Sanctions and penalties


Article 58 of the Applied GDPR sets out the following corrective powers:


Regulation 114 of the Implementing Regulations sets the maximum amount of a penalty at £1,000,000 in relation to an infringement of a provision of the Applied GDPR. 

This includes non-compliance with any order made by the Commissioner or infringements of

An appeal can be made to the Data Protection Tribunal against the imposition of sanctions and penalties by the Commissioner.

Failure to comply with notices - Contempt of court

Failure to comply with an information, enforcement, assessment or penalty notice may be certified to the High Court which will treat the matter as contempt of court.  (Regulation 117 of the Implementing Regulations)