[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 640 ACT (8) In addition to the powers of the Commission, the Commission shall have the power to — (a) issue reprimands to a data controller or data processor where processing operations have infringed provisions of this Act; (b) order the data controller or data processor to comply with the data subject’s requests to exercise his or her rights under this Act; (c) order the data controller to communicate a personal data breach to the data subject; (d) impose a temporary or definitive limitation including a ban on processing; (e) order the rectification or erasure of personal data or restriction of processing and the notification of such actions to recipients to whom the personal data have been disclosed; (f) impose an administrative fine in addition to, or instead of measures referred to in this section, depending on the circumstances of each individual case; (g) order the suspension of data flows to a recipient in another country or to an international organization. Preliminary injunction 9.(1) The Commission may apply to a court for a preliminary injunction to preserve data, including traffic data, where the Commission has reasonable ground to believe that the data is vulnerable to loss or modification. (2) Where the court is satisfied that a preliminary injunction may be made under subsection (1), the court shall issue the injunction specifying a period for preservation, which shall not be more than 90 days during which the order shall remain in force.