Consultation on enforcing data protection legislation

Close date: 28 June 2018

The Information Commissioner's Office (ICO) consults on a draft policy to help organisations understand how it will enforce breaches of data protection legislation. The draft policy explains how the ICO will use its powers, including by issuing enforcement and penalty notices, and how it will set the amount of any financial penalties. Organisations that fail to comply with data protection rules may be subject to a fine of up to £17 million or 4% of global turnover, whichever is higher, in cases of the most serious data breaches.
Consultation document: Consultation - Regulatory action policy