6. The Commissioner must not take action to enforce a monetary penalty unless—
(a)the period specified in accordance with section 55A(6) has expired and all or any of the monetary penalty has not been paid;
(b)all relevant appeals against the monetary penalty notice and any variation of it have been either been decided or withdrawn; and
(c)the period for the data controller to appeal against the monetary penalty and any variation of it has expired.