F422(1). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(2)General functions are conferred on the [F423CommissionF423] by—
(a)Article 57 of the [F424UK GDPRF424] (tasks), and
(b)Article 58 of the [F425UK GDPRF425] (powers),
(and see also [F426sections 28(5), 120A and 120BF426] ).
(3)The [F427Commission'sF427] functions in relation to the processing of personal data to which the [F428UK GDPRF428] applies include—
(a)a duty to advise Parliament, the government and other institutions and bodies on legislative and administrative measures relating to the protection of individuals' rights and freedoms with regard to the processing of personal data, and
(b)a power to issue, on the [F427Commission'sF427] own initiative or on request, opinions to Parliament, the government or other institutions and bodies as well as to the public on any issue related to the protection of personal data.
(4)The [F427Commission'sF427] functions under Article 58 of the [F429UK GDPRF429] are subject to the safeguards in subsections (5) to (9).
(5)The [F427Commission'sF427] power under Article 58(1)(a) of the [F430UK GDPRF430] (power to require a controller or processor to provide information that the [F427CommissionF427] requires for the performance of the [F427Commission'sF427] tasks under the [F430UK GDPRF430] ) is exercisable only by giving an information notice under section 142.
(6)The [F427Commission'sF427] power under Article 58(1)(b) of the [F431UK GDPRF431] (power to carry out data protection audits) is exercisable only in accordance with section 146.
(7)The [F427Commission'sF427] powers under Article 58(1)(e) and (f) of the [F432UK GDPRF432] (power to obtain information from controllers and processors and access to their premises) are exercisable only—
(a)in accordance with Schedule 15 (see section 154), or
(b)to the extent that they are exercised in conjunction with the power under Article 58(1)(b) of the [F432UK GDPRF432] , in accordance with section 146.
(8)The following powers are exercisable only by giving an enforcement notice under section 149—
(a)the [F427Commission'sF427] powers under Article 58(2)(c) to (g) and (j) of the [F433UK GDPRF433] (certain corrective powers);
(b)the [F427Commission'sF427] powers under Article 58(2)(h) to order a certification body to withdraw, or not to issue, a certification under Articles 42 and 43 of the [F434UK GDPRF434] .
(9)The [F427Commission'sF427] powers under Articles 58(2)(i) and 83 of the [F435UK GDPRF435] (administrative fines) are exercisable only by giving a penalty notice under section 155.
(10)This section is without prejudice to other functions conferred on the [F427CommissionF427] , whether by the [F436UK GDPRF436] , this Act or otherwise.