Without prejudice to subsection (1), the regulations may provide for —

(a) the financial management of the affairs of the Commission;

(b) the protection of personal data and data subjects;

(c) the manner in which the Commission may exercise any power, discharge any duty or perform any function under this Act;

(d) any matter that under this Act is required or permitted to be prescribed;

(e) the forms of applications and related documents required for the purposes of this Act;

(f ) the procedures to be followed under this Act in the submission of complaints to the Commission;

(g) frequency of filing and content of compliance returns by data controllers and data processors of major importance to the Commission;

(h) fees, fines, and charges prescribed under this Act and such related matters; and

(i) any matter that the Commission considers necessary or expedient to give effect to the objectives of this Act.