The following Information Law practice note provides comprehensive and up to date legal information covering:
This Practice Note examines the approach to sanctions and enforcement under the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (the UK GDPR). It considers:
the role and powers of the Information Commissioner (acting through the Information Commissioner’s Office (ICO))
the ICO's investigative and corrective powers, powers to fine and appeals and safeguards in relation to ICO enforcement action
compensation claims by data subjects
representative and group actions
links to guidance tracking the ICO’s enforcement activities
other compliance incentives in practice
For a general introduction to the UK GDPR regime, see Practice Notes: The UK General Data Protection Regulation (UK GDPR). The processing of personal data by competent authorities for law enforcement purposes or by the intelligence services, which is governed by specific regimes under Parts 3 and 4 of the Data Protection Act 2018 (DPA 2018), is beyond the scope of this Practice Note.
For guidance on the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) regime and equivalent laws under the EU GDPR, see Practice Notes: Introduction to the EU GDPR and UK GDPR and EU GDPR—sanctions and enforcement.
The main approach to sanctions and enforcement that has been taken under the UK GDPR (as with the EU GDPR) is to retain high penalties for non-compliance, in the hopes of producing higher levels of compliance because
Free trials are only available to individuals based in the UK
Complete all the fields above to proceed to the next step.
**Trials are provided to all LexisPSL and LexisLibrary content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisPSL services please email customer service via our online form. Free trials are only available to individuals based in the UK. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
To view the latest version of this document and thousands of others like it, sign-in to LexisPSL or register for a free trial.
Existing user? Sign-in
Take a free trial
Take a free trial
Form of transfer of sharesThere are a number of circumstances in which shares in a company may be transferred, eg upon a sale of the shares, through the transmission of the shares by operation of law (eg upon the death or bankruptcy of a shareholder), by gift or upon the enforcement of a charge. For
Indirect discriminationThis Practice Note considers unlawful indirect discrimination under Equality Act 2010 (EqA 2010).There is a clear difference between direct and indirect discrimination, and the two are mutually exclusive (although claims may of course be brought in the alternative):•the law
Sentencing fraud offences committed by individualsThe Sentencing Council (SC) has produced sentencing guidelines for fraud offences under the Fraud Act 2006 (fraud by false representation, fraud by failing to disclose information and fraud by abuse of position), false accounting under section 17 of
Negligence—when is the duty of care breached?Having established that a duty of care exists (see Practice Note: Negligence—when does a duty of care arise?), it is then necessary to consider whether or not there has been a breach of that duty. This will depend on a number of factors outlined below and
0330 161 1234