26.
Right to erasure. ............................................................................................................. 27
27.
Right to nominate. ......................................................................................................... 28
28.
Right to redressal of grievance. ..................................................................................... 28
29.
Right to data portability and automated processing. ..................................................... 28
30.
Restrictions on transferring personal data ..................................................................... 29
31.
Condition for Cross border transfer. .............................................................................. 29
32.
Framework on conditions for cross-border transfer. ..................................................... 29
33.
Repeated collection of personal data .............................................................................. 30
34.
Exemption. ..................................................................................................................... 30
35.
Establishment of the Commission. ................................................................................ 32
36.
Composition and qualification of members of the Commission. ................................... 33
37.
Special provisions concerning members. ...................................................................... 33
38.
Appointment and matters of employees of the Commission. ........................................ 34
39.
Functions of the Commission. ....................................................................................... 34
40.
Powers of the Commission. ........................................................................................... 36
41.
Power of the Commission to call for information. ........................................................ 37
42.
Meetings of the Commission. ........................................................................................ 37
43.
Powers to issue policy directives. .................................................................................. 38
44.
Submission of yearly reports, returns, etc. ..................................................................... 38
45.
Funds. ............................................................................................................................ 38
46.
Maintenance of accounts and audit. .............................................................................. 39
47.
Co-operation with international organisations. .............................................................. 40
48.
Unlawful processing of personal data. .......................................................................... 40
49.
Failure to adopt data security measures. ........................................................................ 40
50.
Issue enforcement orders and impose penalties. ........................................................... 40
51.
Complaint. ..................................................................................................................... 41
52.
Appeal. ........................................................................................................................... 42
2