Data Protection No. 24 of 2019 [Subsidiary] (e) an order for compensation to the data subject by the respondent. (4) The Data Commissioner shall within seven days from the date of such determination, communicate the decision under sub-regulation (3) to the parties, in writing. (5) The decision of the Data Commissioner made under these Regulations shall be— (a) binding on the parties; and (b) shall be enforced as an order of the Court. 15. Negotiation, mediation or conciliation (1) Where the complaint is to be determined through negotiations, mediation or conciliation, the provisions of these Regulations shall apply. (2) Where parties to a complaint agree to negotiation, mediation or conciliation, the Data Commissioner may in consultation with the parties facilitate the process. (3) During the negotiations, mediation or conciliation, the Data Commissioner may apply such procedures as may, in the interest of the parties, deem appropriate in the circumstances. (4) At the conclusion of the negotiations, mediation or conciliation process, the parties shall sign a negotiation, mediation or conciliation agreement in the manner specified in Form DPC 5 set out in the Schedule. (5) A negotiation, mediation or conciliation agreement entered into under this regulation shall be deemed to be a determination of the Data Commissioner, and shall be enforceable as such. (6) Despite this regulation, a party to dispute who is subject to a negotiation, mediation or conciliation may withdraw from the proceedings at any stage and shall notify the Data Commissioner and other parties of such withdrawal within seven days from the date of making such a decision. (7) Parties to a dispute shall take all reasonable measures to amicably determine a dispute and act in good faith. (8) Where the complaint is not determined through negotiation, mediation or conciliation, the Data Commissioner shall proceed to determine the complaint as provided for in the Act and these Regulations. PART III – ENFORCEMENT PROVISIONS 16. Issuance of enforcement notice (1) The Data Commissioner may pursuant these Regulations or section 58 of the Act issue an enforcement notice. (2) An enforcement notice shall specify the consequences of failure to comply with the notice including issuance of a penalty notice as provided under section 62 (1) of the Act. 17. Service of an enforcement notice (1) An enforcement notice shall be deemed to have been duly served on the concerned person where— (a) an electronic copy of enforcement notice is sent to the concerned person’s last used email address; or (b) the enforcement notice is posted or physically delivered to the registered offices of the concerned person, in the absence of an electronic address. (2) The enforcement notice shall take effect from the date of service specified under sub-regulation (1). 18. Review of enforcement notice (1) A person to whom an enforcement notice is given may apply in Form DPC 6 set out in the Schedule to the Data Commissioner for a review of the enforcement notice. (2) An application under sub-regulation (1) may be made — 9