
The Information Commissioner currently has a power to serve a monetary penalty notice where a data controller has been in serious breach of its duties or where the contravention was of a kind likely to cause substantial damage or distress.
Read more Get in Touch