# Data Protection Act 2018, Paragraph 2


The Commission has the following investigative, corrective, authorisation and advisory powers in relation to processing of personal data to which Part 3 or 4 of this Act applies—
(a) to notify the controller or the processor of an alleged infringement of Part 3 or 4 of this Act;
(b) to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of Part 3 or 4 of this Act;
(c) to issue reprimands to a controller or processor where processing operations have infringed provisions of Part 3 or 4 of this Act;
(d) to issue, on the Commission's own initiative or on request, opinions to Parliament, the government or other institutions and bodies as well as to the public on any issue related to the protection of personal data.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/13/paragraph/2 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-13/paragraph-2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.