149 Enforcement notices

Enforcement notices

149  Enforcement notices

(1)     Where the Commissioner is satisfied that a person has failed, or is failing, as described in subsection (2), (3), (4) or (5), the Commissioner may give the person a written notice (an “enforcement notice”) which requires the person—

(a)     to take steps specified in the notice, or

(b)     to refrain from taking steps specified in the notice,

or both (and see also sections 150 and 151).

(2)     The first type of failure is where a controller or processor has failed, or is failing, to comply with any of the following—

(a)     a provision of Chapter II of the [UK GDPR] or Chapter 2 of Part 3 or Chapter 2 of Part 4 of this Act (principles of processing);

(b)     a prov

Popular documents