(1) In this Regulation, "authorised officer" means a person authorised in writing by the Commissioner under the Data Protection Acts to exercise the powers conferred by section 24 of the Act of 1988 or these Regulations, or both.

(2) An authorised officer may, for the purpose of obtaining information that is necessary or expedient for the performance of the Commissioner's functions under these Regulations, do all or any of the following -

(a) at any reasonable time -

(i) subject to paragraph (4), enter a premises that the officer reasonably believes to be occupied by a data controller or a data processor,

(ii) inspect the premises and any data located on the premises (other than data consisting of information specified in Regulation 18(7)), and

(iii) inspect, examine, operate and test any data equipment located on the premises,

(b) require any relevant person (data controller or data processor, or an employee of either of them) -