12 Personal Data Protection Act, No. 9 of 2022 Provided however, the requirement under paragraph (d) shall not apply to special categories of personal data. Right of appeal of the data subjects to the Authority and the process of determination of such appeal 19. (1) Where a controller– (a) has not refrained from further processing of personal data under section 14; or (b) has refused to rectify or complete personal data under section 15; or (c) has refused to erase personal data under section 16; or (d) has refused the request of the data subject under section 17(2); or (e) has refused the request to review a decision based solely on automated processing under section 18(1), the data subject may, appeal against such decision in the form, manner and within such period of time as may be prescribed. (2) The Authority may determine whether the – (a) decision of the controller not to refrain from further processing of personal data under section 14 was lawful; (b) decision of the controller to refuse to rectify or complete personal data under section 15 was lawful; (c) decision of the controller to refuse the erasure of personal data under section 16 was lawful; (d) refusal under section 17(2) by the controller was lawful;