Penalties | ICO

The Information Commissioner can issue a monetary penalty for non-compliance with Part 3 of the Act – Law Enforcement Processing. Penalties are determined case-by-case, ranging from £8.7 million or 2% of annual turnover (standard), to £17.5 million or 4% of annual turnover (higher maximum). The type of infringement, including failure to comply with data protection principles, impacts the penalty level.