Section 49: Offences and penalties

(1) A data controller or data processor, who fails to comply with orders made under section 47 of this Act commits an offence and is liable on conviction to –
(a) a fine of up to the –
(i) higher maximum amount, in the case of a data controller or data processor of major importance, or
(ii) standard maximum amount, in the case of a data controller or data processor not of major importance; or
(b) imprisonment for a term not more than one year or both.