Part 6: Part 6: Remedies, Liability And Sanctions
Article 22 - Directions(1) If the
QFC Authorityis satisfied that a Data Controllerhas contravened or is contravening these Regulationsor Rules made for the purpose of these Regulations, the QFC Authoritymay issue a direction to the Data Controllerrequiring him to do either or both of the following:(A) to do or refrain from doing any act or thing within such time as may be specified in the direction; or(B) to refrain from Processingany Personal Dataspecified in the direction or to refrain from Processing Personal Datafor a purpose or in a manner specified in the direction.(2) A direction issued under Article 22(1) shall contain:(A) a statement of the contravention of these Regulationsor Rules which the QFC Authorityis satisfied is being or has been committed; and(B) a statement to the effect that the Data Controllermay appeal a decision of the QFC Authorityto issue the direction to the Tribunal.(3) An appeal against a decision by the QFC Authorityto issue a direction pursuant to Article 22(1) may be made to the Tribunal.
Article 23 - Claims(1) A person who believes on reasonable grounds that he has been adversely affected by a contravention of the
Regulationsin respect of the Processingof his Personal Dataor as regards the exercise of their rights under Articles 15 and 16 may file a claim with the QFC Authority.(2) The QFC Authoritymay enquire into any claim filed with it in accordance with Article 23(1) and may in the course of making such enquiries, rely upon those powers referred to in Article 20.(3) On the basis of an enquiry referred to in Article 23(2), the QFC Authoritymay issue a direction requiring the Data Controllerto do any act or thing.(4) A Data Controllershall comply with any direction issued by the QFC Authorityunder Article 22(1).