unless they have consented to marketing.

Do I need a privacy policy?

Yes. You need a privacy notice that tells customers what data you collect, why you collect it, how long you keep it, who you share it with, and their rights. This does not need to be a 20-page legal document — a clear, plain-English notice on your website and a brief statement on your quotation or terms and conditions is sufficient. Key points to cover: you collect data to provide electrical services and maintain records; you share data with your competent person scheme (for Building Regulations notification) and HMRC (for tax); you keep data for the periods required by law; customers can request to see, correct, or delete their data by contacting you.

What if I lose my phone with customer data on it?

Losing a phone that contains customer data (contacts, photos, emails, certificates) is a potential data breach. First, try to locate and remote-wipe the phone. Then assess the risk: was the phone locked with a PIN or biometric? Was the data encrypted? If the phone was locked and encrypted, the risk to customers is low and you probably do not need to report it. If the phone was unlocked or unprotected, customer data may be accessible to whoever finds it — this is a higher risk and you should consider reporting it to the ICO within 72 hours. Either way, document the incident, the steps you took, and your risk assessment. Use this as a reason to enable device encryption, strong PINs, and remote wipe on all your devices.

Can I use customer photos for marketing without permission?

No. Photos of completed work that could identify a customer property (address visible, recognisable interior) require explicit consent before using for marketing purposes (website, social media, brochures). Get written consent — a simple text or email agreement is sufficient: "Is it OK if I use photos of the completed work on my website and social media? No personal details will be shown." If the customer says no, respect it. You can still use the photos for your own records and certification. Close-up photos of wiring, consumer units, or accessories that do not identify the property are generally fine without specific consent, but it is good practice to ask anyway.

How long should I keep electrical certificates?

Electrical certificates (EICs, MIECs, EICRs) should be kept for the life of the installation — in practice, indefinitely or until the installation is replaced. This is not just a GDPR consideration — it is a professional obligation. The certificates prove the installation was safe and compliant at the time of completion, and may be needed for insurance claims, property sales, or investigations years later. Your competent person scheme will also keep copies. For GDPR purposes, retention of certificates is justified under "legal obligation" and "legitimate interests" — you have a strong reason to keep them. What you should periodically review and delete is enquiry data from people who never became customers and marketing lists where consent has lapsed.

Do I need to comply with GDPR if I only do commercial work?

Yes. GDPR protects personal data of individuals, and even in commercial work you hold personal data — the name and contact details of the person who instructed the work, site contacts, employee data if you have staff. The principles are the same: hold only what you need, keep it secure, have a lawful basis, and respect individual rights. Commercial clients will also expect you to demonstrate GDPR compliance during pre-qualification and tendering — it is increasingly a standard question on PQQs (pre-qualification questionnaires).

COMPLIANCE GUIDE

GDPR for Electricians: Compliance in Plain English

If you hold customer names, addresses, or phone numbers, GDPR applies to you. ICO registration, data retention, privacy notices, and breach procedures — explained in practical terms for electricians.

Start 7-day free trial

Free for 7 days · No charge until day 8 · Cancel anytime · Used by 1,000+ UK electricians

12 min readUpdated 2026-05-18Andrew Moore, Founder of Elec-Mate

Written and reviewed by Andrew Moore, founder of Elec-Mate, against BS 7671:2018+A4:2026, IET Guidance Note 3 and the IET On-Site Guide.

ShareX in W

1,000+

UK electricians

“Replaced three separate apps with Elec-Mate. Certs, quotes, and scheduling all in one place.”
Daniel Palmer, DP Electrical · 5 out of 5

Key takeaways

01GDPR applies to every electrician who holds customer data — names, addresses, phone numbers, emails, and photos of their property. If you have a customer list, you are a data controller and GDPR applies to you.
02You must register with the ICO (Information Commissioner Office) and pay the annual fee of £40 for micro-organisations (fewer than 10 employees and turnover under £632,000). Failure to register is a criminal offence with fines up to £4,350.
03You need a lawful basis for holding customer data. For most electricians, "legitimate interests" (you need the data to do the job and provide aftercare) and "legal obligation" (you must keep records for tax, certification, and Building Regulations) are the relevant bases.
04Data retention: keep customer data for as long as you have a legitimate need. Electrical certificates must be kept for the life of the installation. Tax records must be kept for 5 years after the filing deadline. Marketing lists require ongoing consent.
05If you lose a phone, laptop, or van containing customer data (including paper records), that is potentially a data breach. You must assess the risk and, if it is likely to affect individuals, report it to the ICO within 72 hours.

