(2) Without prejudice to the generality of the foregoing and other functions under this Act, the Commission shall perform the following functions. (a) receiving and deciding complaints about infringement of personal data protection including violation of any provision of this Act; (b) examining various laws, Rules, policies, bye-laws, regulations, or instructions about the protection of personal data and may suggest amendments to bring the law in conformity with the provisions of the Act; (c) taking proactive steps to create public awareness about personal data protection rights and filing complaints against infringement of those rights, as per the provisions of this Act; (d) engaging, supporting, guiding, facilitating, training, and persuading data controllers, and data processors to ensure the protection of personal data as per the provisions of this Act; (e) ensuring that all its decisions are based on established principles to structure or minimize discretion and ensure transparency and accountability; (f) monitoring and enforcing the application of the provisions of this Act; (g) taking prompt and appropriate action in response to a data security breach as per the provisions of this Act; (h) monitoring the cross-border transfer of personal data as per provisions of this Act. (i) monitoring technological developments and commercial practices that may affect the protection of personal data and promoting measures and undertaking research for innovation in the field of protection of personal data; (j) advising the Federal Government and any other statutory authority on measures that must be undertaken to promote the protection of personal data and to ensure consistency of application and enforcement of this Act; (k) for the compliance of obligations under the Act, the Commission is entitled to seek professional input from private or public entities. (3) The Commission shall recommend to the Federal Government, Provincial Governments, Local Governments, and any entity falling under their domains should take steps required for ensuring the consistency and enforcement of personal data protection policies across Pakistan and suggest measures to make Pakistan’s data protection laws in compliance with international standards. 35