Document Generated: 2022-06-22 Status: This is the original version (as it was originally made). (a) conduct an inspection; (b) appoint a person to conduct an inspection on its behalf; or (c) direct the OES to appoint a person who is approved by that authority to conduct an inspection on its behalf, to assess if the OES has fulfilled the duties imposed on it by regulations 10 and 11. (2) The Information Commissioner may— (a) conduct an inspection; (b) appoint a person to conduct an inspection on its behalf; or (c) direct that a RDSP appoint a person who is approved by the Information Commissioner to conduct an inspection on its behalf, to assess if a RDSP has fulfilled the requirements set out in regulation 12. (3) For the purposes of carrying out the inspection under paragraph (1) or (2), the OES or RDSP (as the case may be) must— (a) pay the reasonable costs of the inspection; (b) co-operate with the person who is conducting the inspection (“the inspector”); (c) provide the inspector with reasonable access to their premises; (d) allow the inspector to inspect, copy or remove such documents and information, including information that is held electronically, as the inspector considers to be relevant to the inspection; and (e) allow the inspector access to any person from whom the inspector seeks relevant information for the purposes of the inspection. (4) The competent authority or Information Commissioner may appoint a person to carry out an inspection under paragraph (1)(b) or (2)(b) on its behalf on such terms and in such a manner as it considers appropriate. Enforcement for breach of duties 17.—(1) The designated competent authority for an OES may serve an enforcement notice upon that OES if the competent authority has reasonable grounds to believe that the OES has failed to— (a) fulfil the security duties under regulation 10(1) and (2); (b) notify a NIS incident under regulation 11(1); (c) comply with the notification requirements stipulated in regulation 11(3); (d) notify an incident as required by regulation 12(9); (e) comply with an information notice issued under regulation 15; or (f) comply with— (i) a direction given under regulation 16(1)(c), or (ii) the requirements stipulated in regulation 16(3). (2) The Information Commissioner may serve an enforcement notice upon a RDSP if the Commissioner has reasonable grounds to believe that the RDSP has failed to— (a) fulfil its duties under regulation 12(1) or (2); (b) notify an incident under regulation 12(3); (c) comply with the notification requirements stipulated in regulation 12(5); (d) comply with a direction made by the Information Commissioner under regulation 12(12); 15