Remedy
Start free

Section 159: Amount of penalties: supplementary

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 6: Enforcement

For the purposes of Article 83 of the UK GDPR and section 157, the Secretary of State may by regulations—

provide that a person of a description specified in the regulations is or is not an undertaking, and
make provision about how an undertaking's turnover is to be determined.

For the purposes of Article 83 of the UK GDPR, section 157 and section 158, the Secretary of State may by regulations provide that a period is or is not a financial year.

Regulations under this section are subject to the affirmative resolution procedure.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.