Page 27 7) Undertake the audit of all processed personal data, through sworn agents; 8) Impose sanctions, both administrative and pecuniary, on any defaulting data processing official ; 9) Update the processed personal data directory and circulate to the public; 10) Proffer advice to the persons and bodies engaged in personal data processing or in conducting trials or experiences likely to culminate in data processing; 11) Authorize cross-border transfer of personal data; 12) Make suggestions likely to simplify and improve legislative and regulatory framework for data processing; 13) Establish mechanisms for cooperation with the personal data protection authorities of third countries; 14) Participate in international negotiations on personal data protection; 15) Prepare an activity report in accordance with well-defined periodicity, for submission to either the President of the Republic, President of the National Assembly, Prime Minister or Minister of Justice. Article II – 24: The protection authority may take the following measures: 1) Issuance of warning to any data processing official that fails to comply with the responsibilities arising from this Convention; 2) A formal demand for an end to any particular breaches within a timeframe set by the authority. Article II – 25: Where the data processing official fails to comply with the formal demand addressed to him/her, the protection authority may impose the following sanctions after adversarial proceedings: AU Draft0 010111