(3)
The Judge in Chambers may, on application made by the Commissioner,
extend the period specified in subsection (2) for such time as the Judge
thinks fit.
14.
Power to carry out prior security checks
(1)
Where the Commissioner is of the opinion that the processing or transfer
of data by a data controller or data processor entails specific risks to the
privacy rights of data subjects, he may inspect and assess the security
measures taken under section 27 prior to the beginning of the processing
or transfer.
(2)
The Commissioner may, at any reasonable time during working hours,
carry out further inspection and assessment of the security measures
imposed on a data controller or data processor under section 27.
Amended by [Act No. 14 of 2009]
15.
Compliance audit
The Commissioner may carry out periodical audits of the systems of data
controllers or data processors to ensure compliance with data protection
principles specified in the First Schedule.
Amended by [Act No. 14 of 2009]
16.
Powers to request assistance
(1)
For the purposes of gathering information or for the
proper conduct of any investigation concerning compliance with this Act,
the Commissioner may seek the assistance of such persons or
authorities, as he thinks fit and that person or authority may do such
things as are reasonably necessary to assist the Commissioner in the
performance of the Commissioner’s functions.