Data Protection Act 2018, Cross Heading: General powers is up to date with all changes known to be in force on or before 24 June 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
2U.K.The Commissioner has the following investigative, corrective, authorisation and advisory powers in relation to processing of personal data to which Part 3 or 4 of this Act applies—
(a)to notify the controller or the processor of an alleged infringement of Part 3 or 4 of this Act;
(b)to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of Part 3 or 4 of this Act;
(c)to issue reprimands to a controller or processor where processing operations have infringed provisions of Part 3 or 4 of this Act;
(d)to issue, on the Commissioner's own initiative or on request, opinions to Parliament, the government or other institutions and bodies as well as to the public on any issue related to the protection of personal data.
All content is available under the Open Government Licence v3.0 except where otherwise stated. This site additionally contains content derived from EUR-Lex, reused under the terms of the Commission Decision 2011/833/EU on the reuse of documents from the EU institutions. For more information see the EUR-Lex public statement on re-use.
