17. Directions and compensation

(1) If the Registrar is satisfied that a Data Controller, Data Processor or data controller established outside the Abu Dhabi Global Market has contravened or is contravening these Regulations or any rules made under these Regulations, the Registrar may issue a direction to the Data Controller requiring him to do either or both of the following:
(a) to do or refrain from doing any act or thing within such time as may be specified in the direction; or
(b) to refrain from Processing any Personal Data specified in the direction or to refrain from Processing Personal Data for a purpose or in a manner specified in the direction.
(2) A direction issued under subsection (1) shall contain —
(a) a statement of the contravention of these Regulations or rules which the Registrar is satisfied is being or has been committed; and
(b) a statement to the effect that the Data Controller may seek a review by the Court of the decision of the Registrar to issue the direction.
(3) A Data Controller, who fails, without reasonable excuse, to comply with any direction issued by the Registrar under this section shall be liable to a fine of up to USD 15,000.
(4) A Data Controller, who receives a direction under this section may seek a review by the Court of the decision of the Registrar to issue the direction.
(5) A direction issued under subsection (1) is enforceable, on the application of the Registrar or any person authorised in writing by the Registrar, by injunction.
(6) Any person who suffers damage by reason of any contravention by a Data Controller, Data Processor or data controller established outside the Abu Dhabi Global Market of any of the requirements of these Regulations or any rules made under these Regulations is entitled to compensation from the Data Controller, Data Processor or data controller for that damage.
(7) In proceedings brought against a person by virtue of subsection (6), it is a defence to prove that he had taken such care as in all the circumstances was reasonably required to comply with the requirement concerned.