Show us the full code. For example: how have you initialized the SPI bus?
A quick overview of the datasheet let me believe that you always have to submit the two address bytes and the third byte is the command byte. The address bytes have to be transmitted even if they have no meaning given the current command opcode.