Investigations and audits
The Information and Data Protection Office may investigate organisations and public authorities to check compliance with the Act.
You must cooperate with investigations and provide information when required.
Binding orders
The Information and Data Protection Office may issue binding orders that require you to take specific action.
You must comply with these orders within the time set. Failure to comply is a breach of statutory duty.
Administrative fines
The Information and Data Protection Office may impose administrative fines for non-compliance.
Fines may be paid into the Central Fund or in whole or in part to affected individuals.
Criminal offences
It is a criminal offence to:
- Wilfully refuse to comply with a binding order
- Obstruct an investigation
- Destroy, conceal or falsify information
Conviction may result in fines or other lawful penalties.

