Personal Data (Privacy) Ordinance Part 7 7-50 Section 50 Cap. 486 (3) The steps specified in an enforcement notice to remedy and, if appropriate, prevent any recurrence of any contravention to which the notice relates may be framed— (a) to any extent by reference to any approved code of practice; and (b) so as to afford the relevant data user a choice between different ways of remedying and, if appropriate, preventing any recurrence of the contravention. (Replaced 18 of 2012 s. 28) (4) Subject to subsection (5), the period specified in an enforcement notice for taking the steps specified in it shall not expire before the end of the period specified in subsection (7) within which an appeal against the notice may be made and, if such an appeal is made, those steps need not be taken pending the determination or withdrawal of the appeal. (5) If the Commissioner is of the opinion that by reason of special circumstances the steps specified in an enforcement notice should be taken as a matter of urgency— (a) he may include a statement to that effect in the notice together with the reasons why he is of that opinion; (b) where such a statement is so included, subsection (4) shall not apply but the notice shall not require those steps to be taken before the end of the period of 7 days beginning with the date on which the notice was served. (6) The Commissioner may cancel an enforcement notice by notice in writing served on the relevant data user. (7) An appeal may be made to the Administrative Appeals Board against an enforcement notice by the relevant data user not later than 14 days after the notice was served. (8) Where the Commissioner— Verified Copy Last updated date 25.4.2013