a contract, and (i) the request of the data subject in terms of the data contract has been met; or (ii) appropriate measures have been taken to protect the data subject’s legitimate interests such as requiring a data controller to provide a data subject with sufficient information about the decision to enable him to make representations and allowing a data subject to make representations about a decision referred to in subsection (1); or (b) is governed by a law or code in which appropriate measures are specified for protecting the legitimate interests of data subjects. Notifications 53 (1) A data controller shall notify the Commission of the processing of personal information to which the Act applies (2) The notification contemplated in section (1) shall contain the following particulars – (a) the name and address of the data controller; (b) the purpose of the processing; (c) a description of the categories of data subjects and of the information or categories of information relating thereto; (d) the recipients or categories of recipients to whom the personal information may be supplied;