Personal Data Protection Act GN. NO. 395B (Contd) personal data is an accurate record of information received or obtained by the data controller from the data subject or a third party. (3) Where the personal data is not accurate record of the information, the Commission may direct the data controller or processor to correct the personal data as it considers appropriate. (4) Where the personal data complained of has been rectified, blocked, updated, erased or destroyed under this section, the data controller or data processor shall be required to notify third parties to whom the personal data has been previously disclosed of the rectification, blocking, updating, erasure or destruction. PART VII INVESTIGATION OF COMPLAINTS Complaints against violation of personal data protection principles Notice of investigation 39.-(1) Any person who considers that a data controller or data processor has infringed personal data protection principles may file a complaint to the Commission. (2) Where the Commission is satisfied that there are reasonable grounds to investigate a matter under this Act, the Commission may initiate an investigation in respect thereof. (3) A complaint made under this section shall be investigated and concluded within ninety days from the date of receipt. (4) The Commission may, taking into account the circumstances of the complaint, extend the time provided under subsection (3) up to a period not exceeding ninety days. 40. Before commencing an investigation of a complaint under this Act, the Commission shall, in a form prescribed in the regulations, notify the data controller or data processor concerned of the substance of the complaint and intention to carry out the 26