No. 136 Chapter 69 Gor Government Gazette 27 May 2019 Section 29 paragraph two, such Data Controller or Data Processor may jointly designate a data protection officer. In this regard, each establishment of the Data Controller or the Data Processor in the same affiliated business or in the same group of undertakings must be able to easily contact the data protection officer. The provisions in paragraph two shall apply to the Data Controller or the Data Processor who is a public authority in (1) that is large in size or has several establishments mutatis mutandis. In the event that the Data Controller or the Data Processor in paragraph one has to designate the representative according to Section 37 (5), the provisions in paragraph one shall apply to the representative mutatis mutandis. The Data Controller and the Data Processor shall have an obligation to inform the information of the data protection officer, contact address and contact channels to the data subject and the Office. The data subject shall be able to contact the data protection officer with respect to the collection, use or disclosure of the Personal Data and the exercise of rights of the data subject under this Act. The Committee may prescribe and announce the qualifications of the data protection officer by taking into account the knowledge or expertise with respect to the Personal Data protection. The personal data protection officer may be a staff of the Data Controller or the Data Processor, or a service provider under the contract with the Data Controller or the Data Processor. Section 42 The data protection officer shall have the following duties: (1) give advices to the Data Controller or the Data Processor, including the employees or service providers of the Data Controller or of the Data Processor with respect to compliance with this Act; (2) investigate the performance of the Data Controller or the Data Processor, including the employees or service providers of the Data Controller or of the Data Processor with respect to the collection, use or disclosure of the Personal Data for compliance with this Act; (3) coordinate and cooperate with the Office in the circumstance where there are problems with respect to the collection, use or disclosure of the Personal Data undertaken by the Data Controller or the Data Processor, including the employees or service providers of the Data Controller or of the Data Processor with respect to the compliance with this Act; and (4) keep confidential the Personal Data known or acquired in the course of his or her performance of duty under this Act. The Data Controller or the Data Processor shall support the data protection officer in performing the tasks by providing adequate tools or equipment, as well as facilitate the access to the Personal Data in order to perform the duties. The Data Controller or the Data Processor shall not dismiss or terminate the 21