Section 102 amends the DPA 2018 by making provision for the Commissioner to annually publish a report detailing how the Commissioner’s regulatory functions have been discharged.
	Subsection (2) amends section 139 of the DPA 2018 by inserting new subsection 2A which allows the Commissioner to include the annual report on regulatory action in the general report which is laid before Parliament.
	Subsection (4) inserts new section 161A into the DPA 2018 outlining a report the Commissioner must produce and publish annually on the Commissioner’s investigation and enforcement powers.
	New section 161A(2) sets out the information that the annual report on regulatory action must include in relation to investigations on the application of the UK GDPR and enforcement powers exercised in relation to those investigations.
	New section 161A(3) sets out the information the annual report on regulatory action must include on enforcement powers exercised in relation to law enforcement processing and intelligence services processing under Parts 3 and 4 of the DPA 2018.
	New section 161A(4) provides that the Commissioner is required to produce and publish information about the number of penalty notices given in the reporting period that were given more than 6 months after the notice of intent was given under paragraph 2 of Schedule 16 and the reasons why that happened.
	Under new section 161A(5) the report must summarise how the Commissioner has taken into account the Commissioner’s own guidance on regulatory action while exercising the Commissioner’s powers.
	New section 161A(6) is self-explanatory.
Part 5: Data Protection and Privacy Enforcement Section 102: Annual report on regulatory action