11. Amendment of section 10 (enforcement of data protection) of Principal Act.
Section 10 of the Principal Act is amended -
(a) in subsection (1) -
(i) in paragraph (a), by the deletion of "by a data controller or a data processor", and
(ii) in paragraph (b), by the substitution of the following subparagraph for subparagraph (ii):
"(ii) if he or she is unable to arrange, within a reasonable time, for the amicable resolution by the parties concerned of the matter the subject of the complaint, notify in writing the individual who made the complaint of his or her decision in relation to it and that the individual may, if aggrieved by the decision, appeal against it to the Court under section 26 of this Act within 21 days from the receipt by him or her of the notification.",
(b) by the insertion of the following subsection after subsection (1):
"(1A) The Commissioner may carry out or cause to be carried out such investigations as he or she considers appropriate in order to ensure compliance with the provisions of this Act and to identify any contravention thereof.",
(c) in subsection (2), by the deletion of ", being a data controller or a data processor,",