P.U. (A) 335 Penalty 12. Any data user who contravenes subregulation 3(1), regulations 6, 7 and 8 commits an offence and shall, on conviction, be liable to a fine not exceeding two hundred and fifty thousand ringgit or imprisonment for a term not exceeding two years or to both. PART III INSPECTION Notice of inspection 13. The Commissioner may notify the data user in writing of his intention to carry out an inspection under section 101 of the Act. Personal data system to be open for inspection 14. (1) The personal data system shall at all reasonable times be open to the inspection of the Commissioner or any inspection officer. (2) For the purposes of inspection under section 101 of the Act, the Commissioner or the inspection officer may require the production before him— (a) in relation to general principle, the record of the consent from a data subject maintained in respect of the processing of personal data by the data user; (b) in relation to notice and choice principle, the record of a written notice issued by the data user to the data subject in accordance with section 7 of the Act; (c) in relation to disclosure principle, the list of disclosure to third parties for the purposes of paragraph 8(b) of the Act in respect of personal data that has been or is being processed by him; 17