• Part 6: Part 6: Remedies, Liability And Sanctions

    • Article 22 - Directions

      (1) If the QFC Authority is satisfied that a Data Controller has contravened or is contravening these Regulations or Rules made for the purpose of these Regulations, the QFC Authority may issue a direction to the Data Controller requiring him to do either or both of the following:
      (A) to do or refrain from doing any act or thing within such time as may be specified in the direction; or
      (B) to refrain from Processing any Personal Data specified in the direction or to refrain from Processing Personal Data for a purpose or in a manner specified in the direction.
      (2) A direction issued under Article 22(1) shall contain:
      (A) a statement of the contravention of these Regulations or Rules which the QFC Authority is satisfied is being or has been committed; and
      (B) a statement to the effect that the Data Controller may appeal a decision of the QFC Authority to issue the direction to the Tribunal.
      (3) An appeal against a decision by the QFC Authority to issue a direction pursuant to Article 22(1) may be made to the Tribunal.

    • Article 23 - Claims

      (1) A person who believes on reasonable grounds that he has been adversely affected by a contravention of the Regulations in respect of the Processing of his Personal Data or as regards the exercise of their rights under Articles 15 and 16 may file a claim with the QFC Authority.
      (2) The QFC Authority may enquire into any claim filed with it in accordance with Article 23(1) and may in the course of making such enquiries, rely upon those powers referred to in Article 20.
      (3) On the basis of an enquiry referred to in Article 23(2), the QFC Authority may issue a direction requiring the Data Controller to do any act or thing.
      (4) A Data Controller shall comply with any direction issued by the QFC Authority under Article 22(1).