(c) (d) exempted under the chapter on exemption; and which originates outside of Ethiopia and merely transits through this country. CHAPTER TWO THE DATA PROTECTION COMMISSION OF ETHIOPIA 4. (1) (2) 5. Establishment The Data Protection Commission of Ethiopia (hereafter referred as Commission) is hereby established as an independent entity. The Commission is accountable to the House of Peoples’ Representatives. Powers and Functions of the Commission The Commission shall have the powers and functions to: (1) ensure compliance with this Proclamation; (2) make the administrative arrangement it considers appropriate for the discharge of its duties; (3) levy fees for the services it provides in accordance with a regulation to be issued to implement this Proclamation; (4) promote public awareness on issues which fall under this Proclamation; (5) ensure that personal data processed by data controllers and data processors are done according to the data protection principles; (6) monitor the use of personal data and sensitive personal data; submit periodical reports to the House; and make such documents available to the public; (7) undertake research into, and monitor developments in data processing and computer technology to ensure that any adverse effects of such developments on the privacy of persons are minimized, and report to the House the results of such research and monitoring; (8) by undertaking researches on the interaction of technology and the right to privacy, performs knowledge creation and capacity building works; (9) To represent Ethiopia, in coordination with the competent Government body, in international conferences and international organizations concerned with personal data protection; follows up its execution; (10) cooperate with supervisory authorities of other countries; (11) make determination as to whether a third party jurisdiction ensures an appropriate level of protection comparable with the level of protection established as per this Proclamation and laws issued to implement this Proclamation; (12) investigate following legally established investigation procedures and principles complaints made to it, and require information which are relevant for its investigation which will enable it to take administrative measures; (13) keep and maintain Register of data controllers and data processors; 5

Select target paragraph3