Personal Data Protection Act, No. 9 of 2022 31 (q) perform such other acts not inconsistent with the provisions of this Act or any other written law, as are necessary for the promotion of the objects of the Authority under this Act. 34. (1) The Authority may, issue licences to controllers or processors requiring a licence based on the recommendations of the advisory committee, for the purpose of regulating identity management and related services provided to data subjects under any written law. Authority may issue licences (2) The recommendations of the advisory committee shall identify criteria and define categories of processing by controllers or processors requiring a licence. (3) The categories, criteria, terms and conditions, form and duration, procedure for application, renewal, suspension, cancellation, relating to such licences, appeal against the refusal, suspension or cancallation of licence and fees to be charged may be prescribed. (4) The Authority may, review and monitor the compliance of such controllers or processors with applicable terms and conditions of such licences. 35. (1) Where on receipt of a complaint or otherwise, the Authority has reason to believe, that any controller or processor– (a) is engaged in, or is about to engage in any processing activity in contravention of this Act; or (b) has contravened or failed to comply with or is likely to contravene or, fails to comply with the provisions of this Act or any rule under paragraph (d), (e) or (f) of section 52, any regulation, guideline or Order made under this Act or under any other written law relating to the processing of personal data, the Authority may, conduct an inquiry in accordance with the procedure as may be prescribed. Directives made by the Authority