Legislation – Data (Use and Access) Act 2025

a specified amount or an amount determined in accordance with the regulations, or

an amount not exceeding such an amount,

requiring an enforcer to produce guidance about how the enforcer proposes to exercise any discretion to determine the amount of a financial penalty and to have regard to such guidance in exercising its discretion;

requiring an enforcer to publish the guidance;

requiring an enforcer, before imposing a financial penalty on a person, to give the person written notice (a “notice of intent”) of the proposed financial penalty;

ensuring that the person is given an opportunity to make representations about the proposed financial penalty;

requiring the enforcer, after the period for making representations, to decide whether to impose the financial penalty;

requiring the enforcer, if they decide to impose the financial penalty, to give the person notice in writing (a “final notice”) imposing the penalty;

enabling a person on whom a financial penalty is imposed to appeal to a court or tribunal in accordance with the regulations;

as to the powers of the court or tribunal on such an appeal.

requiring or enabling an enforcer to provide copies of guidance described in subsection (3)(a) to specified persons;

enabling a notice of intent or final notice to be withdrawn or amended;

requiring an enforcer to withdraw a final notice in specified circumstances;

as to how financial penalties are recoverable;

about what must or may be done with amounts paid as penalties.