329 The Data Protection Bill, 2018 (d) without reasonable cause, fails to comply with any notice issued under this Act, commits an offence and is liable, on conviction, to a fine not exceeding one hundred thousand shillings or to a term of imprisonment not exceeding two years, or to both. (3) Where an offence under this Act has been committed by a body corporate and is proved to have been committed with the consent or connivance of or to be attributed to any neglect on the part of any director, manager, secretary or similar officer of the body corporate or any person who was purporting to act in any such capacity, that person as well as the body corporate shall be guilty of that offence. 39. (1) The Cabinet Secretary may, in consultation Regulations. with the Commission, make regulations prescribing anything required by this Act to be prescribed or generally for the better carrying out of the provisions of this Act. (2) Without prejudice to the generality of subsection (1), the regulations may provide forthe making of an application under this Act; the form in which information requested under this Act is to be supplied; the procedure for the service of notices and documents under this Act; or forms such as may be necessary to give full effect to the implementation or administration of this Act. (3) For the purposes of Article 94(6) of the Constitution the authority of the Cabinet Secretary to make regulations shall be limited to bringing into effect the provisions of this Act and the fulfilment of the objectives specified under subsection (1); and the principles and standards set out under the Interpretation and General Provisions Act and the Statutory Instruments Act, 2013 in relation to subsidiary legislation shall apply to regulations made under this Act. Cap. 2. No.23 of 2013.