35 2019 Data Protection No. (2) The data sharing code under subsection (1) shall specify on the lawful exchange of personal data between government departments or public sector agencies. PART VIII—ENFORCEMENT PROVISIONS 56. (1) A data subject who is aggrieved by a decision of any person under this Act may lodge a complaint with the Data Commissioner in accordance with this Act. Complaints to the Data Commissioner. (2) A person who intends to lodge a complaint under this Act shall do so orally or in writing. (3) Where a complaint made under subclause (1) is made orally, the Data Commissioner shall cause the complaint to be recorded in writing and the complaint shall be dealt with in accordance with such procedures as the Data Commissioner may prescribe. (4) A complaint lodged under subclause (1) shall contain such particulars as the Data Commissioner may prescribe. (5) A complaint made to the Data Commissioner shall be investigated and concluded within ninety days. 57. (1) The Data Commissioner may, for the purpose of the investigation of a complaint, order any person to— (a) attend at a specified time and place for the purpose of being examined orally in relation to the complaint; (b) produce such book, document, record or article as may be required with respect to any matter relevant to the investigation, which the person is not prevented by any other enactment from disclosing; or (c) furnish a statement in writing made under oath or on affirmation setting out all information which may be required under the notice. (2) Where material to which an investigation relates consists of information stored in any mechanical or electronic device, the Data Commissioner may require the person named to produce or give access to it in a form in which it can be taken away and in which it is visible and legible. Investigation of complaints. !