Personal Data Protection Act GN. NO. 395B (Contd) Cap. 286 Annual reports and performance agreements the performance of its functions during that financial year, and one copy of such report together with a copy of the audited accounts shall be submitted to the Minister. (3) The accounts of the Commission shall be audited by the Controller and Auditor General or such other person registered as an auditor under the Auditors and Accountants (Registration) Act, appointed by the Controller and Auditor General for that purpose. 57.-(1) The Director General shall, within two months after he has received audited accounts and auditor’s report on those accounts, submit to the Minister an annual report in respect of that year containing(a) a copy of the audited accounts of the Commission, together with the auditor’s report on those accounts; (b) a report on performance against key targets and any other related information; (c) a report on operations of the Commission during that financial year; and (d) such other report as the Minister may require. (2) The Minister shall lay before the National Assembly a copy of the annual report of the Commission within two month’s or at the next meeting of the National Assembly. PART IX MISCELLANEOUS PROVISIONS Exceptions from application of provisions of this Act 58.-(1) Nothing under this section shall exempt the data controller or the data processor from the responsibility of complying with the principles of the law in collection and processing of personal data and taking necessary measures to ensure protection and security of the personal data. (2) Without prejudice to subsection (1), processing of personal data may be exempted from the provisions of this Act if such processing is held33