The Commission may, where necessary, make representations to —

(a) the data controller or data processor on behalf of a complainant; or

(b) a complainant on behalf of the data controller or data processor.