01 · Compliance Guide

GDPR: Yes, It Applies to Electricians

If you hold any personal data about customers — their name, address, phone number, email, or photos of their property — you are a "data controller" under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This applies to every electrician, whether you are a sole trader with a notebook of customer numbers or a large contractor with a CRM system.

GDPR is not as complicated as it sounds. For most electricians, compliance means: register with the ICO (£40/year), understand what data you hold and why, keep it secure, tell customers what you do with their data, and delete it when you no longer need it. This guide covers each step in practical terms.

The consequences of non-compliance range from ICO enforcement notices and fines (up to £17.5 million or 4% of turnover, though fines for small businesses are typically much smaller) to criminal prosecution for failure to register (fines up to £4,350). More practically, commercial clients increasingly require GDPR compliance as a condition of awarding contracts.

Free download

Get the BS 7671 A4:2026 Cheat Sheet — free

Every key change in the 2026 amendment on one page. AFDDs, TN-C-S protection, new schedule columns, model forms. Pinned on your van dash.

Every regulation change summarised
New model forms (EIC + MEIWC)
Free PDF — no subscription

02 · Compliance Guide

What Personal Data Do You Hold?

More than you think. Here is what most electricians hold:

Digital Data

Phone contacts (customer names and numbers)
Emails and text messages
Photos of customer properties and installations
Quotes and invoices (with addresses)
Electrical certificates
Accounting records and bank statements

Paper Records

Job sheets and notes
Customer enquiry notes
Paper certificates and carbon copies
Receipts with customer details
Business cards collected from customers

GDPR applies to all of this — digital and paper records alike. If it identifies a living individual, it is personal data.

03 · Compliance Guide

Lawful Basis: Why You Are Allowed to Hold the Data

GDPR requires a "lawful basis" for processing personal data. For electricians, three bases are relevant:

Contract

You need the data to perform a contract with the customer — the electrical work they have hired you to do. You need their name, address, and contact details to visit their property, communicate about the work, and provide certificates.

Legal Obligation

You are legally required to keep certain records: tax records (HMRC requires 5 years), electrical certificates (required by Building Regulations), and health and safety records. You do not need consent to keep data that you are legally required to hold.

Legitimate Interests

You have a legitimate business interest in keeping customer records for aftercare, warranty, future work, and dispute resolution. You must balance your interest against the customer's privacy — for most electrical work, this balance clearly favours keeping the records.

05 · Compliance Guide

Data Retention: How Long to Keep Records

Retention Periods

Electrical certificates (EIC, EICR)Life of installation

Tax records (invoices, receipts, accounts)5 years after filing deadline

Accident and H&S records3 to 40 years (varies)

Customer records (completed jobs)6 years (limitation period)

Enquiries that did not proceed3 to 6 months

Marketing consentUntil consent withdrawn

Annual data review: Once a year, review your customer records and delete data you no longer need. Old enquiries, lapsed marketing lists, and records beyond their retention period should be securely deleted (digital) or shredded (paper).

In the app

Try Elec-Mate free for 7 days

16 certificate types, 70+ calculators, RAMS, quoting, invoicing, AI agents, and 46+ training courses — from £6.99/mo.

