Section 150: Enforcement notices: supplementary

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 6: Enforcement

An enforcement notice must—

state what the person has failed or is failing to do, and
give the Commissioner's reasons for reaching that opinion.

In deciding whether to give an enforcement notice in reliance on section 149(2), the Commissioner must consider whether the failure has caused or is likely to cause any person damage or distress.

In relation to an enforcement notice given in reliance on section 149(2), the Commissioner's power under section 149(1)(b) to require a person to refrain from taking specified steps includes power—

to impose a ban relating to all processing of personal data, or
to impose a ban relating only to a specified description of processing of personal data, including by specifying one or more of the following—
a description of personal data;
the purpose or manner of the processing;
the time when the processing takes place.

An enforcement notice may specify the time or times at which, or period or periods within which, a requirement imposed by the notice must be complied with (but see the restrictions in subsections (6) to (8)).

An enforcement notice must provide information about—

the consequences of failure to comply with it, and
the rights under sections 162 and 164 (appeals etc).

An enforcement notice must not specify a time for compliance with a requirement in the notice which falls before the end of the period within which an appeal can be brought against the notice.

If an appeal is brought against an enforcement notice, a requirement in the notice need not be complied with pending the determination or withdrawal of the appeal.

If an enforcement notice—

states that, in the Commissioner's opinion, it is necessary for a requirement to be complied with urgently, and
gives the Commissioner's reasons for reaching that opinion,

subsections (6) and (7) do not apply but the notice must not require the requirement to be complied with before the end of the period of 24 hours beginning when the notice is given.

In this section, "specified" means specified in an enforcement notice.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.