The Commission may license a person having a requisite level of expertise, in relation to data protection and this Act, to monitor, audit and report on compliance by data controllers and data processors with —

(a) this Act ; and

(b) regulations, guidelines, directives, and codes of conduct issued by the Commission made under the provisions of this Act.