Sanctions and penalties


Article 58 of the Applied GDPR sets out the following corrective powers:


Regulation 114 of the Implementing Regulations sets the maximum amount of a penalty at £1,000,000 in relation to an infringement of a provision of the Applied GDPR. 

This includes non-compliance with any order made by the Commissioner or infringements of

An appeal can be made to the Data Protection Tribunal against the imposition of sanctions and penalties by the Commissioner.