(a) issuing opinions on legal provisions and on legal instruments in preparation in Community or international institutions relating to the processing of personal data; (b) authorising or recording, as applicable, the processing of personal data; (c) authorising in exceptional cases the use of personal data for purposes not giving rise to their collection, with respect for the principles laid down in Article 5; (d) authorising the combination of data processed automatically in the cases provided for in Article 9; (e) authorising the transfer of personal data in the cases provided for in Article 20; (f) establishing the time for keeping the personal data according to their purpose, issuing directives for particular sectors of activity; (g) ensuring the right of access to information and the exercise of the right of rectification and updating; (h) authorising the establishment of costs or frequency for exercising the right of access and establishing the maximum periods for compliance in each sector of activity with the obligations which are incumbent upon the controller by virtue of articles 11 to 13; (i) acting on an application made by any person or by an association representing that person concerning the protection of his rights and freedoms in regard to the processing of personal data and informing them of the outcome; (j) checking the lawfulness of data processing at the request of any person whenever such processing is subject to restricted access or information, and informing the person that a check has taken place; (k) assessing the claims, complaints or applications of private individuals; (l) waiving the security measures according to Article 15 (2), issuing directives for particular sectors of activity; (m) ensuring representation in joint supervisory proceedings and in Community and international meetings of independent personal data protection supervisory bodies, and taking part in international meetings within the scope of its responsibilities, in particular exercising representation and monitoring functions under the Schengen and Europol systems according to the applicable provisions; (n) deliberating on the application of fines; (o) promoting the drawing up of codes of conduct and assessing them; (p) promoting the disclosure and clarification of rights relating to the protection of data and periodically publicising its activity, in particular by means of the publication of an annual report; 3/20