Act,
commits an offence and is liable, on conviction to a fine not exceeding M50 000.00
or to imprisonment for a period not exceeding 5 years or to both and if the offender
is a juristic person the sentence shall be served by the head of the data controller.

Regulations
56

The Minister may, on the recommendations of the Commission, make regulations
generally for the purpose of giving effect to this Act.

Transitional arrangements
57

(1) Any person, who at the commencement date of this Act, is processing any
personal information shall, within two years of such data, bring such
processing into conformity with this Act and notify the Commission in terms
of section 53.
(2) The period of two years referred to in subsection (1) may be extended by
the Minister by notice published in the Gazette to a maximum of three years.

PART VII
MISCELLANEOUS

58

The head of a data controller may, subject to this Act , by order, designate one or
more officers or employees to be Data Protection Officers of that controller to

Select target paragraph3