Section 161A: Annual report on regulatory action

The Commissioner must produce and publish an annual report containing the information described in subsections (2) to (5).

The report must include the following information about UK GDPR investigations—

The report must include information about the enforcement powers exercised by the Commissioner in the reporting period in connection with—

The information included in the report in accordance with subsections (2) and (3) must include information about—

The report must include a review of how the Commissioner had regard to the guidance published under section 160 when exercising the Commissioner's enforcement powers as described in subsections (2)(c) and (3).

In this section—

• "enforcement powers" means the powers under—Article 58(1)(c) and (d) and (2)(a) and (b) of the UK GDPR,sections 142 to 159 of this Act,paragraph 2(a), (b) and (c) of Schedule 13 to this Act, andSchedules 15 and 16 to this Act;

• "the law enforcement purposes" has the meaning given in section 31 of this Act;

• "the reporting period" means the period to which the report relates;

• "UK GDPR investigation" means an investigation required under Article 57(1)(h) of the UK GDPR (investigations on the application of the UK GDPR).