§ 48I — Directions for non‑compliance

48I.—(1) The Commission may, if it is satisfied that —(a)

an organisation has not complied or is not complying with any provision of Part 3, 4, 5, 6, 6A or 6B; or

(b)

a person has not complied or is not complying with any provision of Part 9 or section 48B(1),

give the organisation or person (as the case may be) any direction that the Commission thinks fit in the circumstances to ensure compliance with that provision.

[40/2020]

(2) Without limiting subsection (1), the Commission may, if it thinks fit in the circumstances to ensure compliance with any provision of Part 3, 4, 5, 6, 6A or 6B, give an organisation all or any of the following directions:(a)

to stop collecting, using or disclosing personal data in contravention of this Act;

(b)

to destroy personal data collected in contravention of this Act;

(c)

to comply with any direction of the Commission under section 48H(2).[40/2020]

—(1) The Commission may, if it is satisfied that —(a)

an organisation has not complied or is not complying with any provision of Part 3, 4, 5, 6, 6A or 6B; or

(b)

a person has not complied or is not complying with any provision of Part 9 or section 48B(1),

give the organisation or person (as the case may be) any direction that the Commission thinks fit in the circumstances to ensure compliance with that provision.

[40/2020]

(2) Without limiting subsection (1), the Commission may, if it thinks fit in the circumstances to ensure compliance with any provision of Part 3, 4, 5, 6, 6A or 6B, give an organisation all or any of the following directions:(a)

to stop collecting, using or disclosing personal data in contravention of this Act;

(b)

to destroy personal data collected in contravention of this Act;

(c)

to comply with any direction of the Commission under section 48H(2).[40/2020]