(3) The Judge in Chambers may, on application made by the Commissioner, extend the period specified in subsection (2) for such time as the Judge thinks fit. 14. Power to carry out prior security checks (1) Where the Commissioner is of the opinion that the processing or transfer of data by a data controller or data processor entails specific risks to the privacy rights of data subjects, he may inspect and assess the security measures taken under section 27 prior to the beginning of the processing or transfer. (2) The Commissioner may, at any reasonable time during working hours, carry out further inspection and assessment of the security measures imposed on a data controller or data processor under section 27. Amended by [Act No. 14 of 2009] 15. Compliance audit The Commissioner may carry out periodical audits of the systems of data controllers or data processors to ensure compliance with data protection principles specified in the First Schedule. Amended by [Act No. 14 of 2009] 16. Powers to request assistance (1) For the purposes of gathering information or for the proper conduct of any investigation concerning compliance with this Act, the Commissioner may seek the assistance of such persons or authorities, as he thinks fit and that person or authority may do such things as are reasonably necessary to assist the Commissioner in the performance of the Commissioner’s functions.