The following table sets out administrative fines that may be applied for the corresponding contraventions of this Law. This list is not exhaustive and may be updated from time to time.
Article
Contravention
Maximum
Fine (USD)
9
Failing to comply with general requirements specified under Article 9 of the Law made for the purpose of this Law
$50,000
10
Failure to comply with requirements for lawful Processing specified under Article 10 of the Law made for the purpose of this Law
$50,000
11
Failure to comply with requirements for obtaining consent specified under Article 11 of the Law made for the purpose of this Law
$50,000
12
Failure to comply with requirements for lawful Processing specified under Article 12 of the Law made for the purpose of this Law
$50,000
14(1)
Failure to comply with the requirements for accountability specified under Article 14(1) of the Law made for the purpose of this Law
$25,000
14(2)
Failing to implement and maintain technical and organisational measures to protect Personal Data in accordance with Articles 14(2) of the Law made for the purpose of this Law
$50,000
14(3)
Failure to comply with the requirements for accountability specified under Article 14(3) of the Law made for the purpose of this Law
$25,000
14(4)
Failure to comply with the requirements for accountability specified under Article 14(4) of the Law made for the purpose of this Law
$25,000
14(5)
Failure to comply with the requirements for accountability specified under Article 14(5) of the Law made for the purpose of this Law
$25,000
14(7)
Failing to register with the Commissioner in accordance with Article 14(7)
$25,000
15
Failing to maintain records of any Personal Data Processing operations in accordance with Article 15
$25,000
16
Failing to appoint a DPO in accordance with Articles 16(2) and 16(3) of the Law made for the purpose of this Law
$50,000
20
Failing to carry out a data protection impact assessment prior High Risk Processing Activities in accordance with Article 20 of the Law made for the purposes of this Law.
$20,000
22
Failing to comply with the requirements specified under Article 22(1), 22(2), 22(5) or 22(6) of the Law made for the purpose of this Law
$25,000
23
Failing to comply with the requirements specified under Article 23 of the Law made for the purpose of this Law
$25,000
24
Failing to comply with the requirements specified under Article 24(1), 24(3) or 24(6) of the Law made for the purpose of this Law
$25,000
25
Failing to comply with the requirements specified under Article 25 of the Law made for the purpose of this Law
$25,000
26
Failing to comply with the requirements specified under Article 26 of the Law made for the purpose of this Law
$25,000
27
Failing to comply with the requirements specified under Article 27 of the Law made for the purpose of this Law
$50,000
28
Failing to comply with the requirements specified under Article 28 of the Law made for the purpose of this Law
$10,000
29
Failing to comply with the requirements specified under Article 29 of the Law made for the purpose of this Law
$75,000
30
Failing to comply with the requirements specified under Article 30 of the Law made for the purpose of this Law
$75,000
31
Failing to comply with the requirements specified under Article 31 of the Law made for the purpose of this Law
$75,000
32(3)
Failing to comply with the requirements specified under Article 32(3) of the Law made for the purpose of this Law
$75,000
33
Failing to comply with the requirements specified under Article 33 of the Law made for the purpose of this Law
$100,000
34
Failing to comply with the requirements specified under Article 34 of the Law made for the purpose of this Law
$100,000
35
Failing to comply with the requirements specified under Article 35 of the Law made for the purpose of this Law
$100,000
36
Failing to comply with the requirements specified under Article 36 of the Law made for the purpose of this Law
$100,000
37
Failing to comply with the requirements specified under Article 37 of the Law made for the purpose of this Law
$100,000
38
Failing to comply with the requirements specified under Article 38 of the Law made for the purpose of this Law
$100,000
39
Failing to comply with the requirements specified under Article 39 of the Law made for the purpose of this Law
$50,000
40
Failing to comply with the requirements specified under Article 40 of the Law made for the purpose of this Law
$25,000
41
Failing to report Personal Data Breach in accordance with Article 41 of the Law made for the purpose of this Law
$50,000
42
Failing to report Personal Data Breach in accordance with Article 42 of the Law made for the purpose of this Law
$50,000
65
Failing to comply with the requirements specified under Article 65 of the Law made for the purpose of this Law
$75,000