(1) The Commissioner may, by written notice (an “information notice”)—
(a) require a controller or processor to provide the Commissioner with information that the Commissioner reasonably requires for the purposes of carrying out the Commissioner's functions under the data protection legislation, or
(b) require any person to provide the Commissioner with information that the Commissioner reasonably requires for the purposes of—
(i) investigating a suspected failure of a type described in section 149(2) or a suspected offence under this Act, or
(ii) determining whether the processing of personal data is carried out by an individual in the course of a purely personal or household activity.
(2) An information notice must state—
(a) whether it is given under subsection (1)(a), (b)(i) or (b)(ii), and
(b) why the Commissioner requires the information.
(3) An information notice—
(a) may specify or describe particular information or a category of information;
(b) may specify the form in which the information must be provided;
(c) may specify the time at which, or the period within which, the information must be provided;
(d) may specify the place where the information must be provided;
(but see the restrictions in subsections (5) to (7)).
(4) An information notice must provide information about—
(a) the consequences of failure to comply with it, and
(b) the rights under sections 162 and 164 (appeals etc).
(5) An information notice may not require a person to provide information before the end of the period within which an appeal can be brought against the notice.
To view the latest version of this document and millions of others like it, sign-in to LexisLibrary or register for a free trial.
Existing user? Sign-in
Take a free trial
Take a free trial
0330 161 1234