Data Protection Act (Cap. 586), article 31

31. (1) Where the Commissioner fails to act in accordance with Article 78(2) of the Regulation, the data subject may appeal to the Tribunal in accordance with the procedures established in article 26. (2) Where the Tribunal finds that such an appeal is justified it shall, where appropriate, order the Commissioner to update the data subject on the progress or outcome of the complaint lodged or order the Commissioner to handle the complaint lodged in accordance with Article 77(1) of the Regulation. PART VIII General Provisions Accreditation of certification bodies.  S.L. 419.07