Section 15: Application for registration

15. Application for registration (1) Every person who intends to act as a controller or processor shall apply to the Commissioner, in such form as the Commissioner may approve, to be registered as controller or processor. (2) Every application under subsection (1) shall be accompanied by the following particulars regarding the applicant – (a) name and address; (b) if he or it has nominated a representative for the purposes of this Act, the name and address of the representative; (c) a description of the personal data to be processed by the controller or processor, and of the category of data subjects, to which the personal data relate; (d) a statement as to whether or not he or it holds, or is likely to hold, special categories of personal data; 484 Acts 2017 Acts 2017 485 (e) a description of the purpose for which the personal data are to be processed; (f) a description of any recipient to whom the controller intends or may wish to disclose the personal data; (g) the name, or a description of, any country to which the proposed controller intends or may wish, directly or indirectly, to transfer the data; and (h) a general description of the risks, safeguards, security measures and mechanisms to ensure the protection of the personal data. (3) Any controller or processor who knowingly supplies any information under subsection (1) which is false or misleading in a material particular shall commit an offence and shall, on conviction, be liable to a fine not exceeding 100, 000 rupees and to imprisonment for a term not exceeding 5 years.