Do I need to be registered for GDPR with the ICO?

Yes. You will be handling sensitive data so you will need to be registered with the Information Commissioners Office (ICO) for GDPR. Here is a link. https://ico.org.uk/