The Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010
| Jurisdiction | UK Non-devolved |
2010 No. 31
Data Protection
The Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010
Made 6th January 2010
Laid before Parliament 12th January 2010
Coming into force 6th April 2010
The Secretary of State has consulted the Information Commissioner in accordance with section 67(3)(b) of the Data Protection Act 19981.
Accordingly, the Secretary of State, in exercise of the powers conferred by sections 55A(5) and (7) and 55B(3)(b) of that Act2, makes the following Regulations:
Citation, commencement and interpretation
1.—(1) These Regulations may be cited as the Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010 and come into force on 6th April 2010.
(2) In these Regulations references to sections are references to sections of the Data Protection Act 1998.
(3) In these Regulations—
“address” is construed in accordance with section 16(3);
“contravention” is construed in accordance with section 55A.
Prescribed amount
2. The prescribed amount for the purposes of section 55A(5) is £500,000.
Notices of intent
3. For the purposes of section 55B(3)(b) the prescribed information is—
(a) the name and address of the data controller;
(b) the grounds on which the Commissioner proposes to serve a monetary penalty notice, including—
(i) the nature of the personal data involved in the contravention,
(ii) a description of the circumstances of the contravention,
(iii) the reason the Commissioner considers that the contravention is serious,
(iv) the reason the Commissioner considers that the contravention is of a kind likely to cause substantial damage or substantial distress, and
(v) whether the Commissioner considers that section 55A(2) applies or that section 55A(3) applies, and the reason the Commissioner has taken this view;
(c) an indication of the amount of the monetary penalty the Commissioner proposes to impose and any aggravating or mitigating features the Commissioner has taken into account; and
(d) the date on which the Commissioner proposes to serve the monetary penalty notice.
Monetary penalty notices
4. For the purposes of section 55A(7) the prescribed information is—
(a) the name and address of the data controller;
(b) details of the notice of intent served on the data controller;
(c) whether the Commissioner received written representations...
To continue reading
Request your trial