# Data Protection Act 2018, Section 158: Fixed penalties for non-compliance with charges regulations


(1) The Commission must produce and publish a document specifying the amount of the penalty for a failure to comply with regulations made under section 137.
(2) The Commission may specify different amounts for different types of failure.
(3) The maximum amount that may be specified is 150% of the highest charge payable by a controller in respect of a financial year in accordance with the regulations, disregarding any discount available under the regulations.
(4) The Commission—
(a) may alter or replace the document, and
(b) must publish any altered or replacement document.
(5) Before publishing a document under this section (including any altered or replacement document), the Commission must consult—
(a) the Secretary of State, and
(b) such other persons as the Commission considers appropriate.
(6) The Commission must arrange for a document published under this section (including any altered or replacement document) to be laid before Parliament.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/158 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-158
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.