# The Cyber (Sanctions) (EU Exit) Regulations 2020, Regulation 30: Penalties for offences

Extent: E+W+S+N.I.

(1) A person who commits an offence under any provision of Part 3 (Finance) or regulation 21 (finance: licensing offences) is liable—
(a) on summary conviction in England and Wales, to imprisonment for a term not exceeding the general limit in a magistrates’ court or a fine (or both);
(b) on summary conviction in Scotland, to imprisonment for a term not exceeding 12 months or a fine not exceeding the statutory maximum (or both);
(c) on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding the statutory maximum (or both);
(d) on conviction on indictment, to imprisonment for a term not exceeding 7 years or a fine (or both).
(2) A person who commits an offence under regulation 9(6) (confidentiality) or 21A (director disqualification: licensing offences) is liable—
(a) on summary conviction in England and Wales, to imprisonment for a term not exceeding the general limit in a magistrates’ court or a fine (or both);
(b) on summary conviction in Scotland, to imprisonment for a term not exceeding 12 months or a fine not exceeding the statutory maximum (or both);
(c) on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding the statutory maximum (or both);
(d) on conviction on indictment, to imprisonment for a term not exceeding 2 years or a fine (or both).
(3) A person who commits an offence under regulation 23(6) or 27 (information offences in connection with Part 3) is liable—
(a) on summary conviction in England and Wales, to imprisonment for a term not exceeding 6 months or a fine (or both);
(b) on summary conviction in Scotland, to imprisonment for a term not exceeding 6 months or a fine not exceeding level 5 on the standard scale (or both);
(c) on summary conviction in Northern Ireland, to imprisonment for a term not exceeding 6 months or a fine not exceeding level 5 on the standard scale (or both).
(4) In relation to an offence committed before 2nd May 2022, the reference in each of paragraphs (1)(a) and (2)(a) to the general limit in a magistrates’ court is to be read as a reference to 6 months.

---
Source: https://www.legislation.gov.uk/uksi/2020/597/regulation/30 (the official version)
Page: https://openlegislation.uk/cyber-sanctions-eu-exit-regulations-2020/regulation-30
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.