51.
(1) In accordance with section 31 (3) of the Act, where a data controller or a data processor is required to consult the Data Commissioner on the data protection impact assessment prior to processing, such consultations shall be done within sixty days from the date of the receipt of the impact statement report.
(2) In making a request under sub-regulation (1), the data controller or data processor shall provide—
(a) the data protection impact assessment prepared under section 31(1) of the Act; and
(3) Where the Data Commissioner considers that the intended processing is likely to infringe on the Act or these Regulations, the Data Commissioner may issue such advice to the data controller or the data processor, in writing.
