15 Data Protection Act, 2018 - 5. ............................................... (a) the data subject concerned; and (b) any person, where the Information Commissioner considers it reasonably practicable to do so, to whom the personal data was disclosed twelve months before the date of the service of the enforcement notice concerned and ending immediately before such compliance; of the rectification, erasure or statements made, if the compliance materially modifies the personal data concerned. (5) The Information Commissioner may cancel an enforcement notice and, if he or she does so, shall in writing notify the public body or private body on whom it was served of the cancellation. 31. Assessment of processing. (1) The Information Commissioner may from time to time at his or her discretion, or upon a request made by or on behalf of a person who is, or believes himself to be, directly affected by the processing of personal data by a public body or a private body, carry out an assessment of the processing of personal data to determine whether it is carried out in compliance with this Act. (2) The Information Commissioner shall conduct an assessment in such manner as appears to him or her to be appropriate. (3) If following an assessment under subsection (1), the Information Commissioner considers that a public body or a private body has not complied with the provisions of this Act, the Information Commissioner shall provide the Chief Executive Officer of the public body or private body with a report containing the findings of the assessment and any recommendations that the Information Commissioner considers appropriate. (4) A report made by the Information Commissioner under subsection (3) may be included in a report made to Parliament pursuant to this Act. 32. Civil remedies. (1) A data subject who suffers damage by reason of the contravention by a public body or private body of any of the provisions of this Act may institute civil proceedings in the Court. (2) In proceedings brought against a public body or a private body by virtue of this section, it is a defence to prove that it has taken such care as in all the circumstances was reasonably required to comply with the requirement concerned. 33. Obstruction. (1) A person shall not obstruct the Information Commissioner or any other authorised officer in the conduct of their duties and functions under this Act. (2) A person who contravenes this section commits an offence and is liable on summary conviction to a fine not exceeding five thousand dollars or to imprisonment for a term not exceeding six months.