place; (b) the Commission finds that a contravention has taken place; (c) an enforcement notice is served in terms of section 46; (d) a served enforcement notice is cancelled in terms of section 47; (e) an appeal is lodged against the enforcement notice for cancellation or variation of the notice in terms of section 48; or (f) an appeal against an enforcement notice is allowed, the notice is submitted or the appeal is dismissed, the Commission shall inform the complainant and the data controller in the manner prescribed of any development and the result of that investigation within a prescribed period. Enforcement notice 46 (1) Where the Commission is satisfied that a data controller has contravened this Act, the Commission shall serve the data controller with an enforcement notice requiring the data controller to do either or both of the following – (a) to take specified steps within a period specified in the notice, or to refrain from taking action; or (b) to stop processing personal information specified in the notice, or to stop processing personal information for a purpose or in a manner specified in the notice within a period specified in the notice. (2) An enforcement notice shall include – (a) a statement indicating the nature of the contravention; (b) the right to appeal.