[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act 641 SUPPLEMENT TO OFFICIAL GAZETTE ACT (3) The court may, on application by the Commission, extend the 90 day period by such period as the Commission thinks fit. Disclosure 10.(1) The Commission and every person acting on behalf or under the direction of the Commission shall be bound by the duty of secrecy and shall not disclose any confidential information that comes to their knowledge in the performance of their duties and functions under this Act, neither during nor after their term in office. (2) The Commission may disclose or may authorise any person acting on behalf or under the direction of the Commission to disclose information — (a) (b) that, in the opinion of the Commission, is necessary to — (i) carry out an investigation under this Act; (ii) establish the grounds for findings and recommendations contained in any report under this Act; or in the course of a prosecution for an offence under this Act, or an appeal from a review of a court. Liability 11. No criminal or civil proceedings shall be pursued against the Commission, or against any person acting on behalf or under the direction of the Commission for anything done, reported or said in good faith in the course of the exercise or performance of any power, duty or function of the Commission under this Act. Powers and duties of the Chief Executive Officer 12.(1) Subject to the direction, control and supervision of the Commission, the Chief Executive Officer shall — (a) keep internal records and publicise infringements and measures taken under this Act;