Taking regulatory action

The Commissioner can take regulatory action in respect of infringements of the data protection legislation and the Unsolicited Communications Regulations.

The Commissioner may issue any of the following formal notices to a controller, and in some cases to any person, in order to investigate matters, order corrective action be taken and impose financial penalties.  There is a right of appeal to the Data Protection Tribunal against the issue of a notice.

Investigative powers:

Corrective powers:

Failure to comply with a notice can be certified to the High Court and the matter treated as contempt of court.