(1) Where an individual -

(a) is aware, having been notified under section 94(5), that the exercise of his or her rights have been restricted by a controller pursuant to section 94, or

(b) believes that the exercise of his or her rights have been so restricted and that he or she has not been notified of the said restriction by virtue of the operation of subsection (6) of that section,

the individual may make a request in writing to the Commission to verify whether the controller is processing personal data relating to him or her and if so, whether the processing is in compliance with this Part.

(2) Where the Commission receives a request under subsection (1), it may take such steps as appear to it to be appropriate, including the exercise of its powers under section 132.

(3) The Commission, having taken the steps referred to in subsection (2), shall inform the individual making the request under subsection (1) -