{
  "url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022/section-28",
  "json_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022/section-28.json",
  "legislation": "ukpga/2022/46",
  "legislation_title": "Product Security and Telecommunications Infrastructure Act 2022",
  "legislation_url": "https://openlegislation.uk/product-security-and-telecommunications-infrastructure-act-2022",
  "path": "section/28",
  "kind": "section",
  "number": "28",
  "heading": "Compliance notices",
  "text": "(1) If the Secretary of State has reasonable grounds to believe that a person has failed to comply with a relevant duty, the Secretary of State may give a compliance notice to the person.\n(2) A compliance notice is a notice under this section requiring the person to whom it is given to comply with the relevant duty specified in the notice within a specified period.\n(3) A compliance notice given to a person must—\n(a) set out the reasons for giving the compliance notice;\n(b) explain what may happen if the person does not comply with it;\n(c) explain how the person may appeal against it.\n(4) A compliance notice given to a person may—\n(a) require the person to take any specified steps within a specified period in order to comply with the relevant duty;\n(b) require the person within a specified period to provide evidence to the satisfaction of the Secretary of State that the person has complied with, or is complying with, the relevant duty.\n(5) Before giving a compliance notice to a person, the Secretary of State must—\n(a) notify the person that the Secretary of State intends to give a compliance notice to the person, and\n(b) give the person an opportunity to make representations about the giving of the notice.\n(6) The Secretary of State may not give a compliance notice to the person until the end of the period of 10 days beginning with the day on which the notification required by subsection (5)(a) is given.\n(7) A compliance notice may not be given to a person more than once in respect of the same act or omission.\n(8) In this section—\n“relevant duty” means a duty imposed by or under Chapter 2;\n“specified” means specified in the compliance notice.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "I",
      "label": "I1",
      "text": "S. 28 not in force at Royal Assent, see s. 79"
    },
    {
      "type": "I",
      "label": "I2",
      "text": "S. 28 in force at 29.4.2024 by S.I. 2023/469, reg. 3"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2022/46/section/28",
    "retrieved_at": "2026-10-29T08:53:55.212760+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}