Start free trial

06 · Compliance Guide

Data Breaches: What to Do

A data breach is any event where personal data is accidentally or unlawfully accessed, lost, destroyed, or disclosed. Common examples for electricians:

Lost or stolen phone containing customer contacts and photos
Van broken into and paperwork (job sheets, certificates) stolen
Email account hacked and customer data accessed
Sending an email to the wrong customer with another customer's details

What to do: (1) Contain the breach — change passwords, remote-wipe the device, report theft to police. (2) Assess the risk — could the data be used to harm individuals? (3) If there is a risk to individuals, report to the ICO within 72 hours using their online breach reporting tool. (4) If there is a high risk, also inform the affected customers. (5) Document everything — the breach, your response, and what you will do to prevent it happening again.

07 · Compliance Guide

ICO Registration: £40/Year, No Excuses

Who Must Register

Every organisation or sole trader that processes personal data must register with the ICO and pay the data protection fee — unless they qualify for a specific exemption (most electricians do not).

Fee Tiers (2026)

Micro-organisations (fewer than 10 employees, turnover under £632,000): £40/year. Small organisations (fewer than 250 employees, turnover under £36 million): £60/year. Large organisations: £2,900/year. Most electricians fall into the micro tier at £40/year.

How to Register

Visit ico.org.uk and complete the online registration form. It takes about 10 minutes. You will receive a registration number which you should keep on file. Some commercial clients and accreditation schemes ask for your ICO registration number.

08 · Compliance Guide

Practical Steps for GDPR Compliance

Register with the ICO — £40/year. Do it today if you have not already.
Lock all devices — PIN, fingerprint, or face unlock on your phone, tablet, and laptop. Enable encryption and remote wipe.
Add a privacy notice — one paragraph on your website, quote template, or terms and conditions.
Secure paper records — keep job sheets and certificates in a locked cabinet or drawer, not loose in the van.
Annual data review — once a year, delete data you no longer need. Old enquiries, expired marketing lists, records beyond retention.
Back up digital records — if your phone breaks or is stolen, you need to be able to recover your data. Use cloud backup with encryption.

09 · Compliance Guide

For Electricians: Compliance Is Simpler Than You Think

GDPR compliance for a sole-trader electrician takes about an hour to set up and a few minutes per year to maintain. Register with the ICO, add a privacy notice to your paperwork, lock your devices, and do an annual data review. That is it.

In the app

Keep customer data secure and organised

Elec-Mate stores your customer records, certificates, and invoices securely in the cloud — encrypted, backed up, and accessible only to you.

Try it free for 7 days

Frequently Asked Questions About GDPR for Electricians

What electricians say

Verified reviews from the UK App Store.

One App for Everything!

Elec-Mate is my go to app for business and electrical work. It's feature rich without feeling cluttered. A true all in one app for quotes, certs, calculations, RAMS, EICRs, and more. I use it every day without fail, and it makes my workflow much smoother since I'm not jumping between apps anymore. The price-to-feature ratio is excellent. Any issues I've had, the developer responds within the hour and usually fixes them the same day. 100% recommend.

Fantastic app for electricians

I've used the app and the web based version for a while now and it's well worth the investment. If you're an apprentice or experienced Spark give it a go, you won't be disappointed.

Absolutely amazing

I've been using Elec-Mate for a while now, and honestly, it's one of the best apps I've ever downloaded. Every aspect of it feels thoughtfully designed, from the clean and intuitive interface to the powerful features that make everything so easy to manage. It's clear that a lot of care and attention went into building this app, and it shows in every detail.

Trusted by electricians across the UK

Real feedback from real sparks

“Replaced three separate apps with Elec-Mate. Certs, quotes, and scheduling all in one place.”

Daniel Palmer

Sole Trader · DP Electrical

“I've won two contracts this month because I could turn quotes around same-day with the AI cost engineer.”

Nathan Perry

Electrician · NP Electrical Services

“The study centre got me through my AM2. Mock exams and flashcards are brilliant.”

Jake Pizey

3rd Year Apprentice · Apprentice

7-day free trial

Keep Customer Data Secure

Join 1,000+ UK electricians using Elec-Mate for secure customer records, certificates, and invoices. Cloud-encrypted, backed up, always accessible. 7-day free trial, cancel anytime.

Start your free trial

From £6.99/mo after the trial — no charge until day 8.