[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 642 ACT (b) fulfil any other tasks related to the protection of personal data under this Act; and (c) commence or engage in legal proceedings in order to enforce the provisions of this Act. (2) The Chief Executive Officer shall produce an annual general report on the Commission’s activities regarding data protection, and shall present the report to the National Assembly and publish it in the Gazette. (3) The Chief Executive Officer may produce other reports relating to the Commission’s functions and present them to the National Assembly. Right of appeal 13. Any person aggrieved by a decision, order or notice of the Commission under this Act may, within 21 working days from the date when the decision, order or notice is served to that person, appeal to the Supreme Court. Cooperation 14. The Commission has the right to obtain, on request, assistance from public bodies, natural or legal persons for performing its tasks, including the right to obtain data, reports, and any other documentation needed to perform its duties under this Act. PART III - DATA PROTECTION Processing personal data 15.(1) Every data controller and data processor shall adhere to the principles under this Act for processing data quality, purpose limitation, use and further disclosure limitation, transparency, data subject's participation, proportionality and accountability. (2) Personal data shall be processed if — (a) the data subject has provided consent for the processing of such data;