(c) take steps to create public awareness about personal data protection rights and filing of complaints against infringement of these rights under this Act; (d) engage, support, guide, facilitate, train and persuade data controllers, data processors to ensure protection of personal data under this Act; and (e) ensure that all of its decisions are based on established principles to structure or minimize discretion and ensure transparency and accountability. 32. Powers of the Commission​: The Commission shall have all powers, direct or incidental, as are necessary to undertake its functions as provided for in this Act, and the power to acquire, hold and dispose of property including the powers to:(a) formulate, approve and implement policies, procedures and regulations for its internal administration, operations, human resource management, procurements financial management and partnerships; (b) prescribe schedule of costs and the mode of payment for filing of complaint and its format; (c) seek information from data controllers in respect of data processing under this Act and impose penalties for non-observance of data security practices and non-compliance of the provisions of this Act; (d) order a data controller to take such reasonable measures as it may deem necessary to remedy an applicant for any failure to implement the provisions of this Act; (e) summon and enforce the attendance of witnesses and compelling them to give oral and written evidence under oath 33. Meetings of the Commission​.- (1) A meeting of the Commission shall be convened and chaired by the Chairman/Chief Data Protection Commissioner. (2) In case the position of Chairman/Chief Data Commissioner is vacant or if he is not available due to any cause, the Federal Government may direct any other Commissioner to serve as acting Chief Data Protection Commissioner who may also convene and chair a meeting of the Commission. (3) Two Commissioners shall constitute quorum for a meeting of the Commission. 34. Funds: The Federal Government shall make such a budgetary allocation to the Commission as may be required by the Commission for effective exercise of its powers and functions. CHAPTER VII COMPLAINT AND OFFENCES 35. Unlawful processing of personal data​.— Anyone who processes or cause to be processed, disseminates or discloses personal data in violation of any of the provisions of this 20