| Commentary

(4) Enforcement notices

| Commentary

(4)     Enforcement notices

Where the ICO is satisfied that an employer has failed, or is failing, to comply with certain data protection obligations, the ICO can issue written notices (enforcement notices) to employers requiring them to take, or refrain from taking, or both, steps set out in the notice (DPA 2018 s 149). The steps will be as the ICO considers appropriate to remedy, or having regard to, the non-compliance. The enforcement notice must state what the employer has failed or is failing to do, give the ICO's reasons for reaching that opinion and state the consequences of

To continue reading
Analyse the law and clarify obscure passages all within a practical context.