283 Enforcernent notice 46' (1) WheretheCommissionis satisfied thatadatacontrollerhascontravened this Act, the Commission shall serve the data controller with an en- forcement notice requi'ing the data controller. to do either or both of the following (a) to take specified steps within a period specified to refrain from taking action; or (b) to stop processing personal information specified in trre notice, or to stop p'ocessing personar information for a purpose or in a manner specified in the notice within a period specified in the notice. (2) An enforcement notice shall include - (a) a statement i, the notice, or i,dicating the nature of the contravention; and (b) the right ro appeai. Cancellation of an enforcement notice 47. (1) A data contr:olle' on whom an enfor.cement notice has been served may,at any time after the explry of the period during which an appeai may be brought against that notice, apply in writing to the commission fol the cancellation or variation of that notice on the ground that, by reason of a chalge of circumstances, al1 or any of the provisions of that notice need not be complied with in order to ensure compliance with this Act. (2) If the commission consider-s that a1I or any of the provisions of an enfolcement notice need not be complied with in orderlo ensure compliance with this Act, it may cancel or vary the notice by written notice to the party on whom it was served. Reviews and appeals 48. (1) A data controller on whom an enfor-ceme.t notice has been selved may, within 30 days of receiving the notice, apply to a colrrt having com_