37. Authorisation by Commission 38. Exemption for processing of personal data for historical, statistical and research purposes PART V – ENFORCEMENT 39. Complaints 40. Investigation by the Commission 41. No action by the Commission 42. Pre-investigations by the Commission 43. Investigation proceedings by the Commission 44. Matters exempt from search and seizure 45. Parties to be informed of developments during and as a result of the investigation 46. Enforcement notice 47. Cancellation of an enforcement notice 48. Reviews and appeals 49. Civil remedies PART VI – GENERAL PROVISIONS 50. Unsolicited electronic communications 51. Automated decision making 52. Transfer of personal information outside Lesotho 53. Notifications 54. Codes of Conduct 55. Offences and penalties