(2) A person aggrieved by any decision or order of any officer of the Commission may, within thirty days of the receipt of the decision or order, shall appeal to the Commission in a prescribed manner and the Commission shall decide such appeal within thirty days. CHAPTER X MISCELLANEOUS 53. Temporary provisions. – (1) All data controllers and data processors shall adopt necessary security measures within six months from the day on which this Act comes into force. 54. Power to make Rules. – (1) The Federal Government may, by notification in the official Gazette make Rules to carry out the purposes of this Act. (2) Without prejudice to the generality of the foregoing provisions, these Rules may empower the Federal Government to: a) prepare and encourage data processors and data controllers to devise suitable codes of conduct and ethics; b) verify the compliance of suitable codes with applicable laws; c) seek views of the data controller and data processors in any manner related to the personal data; d) contribute to the publicity and enforcement of suitable codes; e) interact and cooperate with international and regional bodies performing similar functions; and f) set up or accredit bodies to audit the security measures of the data controllers and data processors; g) Matters connected or ancillary thereto. (3) All public and regulatory authorities including but not limited to the banking, insurance, telecommunication, legal, and health sector shall assist the Commission in the exercise and performance of its powers and functions under this Act. 43