Citation, commencement and interpretation

1. —(1) This Order may be cited as the Data Protection (Monetary Penalties) Order 2010 and comes into force on 6th April 2010.

(2) In this Order references to sections and Schedules are references to sections of and Schedules to the Data Protection Act 1998.

Monetary penalty notices: procedure: written representations

2. The Commissioner must consider any written representations made in relation to a notice of intent when deciding whether to serve a monetary penalty notice.

Monetary penalty notices: procedure: supplementary provisions

3. —(1) The period specified by the Commissioner for making written representations in accordance with section 55B(3)(a) must not be less than 21 days beginning with the first day after the date of service of the notice of intent.

(2) The Commissioner may not serve a monetary penalty notice relating to a notice of intent if a period of 6 months has elapsed beginning with the first day after the service of the notice of intent.

(3) The period specified in accordance with section 55A(6) must be at least 28 days beginning with the first day after the date of service of the monetary penalty notice.

Monetary penalty notices: variation

4. —(1) The Commissioner may vary a monetary penalty notice by written notice to the person on whom it was served.

(2) A notice under paragraph (1) must specify—

(a) the notice concerned; and

(b) how the notice is varied.

(3) The Commissioner may not vary a monetary penalty notice so as to reduce the period specified in accordance with section 55A(6).

(4) The Commissioner may not vary a monetary penalty notice so as to increase the amount of the monetary penalty, or otherwise vary a monetary penalty notice to the detriment of the person on whom it was served.

(5) A person on whom a notice under paragraph (1) is served may appeal to the Tribunal against that notice.

(6) Where the Commissioner varies a monetary penalty notice so as to reduce the amount of the monetary penalty, the Commissioner must repay any amount that has already been paid that exceeds the amount of the reduced monetary penalty.

Monetary penalty notices: cancellation

5. —(1) The Commissioner may cancel a monetary penalty notice by written notice to the person on whom it was served.

(2) Where a monetary penalty notice has been cancelled, the Commissioner may not take any further action under section 55A, 55B or 55D in relation to the contravention to which that monetary penalty notice relates.

(3) Where a monetary penalty notice has been cancelled, the Commissioner must repay any amount that has been paid pursuant to that notice.

Monetary penalty notices: enforcement

6. The Commissioner must not take action to enforce a monetary penalty unless—

(a) the period specified in accordance with section 55A(6) has expired and all or any of the monetary penalty has not been paid;

(b) all relevant appeals against the monetary penalty notice and any variation of it have been either been decided or withdrawn; and

(c) the period for the data controller to appeal against the monetary penalty and any variation of it has expired.

Appeals

7. Section 49 and Schedule 6 have effect in relation to appeals under section 55B(5) and article 4(5) as they have effect in relation to appeals under section 48(1).