# Data Protection Act 2018, Paragraph 4


(A1) This paragraph applies where the Commission gives a notice of intent to a person.
(A2) Within the period of 6 months beginning when the notice is given, or as soon as reasonably practicable thereafter, the Commission must give to the person—
(a) a penalty notice, or
(b) written notice that the Commission has decided not to give a penalty notice to the person.
(1) But the Commission may not give a penalty notice to the person before a time, or before the end of a period, specified in the notice of intent for making oral or written representations.
(2) When deciding whether to give a penalty notice to the person and determining the amount of the penalty, the Commission must consider any oral or written representations made by the person in accordance with the notice of intent.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/16/paragraph/4 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-16/paragraph-4
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.