The Data Protection Bill, 2012 Commission or any other person in the exercise of their powers under this Act; (b) makes any statement or gives any information to the Commission or any other person exercising powers under this Act, knowing that the statement or information is false or misleading; (c) represents directly or indirectly that he or she holds any authority under this Act when he or she does not hold that authority, commits an offence and is liable, on conviction, to a fine not exceeding Kshs 100,000 and to a term of imprisonment not exceeding two years, or to both. Regulations. 29. (1)The Cabinet Secretary may, after consultation with the Commission, make regulations prescribing anything required by this Act to be prescribed or generally for the better carrying out of the provisions of this Act. (2) Without prejudice to the generality of subsection (1), the regulations may provide for— (a) the manner in which applications under this Act are to be made; (b) the form in which information requested under this Act is to be supplied; (c) the procedure for the service of notices and documents under this Act; or (d) providing for such matters as are contemplated by or necessary for giving full effect to this Act and for its due administration. 18