6) Notify the affected Subscribers of any data breach including instructions on how to manage the compromise. PART EIGHT COMPLIANCE AND ENFORCEMENT 25. Compliance The Authority shall monitor a Telecommunications Operator’s compliance with the provisions of the Proclamation and this Directive. 26. Enforcement 1) Where the Authority, consistent with the provisions of this Directive, the Proclamation, and other instruments that the Authority may issue, determines that a Telecommunications Operator has violated the provisions of this Directive, it shall impose remedies pursuant to Article 52 of the Proclamation, that shall include fines or restitution. 2) Without prejudice to Article 28 of this Directive and Sub-Article (1) of this Article, the Authority’s remedies and sanctions shall be guided by the Council of Ministers Regulation issued pursuant to Article 52(6) of the Proclamation that determines the types of infractions that would result in license revocation, suspension, and other administrative measures and stipulate the penalties and the amount of fines to be paid. PART NINE MISCELLANEOUS 27. Breach Under This Directive Failure to comply with the provisions and requirements provided in this Directive shall result in a breach of this Directive. 28. Penalties The Authority shall impose a penalty in the form of fines on a Telecommunications Operator or its Authorized Agents, Dealers, and Distributors where they: 1) Fail to capture, register, deregister or record the verified details of a Subscriber to the Telecommunications Operator’s Database as required by this Directive; 2) Activate any SIM Card without capturing, Telecommunications Operator’s Database; registering, and updating the 3) Refuse service to a Subscriber notwithstanding the fact that a Subscriber fulfils all the requirements as listed in Article 8 of this Directive; 4) Fail to protect the privacy of the Subscriber as required by this Directive; and, 5) Are found to be in breach of any part of this Directive. 29. Amendment The Authority may, at any time, when it deems it necessary, amend this Directive by notifying all Telecommunications Operators in advance and conducting a stakeholder consultation process in line with the provisions of the Proclamation. 10