a. inspect all documents controlled by the controller under review and associated with the given case, or request copies of these; b. acquire knowledge of data control activities associated with the case under review and enter the premises where control activities are undertaken; c. request verbal or written information from the controller under review, as well as from any employee of the controller, d. request information in writing from any organisation or individual associated with the case under review, and e. request that the head of the supervisory body of the data control authority carry out an investigation. (2) Pursuant to the request made by the Authority in accordance with subsection (1), the controller under review, or other concerned organisation or individual shall be obliged to fulfil requests made by the Authority within the deadline period set by the Authority. The deadline period defined by the Authority may not be less than 15 days in cases defined in subsections (1) (d) and (e). (3) The individual competent for providing information may refuse to provide information specified under subsections (1) (c) and (d), should a. the individual constituting the object of the investigation of the Authority concerned by the report submitted be an immediate relative or former spouse, in accordance with the act on the general rules of administrative proceedings; b. the given individual or their immediate relative or former spouse as specified within the scope of the act on the general rules of administrative proceedings have been charged with committing a crime in connection with the given case during the course of the provision of information. Section 55 (1) Within two days of the receipt of the submission, the Authority shall undertake the following: a. should the Authority deem the submission to be well-founded, the Authority shall a. take measures defined under Section 56 and Section 57; b. close the investigation and launch a data protection procedure in accordance with Section 60, or c. close the investigation and launch a procedure for the supervision of classified data in accordance with Section 62; b. close the investigation should it deem that the content of the submission is unfounded. (2) The Authority shall notify the individual making the report of the results of the investigation, and of the reasons for closing the investigation and launching administrative proceedings. Section 56 (1) Should the Authority deem that the exercising of rights in connection with the control of the personal data, or relating to access to data of public interest or data made public on the grounds that the public interest was abused, or in the event of immediate threat to the above, the Authority shall instruct the controller to address this and terminate any immediate relating threat. (2) The controller – in the event of a consensus – shall immediately initiate the necessary measures in the notification specified above in subsection (1) and shall notify the Authority on measures taken, or – in the event of disagreement – send their position to the Authority within 30 days of the receipt of the given notification. (3) In the case of data control authorities with supervisory bodies, the Authority shall make recommendations to the supervisory body of the data control organisation, concurrently to notifying the data control body, should the notification issued in accordance with subsection (1) have proved ineffective. Should the supervisory body of the data control organisation have not been notified in accordance with subsection (1), the Authority may also directly make recommendations, if, in their