Question to the Department for Digital, Culture, Media & Sport:

To ask Her Majesty’s Government whether they are planning to raise the level of the maximum fine that can be imposed by the Information Commissioner.

The EU General Data Protection Regulation (GDPR), which will come into force in all EU Member States on 25 May 2018, establishes a tiered approach to penalties for breaches which enables Data Protection Authorities to impose fines for the most serious infringements of up to the higher of 4% of annual worldwide turnover or EUR20 million. Other specified infringements would attract a fine of up to the higher of 2% of annual worldwide turnover or EUR10m.