14 Data Protection Act, 2018 - 5. The Information Commissioner may, by an information notice served on a person, request that person to furnish to him or her in writing in the time specified therein– (a) access to personal data; (b) information about and documentation of the processing of personal data; (c) information related to the security of processing of personal data; and (d) any other information in relation to matters specified in the notice as is necessary or expedient for the performance by the Information Commissioner of his or her functions and exercise of his or her powers and duties under this Act. 29. Warrant to enter and search. (1) If a Magistrate is satisfied by information on oath supplied by the Information Commissioner or an authorised officer that there are reasonable grounds for suspecting that an offence under this Act has been or is being committed, and that evidence of the contravention or of the commission of the offence is to be found on any premises specified by the Information Commissioner or an authorised officer, the Magistrate may issue a warrant authorising the entry and search of said premises. (2) An authorised officer who is accompanied by a police officer may, upon the authority of a warrant issued by a Magistrate, at any time enter any premises, for the purpose of discharging any functions or duties under this Act or Regulations. 30. Enforcement notice. (1) Where the Information Commissioner is of the opinion that a public body or a private body has contravened or is contravening a provision of this Act, the contravention of which is an offence, the Information Commissioner may, subject to subsection (2) serve an enforcement notice on the public body or private body, requiring it to take such steps as are specified in the enforcement notice within such time as may be so specified to comply with the provision concerned. (2) An enforcement notice shall be in writing and shall– (a) specify the provision of this Act that, in the opinion of the Information Commissioner, the public body or private body has contravened or is contravening and the reasons for the Information Commissioner having formed that opinion; and (b) specify the action which the Information Commissioner requires the public body or private body to take to correct the contravention. (3) An enforcement notice may, without prejudice to the generality of subsection (2), require the public body or private body – (a) to rectify or erase personal data; or (b) to supplement the personal data with statements concerning the matters dealt with by the personal data as the Information Commissioner may approve. (4) Where a public body or a private body complies with a requirement under subsection (3), it shall, as soon as practicable and in any event not later than [thirty] days after such compliance, notify –