Part 6: Enforcement Section 150: Enforcement notices: supplementary
This section sets out supplementary provisions in respect of enforcement notices given under section 149.
	Subsections (1) and (2) are self-explanatory.
	Subsection (3) explains that where the Commissioner gives an enforcement notice in reliance on section 149(2), the Commissioner’s power under section 149(1)(b) includes power to suspend the data controller or processor from processing any personal data. Alternatively, the Commissioner can impose a ban in respect of a specified type of processing of personal data (by reference to the personal data involved, the purpose of the processing or the time at which the processing takes place).
	Subsection (4) clarifies that the enforcement notice can establish the specific time or period within which the requirements set out in the enforcement notice must be complied with.
	Subsection (5) requires an enforcement notice to provide information about rights under sections 162 and 164 (appeals etc) and the consequences of a failure to comply with it.
	Subsection (6) prohibits an enforcement notice from requiring the data controller or processor to do anything before the end of the period in which an appeal could be brought against the notice.
	Subsection (7) provides that if an appeal is brought against the notice, the controller or processor need not comply with the notice until the appeal has been withdrawn or decided.
	Subsection (8) states that subsections (6) and (7) do not apply if the enforcement notice states why the requirements must be complied with urgently, but the Commissioner must not require the requirements to be complied with before the end of 24 hours from when the notice was issued.
	Subsection (9) is self-explanatory.