[No. 6.] S.13 Data Protection (Amendment) Act 2003. [2003.] processing proposed to be carried on is likely to comply with the provisions of this Act, or (iii) the data controller— (I) has received a notice under the said subsection (3) stating that, if the requirements specified by the Commissioner (which he or she is hereby authorised to specify) and appended to the notice are complied with by the data controller, the processing proposed to be carried on is likely to comply with the provisions of this Act, and (II) has complied with those requirements. (7) A person who contravenes subsection (6) of this section shall be guilty of an offence. (8) An appeal against a notice under subsection (3) of this section or a requirement appended to the notice may be made to and heard and determined by the Court under section 26 of this Act and that section shall apply as if such a notice and such a requirement were specified in subsection (1) of the said section 26. (9) The Minister, after consultation with the Commissioner, may by regulations amend subsections (3), (4) and (6) of this section by substituting for the number of days for the time being specified therein a different number specified in the regulations. (10) A data controller shall pay to the Commissioner such fee (if any) as may be prescribed in respect of the consideration by the Commissioner, in relation to proposed processing by the data controller, of the matters referred to in paragraphs (i) and (ii) of subsection (2) of this section and different fees may be prescribed in relation to different categories of processing. (11) In this section a reference to a data controller includes a reference to a data processor.’’. Amendment of section 13 (codes of practice) of Principal Act. 14.—(1) Section 13 of the Principal Act is amended— (a) by the substitution of the following subsection for subsection (2): ‘‘(2) The Commissioner shall— (a) where a code of practice (referred to subsequently in this section as a code) so prepared is submitted to him or her for consideration, consider the code and, after such consultation with such data subjects or persons representing data subjects and with the relevant trade associations or other bodies aforesaid as appears to him or her to be appropriate— (i) if he or she is of opinion that the code provides for the data subjects concerned a measure of protection with regard to 32

Select target paragraph3