The Commission shall —

(a) establish a unit to receive and follow up on complaints from data subjects and conduct investigations; and

(b) adopt rules and procedures on handling complaints and conducting investigations referred to it under this Act.