Data Protection Act 1998

[F155APower of Commissioner to impose monetary penaltyU.K.

(1)The Commissioner may serve a data controller with a monetary penalty notice if the Commissioner is satisfied that—

(a)there has been a serious contravention of section 4(4) by the data controller,

(b)the contravention was of a kind likely to cause substantial damage or substantial distress, and

(c)subsection (2) or (3) applies.

(2)This subsection applies if the contravention was deliberate.

(3)This subsection applies if the data controller—

(a)knew or ought to have known —

(i)that there was a risk that the contravention would occur, and

(ii)that such a contravention would be of a kind likely to cause substantial damage or substantial distress, but

(b)failed to take reasonable steps to prevent the contravention.

[F2(3A)The Commissioner may not be satisfied as mentioned in subsection (1) by virtue of any matter which comes to the Commissioner's attention as a result of anything done in pursuance of—

(a)an assessment notice;

(b)an assessment under section 51(7).]

(4)A monetary penalty notice is a notice requiring the data controller to pay to the Commissioner a monetary penalty of an amount determined by the Commissioner and specified in the notice.

(5)The amount determined by the Commissioner must not exceed the prescribed amount.

(6)The monetary penalty must be paid to the Commissioner within the period specified in the notice.

(7)The notice must contain such information as may be prescribed.

(8)Any sum received by the Commissioner by virtue of this section must be paid into the Consolidated Fund.

(9)In this section—

• “data controller” does not include the Crown Estate Commissioners [F3, a relevant person] or a person who is a data controller by virtue of section 63(3);

• “prescribed” means prescribed by regulations made by the Secretary of State.][F4; and

• “relevant person” means a person who is discharging functions in relation to the management of any property, rights or interests to which section 90B(5) of the Scotland Act 1998 applies.]