Part 6: Enforcement Section 166: Orders to progress complaints
This section enables a data subject to apply for an order from the tribunal if the Commissioner does not take certain actions in relation to a complaint made by the data subject. This is a new provision and had no equivalent in the 1998 Act. It reflects the rights set out in Article 78(2) of the GDPR and Article 53(2) of the LED.
	Subsection (1) sets out the circumstances in which an application can be made to the tribunal. These are if the Commissioner fails to take appropriate steps to respond to a complaint, or fails to update the data subject on progress with the complaint or the outcome of the complaint within three months after the submission of the complaint, or any subsequent three month period in which the Commissioner is still considering the complaint.
	Subsection (2) explains that following an application by the data subject the tribunal can order the Commissioner to take appropriate steps to investigate the complaint, or to notify the data subject of the progress or outcome of the complaint, within a specified period set by the tribunal.
	Subsection (3) provides that the tribunal’s order may require the Commissioner to take certain specified steps, or to conclude the investigation or take a specified step within a specified period.
	Subsection (4) clarifies that for the purposes of subsections (1)(a) and (2)(a), "appropriate steps" has the same meaning as that set out in section 165(5).