# Data Protection Act 2018, Paragraph 13


Until the first regulations under section 24(8) of this Act come into force, “the appropriate maximum” for the purposes of that section is—
(a) where the controller is a public authority listed in Part 1 of Schedule 1 to the Freedom of Information Act 2000, £600, and
(b) otherwise, £450.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/20/paragraph/13 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-20/paragraph-13
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.