Part 6: Enforcement Section 146: Assessment notices
This section empowers the Commissioner to give assessment notices. It replaces the provisions on assessment notices in section 41A of the 1998 Act.
	Subsection (1) provides the Commissioner with a power to issue an assessment notice for the purpose of carrying an assessment of whether the controller or processor has complied or is complying with the data protection legislation.
	Subsection (2) sets out what the Commissioner may require the controller or processor to do following receipt of an assessment notice. This may include, for example, permitting the Commissioner to enter specified premises or observe processing that takes place on the premises, or, assisting the Commissioner to view certain documents or other information.
	Subsection (4) requires the assessment notice to set out the times at which each requirement in the notice must be complied with.
	Subsection (5) requires an assessment notice to provide information about rights under sections 162 and 164 (appeals etc) and the consequences of a failure to comply with it.
	Subsection (6) prohibits an assessment notice from requiring the data controller or processor to do anything before the end of the period in which an appeal could be brought against the notice.
	Subsection (7) provides that if an appeal is brought against the notice, the controller or processor need not comply with the notice until the appeal has been withdrawn or decided.
	Subsection (8) provides that subsections (6) and (7) do not apply where the Information Commissioner considers there is an urgent need for the controller or processor to comply. In these circumstances, however, the assessment notice must allow the controller or processor a minimum of seven days to comply.
	Subsection (9) provides that, in certain circumstances, the Commissioner may require a person to comply with an assessment notice in less than 7 days, including with immediate effect.
	Subsection (10) permits the Commissioner to cancel an assessment notice by written notice to the controller or processor to whom it was given.
	Subsections (11) and (12) are self-explanatory.