28 Personal Data Protection Act, No. 9 of 2022 (n) with the concurrence of the Minister assigned the subject of Finance, to pay such remuneration and other benefits and to establish provident funds or pension schemes as may be determined by the Authority for the benefit of its staff and officers, consultants or advisors with whom a contract of employment or service is entered into by the Authority as the case may be; (o) to invest its funds in such manner as the Authority may deem necessary; (p) to open, operate and close bank accounts; (q) to establish standards in relation to data protection and data storage, data processing, obtaining consent and such other matters as may be necessary for the proper implementation of the provisions of this Act; (r) to receive grants, gifts or donations whether from local or foreign sources: Provided however, the Authority shall obtain prior written approval of the Department of External Resources of the Ministry of the Minister to whom the subject of Finance is assigned, in respect of all foreign grants, gifts or donations; (s) to make rules and issue guidelines and directives in respect of the matters for which rules, guidelines and directives are required to be made or issued under this Act; and (t) to do any other acts as may be necessary or conducive to the attainment of the objects of the Authority under this Act.