b) the complaint is not frivolous or vexatious. 3. The Authority shall establish a unit or department that shall receive and process complaints from data subjects and conduct investigations. Article 36: Investigations 1. The Authority may initiate an investigation pursuant to a complaint it has admitted or of its own accord where it has reason to believe a data controller has violated or is likely to violate this Law or any regulations, rules or other subsidiary legislation or orders. 2. The Authority may, for the purpose of an investigation, order any person to— a) attend at a specific time and place for the purpose of being examined orally in relation to a complaint; b) produce such document, record or article as may be required with respect to any matter relevant to the investigation, which the person is not prevented by any other written law from disclosing; or c) furnish a statement in writing made under oath or an affirmation setting out all information which may be required under the order. 3. Where material to which an investigation relates consists of information stored in any mechanical or electronic device, the Authority may require the person named to produce or give access to it in a form in which it is visible and legible in a structured, commonly used and machine-readable format. Article 37: Orders of the Authority 1. If the Authority, after completing an investigation under article 36, is satisfied that a data controller has violated any provision of this Law, or any regulation, rule or other subsidiary legislation made hereunder, it may make any appropriate order requiring the data controller to: a) stop or refrain from doing an act which is in violation of this Law, including stopping or refraining from processing that is the subject of the order; b) take reasonable action to compel a data processor to stop or refrain from processing as required to ensure the data controller’s compliance; c) remedy the violation; d) pay compensation to a data subject who suffers injury, loss or harm as a result of a violation; e) account for the profits made out of the violation; or 27