place;
(b) the Commission finds that a contravention has taken place;
(c) an enforcement notice is served in terms of section 46;
(d) a served enforcement notice is cancelled in terms of section 47;
(e) an appeal is lodged against the enforcement notice for cancellation
or variation of the notice in terms of section 48; or
(f) an appeal against an enforcement notice is allowed, the notice is
submitted or the appeal is dismissed, the Commission shall inform
the complainant and the data controller in the manner prescribed of
any development and the result of that investigation within a
prescribed period.
Enforcement notice
46
(1) Where the Commission is satisfied that a data controller has contravened
this Act, the Commission shall serve the data controller with an enforcement
notice requiring the data controller to do either or both of the following –
(a) to take specified steps within a period specified in the notice, or to
refrain from taking action; or
(b) to stop processing personal information specified in the notice, or to
stop processing personal information for a purpose or in a manner
specified in the notice within a period specified in the notice.
(2) An enforcement notice shall include –
(a) a statement indicating the nature of the contravention;
(b) the right to appeal.