Part 6: Enforcement Section 157: Maximum amount of penalty
This section makes provision about the maximum amount of fines that can be imposed for infringements of a provision of the GDPR, an infringement of a provision of Parts 3 or 4 or a failure to comply with an information notice, assessment notice or an enforcement notice.
	Subsection (1) specifies the maximum penalty that can be issued by the Commissioner in relation to breaches of the GDPR with reference to Article 83 of the GDPR.
	Subsection (2) specifies the maximum penalty amount in relation to breaches of Part 3 of the Act.
	Subsection (3) specifies the maximum penalty amount in relation to breaches of Part 4 of the Act.
	Subsection (4) specifies that the maximum penalty amount in relation to failure to comply with an information notice, assessment notice, or enforcement notice is the higher maximum amount (see subsection (5)).
	Subsection (5) sets what the higher maximum amount is. The higher maximum amount to be 20 million EUR or (in the case of an undertaking) 4% of the undertaking’s total annual worldwide turnover, whichever is higher.
	Subsection (6) sets the standard maximum amount to be 10 million EUR or (in the case of an undertaking) 2% of the undertaking’s total annual worldwide turnover, whichever is higher.
	Subsection (7) outlines how to calculate the conversion of the maximum amount of a penalty into sterling.