Section 115 General functions under the UK GDPR and safeguardsI1

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

General functions are conferred on the F2Commission by—

(and see also F5sections 28(5), 120A and 120B).

The F6Commission's functions in relation to the processing of personal data to which the F7UK GDPR applies include—

The Commission's functions under Article 58 of the F8UK GDPR are subject to the safeguards in subsections (5) to (9).

The Commission's power under Article 58(1)(a) of the F9UK GDPR (power to require a controller or processor to provide information that the Commission requires for the performance of the Commission's tasks under the UK GDPR) is exercisable only by giving an information notice under section 142.

The Commission's power under Article 58(1)(b) of the F10UK GDPR (power to carry out data protection audits) is exercisable only in accordance with section 146.

The Commission's powers under Article 58(1)(e) and (f) of the F11UK GDPR (power to obtain information from controllers and processors and access to their premises) are exercisable only—

The following powers are exercisable only by giving an enforcement notice under section 149—

The Commission's powers under Articles 58(2)(i) and 83 of the F14UK GDPR (administrative fines) are exercisable only by giving a penalty notice under section 155.

This section is without prejudice to other functions conferred on the Commission, whether by the F15UK GDPR, this Act or otherwise.