35
2019
Data Protection
No.
(2) The data sharing code under subsection (1) shall
specify on the lawful exchange of personal data between
government departments or public sector agencies.
PART VIII—ENFORCEMENT PROVISIONS
56. (1) A data subject who is aggrieved by a decision
of any person under this Act may lodge a complaint with
the Data Commissioner in accordance with this Act.
Complaints to the
Data
Commissioner.
(2) A person who intends to lodge a complaint under
this Act shall do so orally or in writing.
(3) Where a complaint made under subclause (1) is
made orally, the Data Commissioner shall cause the
complaint to be recorded in writing and the complaint shall
be dealt with in accordance with such procedures as the
Data Commissioner may prescribe.
(4) A complaint lodged under subclause (1) shall
contain such particulars as the Data Commissioner may
prescribe.
(5) A complaint made to the Data Commissioner shall
be investigated and concluded within ninety days.
57. (1) The Data Commissioner may, for the purpose
of the investigation of a complaint, order any person to—
(a) attend at a specified time and place for the purpose
of being examined orally in relation to the
complaint;
(b) produce such book, document, record or article as
may be required with respect to any matter
relevant to the investigation, which the person is
not prevented by any other enactment from
disclosing; or
(c) furnish a statement in writing made under oath or
on affirmation setting out all information which
may be required under the notice.
(2) Where material to which an investigation relates
consists of information stored in any mechanical or
electronic device, the Data Commissioner may require the
person named to produce or give access to it in a form in
which it can be taken away and in which it is visible and
legible.
Investigation of
complaints.
!