[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 674 ACT (f) the degree of cooperation with the Commission, in order to remedy the infringement and mitigate the possible adverse effects of the infringement; (g) the categories of personal data affected by the infringement; (h) the manner in which the infringement became known to the Commission, in particular whether and if so to what extent the data controller or data processor notified the infringement; (i) where measures taken under the corrective authority of the Commission have previously been ordered against the data controller or data processor concerned with regard to the same subject-matter, compliance with those measures; (j) adherence to approved codes of conduct or certification mechanisms; and (k) any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement. (4) If a data controller or data processor intentionally or negligently, for the same or linked processing operations, infringes several provisions of this Act, the total amount of the administrative fine shall not exceed the amount specified for the gravest infringement. (5) Infringements of the obligations of the data controller and the data processor under this Act shall, in accordance with subsection (2), be subject to administrative fines up to SCR200,000. (6) Infringements of the following provisions shall be subject to administrative fines up to SCR200,000 — (a) the basic principles for processing, including conditions for consent;