An order made under this section shall be in writing and shall specify —
(a) the provisions of this Act that the Commission is satisfied the data controller or data processor has violated;
(b) specific measures to be taken by the data controller or data processor to avoid, remedy, or eliminate the situation which has resulted in the violation;
(c) a period within which to implement such measures; and
(d) a right to judicial review under Section 050 of this Act.