49 A data subject may institute a civil action for damages in a court having jurisdiction against a data controller for breach of any provision of this Act. PART VI – GENERAL PROVISIONS Unsolicited electronic communications 50 (1) In this section “direct marketing” means communication by whatever means of any advertising or marketing material which is directed to particular data subjects. (2) A data subject is entitled any time by notice to a data controller to require the data controller to cease, or not to begin, processing of personal data in respect of which he is the data subject for the purposes of direct marketing. (3) If the Commission is satisfied, on the application of any person who has given notice under subsection (2) that the data controller has failed to comply with the notice, the Commission may order the data controller to take such steps for complying with the notice as the Commission thinks fit. Automated decision making 51 (1) Subject to subsection (2), a person may not be subjected to a decision which has legal effect on him, or which affects him significantly, based solely on the automated processing of personal information intended to provide a profile of certain aspects of his personality or personal habits/ (2) The provisions of subsection (1) shall not apply where the decision – (a) has been taken in connection with the conclusion or performance of