An order made under this section shall be in writing and shall specify —

(a) the provisions of this Act that the Commission is satisfied the data controller or data processor has violated;

(b) specific measures to be taken by the data controller or data processor to avoid, remedy, or eliminate the situation which has resulted in the violation;

(c) a period within which to implement such measures; and

(d) a right to judicial review under Section 050 of this Act.